About this Privacy Policy
MDA Cross Global LP, a limited partnership registered in Scotland under number SL031974, with its registered office at 5 South Charlotte Street, Edinburgh, EH2 4AN, Scotland ("Vikiroom", "we") runs the Vikiroom apps and vikiroom.com and is the controller of your personal data.
This policy explains what data we collect when you use the Vikiroom mobile apps and website, why, who we share it with, how long we keep it and what rights you have. Contact us about privacy at vikiroom.vr@gmail.com or through Support Chat in the app.
Most data comes from you; some is generated when you use the app, and a little comes from Google.
| Category | What exactly | Where it comes from |
|---|---|---|
| Account | Name, email address and Google account ID from Sign in with Google; for older accounts, email and a hashed password | You, Google |
| Profile | Name, gender, date of birth, city, photos, "About me", interests and other optional fields; text you dictate with voice input | You |
| Face check result | Whether your main photo shows a face (yes / no / undetermined). The check runs on your device; we receive only this result, never a face template or biometric data | Your device |
| Location | Approximate location (city-level, from coarse device location), or a location you set manually; used for distance and "near you". You can hide your exact distance | You, your device |
| Activity | Likes, favourites, blocked users, gifts and VC sent and received, game scores, leaderboard positions, recommendations shown, visibility settings you choose, reports you file or receive | Your use of the app |
| Messages | Chats you send and receive, including articles and game invites you share | You, other users |
| AI requests | When you use Vikiroom AI: the chat ID, the last few messages of that chat, language and chosen style, and the suggestions returned (only de-identified message text, language and style are sent to OpenAI) | You, other users |
| Purchases | Product bought, price, time, app store order ID and purchase token, subscription status; we never receive your card details | Google Play |
| Age signals | An age range or supervision status from Google Play, used only to block under-18 sign-ups | Google Play |
| Device and technical | Device model, OS and app version, language, IP address, push notification token, Firebase installation ID, advertising ID (if allowed), crash reports and app logs | Your device |
| Support | Messages you send to Support Chat or email | You |
Sensitive information. You may choose to share things like your religion, sexual orientation or health in your profile or chats. This is optional. If you add it to your public profile, other users can see it, and we process it only to show it as you chose.
Permissions. The app asks for camera (photos), microphone (voice input), approximate location and notifications only when you use the related feature. You can turn each one off in your device settings.
We use each category only for the purposes below. Where data protection law requires a legal basis, each purpose relies on the one shown.
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and run your account, show your profile, deliver messages, gifts and VC | Account, profile, messages, activity | Contract |
| Recommend profiles, sort them by distance and activity, show compatibility | Profile, location, activity, Boosts, Premium status | Contract; legitimate interest in relevant matches |
| Process Premium and Vikicoin purchases and restore them | Purchases, account | Contract; legal obligation (tax records) |
| Generate Vikiroom AI suggestions | AI requests | Contract (a feature you request) |
| Keep the Service safe: block under-18 users, moderate photos, detect fake profiles, spam and fraud, handle reports | Age signals, photos, face check result, activity, messages linked to a report, device and technical | Legitimate interest; legal obligation |
| Send push notifications about messages, activity and offers in the app | Push token, activity | Contract; legitimate interest; you can turn them off |
| Fix crashes and improve the app | Crash reports, analytics events, device and technical | Legitimate interest |
| Show ads | Advertising ID, IP address, approximate location, device data | Consent where required (see section 5); otherwise legitimate interest |
| Answer support requests and enforce our Terms | Support, account, activity | Contract; legitimate interest |
We do not sell your personal data. We do not use your private messages for advertising. We do not send marketing emails.
Moderation and user safety. Photos you upload are checked on our servers by automated tools and reviewed by our moderators. We also review user reports submitted through the in-app Report feature or Support Chat. Automated checks may hide content or limit features, but a full ban is always decided by a person. We prohibit child sexual abuse and exploitation (CSAE), child sexual abuse material (CSAM), non-consensual sexual content and sexual coercion throughout the Service, including private messages. Where we obtain actual knowledge of CSAM, we take appropriate action and make legally required reports to competent authorities, which may include NCMEC or the relevant regional authority.
Vikiroom AI is optional writing assistance, not an automated chat participant. When you request a reply or opener, our server takes only the last few messages of that one chat, removes names, user IDs and other account identifiers, adds your profile language and chosen style, and sends this de-identified, anonymous text to OpenAI to generate three draft suggestions. OpenAI does not receive who you or the other person are. The other person's messages are included to provide context. The message text itself is sent as written, so avoid typing personal details such as phone numbers or addresses in a chat where you use Vikiroom AI. You can review or edit a draft before sending it yourself; the feature does not automatically post or send a message. We do not send your photos, location or payment data to OpenAI for this feature.
Processed on your device, not sent to us:
The app may show ads. Whether a paid plan includes ad-free use is shown in the app.
Other users see your profile: name, age, city, photos, "About me", gifts, game scores and leaderboard positions, profile badges and decorations, and your distance unless you hide it. Only the people you chat with see your messages. Blocked users cannot see you in recommendations or message you.
Service providers and advertising partners. We use third-party service providers to operate the app and advertising partners to show ads. Providers acting as processors handle data on our instructions under applicable contracts. Some advertising partners may process certain data for their own purposes as independent controllers, under their own privacy policies and applicable law. The table below describes the recipients and their functions:
| Provider | What it does | Data it receives |
|---|---|---|
| Hosting and storage providers | Run our servers, database and photo storage | All data stored by the Service |
| OpenAI | Generates Vikiroom AI suggestions | De-identified text of the last few messages of a chat, language and chosen style; no names or account identifiers |
| Google (Firebase) | Analytics, crash reports, push notifications, in-app messages | Device and technical, analytics events, push token |
| Google Play | Payments, subscriptions, age signals | Purchases, age signals |
| Google Sign-In | Sign-in | Account |
| Google Maps Platform (Places) | City search and selection | The city text you type, approximate location |
| Google AdMob, Meta Audience Network | Ads in the app | Advertising ID, IP address, approximate location, device data |
Privacy policies: OpenAI, Google, Meta.
Legal reasons. We may disclose data when the law requires it, to answer a valid request from a court or authority, to protect users from harm, or to defend our legal rights. We check each request and share no more than needed.
Business transfers. If Vikiroom is merged, sold or reorganised, your data may pass to the new owner, who must keep following this policy or tell you about changes first.
We keep your data while your account is active and, after a confirmed deletion request, during the 30-day recovery period described below. Unless you explicitly restore the account during that period, we delete the account and associated data when the period ends, except for the specific records retained for the purposes set out below. We do not delete accounts solely because of inactivity.
| Data | Kept for |
|---|---|
| Profile, photos, activity | Until you delete the data or request account deletion; for account deletion, the 30-day recovery period applies before permanent deletion, except where another retention category below applies |
| Messages | While both accounts remain active; if either participant requests deletion, the chat is removed for both after the 30-day recovery period unless the account is restored; copies associated with a safety report may be retained under the safety-records category below |
| Vikiroom AI requests and suggestions | 30 days |
| Purchase records | 6 years, for tax and accounting law |
| Reports, bans and safety records | Up to 3 years after the account is closed, to stop banned users from returning |
| Analytics data (Firebase) | Up to 14 months |
| Crash reports (Crashlytics) | 90 days |
| Server logs with IP address | 90 days |
Deleting your account. You can initiate account deletion in the app (Settings → Advanced → Delete account), through the web process at vikiroom.com/delete, or by contacting vikiroom.vr@gmail.com from the email linked to your account. When the request is confirmed, your profile is hidden immediately and the account is scheduled for permanent deletion after 30 days. During this recovery period, you can choose to cancel the deletion by signing in and expressly confirming restoration; signing in alone does not cancel it. If you do not restore the account, deletion proceeds without a second request, subject to the specific retention exceptions above. Deleting the app does not request account deletion and does not cancel subscriptions.
We protect data with encrypted connections (HTTPS/TLS) between the app and our servers, access limited to staff who need it, hashed passwords and regular backups. No system is fully secure. If a breach puts your rights at risk, we will tell you and the regulator as the law requires.
Depending on where you live (for example under UK GDPR, EU GDPR, Nigeria's NDPA or California law), you can:
To use a right, write to vikiroom.vr@gmail.com from the email linked to your account. The app has no self-service data export; we send a copy of your data by email on request. We reply within one month and may ask you to prove it is your account.
Other choices. Hide your exact distance in Edit profile, turn off push notifications in Settings or Android, and block users.
Children. Vikiroom is intended only for adults aged at least 18 (or the age of majority where higher). We do not knowingly collect data from anyone under 18. Where available, we use Google Play age signals to prevent under-18 sign-ups and take action when we identify an account belonging to a minor. If you believe a minor is using Vikiroom, report the profile through the app or contact Support Chat. Vikiroom's public prohibition of CSAE and CSAM and its reporting channels are described in section 5 of our Terms of Service.
We will update this policy when our apps or the law change, change the date at the top, and tell you in the app at least 14 days before material changes take effect. Earlier versions are available on request.
Contact: MDA Cross Global LP, 5 South Charlotte Street, Edinburgh, EH2 4AN, Scotland. Email: vikiroom.vr@gmail.com. In the app: Support Chat.