# VerseLab Privacy Policy

Last updated: 2025-10-23

## Overview
This Privacy Policy explains what information VerseLab ("we", "our", or "us") collects, how we use it, and your choices. VerseLab is a user‑generated content (UGC) app where you can publish poems, participate in slams, and interact with the community.

## Information we collect
- Account data: email address, username, display name, and password (stored as a hash).
- Profile data: bio, avatar, and preferences (e.g., notifications, content filters).
- Content you create: poems, images, videos, comments, likes, messages, and club activity.
- Device and app data: app version, basic device info, crash diagnostics, and limited usage events necessary to provide features (e.g., notifications).
- Approximate location (if you grant permission) to support regional content/notifications; precise location is not required.

## How we use your information
- Provide and improve core features (feeds, creation tools, messaging, slams).
- Operate authentication and account management.
- Send push or email notifications you opt into.
- Moderate content and protect safety, including enforcing our EULA/Community Guidelines.
- Personalize ranking and discovery (e.g., feed ordering).
- Comply with legal obligations and respond to lawful requests.

## Third‑party services we use
We rely on reputable providers to operate VerseLab. These processors handle data subject to their own privacy policies:
- Supabase (auth, database, storage, realtime): stores account profiles, posts, and app data.
- Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM): delivers push notifications to your device.
- Google AdMob (mobile) and Google AdSense (web): serves advertisements where enabled. These services may collect device identifiers and usage data for ad delivery and measurement.
- Wikipedia (content source): we may fetch public content for Education cards; your device requests the article when you open the link.
- Biometric APIs (Face ID/Touch ID or Android Biometrics): optional, used locally on your device to help you sign in faster. Your biometric data never leaves the device.

## Cookies and similar technologies
On web, we may use cookies or local storage to maintain your session and preferences. Ad services may set their own cookies as described in their policies.

## Data sharing and disclosures
- Service providers: we share data with processors only as needed to operate VerseLab.
- Legal compliance: we may disclose information to comply with law, protect rights, safety, and the integrity of our services.
- Business transfers: if we undergo a merger, acquisition, or asset sale, your information may be transferred as permitted by law.

## User‑generated content visibility
Content you publish (e.g., poems, slams, comments) may be visible to the public or to followers depending on your settings. Messages are private to participants. Please avoid sharing sensitive personal information in public posts.

## Advertising and tracking choices
Where ads are enabled, AdMob/AdSense may use device identifiers and other signals to deliver and measure ads. Platform‑level settings (iOS/Android) and in‑app controls may limit personalized advertising. You can also manage email and push preferences in Account Settings.

## Data retention
We retain your account data while your account is active. If you request deletion, we begin irreversible deletion of account‑level data within 30 days, with secure backups purged within 90 days where feasible. Some records (e.g., audit logs, fraud prevention) may be retained as required by law. Content you published may be deleted or anonymized depending on technical and community considerations.

## Account deletion and data access
- Delete: You can delete your account from Account Settings. This removes your profile and personal data as described above.
- Export: You can request a copy of your data from Account Settings → Export My Data.
- Corrections: You can update profile fields in Edit Profile.

## Security
We employ industry‑standard safeguards to protect your information, including HTTPS in transit and access controls. No method of transmission or storage is 100% secure; we monitor and improve our protections continuously.

## Eligibility and Children
You must be at least 13 years old to use VerseLab. VerseLab is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children under that age.

## International transfers
Your information may be processed and stored in data centers located outside your country. We rely on appropriate safeguards and contractual commitments with our processors.

## Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy in‑app and update the “Last updated” date. Material changes may be communicated via in‑app notice or email.

## Contact us
Questions or requests? Email support@verselabapp.com.