Privacy Policy

Last updated: November 4, 2026

Draft. This document has not yet been reviewed by a lawyer and must be checked before the public launch. Черновик: требует проверки юристом до публикации.

In short: we collect the data needed to run your Amagi account, your content, payments and safety features, and we do not sell it. We use service providers, some of them outside the EU, under contracts that protect your data. You can access, correct, receive or delete your data and object to some uses at any time by writing to privacy@amagi.social.

This Privacy Policy explains how SviySoft ("we", "us") collects, uses, shares and protects personal data when you use the Amagi mobile app, the website amagi.social and related services (the "Service"). It is part of our Terms of Use. Last updated: 2026-09-27.

1. Controller and contact

• The controller of your personal data is SviySoft.
• Privacy questions and requests: privacy@amagi.social. General support: support@amagi.social.

2. Data we collect

Account data: phone number, email address, identifiers from Google or Apple sign-in, username, display name, password (stored only as a secure hash), language, date of birth and sign-in history. The date of birth is required: it decides which features are available to you (see section 10).

Profile data: photos and cover, bio, gender, country, city, interests and other details you choose to add. Some of them are public — see section 7. If you choose to add sensitive information (for example about sexual orientation), it is processed only because you decided to make it public, and you can remove it at any time.

Content and communications: videos, Reels, photos, stories, comments, likes, messages and voice messages, live streams, audio rooms, calls, reports, support requests and appeals. We do not record calls or private messages. Public and paid live streams and audio rooms may be recorded automatically for safety and moderation — see section 8.

Location: with your permission, the precise location of your device for "nearby" features and to determine your country or city. Your coordinates are never shown to other users. You can withdraw the permission in your device settings at any time.

Purchases and virtual items: coin purchases and subscriptions are processed by Google Play, the App Store, Stripe or NOWPayments. We receive the purchase confirmation (product, amount, currency, transaction identifier, status, refunds and chargebacks), but never your full card number. We keep balances of coins, bonus coins and diamonds, gifts, calls, tickets, subscriptions, shop orders, advertising budgets and the history of these operations.

Payout data: if you request a payout — your name, payout details (for example a PayPal or Payoneer email, bank details or a USDT wallet address), the identifier of your Stripe Connect account if you use one, email confirmation codes and the payout history.

Seller data: if you open a shop — either verification through Stripe Connect, where Stripe checks your identity and bank account and we receive the result, not your documents; or, in countries without Stripe Connect, your full name, country, date of birth, address, phone, photos of an identity document (front and back), a selfie with the document and your bank details. These files are visible only to authorised administrators, and every access is logged. Orders and buyers' shipping details are processed through Stripe.

Device and usage data: IP address, device model, a random device identifier created by the app, operating system, app version, language, time zone, push notification token, crash reports, which features and content you use and for how long, and, where ads from Google AdMob are shown, the advertising identifier.

Data from others: reports about you from other users, information from payment providers about refunds, chargebacks and fraud, and, if a parent links their account to yours, the settings they choose (see section 10).

3. Why we use data and on what legal basis

Where we rely on legitimate interests, you can object (section 9). Where we rely on consent, you can withdraw it at any time; this does not affect processing before the withdrawal.

Automated processing. We use automated systems to rank content, detect spam and fraud, check images, video and covers and check posts — captions, photos and video — against the Community Rules (Google Cloud: Vision, Video Intelligence, Gemini) and filter text. Depending on the result, a post can be hidden, a live stopped because of its cover, or a comment or message refused automatically; doubtful results go to a moderator. Sanctions against accounts — restrictions, suspensions, bans, payout blocks — are decided only by staff, and you can appeal them. We do not take decisions based solely on automated processing that have legal or similarly significant effects on you within the meaning of GDPR Art. 22.

4. Recommendations

The "For you" feed, Reels and live lists are ranked automatically. The main parameters, in order of weight, are: how much of a video people watch and how they engage with it (likes, comments, saves, reposts, shares, skips); whether you follow the author and how often you interact with them; the topics (hashtags) of content you engage with; your language and country; and how recent the content is. Part of the feed is reserved for new content. Only content that has passed moderation is recommended.

You can influence recommendations:

• the Following tab shows accounts you follow, and in Reels you can sort it by latest (chronological, without personalisation);
• Show less like this, hide an author, and Why am I seeing this? on a video;
• view and remove your interests, or reset your recommendations.

5. Advertising

• Internal ads and promoted posts are labelled "Sponsored" and show the advertiser's name. Advertisers can choose countries and languages only. Which ad you see is decided by the advertiser's bid, the ad's quality and engagement, how often you have seen it, and its relevance to you, calculated from the topics (hashtags) you engage with and your language and country. This also applies to users aged 16–17. Paid promotion does not change the organic ranking.
• Google AdMob ads are labelled "Sponsored". Google may use the advertising identifier of your device; on iOS you are asked for permission to track, and you can reset or limit the identifier in your device settings. VIP members do not see AdMob ads.

6. Who we share data with

We do not sell personal data. Service providers process data on our behalf under data processing agreements (GDPR Art. 28).

7. What other users see

Your username, display name, profile photo, bio, level, public posts, comments, streams and the gifts you send publicly are visible to other users and may be visible to anyone on the internet. Your age, date of birth and city are shown to others only if you are 18 or older; your exact location is never shown. With a private account only followers you approve see your posts. Who can message or call you also depends on the age rules (section 10). Messages are visible to their participants. A superadmin of Amagi may open an account's private messages, including voice messages and attachments, to investigate illegal activity and threats to safety, such as drug sales, illegal trade, fraud, threats to children or violence. Each view requires a stated reason and is recorded in a staff log.

8. How long we keep data

• Account and content: while your account is active, as long as needed to provide the Service. You can delete individual content at any time.
• Stories are visible for 24 hours and deleted 30 days after they expire.
• Live recordings (the video and sound of a live and who appeared in it) are kept in private cloud storage for a limited time — currently 24 hours — and deleted automatically. We keep a recording longer only if it is needed for an open report, a dispute or by law. Only authorised moderation and safety staff can access them.
• Translations are cached together with the source text so that the same text is not translated twice; live subtitles are deleted after 1 day.
• Usage events are deleted after 180 days, technical decision and delivery logs after 30 days.
• Private messages are kept while the account exists. After an account is deleted, the messages it sent remain in the other participants' chats, shown from an anonymous "Deleted user".
• Account deletion: the account is deactivated immediately; for 30 days you can restore it by signing in; after that your personal data is deleted or anonymised. See Delete your account.
• Records we must keep: purchase, payout and accounting records for the period required by tax and accounting law; data needed for open disputes and chargebacks until they are closed; data of accounts banned for serious violations, to prevent re-registration; evidence of child sexual abuse, as required by law.
• Backups are kept in the EU (Frankfurt) for up to 35 days and then overwritten.

9. Your rights

Under the GDPR and similar laws you have the right to:

• access your data and receive a copy (Art. 15);
• rectify inaccurate data (Art. 16) — most profile data can be changed in the app; the date of birth is corrected by support;
• erasure (Art. 17) — delete your account in the app or see Delete your account;
• restrict processing (Art. 18);
• data portability (Art. 20) — receive the data you gave us in a structured, machine-readable format (on request by email; the app has no self-service export);
• object to processing based on legitimate interests, including profiling for recommendations (Art. 21), and to direct marketing at any time;
• withdraw consent at any time (Art. 7(3)).

How to exercise them: write to privacy@amagi.social from the email linked to your account or include your username. We may ask you to confirm that the account is yours. We reply within one month; for complex requests this period can be extended by two months, and we will tell you why. Requests are free of charge unless they are manifestly unfounded or excessive.

Complaint: you can lodge a complaint with a data protection supervisory authority, in particular in the EU Member State where you live or work or where the alleged infringement took place.

10. Children and teenagers

• The Service is not intended for people under 16. The date of birth is checked by our servers when it is first set; an account cannot be created with a younger age, and only support can correct it. If we learn that a younger child has an account, we delete it.
• The minimum age is at or above the age of digital consent in every EU Member State (GDPR Art. 8), so we do not ask for parental consent for processing based on consent.
• For users under 18 additional rules apply: private messages and calls with adults are possible only between friends, and payouts, selling in shops and selling paid posts are available only from 18. A parent can link their account to a teenager's account with a one-time code and then see a weekly report with numbers only — no message content and no names — set a daily time limit, turn messages and calls off and add trusted contacts.
• Details: Rules for minors and parents. A parent can ask us to delete a child's account at privacy@amagi.social.

11. International transfers

Our main servers are in the EU (Frankfurt, Germany). Some providers listed in section 6 (for example Google, Stripe, OneSignal, ZEGOCLOUD, NOWPayments) may process data outside the EU/EEA, including in the USA. For such transfers we rely on an adequacy decision of the European Commission where one exists (for example the EU-U.S. Data Privacy Framework for certified companies) or on the European Commission's Standard Contractual Clauses (GDPR Art. 46), with additional safeguards where needed. You can request a copy of the safeguards at privacy@amagi.social.

12. Security

We use encryption in transit (HTTPS/TLS), access control by roles, two-factor authentication and activity logging for staff, server-side calculation of all balances, encrypted backups and regular security checks. No system is completely secure; if a personal data breach is likely to result in a risk to your rights, we notify the supervisory authority and, where required, you.

13. Cookies and local storage on the website

The website does not set its own cookies and uses no analytics or advertising tools. It stores in your browser's local storage only your theme choice and, on the coin top-up page, your recent orders so that you can check their status. This is strictly necessary for the functions you use and does not require consent; you can clear it in your browser at any time. On the top-up page the payment form is loaded from Stripe, which may set its own cookies needed for secure payment and fraud prevention. If we ever add cookies or tools that require consent, we will ask for it first.

14. Changes

We may update this Policy. We will notify you about important changes in the app or by email before they take effect. The current version and its date are always available in the app and on amagi.social.

15. Contact

SviySoft — privacy@amagi.social. Company details: Legal notice.