Zeptum (“Zeptum,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications, websites, and any other services we offer (collectively, the “Service”). This Policy applies to all users of our Service.
Important: Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy and our Terms of Service. If you do not agree, please do not access or use the Service.
We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). The types of personal information we may collect about you include:
When you create a Zeptum account, we collect information such as your first name, date of birth, email address, and phone number. You may also be required to provide a profile photo.
You may choose to provide additional information for your profile, such as gender, a biography (up to 150 characters), and additional photos (up to 6).
We collect the content you create and share on the Service, such as Momentum posts (photos, videos, status updates), messages exchanged with other users, and any other information you voluntarily provide. This includes both publicly visible content during its active period and privately retained content after expiration.
With your permission, we collect precise real-time location information from your mobile device (e.g., using GPS, Wi-Fi, Bluetooth, or cellular triangulation) to provide and improve our location-based features, such as the Heat Map, venue check-ins, and connecting you with users at the same venue. You can disable location services through your device settings, but doing so will limit your ability to use certain features of the Service. Check-ins may be reset if your location cannot be updated or if you move outside a certain radius from the venue.
We automatically collect information about your interactions with the Service, such as the features you use, the content you view (e.g., Momentum posts, profiles), your interactions with other users (e.g., Roses sent/received, matches), gamification data such as points earned, status levels achieved, badges collected, and leaderboard rankings, then engagement analytics data including views, likes, and interaction timestamps for content you create' also pages visited, time spent on the Service, frequency of use, and actions taken.
We collect information about the device you use to access the Service, including hardware model, operating system and version, unique device identifiers (e.g., IDFA, Android Advertising ID), IP address, browser type, language, and mobile network information.
We and our service providers use cookies, web beacons, pixel tags, and other similar technologies to collect information about your Browse activities, to personalize your experience, and to analyze trends. You may be able to control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our Service.
We use the information we collect for various purposes, including:
We may de-identify or aggregate your information and use it for any purpose, including for research, analytics, and to improve the Service. Aggregated or de-identified data is not considered personal information.
For users in the EEA, UK, or Switzerland, our legal basis for processing your personal information includes:
We may share your personal information in the following circumstances:
We may share aggregated or anonymized data with participating venues regarding activity levels, occupancy, and demographic trends. We will not share your specific personal information with venues without your consent unless required for the provision of a service you requested (e.g., if we implement a drink ordering system as envisioned).
We share personal information with third-party vendors, consultants, and other service providers who perform services on our behalf, such as hosting, data storage, analytics, payment processing, customer support, content moderation, face verification services, marketing, and technical infrastructure. These service providers are authorized to use your personal information only as necessary to provide these services to us and are obligated to protect your information.
We may disclose your information if we believe it's necessary to:
In the event of a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your personal information may be sold or transferred as part of such a transaction as permitted by law and/or contract. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
We may share your personal information for other purposes with your explicit consent.
Your leaderboard information (including name initial, age, profile picture preview, and activity metrics) may be displayed publicly to other users within your city/region through our leaderboard features. This information is displayed to encourage healthy competition and community engagement.
We retain your personal information for as long as necessary to provide the Service to you, to fulfill the purposes described in this Privacy Policy, to comply with our legal obligations (e.g., to resolve disputes, enforce our agreements), or as otherwise permitted or required by applicable law.
If you request to delete your account, we will initiate the deletion process. As part of this process, your account will be deactivated immediately. We will then delete your personal information from our active systems within ninety (90) days from the date of your request, unless retention is required for a longer period for legal or regulatory reasons (e.g., to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements). We retain enforcement records, including Community Guidelines violations and associated warnings, for the duration of your account and for a reasonable period thereafter to prevent circumvention of our policies. Please note that some information may remain in our backup archives for a limited period, subject to our backup retention policies, before being completely erased or de-identified.
If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom (UK), you have certain data protection rights under the General Data Protection Regulation (GDPR) or applicable local laws. Zeptum aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. Your rights include:
Request access to the personal information we hold about you and receive a copy of it
Request correction of inaccurate or incomplete personal information. You can often update your profile information directly within the Service settings
Request deletion of your personal information under certain conditions. Upon account deletion request, we will delete your data within 90 days, subject to legal retention needs
Receive your personal information in a machine-readable format and transmit it to another controller
Request that we restrict the processing of your personal information under certain circumstances
Object to our processing based on legitimate interests or for direct marketing purposes
To exercise any of these rights, please contact us using the contact details provided in Section 12. We will respond to your request in accordance with applicable data protection laws. We may need to verify your identity before processing your request. We will respond to your rights requests within one month of receipt. In complex cases, we may extend this period by two additional months, and we will inform you of any extension within the first month along with the reasons for the delay.
We implement reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include encryption, access controls, and secure development practices. We also implement privacy-by-design principles in our product development.
Important: However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee the absolute security of your information. You are also responsible for helping to protect the security of your information by taking steps such as choosing a strong password and keeping it confidential.
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, and in any case within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to your rights and freedoms.
Your personal information may be transferred to, stored, and processed in countries other than your own, including the United States, where our servers may be located and our central database is operated. Specifically:
These countries may have data protection laws that are different from the laws of your country. If we transfer your personal information from the EEA, Switzerland, or the UK to other countries not deemed adequate by the European Commission, we will rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms, to ensure that your personal information is adequately protected.
Age Restriction: The Service is not intended for or directed at individuals under the age of 18 (or the relevant age of majority). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete such information from our files as soon as possible. If you believe we might have any information from or about a child under 18, please contact us.
For more information about our standards and procedures regarding child safety and child sexual abuse and exploitation (CSAE), please see our Child Safety Standards page.
The Service may contain links to third-party websites, services, or applications that are not operated or controlled by Zeptum. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services before providing any information to or through them.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by email (sent to the e-mail address specified in your account), by posting a notice on the Service, or as otherwise required by applicable law, prior to the change becoming effective. We encourage you to periodically review this Privacy Policy for the latest information on our privacy practices. Your continued use of the Service after any changes to this Privacy Policy will constitute your acceptance of such changes.
If you have any questions, comments, or concerns about this Privacy Policy, our privacy practices, or if you wish to exercise your data protection rights, please contact us at:
Zeptum Privacy Officer - [email protected]
If you are in the EEA, UK, or Switzerland, you may also contact our Data Protection Representative in your respective region if applicable (details would be provided here if one is appointed).