Privacy Policy

This policy explains how Xuba (“we”) handles personal data when you use the Xuba website, web app and mobile apps. [Name and address of the data controller, and an EU/UK representative if required, to be completed by counsel.]

• Account data: sign-in identifiers from Google, Apple or email, display name, gender, date of birth, country, languages, photos and bio.
• Verification data (hosts): identity documents and selfie or liveness images, reviewed by our team and kept in private storage.
• Content: messages, voice notes, photos, videos, stories, premium media, live stream chat and reports you send.
• Calls and live: call and stream metadata (who, when, duration, price, connection quality). Calls and streams are relayed in real time and are not recorded by default; moderators may view live streams and reported live content.
• Payments: purchase records and receipts from Apple, Google or resellers; Token and Credit ledgers; payout details for hosts. We don't store full card numbers.
• Device and usage: a random device ID, IP address, browser or app version, approximate location from IP, and in-app activity used for security, fraud prevention and improving the Service.

• To run the Service: accounts, matching, calls, chat, live streams, payments and payouts.
• To keep people safe: age and identity verification, automated and human moderation, fraud and abuse prevention, and handling reports and appeals.
• To support you, including an AI support assistant whose replies are labelled and can hand over to a person.
• To translate content when you ask, and to send notifications you've allowed.
• To meet legal obligations (tax, accounting, law-enforcement requests, child-safety reporting).

Where data-protection laws such as the GDPR apply, we rely on: performance of our contract with you; our legitimate interests in running a safe and secure service; your consent (for example optional notifications or sensitive data you choose to share), which you can withdraw at any time; and legal obligations. Identity verification data of hosts is processed to meet legal and safety obligations and with consent where required.

We don't sell personal data. We share it only with:

• Other users, as you choose (your public profile, messages and calls with the people you talk to).
• Service providers acting for us: hosting and storage, real-time video infrastructure, authentication, push notifications, payment and app-store platforms, identity verification, translation and AI moderation or support providers. They may only use the data to provide their service to us.
• Agencies that manage a host, limited to that host's earnings and performance.
• Authorities, when the law requires it or to protect someone from serious harm, including reports of child sexual exploitation to the relevant hotline or authority.
• A buyer or successor if Xuba is involved in a merger or acquisition, under this policy.

Xuba is used worldwide, so data may be processed outside your country. Where required we use safeguards such as standard contractual clauses.

• Account data: for as long as your account exists, then deleted or anonymised after deletion, except as below.
• Messages and media: until you or the other person delete them or the account is deleted; stories expire after 24 hours.
• Moderation, report and enforcement records: kept long enough to enforce bans and handle appeals.
• Payment, ledger and payout records: as long as tax and accounting law requires.
• Host verification data: for the duration of hosting and a limited period afterwards, as required by law.

[Exact retention periods to be confirmed by counsel and engineering.]

You can view and edit your profile, change notification settings, use Private Mode in calls, block people and delete your account from your profile settings. Depending on where you live you may also have the right to access, correct, delete, restrict or object to processing, to data portability, and to complain to a data-protection authority.

To make a request, contact our support team. We may need to verify it's you. See also our Terms of Service.

We use encryption in transit, access controls, private storage for verification documents and monitoring. No system is perfectly secure; please use a strong sign-in method.

Xuba is only for adults. We don't knowingly collect data from anyone under 18 and delete such accounts when we find them. See our Child Safety policy.

We'll post updates here and tell you in the app about material changes. Questions or requests: our support team.