Privacy Policy

1. Who we are

WallGang ("WallGang", "we", "us", "our") is a product of Vairlo, operated by Chuan Ling, a sole proprietor based in Ontario, Canada. This policy applies to the WallGang mobile apps, the website at wallgang.vairlo.com, and the invite links we generate. If you don't agree with this policy, please don't use WallGang.

2. What we collect

We only collect what we need to run shared walls. That falls into a few buckets:

Information you give us

• Account and profile details — your public username, profile photo if you add one, and the identifier used to sign in, such as an email address or an Apple or Google sign-in identity. Your username and profile photo can be shown to other signed-in members in rooms you share with them, Community Picks, friend features, and activity surfaces.
• Birth date — collected when you finish account setup to enforce WallGang's minimum age. It is stored separately from your public profile, is not displayed in the app, and is not available to other WallGang members.
• Room and wall content — room names and privacy choices; photos, notes, doodles, stickers, reactions, captions, backgrounds, and chat messages; and the way members arrange and edit a shared canvas.
• Social and safety activity — room memberships and invitations, friendships and friend requests, blocks, reports, notification preferences, and room or post archive settings.
• Messages you send us — for example, information you choose to include when contacting support.

Information we collect automatically

• App and diagnostic data — app version, operating system and device information, crash reports, and sampled performance traces sent through Sentry when diagnostics are enabled in a production build.
• Push notification data — after notification permission is granted, an Expo push token, device platform, and the room or account data needed to route notifications and refresh configured Room Pulse widgets.
• Purchase and subscription data — RevenueCat receives your WallGang account ID and subscription status and processes product, transaction, purchase, renewal, and restore information from Apple or Google so the app can unlock WallGang Plus. We do not receive or store your full card number or bank details.
• Setup and sign-up events — WallGang records the steps of getting started: the welcome screen being shown, a sign-in being started and whether it finished or failed (and whether the failure was a cancellation or an error), finishing sign-up, opening or completing the widget and wallpaper setup steps, changing a widget or wallpaper you have already set up, reaching the invite step, and creating or joining a room. Steps that happen before your account exists are held on your device and saved under your account only once you sign in — if you never sign in, they stay on your phone, are discarded after seven days, and are never sent to us. We use these to see where new members get stuck and whether setup sticks.
• Feature usage events — so we can tell which parts of WallGang are worth improving, we record when you open a wall and, when you leave it, a summary of that visit: how long it was open, how many items were on the wall, and counts of what you did on it — photos, notes, doodles, stickers and cutouts added; reactions and marks left on items; items moved or deleted; the background changed; pictures opened full-screen; and the room chat being opened and messages sent. We also record opening the notifications screen, changing your theme, applying a starter layout, sending a friend invite or a friend request, and the paywall being shown together with which feature triggered it.
• Invite-link events — when a valid room invite page is viewed or its install button is selected, the website records the invite token, inviter account ID, event type, and web platform. The visitor's IP address is used in short-lived, in-memory rate limits, and the browser user agent is used for bot filtering and platform routing.

What usage events never contain. Each of the two kinds of event above is a name, your account ID, your device platform, and a small set of counts and fixed labels — never your content. No room name, note, caption, chat message, photo, file, or friend's name is ever recorded in them, and neither is anything about people who are not WallGang members. WallGang uses no third-party advertising, attribution, or analytics service, so these events stay in WallGang's own database and are never shared with, or combined with data held by, another company. There is no screen or session recording, no keystroke logging, and no advertising identifier. These events are kept for at most twelve months, and they are deleted when you delete your account.

Room visibility. Every WallGang room is private, including the sample wall created for a new account. A room's name, members, canvas, and posts are available to the members of that room, and people join by invite. WallGang does not currently offer a public room feed. Separately, a member can explicitly share an individual photo or background to Community Picks; that asset, its tags, and the creator's displayed name can then be viewed and reused by signed-in members even though it came from a private room. That is a per-item choice, made deliberately, and it is the only way room content reaches people outside the room.

3. How we use it

We use the information above to:

• Create and sync rooms, chats, profiles, friendships, reactions, history, and collaborative canvas edits;
• Show assets you explicitly share to Community Picks;
• Export or prepare wallpaper files and albums, configure Room Pulse widgets, and deliver requested notifications and widget refresh messages;
• Create invite links, display invite previews, and let invited people join a room;
• Process WallGang Plus subscriptions and unlock paid features across your devices;
• Keep the service secure, prevent abuse, and fix bugs;
• Understand aggregate usage so we can improve the product;
• Respond to your support requests and, where you've asked for it, send you service-related messages.

4. Who we share it with

We share information only in these situations:

• With other WallGang members — the members of a room can see and collaboratively edit that room's content. Assets you explicitly submit to Community Picks can be viewed and reused by signed-in members.
• With service providers — We use trusted service providers to operate WallGang, including providers for account access, data hosting and storage, website delivery, notifications and app updates, diagnostics, subscriptions, and app-store purchases. They process information as needed to provide those services.
• For legal reasons — if required by law, or to protect the rights, safety, and property of WallGang, our users, or the public.
• In a business transfer — if WallGang is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that deal.

5. How long we keep it

We keep account information and content while your account is active or as needed to provide the service. When an in-app account deletion succeeds, the authenticated account and linked WallGang database records are removed from the active service, including profiles, owned rooms, memberships, posts, social relationships, push tokens, reports, and WallGang's stored entitlement record. WallGang also attempts to remove files uploaded under the account, including canvas photos, avatars, and generated wallpaper files. Apple, Google, and RevenueCat may retain purchase and transaction records under their own legal and operational requirements. Secured provider backups and logs may persist until their normal rotation, and limited records may be retained where required by law or needed to resolve disputes or prevent abuse. Aggregated or de-identified information that cannot reasonably identify you may be kept longer.

6. Your rights & choices

Depending on where you live (for example under the GDPR in the EU/UK or the CCPA/CPRA in California), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these, reach us through our contact form and we'll respond as required by applicable law, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario law. You can also manage most of your content directly in the app.

7. Deleting your account & data

You can delete your account and associated WallGang data at any time. Account deletion does not cancel an Apple App Store or Google Play subscription. See our dedicated Account & Data Deletion page for step-by-step instructions, subscription guidance, and what gets removed.

8. Children

WallGang is not directed to children under 13. Account setup requires a birth date, and WallGang rejects account completion when the entered date indicates the person is under 13. If you believe a child under 13 has provided us personal information, contact us so we can investigate and delete it where appropriate.

9. Security

We use technical and organizational measures to protect your information. These include account authentication, encryption in transit, and database access rules that check room membership on every read, so a room's content is served only to its members. WallGang content is not end-to-end encrypted, and staff or service providers can access stored data where operating the service requires it. No method of transmission or storage is perfectly secure, and we do not claim your data can never be accessed or breached. We work to protect it and to notify you and regulators of incidents where the law requires it.

10. Changes to this policy

We may update this policy as WallGang evolves. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app. Continuing to use WallGang after an update means you accept the revised policy.