Privacy Policy

1. Introduction & Scope

Welcome to Abygram ("Abygram", "we", "our", or "us"). We are committed to protecting your privacy, securing your personal data, and maintaining complete transparency about how your information is processed when you use the Abygram mobile application, web services, APIs, and related offerings (collectively, the "Platform"). This Privacy Policy applies to all users globally and governs all data collection, processing, storage, and sharing practices across the Abygram Platform.

2. Information We Collect

We collect only the minimum information required to deliver a fast, authentic, and safe social and e-commerce experience:

• Account & Identity Information: When you register or sign in, we collect your name, username (@handle), email address, phone number (for OTP authentication), profile photo, bio, and verification status.
• User-Generated Content: Photos, videos, Reels, Spark posts, stories, live streams, comments, likes, and direct messages you create or share on the Platform.
• Payment & Wallet Metadata: When you purchase Abygram subscriptions, boost campaigns, or digital gifts, transactions are processed securely through Google Play Billing or Apple In-App Purchase. We store transaction receipts, entitlement statuses, and wallet ledger entries, never raw credit card numbers.
• Device & Security Telemetry: Device model, operating system version, language preference, IP address, Firebase App Check attestation tokens, and crash diagnostics strictly to prevent fraud, bots, and unauthorized access.

3. How We Use Your Information

Your information is processed strictly for legitimate platform operations:

• Providing, personalizing, and maintaining the Abygram feed, stories, messaging, calling, and creator monetization features.
• Verifying user identities and displaying the official Abygram blue verification badge across the Platform.
• Protecting platform integrity via real-time spam detection, rate limiting, Cloudflare Zero Trust security, and Firebase App Check.
• Sending essential service notifications, security alerts, and real-time call/message push notifications via Firebase Cloud Messaging (FCM).

4. Data Sharing & Zero Data Selling Mandate

Abygram does NOT sell, rent, or trade your personal information to third-party data brokers or advertisers. We share data only with trusted infrastructure processors bound by strict confidentiality and data processing agreements (Google Cloud / Firebase for authentication and storage, and Cloudflare for edge security and low-latency delivery), or when legally required by a valid court order.

5. End-to-End Security & Encryption

All data transmitted between the Abygram mobile app and our backend servers is encrypted in transit using TLS 1.3 (HTTPS) and protected at rest using AES-256 encryption. Private media, direct messages, and administrative operations are guarded by strict Zero Trust access controls and role-based permissions.

6. Data Retention & Instant Account Deletion

We retain your personal data only for as long as your account remains active. You may delete your content or permanently delete your entire Abygram account at any time directly within the app (Settings → Account → Delete Account) or via https://abygram.com/data-deletion. Upon deletion, your profile, posts, messages, and personal identifiers are permanently purged from active databases within 30 days.

7. Your Global Privacy Rights (GDPR, CCPA & International Laws)

Depending on your jurisdiction, you have the right to access, export, correct, restrict, or erase your personal data, and to withdraw consent at any time. To exercise your rights or contact our Data Protection Officer, email us at privacy@abygram.com or support@abygram.com.