GyvioWho we are
Gyvio is a social app for posting, chatting, calling, meeting new people and earning Dash Coins. Gyvio is operated by Salesive Force Ltd, a company registered in Nigeria, of No 1 Eugene Oba Street, Agbani Road, Enugu 400252, Enugu State, Nigeria ("Gyvio", "we", "us"). Salesive Force Ltd decides how your personal data is used, which makes it the data controller under the Nigeria Data Protection Act 2023 (NDPA).
Our Data Protection Officer can be reached at support@salesive.com (subject: "Gyvio privacy").
This policy covers the Gyvio app (the web app you can install on your phone) and this website, gyvio.app. It works alongside our Terms of Service, Cookie and storage notice and Community Guidelines.
The short version
- You sign in with Google. We get your name, email address and Google profile photo from Google, and nothing else from your Google account.
- Your date of birth and gender are never shown to anyone. We use your birthday to keep Gyvio 18+, and your gender only to match you in Meet.
- Chats with friends disappear after 24 hours unless you turn that off. Statuses and Flicks disappear after 24 hours.
- Calls and Meet video go straight between the two phones where possible. We never record them.
- In Meet, anyone can report a chat. A report sends us one still picture of that moment, which is kept privately for up to 30 days so our team can review it. Nothing else from Meet is recorded.
- Top-ups, Gyvio+ payments and cash-outs go through Paystack. We do not see or store your card number.
- We do not sell your data, we do not show third-party ads, and we do not use analytics or tracking tools from other companies.
What we collect
When you sign in with Google
Gyvio only offers sign-in with Google. Google confirms who you are and sends us:
- a Google account ID that tells us it is you next time,
- your email address (we only accept accounts whose email Google has verified),
- your name, which becomes your starting display name, and your first name, which we use to suggest a username,
- your Google profile photo, which we copy into our own storage as your starting profile photo.
We do not get your Google password, contacts, files, calendar or anything else in your Google account.
What you tell us when you sign up and later
- Name and username. Your display name and a username of 3 to 24 letters, numbers, dots or underscores.
- Country. We guess it from your phone's language and time zone settings so you can confirm it. We do not use GPS or your precise location.
- Date of birth. Required. You must be 18 or older. It is private.
- Gender. Woman, man or other. It is private and is used only to match you in Meet with the people you each want to meet. You can change it once every 30 days.
- Profile photo (optional at sign-up, required to use Meet), bio (up to 160 characters) and city (optional, up to 40 characters).
- Settings, such as who can see your followers and your statuses, whether you get alerts when someone is typing to you or has read your message, your paid inbox price, and whether you accept tips and coins.
- A spending passcode, if you set one. We store only a scrambled form of it (a salted hash), never the passcode itself.
- Who invited you, if you joined through someone's invite link.
What you create and send
- Posts: photos, videos and carousels, their captions and hashtags, and the sound used in a video. Sounds taken from your video can be reused by other people, credited to you.
- Statuses (24-hour posts) and Flicks (photos and clips sent to friends that vanish after 24 hours).
- Comments (text, stickers or pictures), likes, reposts and stickers you upload.
- Messages in one-to-one chats: text, photos, voice notes, stickers, shared posts and replies to statuses, with the time each message was delivered and read.
- Rooms: group chats you create or join, and the messages in them.
- Reports you make about other people or their content, with any note you add.
When you type or paste a link in a chat or room, our server visits that web page to build a preview (title, description and picture). This can happen while you are still typing, before you press send. The server identifies itself to that site as "GyvioBot".
While you type a message, the other person sees that you are typing. If they have Gyvio+, they also see a masked glimpse of your draft (only its first and last letters, masked on your phone before it is sent). Nobody without Gyvio+ receives the draft at all.
Money
- Your Dash Coins wallet balance and every transaction: top-ups, tips, coins sent and received, paid first messages, giveaways, referral rewards and cash-outs.
- For cash-outs: your bank, account number and account name.
- For Gyvio+: your name and phone number, which Paystack needs to give you your own bank account number to pay into, and the history of your Gyvio+ payments.
Top-ups are paid on Paystack's own secure page, by card, bank, USSD or bank transfer. We never see or store your card number. See Dash Coins and payments for how money works on Gyvio.
How you use Gyvio
- Viewing. For each post you watch: how long you watched, how much of it, whether you replayed it and whether you skipped it. Who viewed each status, and when.
- Connections. Who you follow and who follows you (following each other makes you friends), who you block, and your streaks with friends.
- Presence. Whether you are online and when you were last seen.
- Calls. A record of friend calls: who called whom, voice or video, when, how long, and how the call ended.
- Notifications we have sent you.
Your device
- Push notification address. If you allow notifications, your browser gives us an address to send them to (up to 5 devices per account).
- Device fingerprint. When you sign up we record a scrambled summary (a hash) of your browser type, language, screen size and colour depth, time zone and number of processor cores. We use it to spot duplicate or fake accounts.
- Things stored on your phone. The app keeps some data in your browser so it opens fast and works offline. See the Cookie and storage notice.
We do not ask for access to your contacts or your location. We ask for your camera and microphone only when you start a call, record a voice note or video, or use Meet.
Meet and safety
Meet has its own section below: Meet and calls.
What other people can see
| Anyone on Gyvio can see | Only you (and our team) can see |
|---|---|
| Your display name, username, profile photo, bio, city and country | Your email address |
| Your posts, reposts and comments, and your public follower, following and post counts (you can hide the lists) | Your date of birth and age |
| Your trust level, streak, badges and business status | Your gender |
| Whether you are online and when you were last seen | Your wallet, transactions and bank details |
| Your paid inbox price and whether you accept tips and coins | Your passcode status, Meet status and any reports about you |
| Your top supporters, if you choose to show them | Your phone number (Gyvio+ only) |
Your statuses are seen by the people your status settings allow, and you can see who viewed each one. Messages are seen by the people in that chat or room. Anyone in a public room can read what is posted there.
Photos, videos, voice notes and other files you upload are kept at web addresses that are long and hard to guess, but they are not password-protected. Anyone who has the exact link to a file can open it. Please think about this before sharing something sensitive.
How we use it
We use your data only for the reasons below. Where the law asks us to name a legal basis, it is shown in brackets.
- To run Gyvio for you: your account, your profile, posting, chats, rooms, calls, Meet, streaks, notifications and your wallet. (Needed to provide the service you asked for.)
- To keep Gyvio 18+, using your date of birth. (Legal obligation and legitimate interest in keeping minors off an adult platform.)
- To match you in Meet, using your gender, your country and the filters you choose. (Needed to provide Meet.)
- To choose what appears in your feed. We rank posts using who you follow and are friends with, your likes, shares, watch time and skips from the last 30 days, hashtags, how fresh a post is, how the author's posts usually do, and whether the author is in your city. Posts by Gyvio+ members get a small boost. We work this out as the feed loads; we do not build a profile of you for advertisers. (Legitimate interest in showing you posts you will enjoy.)
- To handle payments, cash-outs and Gyvio+, and keep accurate records of every coin that moves. (Needed to provide the service, and legal obligations such as financial record keeping.)
- To set your trust level and limits, which depend on things like your streak, account age, followers and strikes. See limits. (Legitimate interest in preventing fraud and abuse.)
- To keep people safe: reviewing reports, enforcing our Community Guidelines, spotting fake accounts and fraud, and responding to lawful requests. (Legitimate interest, and legal obligation where it applies.)
- To contact you about your account, for example when a passcode reset is requested. We do not send marketing email from the app.
We do not sell your personal data. We do not show you ads from other companies and we do not share your data with advertisers.
Meet and calls
Friend calls
Voice and video calls between friends use WebRTC. The sound and picture travel directly between the two phones where the network allows it. When a direct link is not possible, they pass through a relay server run for us (a TURN server), which forwards the encrypted stream without recording it. Our servers only pass along the messages that set up the call. We never record calls.
Because a direct connection is made where possible, each phone can learn the other's IP address (the internet address of the network it is on), as with most video calling apps. This also applies in Meet.
What Meet is
Meet puts you in a live one-to-one video chat with a random adult you do not know yet. To use it you need to be 18 or older, have a profile photo and a gender set, and accept the Meet rules. New accounts may have to wait a few days before they can use Meet.
What the other person sees
Only the first word of your display name (up to 24 characters) and your country, plus your live video and sound. They do not see your photo, username, age, gender or city. If you both tap Add friend within 5 minutes of the chat, you become friends and each of you sees the other's username, display name and profile photo. If only one of you taps it, nothing is revealed.
How we match you
We match you with someone who is waiting and whose filters fit you as yours fit them ("Show me" and "From"). We never match you with someone either of you has blocked, or with someone you were matched with in the last 24 hours. There is no text chat in Meet, and nothing from a Meet chat appears in your chats, notifications or profile.
What is kept when a report is made
Anyone in a Meet chat can report the other person. When you report someone, your phone sends us:
- the reason for the report,
- one still picture of the video you were receiving at that moment (a small, low-resolution JPEG image of at most 80 KB).
The picture is stored privately in our database, not in the media storage used for posts, and only authorised members of our safety team can open them. It is deleted automatically 30 days after it is taken. The report record itself (who reported whom, when, and why) is kept longer, as described under How long we keep it. We also keep a basic record of each Meet chat (who was matched and how it ended) for 30 days.
Reporting someone in Meet also blocks them for you, so you will not be matched again.
We don't scan Meet video automatically today. We may add automated tools to help detect content that breaks our rules in future; if they process your data in a new way, we will update this policy first.
Who we share it with
We share personal data only with the service providers who help us run Gyvio, and only what each needs:
| Who | What they do | What they get |
|---|---|---|
| Sign-in, and the fonts the app and this website use | Sign-in: the fact that you are signing in to Gyvio. Fonts: your IP address and browser details when your browser loads them | |
| Cloudflare | Hosts the app and this website, and stores uploaded photos, videos, voice notes and other files (Cloudflare R2) | Your uploaded files, and network details such as your IP address when you use the app |
| Paystack | Takes top-up payments, gives Gyvio+ members a bank account number to pay into, and sends cash-outs to your bank | Top-ups: an email address we generate for your account (not your real email) and the amount. Cash-outs: your bank account number, account name and the amount. Gyvio+: your name, phone number and a generated email address. Paystack also holds whatever you enter on its payment page |
| Contabo | Hosts the servers our application and database run on, in France | The data held in our database |
| Plunk | Sends Gyvio's emails, such as passcode reset notices, from noreply@salesive.com under the name "Gyvio" | Your email address and the message |
| Your browser's push service (for example Google, Apple or Mozilla) | Delivers notifications to your phone | The notification, which can include a preview of a message, the sender's name, or a call alert |
Gyvio's application, database and call relay (TURN) server are run by Salesive Force Ltd itself, on rented servers it also uses for its other products.
If you share a post to WhatsApp or another app, that app receives what you share under its own privacy policy.
ID verification. We plan to offer ID verification through a specialist provider. It is not live yet. Before we ask you to verify, we will update this policy to say who the provider is and what they collect.
Legal requests and safety. We may share data with police, regulators or courts when the law requires it, or when we believe in good faith it is needed to protect someone from serious harm, including the safety of a child. See law enforcement requests.
If Gyvio changes hands. If Gyvio is merged, sold or reorganised, your data may pass to the new owner, who must keep protecting it in line with this policy. We will tell you before that happens.
Where it is stored and how it is protected
Our application servers and database are hosted by Contabo in France. Uploaded files are stored in Cloudflare R2 and delivered through Cloudflare's network, from data centres around the world. Payments are handled by Paystack. This means your data is processed outside Nigeria, and possibly outside your own country. We apply safeguards consistent with applicable data protection law, including the NDPA, when transferring data internationally, such as contractual protections with these providers.
How we protect it:
- Traffic between the app and our servers is encrypted (HTTPS).
- Your sign-in is kept in a secure, httpOnly cookie that scripts on the page cannot read, and short-lived access tokens are kept only in memory.
- Your spending passcode is stored only as a salted hash, and locks after 5 wrong tries.
- Our team members sign in to a separate admin system with an emailed code and a second factor from an authenticator app. Every change they make is recorded in an audit log.
- Meet report pictures are kept out of public storage and are only visible to authorised staff.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the relevant authority where the law requires.
How long we keep it
| Data | How long |
|---|---|
| Statuses | 24 hours, then the status, its file and its likes are deleted |
| Flicks | Viewable for 24 hours; the file is then deleted, and the record an hour later |
| Messages in chats with disappearing messages on (the default for one-to-one chats) | The message and any photo or voice note in it are deleted within a few minutes of the 24 hours being up. A file is kept only if another message still uses it, for example when it was forwarded |
| Messages in chats and rooms with disappearing messages off | Until you or the sender deletes them, or the room owner deletes the room |
| A message you delete ("delete for everyone") | The text and file are removed straight away; a "deleted" marker stays in the chat |
| Coins sent in chat and not accepted | Returned to the sender after 72 hours |
| Meet report pictures | 30 days |
| Meet chat records | 30 days |
| Friend call records | 90 days |
| Link previews | The preview text is cached for up to 30 days. The preview picture (a copy of the linked page's own image, not anything you uploaded) may stay in our file storage |
| Posts you delete | Hidden from everyone straight away. The post and its files stay in our storage, out of sight, until you delete your account; they are then erased within 7 days |
| Comments you delete | Deleted straight away, with their replies |
| Wallet, transactions, cash-outs and Gyvio+ payments | Up to 7 years, as financial and tax law requires |
| Reports, strikes and moderation records | While needed to keep people safe and to deal with legal claims, and reviewed at least every 3 years. We keep these so we can deal with repeat abuse |
| Your account and everything else | Until you delete your account; then erased within 7 days, except the records above that we have to keep. See Delete your account |
Your choices and rights
In the app
- Edit your name, username, photo, bio, city and gender (gender once every 30 days) in your profile.
- Hide your follower and following lists, choose who can see your statuses, and turn off alerts for typing and read messages.
- Delete your account, in Settings.
- Turn disappearing messages on or off in any one-to-one chat.
- Delete your posts, comments and messages you sent.
- Block people and report them.
- Turn notifications, camera and microphone access on or off in your phone's settings.
Your rights under data protection law
Under the Nigeria Data Protection Act 2023, you have the right to the things below. If you live outside Nigeria, the data protection law where you live may give you similar rights, and we will honour them as that law requires.
- get a copy of the personal data we hold about you,
- have wrong data corrected,
- have your data deleted,
- object to or restrict some uses of your data,
- receive your data in a portable format,
- withdraw consent you have given, such as for notifications,
- complain to the Nigeria Data Protection Commission (NDPC), or to the data protection authority where you live.
You can delete your account yourself in the app: see Delete your account. There is no download button for your data yet. To use any of the other rights, email support@salesive.com (subject: "Gyvio privacy") from the email address on your Gyvio account. We may need to confirm it is you, and we will answer within the time the law allows.
Gyvio is for adults
You must be 18 or older to use Gyvio. We ask for your date of birth when you sign up and do not create an account for anyone under 18. If we learn that someone under 18 has an account, we will close it. If you believe a child is using Gyvio, please tell us at support@salesive.com (subject: "Gyvio child safety").
This website and the waitlist
This website (gyvio.app) does not set cookies and does not use analytics. It loads fonts from Google Fonts. If you join the waitlist, we collect your email address and whether you are joining as a user, creator, brand or business. This is stored in Salesive Force Ltd's own systems and used only to tell you when Gyvio is ready for you and about getting started. You can ask us to remove you at any time at support@salesive.com (subject: "Gyvio privacy").
Changes to this policy
When we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app before it takes effect.
Contact us
Salesive Force Ltd
No 1 Eugene Oba Street, Agbani Road, Enugu 400252, Enugu State, Nigeria
Privacy questions and our Data Protection Officer: support@salesive.com (subject: "Gyvio privacy")