Privacy Policy

WobbleFly is a social platform built around your actual life rather than its reach. It is designed to stay the size of your world, not to grow without limit.

The Service lets people:

• create a profile
• share permanent photos and video as Posts
• share visual moments as Glimpses
• highlight content for a chosen group as Spotlights
• post quick, temporary Sparks
• write and talk about text, ideas, blogs, questions and conversations in Wave
• join communities and discussions
• send and receive Messages
• follow, be followed, and save content

We design the Service to be smaller and slower than the platforms it is an alternative to. That is a product decision, and it shapes what we collect.

We only collect what the Service needs to work, and what you choose to give it. The categories below are the whole list.

You provide directly:

• Account information — the email address or phone number you register with, and your password, which we store only in a form that cannot be read back.
• Profile information — the name, handle, picture, bio, pronouns, location, links and any other details you choose to add to your profile.
• Content you create — Posts, Glimpses, Spotlights, Sparks, Wave posts, replies, questions, blog entries, hashtags, mentions, links and media you upload or write.
• Messages — the messages you send and receive, and the metadata needed to deliver them, such as who sent what and when.
• Communications — anything you send to us, including reports, appeals, and messages to the WobbleFly support channels.

The Service collects automatically:

• Device information — device type, model, operating system and version, app version, browser type, screen size and language settings.
• Log information — the requests the Service receives from your device, including timestamps, the resource requested and the response returned, so we can keep the Service working and investigate faults.
• IP address — used to deliver the Service, to keep sessions secure, to detect abuse, and to derive an approximate location. We do not use it to build a precise record of where you go.
• Cookies and similar technologies — described in full in Cookies, Briefly.
• Notification and permission information — which notifications you have allowed, and which device features (such as camera, microphone, photos or contacts) you have granted the app access to.

We use the information above for a small number of purposes.

Providing and operating WobbleFly:

• creating and securing your account, and signing you in
• delivering the content you post and the people, places and tags you chose
• sending your Messages and showing you your notifications
• following, follower and community relationships you maintain
• storing and delivering media at the sizes and quality your connection supports
• preventing abuse, enforcing our Community Guidelines, and keeping the Service secure

Keeping the Service safe:

• detecting and stopping fraud, spam, fake accounts and coordinated abuse
• protecting minors and responding to reports of harm
• investigating incidents and enforcing our Terms and Community Guidelines

Communicating with you:

• service messages, such as a security alert or a change that affects your account
• notifications you have asked us to send
• responses to your reports, appeals and support requests
• policy updates where they affect you

Improving WobbleFly:

• understanding which features are used and where the Service breaks, so we can fix it
• designing and testing changes, including before they are released
• reducing load, and stopping the Service being used to harm people

Meeting legal obligations:

• responding to valid legal process from competent authorities
• keeping records we are required to keep
• enforcing our agreements with you and with service providers

We do not sell your personal information. We do not use third-party advertising networks, and we do not allow third parties to place tracking pixels or read cookies on the Service. [Analytics tooling, or 'none']

Visibility is your decision, and it is the point of the Service.

WobbleFly may provide public and private accounts. On a public account, your Posts, Glimpses, Spotlights, Wave posts, Sparks, replies, profile and follower list are visible to other people using the Service. On a private account, you decide who is approved to follow you, and approval is required before a follower relationship is formed.

Some things are shared with the people you choose, and not with anyone else:

• Messages are private between the people in them.
• You control who can see individual Glimpses and Sparks, including limiting them to a chosen audience or to yourself.
• Communities you join are visible to that community.

Changing a setting takes effect from that point forward. It does not reach back into copies of content that has already been seen, saved or screenshotted, which is why we encourage you to set visibility before you post rather than after.

You are responsible for what you post publicly. We do not and cannot remove information that others have already copied.

We share personal information only in the following circumstances, and not for advertising or data brokerage.

With other people on the Service, as directed by you:

• anything you post publicly, to anyone who can see it
• profile information, to anyone who views your profile
• your follower and following relationships, where these are visible to others
• content you share into a community, to that community
• Messages, to the person you are messaging

With service providers who process it for us:

We use providers for hosting, content delivery, media processing, email and notification delivery, customer support, and security. They act on our instructions and may not use your information for their own purposes. The current list is ${P.serviceProviders}.

For legal reasons:

• where we receive valid legal process from a competent authority, we will respond, and will tell you unless the law prohibits us from doing so
• to establish, exercise or defend legal claims, or to handle a complaint about your account
• to protect the rights, safety and integrity of WobbleFly, its users and the public

[Law-enforcement disclosure process]

With your direction:

• if you connect a third-party service to your account, that service receives what you share with it
• if you ask us to export, transfer or delete your information, we act on that instruction

At your direction or in connection with a change of control:

If WobbleFly is sold, merged, or otherwise reorganised, your information may transfer to the new operator as part of that transaction. We would tell you before your information moves to a different organisation, and the new operator would have to honour this policy unless it publishes a replacement and you are given the chance to review it.

We use the technical and organisational measures that are reasonable and appropriate to the size of the Service, including:

• encryption in transit and at rest where we control the system
• passwords stored so they cannot be recovered, only reset
• access controls limiting who inside WobbleFly can reach personal information, and logging of that access
• two-step sign-in available for account protection and required for account recovery
• rate limiting, monitoring and abuse detection across the Service

No system is perfectly secure. If a breach affects your personal information and we are legally required to notify you, we will do so as required and describe what happened in plain language.

We keep information only as long as it serves a purpose, and then delete it.

In general:

• account information is held while your account is active
• content you post is held while it is live, and until you delete it or close your account
• Sparks are temporary by design and are removed when they expire
• Messages are held for as long as they are part of your account, subject to the other people involved
• security and log information is kept for a limited period sufficient to investigate abuse and operate the Service
• records required by law are kept for as long as that law requires

The specific period for each category of data is [Retention periods by data type] Information may also persist in encrypted backups for a limited time after deletion, after which it is no longer restorable.

Depending on where you live, you may have some or all of the following rights over your personal information.

• access — to get a copy of the personal information we hold about you
• correction — to fix information that is wrong or incomplete
• deletion — to ask us to delete your information, and your account
• restriction or objection — to ask us to pause certain uses, such as certain notifications or personalisation
• portability — to receive your information in a structured, machine-readable format
• withdraw consent — where we rely on your consent, to withdraw it at any time
• complain — to raise a complaint with your data protection authority, where one applies to you. ${P.dataProtectionAuthority}

If you are in the EEA, the UK or Switzerland, and the Service is operated from outside that area, [Safeguards for international data transfers]

To exercise a right, contact us at [Privacy contact email] We will verify that the request is really from you before acting on it, because deleting an account is easy for someone else to ask for. [Grievance and appeal process]

You also have choices you can make yourself, without contacting us:

• change your profile and posting visibility at any time
• choose who can see a Glimpse or a Spark, including only yourself
• choose whether your account is public or private
• block people, and stop following or being followed by them
• delete individual content
• delete your account entirely

You may delete your account through the account-management process in the app or on the web.

When you delete your account:

• your profile, your content, your follower relationships and your community memberships are removed from the Service
• your Messages are removed from your account; copies held in other people's accounts are not something we can delete for you
• we stop sending you service and product communications

Some information may be retained for a limited period after deletion where necessary for legal compliance, security, fraud prevention, the resolution of a dispute, or the operation of backups. That retained information is not used to re-activate your account or to serve you content.

WobbleFly is not directed at children under [Minimum age to create an account] and we do not knowingly collect information from them. Anyone below the minimum age should not create an account.

WobbleFly is a place where people talk to each other, which means most of its risks are social rather than technical. Our position is:

• strong protection for minors in the Community Guidelines, including a lower tolerance for sexualised content, contact between adults and minors, and coordinated targeting
• no advertising to minors, and no advertising networks at all
• tools to make an account private, to limit who can message you, and to block
• routes for adults, teachers and others to report a safety concern, described on the For Parents & Families page

If you believe a child has created an account, contact us at [Support email] We will investigate and remove the account.

We would rather tell you about a problem early than late. If a security incident affects your personal information, and the law requires it, we will notify you and your authority within the required timescale, and we will explain what was affected and what we are doing.

We will update this policy when the Service changes or when the law requires it. Each version carries its own Last updated date.

Where a change materially affects you, we will tell you directly — in the app, by email, or both — before it takes effect, and give you a reasonable opportunity to review it. Continuing to use the Service after a change takes effect means you accept it.

Privacy questions

[Privacy contact email]

Support

[Support email]

Safety reports

[Safety contact email]

Operated by

[WobbleFly legal entity], [Registered address]

Data protection authority

[Data protection authority, where applicable]