Privacy Policy

Effective date: 27 September 2026

In short: we collect what we need to run PweVibe, such as your account details, the content you post and your activity in the app. We only access your location, contacts, camera or photos when you allow it. We don't sell your personal information and we don't show third-party ads. You can ask us to delete your account at any time.

1. Who we are

PweVibe is operated by Bagan IT ("we", "us", "our"). This policy explains how we handle personal information when you use the PweVibe mobile app and related services (the "Service"). It should be read together with our Terms of Service.

2. Information we collect

Information you give us

Account details: your email address or mobile number and your password (stored only in hashed form). If you sign in with Google, we receive your Google account's name, email address and account ID. We don't receive your Google password.
Profile details: display name, username, bio, profile and cover photos and your avatar. Optionally, your gender and date of birth.
Content you post: chat and direct messages, community posts, statuses, comments, reactions, photos, and reports you submit.
Mission and survey responses: answers to surveys and polls, votes, and selfies you take as proof of visiting a mission location.
Reward redemption details: when a reward requires it, your name, NRC number, mobile number or e-wallet number (for example KBZPay, WavePay or AYAPay), so the reward can be delivered.
Support messages: anything you send us when you contact support.

Information collected as you use the Service

Activity: missions started and completed, check-ins, daily streaks, VibeCoin and other balances and their transaction history, achievements, rewards redeemed, tickets, donations, videos watched and communities joined.
Device and technical information: device type and operating system, app version, push notification token, IP address, and log data such as sign-in times and errors.
Location: if you allow it, your device's location. See Device permissions.

3. Device permissions

PweVibe only asks for these permissions when you use a feature that needs them. You can turn them off at any time in your device settings; the related feature will then stop working, but the rest of the app keeps working.

Permission	What we use it for
Location	To suggest fans ("moots") near you and show nearby features. We store your most recent location with your account while this is enabled.
Contacts	To show which of your contacts are already on PweVibe. The phone numbers are sent to our server only to check for matches and are not stored.
Camera	To take profile photos, mission selfies and to scan QR codes.
Photos / media	To pick photos from your gallery, and to save reward confirmation cards to your photos when you choose to.
Notifications	To send you updates such as messages, reward and mission alerts, and event reminders.

4. How we use your information

To create and secure your account, including sending one-time verification codes by SMS or email.
To provide the Service: communities and chat, voting, missions, rewards, concerts, videos, streaks, achievements and your avatar.
To verify missions (for example checking check-ins and selfies) and to deliver rewards you redeem.
To send you notifications and service messages. You can turn off push notifications in your device settings.
To keep PweVibe safe: to detect cheating, fraud, spam and abuse, to enforce our Terms, and to review reports.
To understand how the Service is used and to fix problems and improve it.
To comply with the law and respond to lawful requests from authorities.

We don't sell your personal information, and we don't use it to show you third-party advertising.

Service providers who help us run PweVibe, only as needed to provide their service to us:
- Amazon Web Services, for hosting, file storage and video delivery;
- Google, for Google Sign-In, maps, and sending verification emails;
- our SMS provider, for sending verification codes;
- Expo, Google and Apple push notification services, for delivering notifications.
Reward and mission partners: when you redeem a partner reward or take part in a partner mission, we share the details needed to deliver it or verify it, such as your name, NRC number or mobile/e-wallet number for a reward, or your member QR code at a partner location.
Event organisers: if you book a ticket or take part in an event run by a third party, we may share the details needed for entry.
Legal and safety: when required by law, or when needed to protect the rights, property or safety of our users, the public or us.
Business changes: if PweVibe is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

6. What other users can see

Your display name, username, profile photo, avatar, bio, level and badges are visible to other users. Messages and posts you share in communities are visible to members of those communities, and direct messages are visible to the people you send them to. Please think before sharing personal details publicly.

7. How long we keep it

We keep your account information for as long as your account is active.
Verification codes expire after 15 minutes.
When you delete your account, we delete or anonymise your personal information within 30 days. Copies in backups are removed within a further 90 days.
We may keep limited information for longer where the law requires it, or to resolve disputes, prevent fraud and enforce our Terms.

8. Security

We protect your information with measures such as encrypted connections, hashed passwords, access controls and limited staff access. No system is completely secure, so please use a strong password, keep your verification codes to yourself, and let us know if you notice anything suspicious.

9. Your choices & rights

Access and correct: you can view and update most profile information in the app. For a copy of your information, contact us.
Delete: you can ask us to delete your account and personal information. See below.
Permissions: you can withdraw location, contacts, camera, photos and notification permissions at any time in your device settings.
Questions or concerns: contact us at [email protected]. We aim to respond within 30 days.

10. Delete your account

In the app: open the Profile tab, scroll to the bottom and tap Delete Account, then confirm. Your account is deleted straight away.

By email, if you can no longer sign in:

Email [email protected] with the subject "PweVibe account deletion".
Send it from the email address linked to your account, or include the mobile number linked to your account.
We may ask you to confirm the request with a one-time code sent to that email or number.

For email requests, once confirmed, we'll delete your account, profile, content and activity within 30 days, as described in How long we keep it. Your VibeCoins, other Virtual Items and unredeemed rewards will be lost. Messages you sent to other people or posted in communities may be removed or shown as coming from a deleted user.

11. Children

PweVibe is not intended for children under 13, and we don't knowingly collect personal information from them. Users aged 13 to 17 should use PweVibe with a parent's or guardian's permission. If you believe a child under 13 has given us personal information, contact us and we'll delete it.

12. Where your data is stored

Our service providers may store and process your information on servers outside Myanmar, including in Singapore. When this happens, we take steps to make sure your information stays protected as described in this policy.

13. Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll let you know in the app or by email before they take effect. The effective date at the top shows when it was last updated.

14. Contact us

If you have questions about this policy or your personal information, email us at [email protected].