VAWILON Privacy Policy

1. Who is responsible for your data

The operator of VAWILON is Stryha Artem, Kharkiv, Ukraine. The operator decides how and why data is processed. Questions about your data and requests for access, correction or deletion: support@vawilon.com.

2. In short

We do not sell data and we do not show ads. There is no third-party analytics in the app.

Other people see what you publish yourself and an approximate distance to you — never your exact address.

You can delete your account in the app in a few taps or by writing to support@vawilon.com.

3. What data we receive

Account: email, password (the server keeps only its scrypt hash), registration date. If you sign in with Google, Apple, Facebook, X or WeChat — your permanent identifier at that service and the email it shares.

Profile: name, @username, date of birth, gender, city, country, bio, avatar, interests (you can hide them), intentions, Aura, language and appearance.

Location — see the separate section below.

What you create: posts with text, photos, video and music, reactions, tasks and meetups and your participation in them, private messages, money requests, Vawi on the map and what passers-by do with it.

Safety: blocks and reports.

Technical data: at sign-in — your IP address and the name of your browser or device; in the server log — IP address, time, request path without parameters, response code and browser name.

Coin wallet: a random identifier in a cookie and an irreversible fingerprint of your IP address and browser, so that an invitation reward cannot be claimed twice.

4. Location

The app gets no coordinates without your permission. You can withdraw it in your phone or browser settings.

People nearby: the server receives not a point but a cell about one kilometre wide. Others see the distance to you in whole kilometres. The cell is kept while you are shown on the map; after 14 days without an update it is no longer shown, and when you hide your profile, turn off showing yourself or delete your account, it is deleted.

Privacy domes, distance fog and stealth mode hide or blur your location.

VawilonVision (camera with people tags) — only if the feature is enabled and you have given separate consent: exact coordinates and camera direction are kept for no more than two minutes and are visible only to people nearby who have also consented.

Touch: the place of the touch is needed for a couple of seconds to find the other phone and is not stored.

The place of a task or meetup and the place where you left your Vawi are visible to others until you remove them.

The map is loaded from OpenFreeMap servers — they see your IP address and the area you are looking at.

5. Why we process data

To make the app work: sign-in, profile, people nearby, feed, messages, map. Legal basis: our contract with you (the Terms of Use).

To protect people and the service: blocks, reports, rate limits, protection against forged requests and abuse. Legal basis: legitimate interest.

Location and optional features — on the basis of your consent, which you can withdraw at any time.

To comply with the law — when a lawful request from a public authority requires it.

6. Who sees your data

Other users see your public profile, your posts within the visibility you choose, and the distance to you; a message is seen only by its recipient.

Hidden interests are visible only to mutual contacts and to people who have hidden the same interest.

AI characters are always labelled. Messages to them are read by the operator’s program, which picks a reply; they are not passed on to third parties.

Providers the service cannot work without: the server hosting provider, OpenFreeMap (map), Cloudflare and Google (email to support@vawilon.com).

Only when you use a feature yourself: Spotify — the track player starts when you tap it; websites in billboard links — your browser loads their icons and sends them your IP address; the sign-in service you chose; the AI provider for the Vawi chat — it receives the text of your messages to Vawi when the feature is available.

We do not sell data or pass it to advertisers. We may disclose it only at the lawful demand of a public authority.

7. Where data is stored

The VAWILON server is rented from a hosting provider in the Netherlands (EU). The operator works with it from Ukraine.

Some data is stored only on your device: app settings, stories, Vawi’s state and your chat with it, drafts. We cannot see it; it is deleted with the Clear device data button in settings or together with the app.

8. How long data is kept

Account, profile, posts and messages — until you delete them or delete your account.

Sign-ins (sessions) — 30 days or until you sign out.

Location on the map — as described in the Location section.

When you delete your account, data is erased immediately and post files within a few minutes. What remains is an anonymous record without a name or @username (so that other people’s conversations do not break; others see it as a nameless memorial), as well as reports and blocks — for the safety of other people.

The server log is limited in size and is overwritten by new entries.

Deleted data may remain for some time in database backups. Backups are used only to recover from a failure.

9. Your rights

You can view and correct your profile in the app, and hide your profile, location and interests in settings.

Delete your account — in the app or by email (see the Delete your account page).

To get a copy of your data, restrict processing or object to it, write to support@vawilon.com from the address your account is registered with.

You have the right to lodge a complaint with the data protection authority of your country.

10. Security

Connections are protected with HTTPS. Passwords are stored only as hashes, sign-ins as token hashes. Location metadata is removed from photos and videos when they are uploaded. Only the operator has access to the server. No protection is absolute: keep your password and device safe.

11. Children

VAWILON is only for people aged 18 and over. If an account belongs to a child, write to support@vawilon.com and we will delete it.

12. Cookies and device storage

We use only necessary cookies: sign-in (HttpOnly, 30 days) and the coin wallet (1 year). Settings and some content are kept in your browser’s storage on your device. There are no advertising or analytics cookies.

13. Changes

We update this policy when the way the app works changes. The version and date are at the top of the document; we will warn you in the app about significant changes.

14. Contacts

Stryha Artem, Kharkiv, Ukraine. Email: support@vawilon.com.