← Home

Privacy Policy

Last updated: 10 November 2026

This policy explains what information the ViceFeed app ("ViceFeed", "the app") collects, why, and what you can do about it. ViceFeed is made by EXOTIC AGENCY, spletna prodaja, d.o.o., a company registered in Slovenia ("we", "us"). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR).

What we collect

• Account details. When you sign in with Apple or Google we receive an account identifier and, depending on your choices, your email address (Apple may give us a private relay address). We do not receive your password.
• Profile. Your handle, avatar and profile settings you choose in the app.
• Photos you take for missions. Photos you snap in the app, a fingerprint of each photo and basic image measurements used to check it is a fresh, valid shot. Verified photos are posted to the public feed under your handle.
• Game activity. Missions cleared, in-game cash, shares and properties, gold balance, VIP standings, likes, comments, follows, reports and similar activity.
• Purchases. When you buy gold, Apple or Google processes the payment. We receive a record of the purchase (product, date, transaction identifiers), not your card details. Purchases are verified through our payment partner RevenueCat.
• Notifications. If you allow push notifications, a device token so we can send them.
• Advertising. If the app shows optional rewarded ads, Google AdMob may collect device identifiers (such as the advertising ID), IP address and ad interaction data. On iPhone, ads are only personalised if you allow tracking; in the EU and UK we ask for consent first.
• Technical data. Basic logs (such as error reports, app version and approximate time of requests) needed to run and secure the service.

Why we use it

• To run the game: your account, missions, payouts, the property market, the feed and notifications (performance of our contract with you).
• To process and verify purchases, prevent fraud and cheating, and handle refunds (contract and our legitimate interests).
• To keep the community safe: moderating reported posts and comments (legitimate interests).
• To show optional rewarded ads and, where you consent, personalised ads (consent, and legitimate interests for non-personalised ads).
• To meet legal obligations, such as tax and accounting records for purchases.

We do not sell your personal data.

What other players can see

Your handle, avatar, posted photos, likes, comments, follower counts, properties you run and VIP standings are visible to other players. Your email address, purchases and balances of real money are never shown to other players.

Who we share it with

• Google Firebase (Google Ireland / Google LLC): hosting, database, file storage, sign-in and push notifications.
• Apple and Google: sign-in and in-app purchases.
• RevenueCat, Inc.: purchase verification.
• Google AdMob: rewarded ads, if shown.
• Authorities, if the law requires it.

Some of these providers process data outside the EU, including in the United States. Where they do, transfers are covered by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

We keep your data while your account exists. When you delete your account, we delete your profile, photos, posts, comments, likes, follows and notifications. We keep purchase records for as long as tax and accounting law requires (in Slovenia, up to 10 years), and logs for a short period for security.

Your rights

You can ask us to access, correct, delete or export your data, to restrict or object to how we use it, and you can withdraw consent at any time. You can delete your account in the app at Profile → Account → Delete account, or by following the steps on our account deletion page. For any other request, email exothegame@gmail.com. You also have the right to complain to a data protection authority; in Slovenia that is the Information Commissioner (Informacijski pooblaščenec, ip-rs.si).

Children

ViceFeed is not meant for children under 13, and in the EU under 16 where local law requires parental consent. We do not knowingly collect data from them. If you think a child has given us data, contact us and we will delete it.

Security

Data is encrypted in transit, stored with Google Cloud, and access is limited by security rules so players can only change what is theirs. Payouts and balances are only ever changed by our servers.

Changes

If we change this policy we will update the date above, and tell you in the app if the change is significant.