Privacy Policy

Who operates VEXUMI

VEXUMI is operated by Vexumi Labs, an independent developer based in the Philippines. Questions and privacy requests can be sent to surion@vexumi.app.

Information we collect

• Google or Apple account identifier, email address when the identity provider shares it, display name, profile photo, unique handle, and selected country.
• Food posts, photographs, captions of up to 100 characters, optional public-business location pins, reactions, comments, saves, follows, reports, blocks, and Food Points.
• Notification preferences, push token, upload status, device and app version, IP address, and limited security or diagnostic records needed to operate and protect the service.

Location

VEXUMI requests location only while the app is in use and only after you choose to use it. A selected public business name and coordinates may be attached to a post. VEXUMI does not request background location and does not attach a home location to homemade posts.

How we use information

• Authenticate accounts and keep sessions signed in.
• Publish and personalize the food feed, including country and nearby recommendations.
• Store photos, comments, reactions, follows, saves, and optional business pins.
• Send requested activity notifications and prevent spam, fraud, unsafe content, and abuse.
• Review reports, administer Food Points, answer support requests, and comply with law.

Who can see and process it

Public posts, profiles, comments, reactions, and attached business pins can be seen by the VEXUMI community. Private posts remain visible to their owner. Blocked users are excluded according to our access rules.

• Supabase provides authentication, database, realtime features, server functions, and private media storage.
• Google and Apple provide account authentication and store distribution. Expo supports application building and push notifications.
• We may disclose limited information when required by applicable law or necessary to protect users and the service.

What we do not do

• VEXUMI does not request background location or build a private location-history profile.
• We do not sell personal information.
• Advertising and paid subscriptions are not enabled in the launch release. This policy will be updated before an advertising or billing provider begins processing user data.

Retention and deletion

Account information and content are kept while your account is active. A verified deletion request removes the active account and associated content within 30 days. Residual encrypted backups are removed on their normal cycle within 90 days.

• Security logs may be retained for up to 12 months.
• Reports, moderation decisions, and reward records may be retained for up to 24 months to prevent fraud and repeat abuse.
• Information may be retained longer when required by law, a legal hold, or a legitimate safety investigation.

Your controls

• Edit eligible profile details and choose the visibility of each post.
• Allow or deny camera, photo, notification, and location permissions in device settings.
• Report posts, block or unblock accounts, and change notification preferences.
• Request access, correction, export, objection, or deletion by contacting us.

Security and international processing

VEXUMI uses encrypted transport, row-level database rules, private media storage, limited administrative access, and time-limited media links. No online service can guarantee absolute security. Information may be processed outside your country with safeguards appropriate to the service and applicable law.

Age limit

VEXUMI is intended for people aged 18 or older. We remove accounts we learn are being used by children.

Contact

Privacy or data-rights requests: surion@vexumi.app. Please never send your password, verification code, or government ID by ordinary email unless we provide a secure verification method. This policy may be updated as VEXUMI adds features or legal requirements change; material changes will be communicated where required.