Vyral

Privacy Policy

Last updated: October 2026

This policy explains what information Vyral collects when you use the Vyral app, the Vyral Terminal at terminal.vyral.market, or the beta signup page at beta.vyral.market, why we collect it, who we share it with, and the choices you have.

The short version

1. Who we are

Vyral is operated by Quinn Luevano, based in California (“Vyral”, “we”, “us”). We are responsible for the information described in this policy. You can reach us at fidrec26@gmail.com.

This policy works together with our Terms of Service.

2. What we collect

Information you give us

Account details
Your email address, which we use to sign you in with a one-time code (there is no password). The invite code you used to join the beta.
Profile
Your handle, and if you add them, a display name, a short bio, a profile photo and the interests you pick during sign-up.
Date of birth
We ask for your birthday to confirm you are 18 or older. We store the date only. It is never shown on your profile, and we don't ask for ID documents.
Content
Videos you post (including the sound recorded with them), captions, the hashtags and topics in them, and comments. When you record or choose a video, the app asks for access to your camera, microphone or photo library; it only uses that access to let you post.
Reports and blocks
When you report a video, comment or account, we keep the report, the reason and any details you add. We also keep the list of people you block.
Waitlist
If you join the waitlist on beta.vyral.market, we collect your email address, the role you pick (viewer, creator or trader), the referral link you arrived from and the campaign tags in the page address (for example utm_source). Before storing your email we normalize it (for example, Gmail dots and “+tags” are removed) so one inbox gets one spot.
Messages to us
If you email us, we keep the message and our reply.

Information created when you use Vyral

Activity
The videos you watch and for how long, likes, saves, follows, shares (which share option you used, not who you sent it to), and your notifications.
Calls, VYR and trading
Your free Yes/No calls, your VYR balance and every change to it, your orders, trades and positions in play-money markets.
Device and integrity data
The app creates a random ID the first time it runs and stores it on your device. It is not your phone's advertising ID or a hardware serial number. Each time you watch a video we record that ID, a per-launch session ID, and a hashed version of your IP address (scrambled with a secret key, so we don't store the IP itself). The waitlist also stores a hashed IP to limit spam signups.
Technical logs
Like most online services, our hosting and infrastructure providers automatically log technical information such as IP address, browser or app version, device type and the time of each request. Our sign-in provider also records when you sign in.

Website analytics

On the beta.vyral.market signup page we may use PostHog, an analytics service, to understand how people find and use the page. It records page views and a few events (such as “joined the waitlist” or “copied a referral link”) along with standard browser information (page address, referring site, browser, operating system, device type, screen size) and a random visitor ID stored in a cookie. We turn off automatic click tracking and session recording, and we never send your email address, birthday or IP address as part of these events. The Terminal does not use any analytics service.

App analytics and crash reports

Usage analytics (PostHog). The Vyral app may send PostHog a short record when you do key things in the app: open it, request a sign-in code, finish sign-up, view a video, make a call, open the trade screen, place or cancel an order, see a result, open your portfolio, post a video or tap share. Each record holds only IDs and simple values (for example a video or market ID, Yes or No, a price and quantity), which screen you were on (for example “trade”, never the page address), your app version, phone model, operating system, language and time zone, and a random app ID. When you are signed in, it is linked to your Vyral account by a random account ID, never your email, name or handle. We never send your email address, birthday, IP address, display name, handle, bio, captions or comment text, and we turn off session recording and automatic tap tracking. You can turn this off at any time in Settings > Share anonymous usage data.

Crash reports (Sentry). If the app crashes or hits an error, it sends Sentry a crash report: the error and where in the code it happened, app version, phone model and operating system, the last few screens and actions before the error (screen names and which buttons were tapped, not what you typed), and your random account ID if you are signed in. For a small share of sessions it also sends timing data about how fast screens and network requests are. We strip email addresses, sign-in tokens, request contents and web addresses' query details from these reports, and we don't send your IP address. Crash reports stay on when usage analytics are off, because we need them to keep the app working.

What we don't collect

We don't access your contacts, precise location or advertising ID, and we don't collect payment card or bank details. VYR can't be bought, so there is nothing to pay for.

3. How we use it

If you are in the European Economic Area, the UK or a similar jurisdiction: we rely on performing our contract with you (running the service you asked for), our legitimate interests (keeping counts and markets fair, preventing abuse, security, improving Vyral, website and app analytics, crash reporting), legal obligations, and your consent where we ask for it (for example, camera and photo access). You can object to processing based on legitimate interests; see Your rights.

4. What other people can see

Vyral is a public platform. Anyone, including people who aren't signed in, can see:

Market prices and the list of trades in each market are public, but trades are not shown with your name. Your email, birthday, VYR balance, calls, orders, positions, saves, blocks and reports are not public.

5. Who we share it with

We don't sell your personal information, and we don't share it for targeted advertising. We share it only in these cases:

Service providers who run Vyral for us
  • Supabase: database, sign-in, file storage (profile photos) and server functions.
  • Mux: video upload, processing and streaming. Mux receives your videos, and receives viewers' IP address and device information when videos stream.
  • Resend: sends waitlist welcome emails.
  • PostHog: website analytics on the beta.vyral.market signup page and usage analytics in the app (see above).
  • Sentry: crash and error reports from the app (see above).
  • Vercel: hosts beta.vyral.market and the Terminal.
  • Google Fonts: our web pages load fonts from Google, which receives your IP address and browser information when it serves them.
These providers may only use the information to provide their services to us.
App stores
If you download the app from Apple's App Store or Google Play, they process information under their own privacy policies.
Legal and safety
When we believe in good faith it is required by law or legal process, or needed to protect the rights, property or safety of our users, the public or Vyral, or to investigate fraud or abuse.
Business changes
If Vyral is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that deal, subject to this policy.
With your permission
In any other case where you ask us to or agree to it.

6. Cookies and device storage

We don't use advertising cookies. You can clear cookies and local storage in your browser settings; clearing them signs you out of the Terminal.

7. How long we keep it

We keep your account information for as long as your account exists. When you delete your account, we delete or de-identify it as described in the next section.

Some records are kept longer because Vyral's view counts and play-money markets depend on a complete, tamper-proof history: view logs (including the random app ID and hashed IP), calls, orders, trades and VYR balance records. After account deletion these records stay linked only to an internal account number, not to your email, handle or profile. We also keep records of moderation actions and reports, and information we need to resolve disputes, enforce our Terms, prevent repeat abuse or meet legal obligations.

Waitlist entries are kept until the beta has launched and invites have been sent, or until you ask us to remove yours.

Backups and service-provider logs are deleted on those providers' normal schedules.

8. Deleting your account

You can delete your account in the app: Profile → Settings → Delete account. When you do:

As explained above, view, call, trading and VYR records are kept in de-identified form, along with the date of birth used for the age check and records of reports and moderation. Copies of removed videos and photos may remain with our storage and video providers for a period after deletion.

If you can't use the app, or want your waitlist entry removed, email fidrec26@gmail.com from the address you signed up with.

9. Your rights

Depending on where you live, you may have the right to:

To make a request, email fidrec26@gmail.com from the address linked to your account. We may need to confirm it's really you before we act, and we'll reply within the time the law requires (for example, 30 days in the EEA and UK, 45 days in California). You can use an authorized agent where the law allows it. If we decline your request, you can ask us to reconsider by replying to our decision.

If you are in the EEA or UK, you can also complain to your local data protection authority.

California residents: in the last 12 months we collected the categories described in section 2 (identifiers such as email and the random app ID; personal records such as your profile; age; internet activity such as views and interactions; audio and visual content you post; and inferences about your interests used for the feed) for the purposes in section 3, and disclosed them only to the service providers in section 5. We don't sell or share personal information and don't use sensitive personal information to infer characteristics about you.

10. Adults only

Vyral is only for people who are 18 or older. We ask for your birthday at sign-up and block anyone under 18 from creating an account. We don't knowingly collect information from anyone under 18. If you believe someone under 18 is using Vyral, report their account in the app or email fidrec26@gmail.com and we will remove the account.

11. Security

We use measures designed to protect your information, including encrypted connections (HTTPS), sign-in by one-time code instead of passwords, storing your session in your phone's secure storage, database rules that limit each person to their own private data, hashing IP addresses instead of storing them, and append-only logs for view counts and VYR balances. No system is perfectly secure, so we can't guarantee absolute security. If we learn of a breach that affects your information, we'll notify you as required by law.

12. International transfers

Vyral is run from the United States, and our service providers may process information in the United States and other countries. Those countries may have different data protection laws from yours. Where the law requires it, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for transfers out of the EEA or UK.

13. Changes to this policy

We'll update this policy as Vyral changes. We'll change the “Last updated” date at the top, and if the changes are significant we'll tell you in the app or by email before they take effect.

14. Contact us

Questions or requests about your privacy: fidrec26@gmail.com
Quinn Luevano