Privacy Policy

PopMe is not just a video app; it is a digital trust infrastructure. We were born to invert the logic of traditional social networks: here, trust comes before reach, context before popularity, and human control before algorithmic optimization. This Policy explains how we treat your personal data in compliance with the General Data Protection Law (LGPD - Law No. 13.709/2018), ensuring your real experiences remain under your control. At PopMe, we believe digital trust only exists if you are the true owner of your identity and moments.

Your Rights

Depending on your jurisdiction, you have the following rights:

1. Transparency and Access

You have the right to know if we process your data and to access it in its entirety. At PopMe, you can request a Personal Transparency Report, detailing which video records and context metadata are linked to your profile.

2. Correction and Update

Since our platform thrives on real experiences, it is fundamental that your data is accurate. You can correct incomplete, inaccurate, or outdated data directly in your profile settings.

3. Anonymization and Blocking

If you consider any data unnecessary or excessive, you may request its anonymization (removing the link between the data and you) or temporary blocking of processing.

4. Portability

PopMe facilitates the portability of your data to other services. You can download your authenticity history to use it wherever you wish, respecting the platform’s commercial and industrial secrets.

5. Data Deletion

You can request the permanent deletion of your personal data processed based on your consent. We will retain only strictly necessary information to comply with legal obligations or to ensure the integrity of third-party interactions that depend on already validated context proof.

6. Information on Sharing

You have the right to know exactly with which public or private entities PopMe has shared your data. Sharing is minimal and always focused on validating authenticity.

7. Revocation of Consent and Opposition

You can change your mind at any time. If you disagree with any consent-based processing, you can revoke it. You may also oppose processing based on Legitimate Interest if you believe it violates your fundamental rights.

How to exercise your rights

PopMe provides two direct channels: the Trust Center in the App (self-service panel for data export and deletion) and the direct channel with the DPO at dpo@popme.io for human analysis or legal questions.

How We Collect Your Data

At PopMe, data collection serves only to validate that what you see is real. We follow the principle of Data Minimization (Art. 6, III of the LGPD): we collect only what is strictly necessary to create trust.

1. Real Experience Records (Videos)

PopMe records videos at the moment they happen to create proof of authenticity. We do not use facial recognition for commercial profiling nor sell your face to third-party databases.

2. Context Metadata

To ensure a video is real, we record: Timestamp (Exact Time) to prove the record is current; Validated Geolocation using GPS signal only to confirm the video was recorded at the indicated location. You decide whether the exact location will be publicly displayed or if only the system’s authenticity validation will be shown.

3. Proof of Life and Authenticity

To avoid deepfakes and fake accounts, we may request a technical “Proof of Life.” If we process facial data for authentication, this will be done under the legal basis of Fraud Prevention and Holder Security (Art. 11, II, ‘g’ of the LGPD). Data is retained only to maintain the generated trust seal.

4. No Behavioral Tracking

Unlike other platforms, PopMe does not use behavioral tracking or emotion capture to feed advertising algorithms.

Sharing and Information Security

With Whom We Share

We do not sell your personal data. We may share strictly necessary data with: Infrastructure and Cloud Providers (such as AWS or Google Cloud) who act as Processors following our strict security guidelines; Verification Services for Proof of Life who are required to discard any biometric data immediately after validation; Legal and governmental authorities only when there is a legal obligation or clear court order under the Internet Civil Rights Framework (Marco Civil da Internet) and the LGPD.

What We Do NOT Share

We do not share your profile or behavior with Data Brokers or for advertising purposes. Your exact location coordinate will only be public if you actively choose that option; otherwise, the system will only inform third parties that the video was validated at a given location.

How We Protect Your Moments

We implement advanced technical and administrative measures including: Encryption at Rest and in Transit — your videos and context data are encrypted from the moment of recording to storage; Pseudonymization — we replace identifiable data with internal identifiers (PIDs) to protect your real identity; Human Access Control — only strictly authorized and privacy-trained professionals can access system logs, and every action is recorded and auditable.

Statistical Use of Data

1. Aggregated and Statistical Treatment

PopMe treats usage information in an aggregated and statistical manner. Data is grouped by segments and trends, not individually. Whenever possible, we use technical means so data loses the possibility of direct or indirect association with you, transforming it into Anonymized Data (per Art. 5, XI of the LGPD).

2. Purpose of Data Intelligence

The use of statistical data aims to improve the precision of our context proofs, develop new services that reinforce user security, and share trend reports with partners, ensuring no individual identity is revealed.

3. Guarantee of Confidentiality

Personal information that has not been anonymized remains protected. Sharing statistical intelligence with third parties will never include information that allows your re-identification without your prior consent.

How Long Will Your Data Be Processed?

1. Processing Period

Your personal data and real experience records will be processed from the moment you create your account and will continue to be processed as long as you keep your profile active or interact on the platform.

2. Account Inactivity

If your account becomes inactive, your information may continue to be processed to ensure the integrity of interactions and context proofs you generated for other users, maintain activity histories and contractual aspects, and comply with audits or judicial and public authorities.

3. Definitive Deletion

You can permanently delete your data at any time through the app settings or by emailing dpo@popme.io. After deletion: your identifiable personal data will be eliminated from our production bases; data that has already been anonymized will remain for statistical purposes as permitted by the LGPD; we will retain only information strictly necessary to comply with legal obligations such as access logs required by the Internet Civil Rights Framework (Marco Civil da Internet) or for defense in legal proceedings.

General Provisions

Policy Changes

PopMe reserves the right to modify this policy at any time to reflect improvements in our trust technology. If the change impacts your consent, you will be notified in advance.

Jurisdiction

This policy is governed by the laws of the Federative Republic of Brazil, especially Law No. 13.709/2018 (LGPD).

Acceptance

By using PopMe, you declare that you have read, understood, and agree to this policy, authorizing the processing of your data freely, informedly, and unequivocally for the purposes described here.

Contact

For questions or concerns about this Privacy Policy, contact our Data Protection Officer at:

PopMe Inc. Email: dpo@popme.io Website: popme.io