Privacy policy

What we collect

We keep the smallest set of data the app needs to work:

• Account: your email address, a hash of your password, your handle, display name, home spot (if you set one) and your timezone.
• Clips: the video and thumbnail you record, plus the caption, spot name, duration and the time you posted.
• Social graph: who you follow, who follows you, who you have blocked, and which posts you liked.
• Streak: the day of your last qualifying post, in your own timezone, and your current and longest streak.
• Device: an Expo push token per install, so we can send the daily prompt, and the platform (iOS or Android).
• Reports: if you report a post or a person, we keep the report, the reason and any note you added.

What we do not collect

No advertising identifiers, no third-party analytics or tracking SDKs, no contact list, no precise location. We do not sell or share your data with advertisers, because there are no advertisers.

Why we are allowed to hold it

Under the GDPR we rely on performance of a contract for everything the app needs to function - your account, your clips, your feed and your streak. We rely on our legitimate interest in a safe service for the reporting, blocking and moderation data. Push notifications are sent on the permission you grant in the operating system, which you can withdraw at any time in your device settings.

How long we keep it

Video and thumbnail files are deleted 24 hours after you post them. This is enforced twice: a scheduled job removes them as soon as they are due, and the storage bucket expires every object after a day regardless.

The post record itself stays, without the media, so your streak history remains verifiable. Everything else lives for as long as your account does.

Moderation and the on-device scan

Before a clip is uploaded, your phone runs an explicit-content classifier locally. The clip and the frames it looks at never leave your device during that check, and a clip the classifier flags is not uploaded at all.

If the check cannot run on your device, the clip is uploaded and queued for a human moderator instead. Moderators can view reported clips and either keep or remove them. Every moderator decision is logged.

Who processes it for us

Cloudflare hosts the API, the database and the video storage. Expo delivers the push notifications. That is the whole list; both act as processors on our behalf.

Your rights

You can export everything we hold about you from inside the app, and you can delete your account from inside the app. Deletion is immediate and complete: clips, files, likes, follows, blocks, devices, sessions, streak and the account record. It cannot be undone and we do not keep a shadow copy.

You also have the right to correction, restriction, objection and to complain to your local data protection authority. Write to privacy@wipeoutclub.app for anything you cannot do in the app.

Children

Wipeout Club is not for under-13s, and where local law sets a higher age for consent to data processing, that age applies. We delete accounts we learn belong to a child below that age.

Changes

If this policy changes in a way that affects you, we will say so in the app before the change takes effect.