Privacy Policy

1. Who we are

WallGang ("WallGang", "we", "us", "our") is a product of Vairlo, operated by Chuan Ling, a sole proprietor based in Ontario, Canada. This policy applies to the WallGang mobile apps, the website at wallgang.vairlo.com, and the invite links we generate. If you don't agree with this policy, please don't use WallGang.

2. What we collect

We only collect what we need to run WallGang. That falls into a few buckets:

Information you give us

• Account and profile details — your public username, profile photo if you add one, and the identifier used to sign in, such as an email address or an Apple or Google sign-in identity. Your username and profile photo can be shown to other signed-in members in rooms you share with them, Community Picks (older app versions), friend features, and activity surfaces, and to anyone who sees your Taste photos, your comments on them, or your profile.
• Birth date — collected when you finish account setup to enforce WallGang's minimum age. It is stored separately from your public profile, is not displayed in the app, and is not available to other WallGang members.
• Room and wall content — room names and privacy choices; photos, videos, notes, doodles, stickers, reactions, captions, backgrounds, and chat messages; songs, places, and links you add to a wall; the web page a picture came from, if you picked it off one; and the way members arrange and edit a shared canvas.
• Voice notes — if you record one, the audio (up to 60 seconds), its length, and a small waveform to draw it. WallGang uses your microphone only while you are recording a voice note or a video, and only after you allow microphone access; it never listens in the background. A voice note is stored with the wall it was posted to and can be played by that room's members, who may keep a copy on their phone so it plays again without downloading. We don't transcribe voice notes, analyse them, or use them for advertising.
• Videos — if you add one, the clip (up to 15 seconds, with its sound unless you declined microphone access), its length, and a still frame from it that is stored like any other photo on the wall. Videos are compressed on your phone, then stored and delivered by our video storage provider through links that each open only that one video and are given only to people who can see the wall. A link keeps working for up to two weeks after it is given, so someone who has since left the wall, been removed from it, or been blocked may still be able to play a clip they already had a link for until then. Members' phones may keep a copy so it plays again without downloading. Free accounts can add ten videos a day and keep 100: adding another turns your oldest video into a still photo, which stays on its wall. We don't analyse videos or use them for advertising.
• Taste photos — a photo you put up in Taste (marked "Everyone" when you send it) is public. Anyone signed in to WallGang can see it in Explore, in Following, in search results, and on your profile, along with your username and profile photo. They can like it, comment on it, add it to their own walls, and share its link. Anyone with that link can see the photo and your username on our website, even without the app; we ask search engines not to list those pages. When someone adds your photo to a wall, the post says it's from you. Commenting on a Taste photo needs a verified email address.
• Search words for Taste photos — so people can find Taste photos by what they show, your phone labels a photo before it goes up, with words like "beach" or "dog", using the image labeler built into iOS or Android, and sends up to 40 of those words with it. The labeler describes the picture; it doesn't recognise who anyone is. A picture picked off a web page also brings the words that page uses to describe it, such as its caption or alt text, and the page's address, which the photo's Visit button opens. The search words aren't shown to anyone: they're used to match searches.
• Likes, comments, and follows — a Taste photo shows how many people liked it and how many added it to a wall, and its comments show with the commenter's username to anyone who can see the photo. A comment can be deleted by the person who wrote it or by the photo's owner. When someone likes your Taste photo, comments on it, or adds it to a wall, you get a notification with their name; several in the same hour arrive as one. Following someone is one-way and doesn't need their approval: they get one notification that you started following them, and who you follow isn't shown to anyone else. Nobody you've blocked, or who has blocked you, is told about any of this. Explore puts the photos people saved and liked most, and photos from people you follow and your friends, a little higher, and Following shows only theirs.
• Social and safety activity — room memberships and invitations, friendships and friend requests, follows, blocks, reports, notification preferences, and room or post archive settings.
• Messages you send us — for example, information you choose to include when contacting support.

Information we collect automatically

• App and diagnostic data — app version, operating system and device information, crash reports, and sampled performance traces sent to our diagnostics provider when diagnostics are enabled in a production build.
• Push notification data — after notification permission is granted, a push token, device platform, and the room or account data needed to route notifications and refresh configured Room Pulse widgets.
• Purchase and subscription data — our subscription provider receives your WallGang account ID and subscription status and processes product, transaction, purchase, renewal, and restore information from Apple or Google so the app can unlock WallGang Plus. We do not receive or store your full card number or bank details.
• Setup and sign-up events — the steps of getting started, such as signing in, finishing sign-up, setting up a widget or wallpaper, and creating or joining a room, so we can see where new members get stuck. Steps taken before you sign in stay on your phone until you do; if you never sign in, they are discarded after seven days and never sent to us.
• Feature usage events — which parts of WallGang you use and how: walls and screens you open and for how long, and counts of actions such as posting, reacting, commenting, chatting, using the camera, saving or sharing a wall, changing settings, and seeing the paywall. We use these to decide which parts of WallGang are worth improving.
• Event answers from people without an account — a member can send one of a room's events as a link. Anyone who opens it sees the event's name, time, place and description, and the first names of the people who said they are going or might go. They can answer with a first name, without an account: we store that name and answer on the event, where the room's members see them, and set one cookie on that link's page holding a random key, so answering again from the same browser changes the answer instead of adding another. If they later join WallGang through the link, that answer moves onto their new account. The name and answer are removed when the event is deleted. The visitor's IP address is also used, only as a keyed one-way hash, to limit how often answers can be sent.
• Invite-link events — when a valid room invite page is viewed or its install button is selected, the website records the invite token, inviter account ID, event type, and platform (web, iPhone or Android). Like any website, it also sees your IP address and browser type. Neither is saved with these records: the IP address is held in memory for a minute so one visitor can't flood a link, and the browser type is used to skip bots and send you to the right app store.

What usage events never contain. Each setup or usage event is a name, your account ID, your device platform, and a small set of counts and fixed labels — never your content. No room name, note, caption, chat message, photo, file, or friend's name is ever recorded in them, and neither is anything about people who are not WallGang members. WallGang uses no third-party advertising, attribution, or analytics service, so these events stay in WallGang's own database and are never shared with, or combined with data held by, another company. There is no screen or session recording, no keystroke logging, and no advertising identifier. These events are kept for at most twelve months, and they are deleted when you delete your account.

Room visibility. Every WallGang room is private, including the sample wall created for a new account. A room's name, members, canvas, and posts are available to the members of that room, and people join by invite. Like in any group chat, members also see a little of what each other is doing in the room: when you're typing in its chat, when you're moving something on its wall, and who has seen their own posts and messages ("Seen by Maya"). For that, WallGang keeps just the latest time you opened each room's wall and read its chat. It's used to show the room's other members who has seen their posts and messages, to show you what's new, and to count your unread messages in chat notifications. Every visit replaces it, and it's deleted with the room or your account. Rooms never appear in public: Explore and search show single photos people chose to put up in Taste, never a room. Separately, older versions of the app let a member explicitly share an individual photo or background to Community Picks; that asset, its tags, and the creator's displayed name can then be viewed and reused by signed-in members even though it came from a private room. Current versions of WallGang no longer offer Community Picks, and changing a room background in them withdraws that background from it. Sharing was a per-item choice, made deliberately. Nothing in a room reaches people outside it unless a member takes it there: by sharing a link to one thing on a wall, which shows just that thing, by putting a photo up in Taste, or, in older versions, through Community Picks.

Reports and moderation. You can report a Taste photo, a comment, or a person, and block anyone. When three people report the same photo or comment, it's hidden until we review it, and we then remove it or put it back. Comments on Taste photos go through the same automatic word filter as chat. Blocking someone hides their Taste photos and comments from you, and yours from them, and ends any follow between you.

3. How we use it

We use the information above to:

• Create and sync rooms, chats, profiles, friendships, reactions, history, and collaborative canvas edits;
• Show Taste photos in Explore, Following, search, profiles, and their link pages; rank them by how many people saved and liked them and by who you follow; and show their likes and comments;
• Show assets you explicitly shared to Community Picks from an older version of the app;
• Export or prepare wallpaper files and albums, configure Room Pulse widgets, and deliver requested notifications and widget refresh messages;
• Create invite links, display invite previews, and let invited people join a room;
• Process WallGang Plus subscriptions and unlock paid features across your devices;
• Keep the service secure, prevent abuse, and fix bugs, including reviewing reports and hiding or removing content that breaks our terms;
• Understand aggregate usage so we can improve the product;
• Respond to your support requests and, where you've asked for it, send you service-related messages.

Legal bases (EU and UK). Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you to provide your account, rooms, content, sync, widgets and WallGang Plus; your consent for push notifications and for access to your camera, photos, microphone and contacts, which you can withdraw at any time in your device settings; our legitimate interests in keeping WallGang secure, preventing abuse, fixing bugs, and understanding how WallGang is used through the setup and feature usage events described above; and legal obligation where the law requires us to keep or disclose information.

4. Who we share it with

We share information only in these situations:

• With other WallGang members — the members of a room can see and collaboratively edit that room's content. Taste photos, with their likes, comments, and your username, can be seen by anyone on WallGang, and a Taste photo's link page by anyone with the link. Assets you explicitly submitted to Community Picks from an older version of the app can be viewed and reused by signed-in members.
• With service providers — We use trusted service providers to operate WallGang, including providers for account access, data hosting and storage, website delivery, notifications and app updates, diagnostics, subscriptions, and app-store purchases. They process information as needed to provide those services.
• With Apple, when you search for a song — to find a song to add to a wall, the app sends what you type, and the app store country of your device, straight from your phone to Apple's public iTunes Search API. Apple also receives your device's IP address with that request, and with the requests that load a song's cover artwork each time a member views the card. WallGang doesn't send Apple your account, name, or anything else about you, and this is governed by Apple's privacy policy. If you don't search for songs, nothing is sent.
• With KLIPY, when you use GIFs in chat — to find a GIF, the app sends what you type into the GIF search straight from your phone to KLIPY's API, and every GIF in a chat loads from KLIPY's servers on each member's phone that shows it. KLIPY receives those requests' IP addresses. WallGang doesn't send KLIPY your account, name, or anything else about you, and this is governed by KLIPY's privacy policy. If you don't use GIFs, your phone only contacts KLIPY to show GIFs other members sent.
• With Google Play, when an invite sends you to install the app — if you open a WallGang invite on an Android phone that doesn't have the app yet, the link to Google Play carries that invite's code, so the app can open the invite once it's installed instead of asking you to paste it. The code is the same one in the invite link you were sent. It doesn't come with your name, account, or anything else about you, and Google can't tell from it whose invite it is. This is governed by Google's privacy policy. Installs from the App Store carry no invite code.
• When a song or video plays in the app — a YouTube, TikTok, Vimeo, Spotify, or SoundCloud card on a wall plays in that service's own player, which loads from the service when you open the card or press play. That service receives your device's IP address and handles what happens in its player under its own privacy policy. WallGang loads YouTube and Vimeo in their privacy-enhanced modes.
• When you share a web page into WallGang — to offer you the pictures on a page you share, WallGang reads the page: from Safari, the one you already have open; from other apps, by loading it out of sight. The picture you pick is downloaded from that website. Like any visit, the website sees your device's IP address and handles it under its own privacy policy.
• When you open a card — tapping a song, place, or link on a wall hands it to another app or website, such as Apple Music, Spotify, Apple Maps, Google Maps, or the linked site, which then handles it under its own privacy policy.
• For legal reasons — if required by law, or to protect the rights, safety, and property of WallGang, our users, or the public.
• In a business transfer — if WallGang is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that deal.

International transfers. WallGang is operated from Canada, and our service providers process information in Canada, the United States and other countries. If you are in the EU or UK, your information is transferred outside it. Canada is recognised by the European Commission as providing adequate protection; for transfers to other countries we rely on the safeguards our providers offer, such as the Standard Contractual Clauses or the EU-US Data Privacy Framework.

5. How long we keep it

We keep account information and content while your account is active or as needed to provide the service. When an in-app account deletion succeeds, the authenticated account and linked WallGang database records are removed from the active service, including profiles, rooms you own that nobody else is in, memberships, posts, social relationships, push tokens, reports, and WallGang's stored entitlement record. A room you started with other people in it stays: it passes to the member who has been in it longest. WallGang also attempts to remove files uploaded under the account, including canvas photos, videos, voice note recordings, avatars, and generated wallpaper files, except files a remaining room or another member's post still shows, such as a room background you chose. Deleting a single voice note or video from a wall removes its recording or clip too. Taking a Taste photo down removes it from Explore, your profile, and every wall it was added to, stops its link working, and deletes its likes and comments, and its files are deleted shortly after. A photo hidden after reports is kept until we review it. Deleting your account takes down all your Taste photos and deletes your likes, comments, and follows. People who saw a Taste photo may already have saved a screenshot, and we can't take that back. Apple, Google, and our subscription provider may retain purchase and transaction records under their own legal and operational requirements. Secured provider backups and logs may persist until their normal rotation, and limited records may be retained where required by law or needed to resolve disputes or prevent abuse. Aggregated or de-identified information that cannot reasonably identify you may be kept longer.

6. Your rights & choices

Depending on where you live (for example under the GDPR in the EU/UK or the CCPA/CPRA in California), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these, reach us through our contact form and we'll respond as required by applicable law, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario law. You can also manage most of your content directly in the app.

Objecting to usage analytics. You can object to WallGang recording setup and feature usage events about you at any time, without giving a reason. Tell us through the contact form from the email address on your account, and we will stop recording those events for your account and delete the ones already stored.

Complaints. If you are in the EU or UK and think we have handled your information unlawfully, you can complain to the data protection authority where you live or work — in the UK, the Information Commissioner's Office. In Canada, you can contact the Office of the Privacy Commissioner of Canada. We'd appreciate the chance to sort it out with you first.

7. Deleting your account & data

You can delete your account and associated WallGang data at any time. Account deletion does not cancel an Apple App Store or Google Play subscription. See our dedicated Account & Data Deletion page for step-by-step instructions, subscription guidance, and what gets removed.

8. Children

WallGang is not directed to children under 13. Account setup requires a birth date, and WallGang rejects account completion when the entered date indicates the person is under 13. If you believe a child under 13 has provided us personal information, contact us so we can investigate and delete it where appropriate.

9. Security

We use technical and organizational measures to protect your information. These include account authentication, encryption in transit, and database access rules that check room membership on every read, so a room's content is served only to its members. WallGang content is not end-to-end encrypted, and staff or service providers can access stored data where operating the service requires it. No method of transmission or storage is perfectly secure, and we do not claim your data can never be accessed or breached. We work to protect it and to notify you and regulators of incidents where the law requires it.

10. Changes to this policy

We may update this policy as WallGang evolves. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app. Continuing to use WallGang after an update means you accept the revised policy.