Privacy Policy

Last updated 21/06/2026

2.1. Who we are

This Privacy Policy explains how unforget social media ("Unforget", "we", "us", "our") collects, uses, shares, stores and protects personal data when you use Unforget.

2.2. Scope

This Privacy Policy applies to:

the Unforget app and website;
account creation and profile use;
posts, photos, videos, comments, reactions and messages;
AI chat, AI assistance and AI-generated features;
recommendation, search, safety and moderation systems;
customer support, reporting, appeals and legal requests;
cookies, SDKs, device identifiers and similar technologies.

2.3. Personal data we collect

We may collect the following categories of personal data, depending on how you use the Service:

Account data: name or display name, username, email, phone number, password or authentication credentials, date of birth or age range, language, country, profile photo, bio and account settings.
User Content: posts, photos, videos, audio, captions, comments, hashtags, reactions, saved content, uploads, drafts if stored by the Service, metadata and information contained in content.
Messages and communications: direct messages, message metadata, delivery/read status, participants, support messages, reports, complaints, appeals and correspondence with us.
AI chat data: prompts, instructions, uploaded or pasted content, AI outputs, feedback, safety signals and metadata associated with AI interactions.
AI analyzed data of user in app activity
Usage data: content viewed, search queries, accounts followed, likes, comments, shares, saves, blocks, reports, session duration, feature interactions, recommendation feedback and engagement patterns.
Technical and device data: IP address, device identifiers, advertising identifiers where permitted, app version, browser type, operating system, language, crash logs, diagnostics, performance data and security logs.
Location data: approximate location derived from IP address or settings, and precise location only if enabled by you for specific features.
Contacts and connections: followers, following, blocked users, friend suggestions and contact information if you choose to sync contacts or connect third-party accounts.
Payment and transaction data: purchase history, subscription status, payment confirmation, invoices and related identifiers. Full card details are normally processed by payment providers and app stores, not by us.
Moderation and safety data: reports, enforcement history, suspected violations, account integrity signals, age verification information, fraud indicators and legal notices.
Information from others: information about you that appears in content posted by other users, reports submitted by users, contact sync, third-party login providers, advertisers or partners where lawful.
Cookies and SDK data: information collected through cookies, pixels, mobile SDKs, local storage and similar technologies as described in our Cookie Policy.
Any other relevant to the app usage data permitted by law

2.4. How we use personal data and lawful bases

We use personal data only where we have a lawful basis under applicable data protection law. The relevant basis may include performance of a contract, legitimate interests, consent, compliance with legal obligations, protection of vital interests or performance of a task in the public interest where applicable.

The main purposes are set out below. The exact lawful basis may depend on your country, age, feature used and settings.

To create, authenticate, administer and secure your account - contract and legitimate interests.
To provide core social features such as posting, viewing, messaging, following, search and notifications - contract.
To provide AI chat and AI assistance - contract, legitimate interests or consent depending on feature and data involved.
To personalise content, recommendations and user experience - contract or legitimate interests; consent where required.
To moderate content, enforce Terms, protect users and prevent abuse - legitimate interests, contract and legal obligations.
To process reports, complaints, appeals and legal requests - legal obligation, legitimate interests and contract.
To provide analytics and improve the Service - legitimate interests or consent where required by ePrivacy/cookie rules.
To show generic or contextual ads - legitimate interests where permitted; to show personalised ads - consent or another lawful basis where permitted and appropriate.
To send service communications - contract or legitimate interests.
To send marketing communications - consent or legitimate interests where permitted, with opt-out rights.
To process payments and subscriptions - contract and legal obligations.
To comply with tax, accounting, regulatory, law-enforcement and legal obligations - legal obligation.
For any other public or commercial reason eligible by law.

2.5. AI chat and AI data use

When you use AI Features, your prompts, uploaded content, instructions, context, outputs, feedback and related metadata may be processed to provide the AI response, maintain safety, prevent abuse, debug, improve the feature and comply with law.

AI Features may be provided by external ai providers. Your AI inputs and outputs may be transmitted to such providers only as necessary to provide and secure the AI Feature.

Do not include highly sensitive, confidential, legally privileged, medical, financial, identity-document or third-party personal data in AI prompts unless the feature expressly allows it and you have the right to provide it.

The data you upload to unforget will be processed by our AI instruments as stated in this paper and this is one of the key features of the app

2.6. Public content and visibility

The feature used, your profile information, username, profile photo, bio, public posts, comments, reactions, follower/following information and other interactions may be visible to other users or the public.

Public content may be shared, saved, quoted, indexed, embedded or accessed outside Unforget. You should not post content publicly if you are not comfortable with others seeing it.

2.7. Direct messages

Direct messages are visible to the participants in the conversation and are processed to deliver, sync, secure and support the messaging feature.

We may access or review messages where necessary for user reports, safety, security, legal compliance, abuse prevention, support or enforcement, subject to applicable law.

2.8. Recommendations, profiling and automated systems

We may use automated systems to personalise feeds, suggest accounts and adds, rank search results, detect spam, identify potentially harmful content, support moderation, secure accounts and improve the Service.

These systems may use signals such as your interactions, content characteristics, relationships, device and security data, reports, language, country, content recency and popularity.

Where required, we will provide meaningful information about automated decision-making, profiling and available choices. Significant moderation decisions may be subject to appeal and human supervision where required by law.

This data may be processed by AI tools

2.9. Cookies, SDKs and similar technologies

We use cookies, local storage, pixels, mobile SDKs, device identifiers and similar technologies to operate the Service, keep accounts secure, remember preferences, measure performance, understand usage and, if enabled, provide advertising and marketing.

Non-essential cookies or tracking technologies will be used only where permitted by law, including consent where required.

2.10. Sharing personal data

We may share personal data with:

other users and the public according to your actions and settings;
service providers such as cloud hosting, content delivery, analytics, security, customer support, email/SMS delivery, moderation, AI providers, payment processors and infrastructure providers;
app stores and payment providers for purchases and subscriptions;
advertisers and analytics partners, usually in aggregated or limited form, and only where lawful;
professional advisers, auditors, insurers and legal representatives;
law enforcement, courts, regulators and public authorities where legally required or where necessary to protect rights, safety or security;
another company in connection with a merger, acquisition, financing, restructuring or sale of assets, subject to appropriate safeguards.

2.11. International transfers

We are based in the republic of Cyprus but some providers or affiliates may process data outside the European Economic Area. Where personal data is transferred internationally, we will use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, transfer impact assessments and supplementary measures where required.

2.12. Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless longer retention is required or permitted by law.

2.13. Your rights

Depending on applicable law, you may have the right to:

access personal data we hold about you;
correct inaccurate or incomplete personal data;
delete personal data;
restrict processing;
object to processing based on legitimate interests or direct marketing;
receive a copy of certain data in a portable format;
withdraw consent at any time where processing is based on consent;
complain to a supervisory authority, including the Cyprus Commissioner for Personal Data Protection if Unforget is established in Cyprus.

2.14. How to exercise rights

You can exercise many rights through account settings. You may also contact us via official channels of communication. We may need to verify your identity before responding.

We will respond within the period required by law. Some rights may be limited where necessary to protect other users, comply with law, protect safety, prevent abuse, maintain security or defend legal claims.

2.15. Children and minors

Unforget is not intended for children below the minimum age stated in the Terms. We may remove accounts where we reasonably believe the user is underage.

Where the Service is accessible to minors, we apply additional privacy, safety and security measures. We do not knowingly present personalised ads based on profiling to users we know with reasonable certainty are minors.

If you believe a child has provided personal data unlawfully, contact us through the official channels of communication.

2.16. Special-category data

You may choose to share information that reveals special categories of personal data, such as political opinions, religious beliefs, health information, ethnic origin or sexual orientation. Because Unforget is a social platform, this may happen through User Content. You should carefully consider whether to share such information publicly.

We do not require you to provide special-category data to create an account. Where we process such data for safety, moderation, legal compliance or features, we do so only where a lawful condition applies.

2.17. Security

We implement appropriate technical and organisational measures designed to protect personal data, such as access controls, encryption in transit, secure development practices, logging, monitoring, backups, vulnerability management and incident response.

No online service can guarantee absolute security. You should use a strong password, protect your devices and notify us of suspected unauthorised access.

2.18. Data breaches

If a personal data breach occurs, we will assess it and notify the competent supervisory authority and affected users where required by law.

2.19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of material changes where required, such as through the app, email, website notice or account notification.

2.20. Contact

[email protected]

2.21. Child Sexual Abuse or Exploitation (CSAE)

We are committed to protecting children and maintaining a safe environment for all users. Our app has zero tolerance for any form of child sexual abuse or exploitation (CSAE).

Our Standards

We strictly prohibit content that depicts, promotes, or facilitates child sexual abuse or exploitation.
Users may report content or accounts that violate this policy.
We promptly review reports and remove violating content.
Accounts involved in CSAE-related activity will be permanently suspended or terminated.
Where required by law, we cooperate with law enforcement and relevant authorities.

Reporting

If you encounter content or behavior that may violate this policy, please contact us immediately:

Email: [email protected]

We review all reports as quickly as possible and take appropriate action.