Privacy Policy
Effective Date: Pre-launch draft Last Updated: 2026-08-01
This Privacy Policy describes how GnoosiS collects, uses, stores, and protects information when you use the GnoosiS mobile app and related services.
GnoosiS is currently in final QA ahead of its first public release. This policy describes the app's intended data practices and will be finalized before launch.
1. Scope
This policy covers the GnoosiS mobile application (Android and iOS) and its backend services. It does not cover other Empoorio ecosystem products (Aephoron, EmpoorioChain, Eoonia, Ouranoos, SkoopoS, Ailoos), which publish their own privacy policies, or third-party services you access from links inside GnoosiS.
2. Who We Are
GnoosiS is developed as part of the Empoorio ecosystem. For privacy inquiries, contact us via /contact.
3. Information We Collect
3.1 Account information
When you create a GnoosiS account (email/password or Google Sign-In via Firebase Authentication), we collect your email address, chosen nickname, and profile details you provide (avatar, bio, content sections).
3.2 Content you create
Posts (Fama, Glossa), videos (Diavasi), stories, and profile content (Perfil) you publish are stored to operate the app's core social features. Content visibility (public, private, subscribers-only) is controlled by you.
3.3 Chat messages
Chat is end-to-end encrypted — message content is encrypted on your device and decrypted only on the recipient's device using the cryptography package (RSA/AES). GnoosiS's backend relays encrypted payloads and does not have plaintext access to message content. Metadata needed to deliver messages (sender, recipient, timestamp) is processed to operate the feature.
3.4 Payment and wallet information
The Payments module processes fiat top-ups via Stripe and PayPal — card and payment details are handled directly by those providers, not stored by GnoosiS. Your DracmaS (DMS) wallet balance and transaction history (tips, rewards, transfers) are stored to operate the wallet feature. KYC checks may collect identity verification information as required for compliance.
3.5 Device and usage data
Standard technical data — device type, OS version, IP address, crash logs, and in-app usage patterns — is collected via Firebase Analytics and Firebase's underlying infrastructure to operate and improve the app.
3.6 Advertising data (Adsxx)
If you interact with ads, engagement signals (view time, screen percentage, interactions) are processed by the Proof of View system to validate genuine ad views, for both fraud prevention and rewarded-ad payouts.
4. How We Use Information
We use collected information to:
- Operate core features (feed, chat, video, profile, wallet)
- Process payments and DracmaS transactions
- Serve and validate ads through Adsxx
- Detect and prevent fraud and abuse
- Improve app performance and fix bugs
- Comply with legal obligations (including KYC/AML where applicable)
We do not sell your personal information.
5. Legal Bases for Processing (GDPR)
If you are in the EEA, UK, or Switzerland, we process personal data under these legal bases:
| Processing activity | Legal basis |
|---|---|
| Operating your account and core features | Performance of a contract |
| Payments and KYC checks | Legal obligation / contract performance |
| Analytics and crash reporting | Legitimate interests, with opt-out where required |
| Advertising (Proof of View, ad serving) | Legitimate interests / consent where required by local law |
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your data, and to object to certain processing. Submit requests via /contact with the subject "Privacy Request — GnoosiS".
California residents have equivalent rights under CCPA/CPRA. GnoosiS does not sell personal information for cross-context behavioral advertising.
We aim to respond within 30 days (GDPR) or 45 days (CCPA), subject to applicable extensions.
7. Third-Party Services
| Service | Purpose |
|---|---|
| Firebase (Google) | Authentication, Firestore database, Storage, Cloud Messaging, Analytics |
| Stripe | Fiat payment processing |
| PayPal | Fiat payment processing |
| ooAds/AdFGT | Ad serving, Proof of View validation, advertiser dashboards |
Each provider processes data under its own privacy terms as our processor or independent controller, as applicable.
8. Data Retention
We retain account, content, and transaction data for as long as your account is active, plus a reasonable period afterward for legal, security, and dispute-resolution purposes. Encrypted chat content is retained only as needed to deliver messages; GnoosiS does not retain decrypted message content since it never has access to it.
9. Security Measures
- End-to-end encryption for chat (RSA/AES via the
cryptographypackage) - Firebase Authentication with role-based permissions; MFA planned as a roadmap addition
- TLS/HTTPS for data in transit
- Proof of View to reduce ad fraud
- Card data is never stored directly by GnoosiS — it's handled by Stripe/PayPal
See Privacy & Security for the technical implementation guide.
10. Children's Privacy
GnoosiS is not directed at children under 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has created an account or submitted information, contact us at /contact with "Child Privacy — GnoosiS".
11. International Data Transfers
GnoosiS's backend infrastructure (Firebase, hosting) may process data in multiple regions depending on Google Cloud's infrastructure and configuration. Where data is transferred from the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses.
12. Changes to This Policy
We may update this policy as GnoosiS approaches and moves past launch. Material changes will be reflected in the Last Updated date above.
13. Contact
For privacy inquiries, use /contact with "Privacy Request — GnoosiS" in the subject line.
This document describes GnoosiS data practices as designed pre-launch and does not constitute legal advice. It will be finalized ahead of the app's public release.