Privacy Policy

Animora ("Animora", "we", "us", "our") is a social and messaging app, available as a website at https://animorasocial.app/ and as an Android app. It lets you post photos, videos and reels of any kind (they all play in the Shonen feed), share 24-hour stories, chat one-to-one or in groups (Guilds), make voice and video calls, follow people (Allies), discover new accounts, earn free coins and play Ludo and Chess. Optional extras - coin packs from the Coin Store, the Green Tick subscription, Boost and short usernames - can be paid for with real money through Google Play in the Android app (see section 2, item q).

This Privacy Policy explains what information we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. By creating an account or using Animora you confirm that you have read this policy and agree to it. If you do not agree, please do not use the app.

This policy covers your privacy and data. The rules for using the app itself - your account, coins, content you post, and what happens if those rules are broken - are in our Terms & Conditions (Settings → Terms & Conditions, or the public /terms page). Read both together.

You can reach us at any time through the Contact form (Settings → Contact & Support, or the public /contact page). We have no other public support channel.

a) Account information. You can sign up and log in with Google or with an email address and a password, both through Firebase Authentication. With Google we receive your Google display name, email address, profile photo and a unique account ID; we never see your Google password. With email, we receive your email address; your password is handled and stored (in hashed form) by Firebase and is never visible to us, and Firebase emails you a verification link when you sign up and a reset link if you ask for one. You then choose a username and may add a display name, bio, profile photo, cover photo, chat wallpaper, app theme, gender and a "private account" setting.

b) Content you create. Posts (photos, videos, captions, titles, hashtags, attached music/audio clips), stories, comments, likes, emoji reactions, shares and saved posts.

c) Messages. Direct and group messages, voice notes, photos and snaps sent in chat, custom stickers, shared posts, view-once photos, replies, forwards, edits, deletions, "starred" flags, reactions, read receipts and timestamps.

d) Social connections. Followers and following, friend (ally) requests, your friends list, blocked, restricted and hidden accounts (for each one we store the other account's ID, name, username, profile photo, the type of action and when you did it), groups you belong to (and your role in them) and chat streaks.

e) Activity and status. Online/last-active status, typing indicators, post view counts, which accounts viewed a story, notifications sent to you or generated by you (likes, comments, requests) and the time of each action.

a2) Date of birth and age band. When you create an account (or, for accounts created earlier, the next time you sign in) we ask for your date of birth. We use it only to check that you meet our minimum age and to decide which features are available to your age group. We store the date you entered together with the result ("13-17" or "18 and over") in a record that only our servers can write; you can see your own record but no one can edit it, and your date of birth is never shown on your profile or to other users. We also keep a one-way device marker if a sign-up is refused for being under 13, so the same device cannot simply retry with a different date.

a3) Referral data. Each account gets a referral code. If you sign up with someone's code (typed in, or from an invite link) we store who invited whom, the status of that referral (pending, counted, rejected or ignored) and the coins it earned. To stop fake referrals we also keep a one-way (hashed) marker of the device and of the network (IP address) a referred sign-up came from - never the raw IP address for this purpose - and we compare it with the inviter's device. Your invite code and how many referrals you have are visible only to you.

a4) Comment filter. If you use the creator Comment filter (Settings → Comment filter) we store the list of words you choose and whether the filter is on. It is private to you; commenters are only told that their comment cannot be posted, not which word matched.

f) Coins and ads. Short usernames, chat themes, gifts, creator subscriptions and extra guild member slots use coins that you earn for free (for example by watching rewarded ads in the Android app, opening the hourly Gift Boxes, the daily check-in, achievements and referrals), receive as gifts, or buy in the Coin Store in the Android app through Google Play (payments are handled by Google Play and the coins are added to your wallet after Google confirms the payment). Coins have no cash value, cannot be withdrawn or exchanged for money, and can only be used inside Animora. Coins that are already spent or gifted are not refundable by us; refunds of Google Play purchases follow Google Play's refund policy. We keep a wallet history of every coin you earn or spend (what, how many, when, and the other person for gifts). When you watch a rewarded ad, Google AdMob may collect your device advertising ID and usage data under Google's own privacy policy. So that coins are paid only for ads that were really watched, Google also sends our server a signed confirmation that your account finished a rewarded ad (server-side verification); we keep a short record of it together with a one-time ticket, the time and your daily ad count.

g) Reports, appeals and support messages. When you report content we store who reported, who/what was reported, the reason and a copy of the reported text. When you use the Contact form we receive the category, your name, username, email address and your message.

h) Technical and usage data. IP address, browser and device type, pages/screens used, error and performance data. This is collected by our hosting and infrastructure provider (Cloudflare), Vercel Analytics (website only) and Google/Firebase as part of running the service. To update your screen live, your device also keeps a small real-time connection open to our servers (Cloudflare); it only signals that something you are watching has changed.

i) Data stored on your device. Your sign-in session (so you stay logged in), a saved copy of your profile and last home feed (so the app opens instantly), small preferences such as your pinned-chat list, theme and recently watched Reels (local storage), a device identifier computed on your device that is used only for the account-safety checks in items o and w, a service worker used for notifications and to clear outdated cached files after an app update, and - only if you press Clear in Coin History - the time you cleared it, so the older rows stay hidden on this device. Clearing hides rows on this device only; the records stay on our servers for payment and fraud checks.

j) Approximate location (country only). Each time you use Animora, our hosting network works out your country from your IP address. We save only the two-letter country code (for example "IN") on your profile and show it as a small country flag next to your name, including on profiles and the leaderboard. It is refreshed when you connect from a different country. There is currently no setting to switch the flag off; if you want your country flag removed, contact us through the Contact form.

k) Voice and video calls. Calls are set up through a call record (who called whom, whether it is voice or video, its status and timestamps, and the technical connection details needed to link the two devices). To connect, the two devices exchange network addresses (including IP addresses) with each other and with STUN/TURN relay servers - so the person you call can technically see your IP address, as in any peer-to-peer call. Audio and video travel between the participants; Animora does not record calls and does not store call audio or video. Group calls work the same way for the members of that group.

l) Message requests. When someone who is not your friend messages you first, we store a request record (sender, recipient, status - pending, accepted or declined - a short preview of the first message and timestamps) so it can appear in your Requests folder. A declined request is kept so the same person cannot keep re-sending it.

m) Achievements, streaks and rewards. We store which achievements you unlocked, your XP/level, activity streak, daily check-in streak, rewarded-ad and Gift Box counters and cooldowns, simple counters (such as messages sent), and the free coins you were credited for achievements, streaks and referrals (with daily-limit bookkeeping so rewards cannot be farmed). Your unlocked badges can be seen on your profile, and the Hall of Fame leaderboard ranks accounts by their Allies count.

n) Push notification token. If you allow notifications, your device's push token is saved on your profile so we can deliver alerts (messages, requests, incoming calls). You can turn notifications off in your browser/device settings at any time.

o) Device and network markers for account safety. When an account is created we store a one-way (hashed) marker of the device and of the network (IP address) - never the raw IP for this purpose. The device marker comes from a device fingerprint that is computed on your device and cached in local storage; only its hash reaches us. We use the markers so that one device or network cannot create unlimited accounts to evade bans or farm coins. These markers are not shown to anyone.

p) Games (Ludo and Chess). When you play online we store the room (entry fee, time control, players, moves, clocks, result and prize), a pointer to the room you are currently in, in-game chat/emoji (Ludo), and the coin entries for the entry fee, win or refund in your wallet history. Moves and results are used only to run the game, enforce the rules and clocks, pay or refund coins, and detect cheating or coin farming. Online Ludo tables also have optional voice chat between the players at the table (up to 4): audio goes directly between the players' devices, like a call, and is not recorded or stored, and only the connection set-up messages are saved in the room until it is cleared. The Ludo and Chess "Ranks" boards store and show your name, avatar, country flag, games played, wins, losses, draws and coins won or lost. In the Android app, the winner of a coin room may be offered a rewarded ad to double the win. Offline games against the bot run on your device and are not stored. Finished rooms are cleared automatically after a short time; the coin entries stay in your wallet history.

q) Purchases with real money (Android app only). Four things can be bought with real money, all through Google Play Billing: coin packs in the Coin Store (one-time purchases of 100 to 5,000 coins, the bigger packs with bonus coins, which can be bought again and again), the Green Tick (a monthly, auto-renewing subscription), Boost (a one-time purchase that promotes one of your posts or stories for the time you choose, whenever Boost is switched on) and a short username of 1 to 4 characters (a one-time purchase; the handle is reserved for you and saved on your account, and is released if you change it). Google Play takes and processes the payment - we never see or store your card, UPI, bank or other payment details. For a coin pack our server asks Google Play to confirm the payment and only then adds the coins (pack plus bonus) to your wallet; we store the product, the Google order ID, the number of coins credited and the date, and the purchase shows up in your Coin History. If Google refunds or reverses a coin purchase, or a payment turns out to be fraudulent, we may remove the coins that came from it. For each purchase our server receives the product ID and a purchase token from your device, checks it with Google Play, and then stores the product, the Google order ID and date, for Green Tick the expiry date and renewal status, and for Boost which post or story was boosted, the chosen goal (profile or website link) and until when. The purchase token is kept on our servers so the same purchase cannot be used twice and, for Green Tick, so we can re-check renewals, cancellations and refunds with Google every hour and whenever you open the app. If you add a website link, button text or colour to a boosted post, they are saved with the post and shown to the people who see it. We also keep counters of your recent boosts for the fair-use limits. Manage, cancel or ask for a refund of Green Tick in Google Play; renewals and refunds follow Google Play's rules. Green Tick is also unlocked for free once a creator reaches the milestone of 1 million Allies and 30 lakh reel views.

r) Guilds (group chats). For each guild we store its name, photo and settings (public or private, whether joining needs approval), the member list and each member's role, the invite code, a pinned message, join requests for public guilds that use approval (who asked and when) and a "seen by" mark on the newest message while a member has the guild open.

s) Customisation. Custom stickers you save, the chat themes you unlocked or applied, and your app theme and wallpapers are stored on your profile.

t) Notification quick actions. A push notification can carry buttons such as Decline (a call), Like (a message) and Reply. Each button works through a short-lived signed token that we put in the notification itself; it is tied to one person, one action and one target, expires quickly, and can do nothing beyond what the button says.

u) Automatic image screening. Photos you upload for posts, stories and cover photos may be checked automatically for adult content with Google Cloud Vision (SafeSearch). The image is sent to Google only for that check, and an image flagged as clearly adult is refused.

v) Account restrictions. If we place a chat ban, upload hold, suspension or ban on your account we store its type, duration and reason (see section 8).

w) Sign-in and sign-up protection (email accounts). Before sign-up, login and password reset we run security checks: the form must look human (a hidden field and a minimum fill time), the email must be a real, non-disposable address whose domain can receive mail (only the part after the @ is looked up, using Google Public DNS), and attempts are counted and limited per email, device and network. These counters are kept as one-way hashes of your email and IP address - never the raw values - and only count attempts within a short time window (minutes to a day).

We do NOT collect your precise location (GPS), phone contacts, phone number, government ID, or card / bank / UPI details (payments are handled by Google Play). Camera/gallery and microphone are used only when you choose to upload a file, record a voice note, start or answer a voice/video call, or press Voice at an online Ludo table, and only after your browser/device asks for permission.

• To create and run your account, sign you in and keep it secure.
• To show your posts, stories, comments and profile to the people allowed to see them, and to deliver your messages.
• To rank and recommend content in the Shonen feed and Discover (based on recency, likes, comments, views and what you watch - the Reels tab keeps a small interest profile on your own account to personalise Reels, refreshed about once a day, and Animora does not sell it or use it to build advertising profiles).
• To send in-app and push notifications you receive from activity such as likes, comments and requests.
• To show your country flag on your profile and the leaderboard.
• To deliver your Google Play purchases: verify them with Google, add the coins of a coin pack to your wallet, switch Green Tick or a Boost on and off at the right time, stop a purchase token being used twice, and apply the Boost fair-use limits.
• To check that you are at least 13 and to apply age-based limits (for example, only accounts confirmed as 18+ can send gifts, creator subscriptions or join coin rooms in Ludo and Chess).
• To run the referral program: credit referral coins, and detect and reject fake, duplicate or self-referred accounts.
• To apply your comment filter: refuse comments that contain a word you listed.
• To sort first messages from people you do not know into your Requests folder, and to connect voice/video calls and deliver incoming-call alerts.
• To credit free coins and unlock achievements, badges and streaks, to check with Google that a rewarded ad was really completed before paying coins, and to stop reward farming.
• To run online Ludo and Chess (rooms, clocks, paying or refunding coins, voice chat set-up), to detect cheating and coin farming, and to show the game Ranks boards.
• To protect email sign-in (verification, rate limits, bot and fake-address checks) and to screen uploaded images for adult content.
• To moderate the platform: review reports, remove content, and warn, temporarily suspend or permanently ban accounts that break the rules.
• To answer support requests, ban appeals, suggestions and data requests.
• To detect abuse, spam, ban evasion, security incidents and technical faults, and to improve performance and features.
• To comply with legal obligations and to establish, exercise or defend legal claims.

Legal bases (where GDPR / UK GDPR applies): performance of our contract with you (running your account, delivering the service and your Google Play purchases), our legitimate interests (security, moderation, fraud prevention, improving the app), your consent (for example microphone access or push notifications, which you can withdraw at any time) and legal obligation.

• Your name, username, profile photo, bio and follower/following counts are visible to other signed-in users. If your account is public, your profile and your public posts and reels can also be opened WITHOUT signing in (animorasocial.app/@username and animorasocial.app/reel/...), and search engines such as Google may index them - our sitemap lists public profiles and the most viewed public reels. Private, banned and deactivated accounts and private posts are left out of these pages and the sitemap.
• Public posts and stories are visible to all signed-in users (public posts and reels also on the public web pages above). Posts and stories marked "Allies Only" are shown in the app only to you and accounts that follow you.
• If your account is set to Private, your posts, reels and stories (and their comments and viewer lists) are visible only to you and your Allies (accounts you are connected with). Following you does not give access. Everyone can still see your name, username and photo so they can send you a connect request; your bio, post grid and follower/following lists are hidden from non-Allies.
• Guilds (group chats): members see each other's names, photos and messages. A public guild can be found and joined by any signed-in user, but its live chat preview, pinned message and invite code stay members-only, and some public guilds need a guild admin to approve join requests (admins can see who asked). While a member has a guild open, a "seen by" mark appears on the newest message.
• Games and Ranks: other players at your table see your name, avatar and country flag, and the Ludo and Chess Ranks boards show them together with your games played, wins, losses, draws and coins won or lost. Ludo voice chat is heard by the other players at the table.
• Green Tick and Boost: a Green Tick badge next to your @username is visible to everyone who sees your profile or posts. A boosted post or story is shown to other users as "Promoted"; if the boost carries a website link, its button opens that outside website.
• Message requests: if someone you are not connected with (and who you do not follow) messages you first, it goes to your Requests folder instead of your chats. You can read it without the sender seeing that you read it, then accept, delete or block. Until you accept, the sender can send only one message.
• Voice and video calls: the person you call can see your IP address as part of the connection. You can decline any call. Blocking someone stops messages in both directions, and you can report anyone who calls you repeatedly.
• Comments, likes, and story viewer lists are visible to the people who can see that content. Story owners can see who viewed their story.
• Your online status, last-active time, typing indicator and read receipts can be seen by the people you chat with.
• Messages are visible to the people in that conversation. Anyone in a conversation can screenshot, copy or forward what you send; we cannot prevent that.
• Block, Restrict and Hide are private. Your blocked / restricted / hidden list is visible only to you (and to the administrator when needed for moderation or legal reasons). The other person is not notified when you use any of these tools.
• Block: the two accounts can no longer message, send requests, follow or notify each other, the blocked person can no longer see your posts and stories, and any existing follow, friendship or pending request between you is removed. Gifts and subscriptions cannot be sent in either direction.
• Restrict: you stop seeing that person's notifications and requests, and their comments on your posts are visible only to them and you.
• Hide: you stop seeing that person's posts, stories and reels. Nothing else changes and they can still see and interact with your content.

Photos, videos, audio clips and profile pictures you upload are stored in cloud storage operated by Animora (Cloudflare R2). So that media loads for every viewer, uploaded files are given a link that can be opened by anyone who has the direct URL.

This means the in-app privacy setting ("Allies Only", private account, view-once) controls what the app shows, but it cannot stop someone who already has the direct file link from opening the file. The links are long and not listed publicly, but you should not upload anything you would not be comfortable being seen if the link were shared.

View-once photos are designed to be opened one time inside the app. We cannot stop screenshots, screen recordings or copies made by the recipient, and we do not guarantee that a view-once file is instantly erased from storage.

When you delete a post, story or audio clip we also try to delete the underlying file. Deletion of files is on a best-effort basis and copies may persist briefly in caches or provider backups.

All traffic between your device and Animora is encrypted in transit using HTTPS/TLS. Account data is stored in Cloudflare D1 and files in Cloudflare R2, sign-in is handled by Google Firebase Authentication, and access to the database is protected by Cloudflare's infrastructure security and by our server-side access rules.

Email accounts are protected by email verification, password rules and temporary lockouts after repeated wrong passwords. Payments are handled by Google Play; our server checks every purchase with Google before granting anything, so nothing is granted just because a phone says so.

Messages are NOT end-to-end encrypted. The people who administer Animora and its database can technically access stored data. We only look at message content where needed to investigate a report, abuse, a security incident, or to meet a legal request.

Administrator tools (such as banning accounts and reading reports) are restricted to a single designated admin account. No online service is 100% secure; if a breach affecting your personal data occurs we will notify you and the relevant authorities where the law requires.

Please protect your Google account (use a strong password and 2-step verification). Tell us immediately if you think your account was accessed by someone else.

We do not sell your personal information or share it with data brokers. In the Android app, optional rewarded ads come from Google AdMob. We share information only in these cases:

• Google (Firebase Authentication, Google Sign-In) - sign-in. Cloudflare (D1, R2, Workers) - database, file storage, hosting. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not access your personal Google Drive; files are stored in storage owned by Animora.
• Vercel - privacy-friendly, cookie-less website analytics (and web hosting where applicable).
• Google STUN servers (and a TURN relay, if we run one) - used only to connect voice/video calls between devices. Firebase Cloud Messaging - delivers push notifications to your device.
• Google AdMob (ANDROID APP ONLY - never on the website) - shows rewarded ads that earn coins (Gift Boxes, "Watch ad, get coins" and "double your win" after a coin-room win), and Google sends our server a signed confirmation that your account finished the ad. AdMob acts under Google's own privacy policy and may use your device advertising ID. You can reset or delete your advertising ID, or opt out of ads personalisation, in your Android Settings > Google > Ads.
• Google Play (Google Play Billing and the Google Play Developer API) - takes payment for coin packs, Green Tick, Boost and short usernames and confirms each purchase to our server. We receive the purchase token, product, order ID and dates, never your card or bank details.
• Google Cloud Vision (SafeSearch) - automatic adult-content check of uploaded images. Google Public DNS - checks that an email domain can receive mail (only the domain after the @ is sent).
• Formspree (formspree.io) - delivers reports and Contact-form messages to our inbox. What you type in those forms (and, for reports, the report details) is processed by Formspree and sent to us by email.
• Other users - as described in section 4.
• Law enforcement, courts or regulators - when we are legally required to, or in good faith believe disclosure is needed to protect people from serious harm (for example child-safety or imminent threat situations), or to enforce our rules.
• A successor - if Animora is transferred to another owner, your information may transfer with it, and we will tell you if your rights or choices change.

Boost (promoting your own post or story) is paid for with real money through Google Play in the Android app, whenever the feature is switched on (it can be locked temporarily). "Promoted" posts are boosts created by other users, and boosting does not give them any personal information about you. If a promoted post links to an outside website, that website has its own privacy practices.

Animora uses two different Google ad products, each in its own place only:

• In the ANDROID APP: ads are shown by Google AdMob only - optional rewarded ads ("Watch ad, get coins", the hourly Gift Boxes and "double your win" after a coin-room win). In the EEA/UK the app shows Google's consent form (User Messaging Platform) before ads when the law requires it.
• Rewarded AdMob ads in the app are always optional - you only see one if you tap to watch it.
• We do not show ads to, or knowingly collect advertising data from, children under 13, and we do not set up child-directed advertising.

Advertising choices: Google Ads Settings (adssettings.google.com), aboutads.info, the Digital Advertising Alliance (youradchoices.com) and, in Europe, youronlinechoices.eu. In the Android app use Settings > Google > Ads.

Every post, reel, comment, story, message and profile can be reported directly from the app using the flag/report tool - so you can report either a specific piece of content or a user's account and behaviour as a whole. A report contains the reporter's username, the reported username, the content type and ID (or "profile" when a whole account is reported), the reason, the reporter's optional note and a copy of the reported text/caption where relevant. It is saved in our database (readable only by the admin account) and emailed to our inbox through Formspree. The reported person is not told who reported them.

If content or behaviour breaks our rules or the law, we may remove content, restrict features (for example a temporary chat ban or upload hold), temporarily suspend or permanently ban an account. A banned account is signed out of normal use and shown a ban notice; its profile, posts, stories, comments and messages are hidden from other users, and it cannot post, comment, message or send requests. We store the ban type, duration and reason on the account.

To appeal a ban, use the "Appeal this ban" button on the ban screen, or the Contact form with the category "Ban appeal / Unban request". Please include your username and a clear explanation. We review appeals in good faith, but we are not obliged to reverse a decision, and repeated or abusive appeals may be ignored.

Reporting is separate from blocking: you can block, restrict or hide an account without reporting it, and blocking does not by itself send a report to us. If you are being harassed, we recommend you both block and report the account. Making knowingly false or abusive reports may itself lead to action against the reporting account. We may keep report, ban and appeal records, and enough data to recognise ban evasion, for as long as needed for safety and legal reasons, even after an account is deleted.

Animora welcomes any type of photo or video content - entertainment, vlogs, art, gaming, sports, music, comedy, discussion and everything in between. We do not restrict posting to any single topic or niche.

You are responsible for what you post. You must own or have the right to share your content. Do not upload anything that is illegal, sexually exploits or endangers minors (we have zero tolerance and will report to the authorities), sexually explicit or 18+ content of any kind (this applies no matter the format - photo, video, reel, story, profile photo, username, bio, comment or message), violent or gory for shock value, hateful or harassing, threatening, deceptive/impersonating, spam, malware, or that infringes someone else's copyright, trademark or privacy.

Copyright owners who believe content on Animora infringes their rights can send a takedown request via the Contact form (category "Copyright / content takedown") with: the work concerned, where the infringing content appears (username / post), your contact details, and a statement that you are the owner or authorised to act for the owner. We remove valid infringing content and may ban repeat infringers.

Usernames, brand names & trademarks. A username (@handle) must not use, copy or imitate anyone else's trademark, brand, company, product, channel, studio, franchise or official account - for example names like Google, YouTube, Instagram, Netflix or Crunchyroll - including versions with words such as "official", "support", "team" or "india", extra numbers, or look-alike letters. Animora blocks such names when an account is created or renamed ("Policy violation") and may remove, change or suspend any username that breaks this rule at any time. Do not use a username to pretend to be another person, company, Animora staff or a public authority.

Short usernames. Usernames with 1 or 2 characters are not available at all. Usernames with 3 to 5 characters are special and are unlocked with free coins when you choose them (Settings → Account Profile & HUD); the coin price depends on the length and is shown before you confirm. Usernames of 6 or more characters are normal: the first change is free, later changes cost a small number of coins. A username is a right to use that handle inside Animora only, for as long as your account is active and follows these rules. Getting one does not give you any trademark, copyright or other ownership of the name, and it does not protect it against a valid complaint from a rights owner. If we must remove or change a username because it infringes someone else's rights or breaks these rules, we may do so without returning the coins, except where the law requires it. Coins have no cash value, and coins spent on a short username are not returned once the username is set on your account, except where the law requires it. If coins were taken but the username was not given to you (for example because someone else got the name first), contact us through the Contact page.

By posting, you grant Animora a non-exclusive, worldwide, royalty-free licence to host, store, display and distribute your content inside the service solely to operate it. You keep ownership of your content, and the licence ends when you delete the content or your account (except for copies already shared by others or held in short-term backups).

• Stories stop appearing in the app after 24 hours. Their files are removed on a best-effort basis.
• You can delete your own posts, comments and messages (unsend) at any time.
• Deactivate: hides your account. Nothing is deleted, and logging back in restores it exactly as it was.
• Delete permanently: your account is scheduled for erasure and you are signed out. If you do not log back in within 3 days, your profile and all posts you made are permanently erased and your sign-in account is removed. Logging in within those 3 days cancels the deletion.
• Some things may remain after deletion: messages you sent inside other people's chats, comments you left on other people's posts, and notifications already delivered may remain until removed by the other party or by us on request. Your blocked / restricted / hidden list is deleted with your account, but a block you placed on someone else's account stays in effect on their side until your account is erased. Report, ban and appeal records may be retained as described in section 8. If a sign-up or account is refused or closed because the person is under 13, we keep a minimal record (the account ID, the result and the device marker, without the profile content) so the refusal cannot be bypassed. Call set-up records (marked ended when the call finishes), message-request records and reward/achievement counters are kept while your account exists. Referral records (including the hashed device / network markers) and your comment-filter list are kept while your account exists; referral records may be kept longer, without profile content, where needed to prevent referral fraud. Provider backups are overwritten on the provider's normal schedule.
• Purchase records (Google order ID, product, the coins credited, dates and the purchase token) are kept for as long as needed for refunds, accounting and fraud prevention, even after an account is deleted; Google Play keeps its own payment records under its own policy. Deleting your Animora account does not by itself stop Google Play billing - cancel Green Tick in Google Play (Play Store > Payments & subscriptions > Subscriptions) before you delete your account.
• Rewarded-ad confirmations and one-time ad tickets are bookkeeping used only to pay coins correctly and stop abuse, and the hashed sign-in / sign-up attempt counters only count attempts within short time windows (minutes to a day).
• Contact-form and report emails are kept in our inbox for as long as needed to handle the matter and for legal/safety records.

Want anything else erased? Send a "Privacy or data request" through the Contact form from the email linked to your account and we will handle it.

In the app you can: edit your profile, switch your account to Private, accept, delete or block message requests, choose Allies Only for posts and stories, block, restrict or hide other users (Settings → Blocked & restricted accounts lets you review and undo each one), turn your comment filter on or off and edit its words, cancel the Green Tick subscription in Google Play, delete posts/comments/messages, deactivate or permanently delete your account, and turn off browser permissions (microphone, notifications) at any time in your browser/device settings. You can also revoke Animora's access to your Google sign-in at myaccount.google.com → Security → Third-party access.

Depending on where you live, you may have the right to: access the personal data we hold about you; correct it; delete it; restrict or object to certain processing; receive a portable copy; and withdraw consent at any time (this does not affect earlier processing).

EEA / UK users (GDPR): you may also lodge a complaint with your local data-protection authority. California residents (CCPA/CPRA): you may request to know, correct and delete your personal information; we do not sell your personal information, and we do not ourselves share it for cross-context behavioural advertising (Google AdMob in the Android app may use your device advertising ID as described in section 7, and you can opt out there), and we will not discriminate against you for exercising your rights. India (Digital Personal Data Protection Act, 2023): you have the right to access, correction, erasure and grievance redressal.

To exercise any right or raise a privacy grievance, use the Contact form with the category "Privacy or data request". We may need to verify that the request comes from the account holder. We acknowledge requests within 72 hours and aim to resolve them within 30 days (sooner where the law requires).

Minimum age: you must be at least 13 to use Animora (or older, where your country sets a higher minimum age to consent to data processing). We ask for your date of birth before an account is created. If you are under 13, the sign-up is refused, no profile is created, and we cannot let you retry with a different date. If an existing account is found to belong to someone under 13, it is closed and its data is removed on request or on the normal deletion schedule.

Ages 13-17: if you are under 18 you may only use Animora with the knowledge and permission of a parent or guardian, and only in the way local law allows for your age. Accounts confirmed as 13-17 cannot send gifts or creator subscriptions to other users, and cannot enter coin rooms in Ludo or Chess (free rooms and offline games stay open). Some other features may be limited further for this age group in future; we will update this policy when that happens. Where the DPDP Act, 2023 requires verifiable parental consent for a child (under 18), we will ask for it before enabling the affected features, and we do not track, run behavioural monitoring on, or target advertising at children. Real-money purchases through Google Play should be made only by an adult, or with the permission of the holder of the payment method.

Animora and the content shown in it are not directed at children, and we do not knowingly show child-directed advertising, in line with Google's advertising program policies and applicable children's-privacy law (for example COPPA and India's DPDP Act, 2023). Sexually explicit / 18+ content is never allowed on Animora regardless of the age of any account (see section 9), and content that sexualises minors is never permitted under any circumstances and is reported to the relevant authorities.

If you believe a child under the permitted age has created an account, please contact us through the Contact form and we will delete the account and data promptly. Parents/guardians can also use the form to ask for access to, or deletion of, their child's data. Your date of birth is entered once and cannot be changed by you afterwards; if you entered it wrongly, use the Contact form (category "Privacy or data request") and we will review it in good faith - we may ask for proof of age and are not obliged to reverse a refusal made because you entered an under-13 date.

Animora itself does not set advertising cookies. In the ANDROID APP, rewarded ads come from Google AdMob, which may use your device advertising ID under Google's own privacy policy (see sections 7 and 7A). Users in the EEA/UK are shown Google's consent form before ads where the law requires it.

Other storage we use: Firebase Authentication stores a sign-in token in your browser so you stay logged in; local storage keeps small preferences (for example pinned chats, theme, a short list of Reels you already watched so your Reels feed stays fresh, a saved copy of your profile and last feed so the app opens instantly, and a device identifier used only for account safety); a service worker handles notifications and clears stale cached files after updates. Vercel Analytics measures page usage without cookies. You can clear all of these from your browser settings at any time (you will be signed out). Full details: Cookie Policy at /cookies.

Our service providers (Google, Cloudflare, Vercel, Formspree) operate data centres in several countries, including outside your own country (for example the United States). By using Animora you understand your information may be transferred to and processed in those countries, which may have different data-protection laws. Our providers use recognised safeguards such as standard contractual clauses where required.

We may update this policy when the app or the law changes. The "Effective date" at the top shows the latest version. For material changes we will show a notice in the app. Continuing to use Animora after a change means you accept the updated policy.

Questions, complaints, ban appeals, data requests, copyright notices or suggestions: use the Contact form (Settings → Contact & Support, or the public /contact page). Choose the category that fits so it reaches us quickly.