FameViral (“we”, “us”, “our”) operates the website fameviral.com and the FameViral Android app (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using the Service you agree to the practices described below.
1. Information we collect
To operate the follower-exchange community, we collect the minimum data necessary:
- Public Instagram username — you provide it when you log in. We NEVER ask for your Instagram password.
- Public profile picture and follower count — fetched from Instagram’s public API to display your profile inside FameViral.
- Email address — only if you voluntarily provide one for password recovery or support.
- Activity data inside FameViral — tasks you complete, coins earned/spent, orders placed, referrals, achievements.
- Device / technical data — IP address, browser/OS type, device identifier (for push notifications), install source (web, PWA iOS, PWA Android, or TWA Android), traffic source (UTM parameters).
- Push subscription tokens — if you opt in to notifications, the browser-issued endpoint is stored so we can send you relevant updates.
2. What we DO NOT collect
- ❌ Your Instagram password. Never. There is no field for it anywhere on FameViral.
- ❌ Payment information (the Service is 100% free).
- ❌ Government IDs, SSN, or biometric data.
- ❌ Contacts from your phone.
- ❌ Photos from your phone’s storage.
- ❌ Your location (beyond coarse country-level data derived from IP for the live activity feed).
3. How we use your data
- To operate the follower-exchange system (match your task completions with order fulfillment).
- To display public Instagram profile info inside FameViral so users recognize who they’re engaging with.
- To send you push notifications about task rewards, order completions, or re-engagement — only if you opt in.
- To improve the Service via aggregated analytics (Google Analytics 4).
- To detect fraud, bot activity, and violations of our Terms.
4. Sharing with third parties
We do NOT sell your data. We share it only with the following categories of processors:
- Instagram’s public API — to fetch your public profile info. Governed by Meta’s Privacy Policy.
- Google Analytics 4 — anonymized traffic analytics. Google Privacy Policy.
- Push notification service (VAPID/Web Push) — your push endpoint is sent via Firebase / Apple Push / Mozilla Push to deliver notifications.
- Hosting provider (Vercel) — processes HTTP requests on our behalf.
- Database provider (OVH, Brazil) — stores your account data encrypted at rest.
5. Data retention
We retain your account and activity data for as long as your account is active. If you request deletion (see Section 7), all personal data is erased from our database within 30 days. Aggregated / anonymized analytics may be retained indefinitely.
6. Security
- All traffic between you and FameViral is encrypted via HTTPS (TLS 1.2+).
- Database passwords are hashed with bcrypt; Instagram credentials are NEVER stored because we never ask for them.
- Servers are in restricted-access data centers.
- Admin access to the DB is logged and limited to key personnel.
7. Your rights (GDPR / CCPA / LGPD)
Regardless of where you live, you have the right to:
- Access — request a copy of all data we have about you.
- Rectify — correct inaccurate data.
- Delete — request full deletion of your account and all associated data.
- Portability — request your data in a machine-readable format.
- Object — opt out of marketing push notifications at any time.
- Withdraw consent — disable push notifications, delete account, or log out at any time.
To exercise any of these rights, email contact@fameviral.com from the address associated with your account. We respond within 30 days.
8. Children under 13
FameViral is not directed at children under 13. We do not knowingly collect personal data from children. If you are a parent and believe your child has provided us data, email contact@fameviral.com and we will delete it immediately.
9. Cookies and tracking
We use cookies and similar technologies only for: authentication (login session), preference (language, theme), and analytics (GA4). We do NOT use advertising cookies or behavioral retargeting.
10. International data transfers
Your data is primarily stored on servers in Brazil and North America. By using the Service, you consent to the transfer of your data to these jurisdictions.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows the latest revision. Material changes will be announced via in-app notification or email.
12. Contact
Questions? Complaints? Data requests?
Email: contact@fameviral.com
