Privacy policy
Vlogmi beta · October 10, 2026
Vlogmi Corporation operates this photo and video sharing app. This notice covers the Vlogmi social app, including its OG Vlogmi TestFlight listing, rather than the separate Vlogmi AI service. Contact luke@vlogmi.com with privacy questions or requests. The initial beta is intended for adults 18 and older in Canada and the United States.
What you give us
We store your email address, account identifier, username, display name, profile privacy setting, bio, chosen profile and banner images, and time zone. Supabase handles your password and account authentication. We store the photos and videos you choose to post, audio in those videos, captions, text and emoji decorations, capture time and date, time zone, and media details such as dimensions and duration. We also store follows, follow requests, blocks, reactions, comments, direct and group message text, shared-post references, group names and images, and conversation membership, unread activity and read positions, which posts you have finished watching, and reports you submit. Your viewing history is private to your account and is used to put unseen vlogs first and resume at the first unseen post. If you email support, we receive your message and contact information.
Why we use it
We use this information to sign you in, send verification and recovery emails, display profiles and daily vlogs, process and deliver media, apply privacy and blocking choices, provide social features, respond to support requests, review reports, and protect the service. Capture dates and time zones place posts on the correct calendar day. We do not sell your personal information, serve targeted advertising, or track you across other companies’ apps and websites.
Who can see your content
Accounts are public by default. Other verified signed-in users can discover a public profile and view its published content. A private account’s username, display name, profile picture, and follower/following counts remain discoverable to verified signed-in users; its bio, banner image, follower/following lists, and posts are limited to the owner and approved followers. Blocking restricts access between the accounts. You can still see the name, username, and profile picture of accounts you blocked in your own Blocked list so you can manage that list. Comments and reactions are visible to people who can view their post, subject to blocking. Reports are available to the administrators who review them, not to the reported account. People who can view content may save it outside Vlogmi, for example by taking a screenshot; changing privacy settings cannot retrieve those copies.
Messages and notifications
Any verified Vlogmi account can start a one-to-one text conversation with another account, unless either account has blocked the other. Only the two participants can open a direct conversation in the app. Group chats support up to ten people including the creator. Any active member can add or remove members, rename the group, change its image, or leave. New and rejoining members can see messages sent after their latest join. Leaving or being removed ends access to the group in the app. Messages, reply links, and emoji reactions are stored in our Supabase database with access rules; they are not end-to-end encrypted. Authorized service operators may access stored messages for support, security, or legal obligations. Blocking hides a direct conversation and prevents further direct messages in both directions; unblocking can restore its history. In a shared group, blocking hides the other account’s messages and identity while you remain able to use the group. A person cannot be added when blocked by a current member. Sharing a post in a chat does not give its recipients permission to view private or otherwise unavailable content. Activity notifications and unread indicators are visible only to their recipient. Alerts appear while Vlogmi is open; this version does not send device push notifications. Deleting either participant’s account removes a direct conversation and its messages from the live app for both participants. In groups, account deletion removes that account’s membership and messages; the group and other members’ messages remain. A group image uploaded by a deleted account is removed. The backup retention below still applies. Unsend replaces your message with a removal notice for everyone in the chat and clears its reactions and quoted text in replies. Restricted backups may retain the original temporarily under the retention policy below. We cannot remove copies recipients have saved outside Vlogmi. Translation happens only when you choose Translate: iPhone uses Apple’s system translation, and Android uses Google’s on-device translation models. Language downloads may need an internet connection. Vlogmi does not send message text to a translation server or store translated copies. Copy places the selected text on your device clipboard.
Permissions and your phone
The camera and microphone are used to capture photos and videos. Photo-library access lets you choose profile, banner and group images. You can change these permissions in your phone’s Settings. The app does not request your contacts or precise location. Drafts, upload state, and preferences are stored on your phone; a draft is sent to our servers when you choose to post it. Your sign-in session, account startup details, and unfinished message/comment drafts are kept in device secure storage. Recent post details and limited copies of viewed photos and videos may be kept in the app’s private cache for up to 24 hours to support offline viewing. Video copies are prepared while the app is open on Wi-Fi; this cache is limited and may be removed by your phone. Access is checked again when a connection returns. Signing out, switching accounts, or deleting your account clears the saved message/comment drafts and recent-content cache for that account. Removing the app can remove local drafts.
Service providers and processing locations
Supabase provides account authentication, database and media storage. Railway processes uploaded media, operates background cleanup, and stores encrypted media backups. Resend delivers account emails, and our support inbox uses Microsoft 365. Apple provides TestFlight distribution and may process testing diagnostics under its own privacy information. Our application services currently run in the United States; providers may process operational and support information in other countries where they operate, subject to applicable law. Mux was used for a temporary video test; general Mux video delivery is not enabled for this beta. We will update this notice before changing that arrangement.
Automatic content screening
When you choose to post, we send resized photos, sampled video frames, captions, and text or emoji decorations to OpenAI’s moderation service to check for prohibited content before publication. Some flags may receive a second automated review by an OpenAI model using the submitted text, flagged images, and an opening video frame for context. This helps distinguish fictional gameplay and everyday language from prohibited content; it does not generate posts or other content. This applies to public and private accounts. These images and words may contain personal information. We do not send audio, account identifiers, or the original video file to that service. OpenAI states that API inputs are not used to train its models by default. Processing uses its standard API service and may occur outside Canada. Our temporary screening images are removed when the processing attempt finishes. A check that cannot finish leaves the post unpublished for retry. Content rejected after the applicable checks remains unpublished. We are rolling out checks for new or changed profile pictures, banners, group images, names, usernames, bios, comments and replies. When those checks are enabled, we send the changed text or a resized image to the same service before saving. Passing changes are saved automatically; flagged or unavailable checks do not publish those changes. Screening can make mistakes and does not review every video frame or audio. Direct and group message text and group names are not automatically screened or sent to OpenAI. You can contact luke@vlogmi.com about a decision or use the in-app reporting tools for content that was missed.
Operational information
Our infrastructure providers process technical information such as IP addresses, request and authentication logs, delivery records, and error information to operate and secure their services. Vlogmi does not include an advertising or third-party behavioral analytics SDK. You can choose to send feedback or screenshots through TestFlight or by email; please avoid including other people’s private information.
Retention and deletion
We keep your active account and published content while you use the service. You can delete a post or use App settings → Delete account. Account deletion removes the profile and associated social records and queues media and authentication cleanup. Cleanup includes a settling period of at least 25 hours to catch uploads already in progress, and may take longer during outages. A restricted account-identifier record remains to prevent deleted data from being recreated. Deleted-post records may remain for cleanup and recovery without being visible in the app. When you report a comment or message, we keep the reported text and its parent comment or directly quoted message as evidence, even if it is later removed or unsent. Only approved reviewers using two-step verification can open the review inbox. Review actions are logged. Unresolved reports remain available for review; resolved reports and their evidence/action logs are deleted 90 days after review. Account-status notices remain for 90 days. Temporary profile/comment check records are kept for up to seven days; unused screened profile uploads are scheduled for cleanup after 25 hours. Active account restrictions remain until lifted, expired, or the account is deleted. Support correspondence and provider operational records may be retained separately for support, security, and legal obligations.
Backups
Daily database backups are retained for seven days. Uploaded photos, videos, and profile images are also copied to a private, encrypted backup on Railway. We keep seven daily media snapshots; missed backup runs can extend that period. Backups may contain recently deleted information until the retained snapshots expire. They are restricted to recovery use, and deletions must be reapplied before restored content becomes available.
Your choices and requests
You can edit your profile, choose a private account, manage followers, block accounts, delete posts, and delete your account in the app. Email luke@vlogmi.com to request access to or correction of your information, help with deletion, or an explanation of our practices. We may ask for enough information to verify that the request is yours. Available rights depend on where you live. You may also contact your applicable privacy regulator. If we learn that a child has joined this adult beta, we will take steps to remove the account.
Changes
We will update this notice when our practices change and provide an appropriate notice for material changes. The date above identifies this version.