1. Introduction & Overview

Welcome to Vivex Network ("App", "Platform", "we", "us", or "our"). We are dedicated to maintaining the trust and confidence of our global user community. This Privacy Policy outlines how Vivex Network collects, uses, processes, stores, shares, and protects your personal data when you interact with our mobile application, backend API services, official website, and associated cloud mining ecosystem (collectively, the "Service").

By downloading, installing, creating an account on, or using Vivex Network, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must refrain from installing, accessing, or using the Application.

STRICT AGE REQUIREMENT (18+ ONLY): Vivex Network is strictly intended for individuals who are at least 18 years of age. If you are under 18 years of age, you are strictly prohibited from creating an account or using the application.

This Privacy Policy is designed to comply with global privacy regulations, including the General Data Protection Regulation (GDPR - EU 2016/679), the California Consumer Privacy Act (CCPA / CPRA), the Lei Geral de Proteção de Dados (LGPD), and the Google Play Developer Program Policies (including the Google Play User Data and Account Deletion Policy).

2. Information We Collect

We collect information to provide, maintain, secure, and improve the Vivex Network cloud mining platform. The information we collect falls into five primary categories:

A. Personal Data Provided Directly by You

  • Account Credentials & Basic Profile Data: Full Name, Email Address, Chosen Username, and Country/Region of residence.
  • Authentication Credentials: Google Account ID, Google profile display name, and avatar URL provided via Google Sign-In and Google Credential Manager.
  • Profile Customization / Avatars: Custom profile pictures uploaded to our secure cloud storage buckets (Supabase Storage).
  • Referral & Network Information: Unique referral code generated for your account, inviter referral code entered during sign-up, and your associated referral tree connections.
  • Support & Communication Data: Messages, feedback, support tickets, or emails sent to our customer support team ([email protected]).

B. Automatically Collected Technical & Device Information

  • Unique Device Identifiers: Hardware Device ID (ANDROID_ID) and cryptographic device hashes used exclusively for account security, anti-fraud auditing, and enforcement of our strict One-Account-Per-Device fair play policy.
  • Device Hardware & System Metrics: Device manufacturer, hardware model, Android OS version, system architecture, CPU brand, screen resolution, system language, and network connection type (Wi-Fi/Cellular).
  • Security & Integrity Indicators: System root status (via RootChecker), Android debug flag status, emulator/virtual machine detection flags, and app integrity verification checks.
  • Network & Connectivity Data: Internet Protocol (IP) address, approximate geographic location derived from IP, and backend API server response times.
  • Attribution & Install Referrer Data: Google Play Store Install Referrer details (via InstallReferrerManager) captured upon first launch to attribute user acquisition channels and detect referral fraud.

C. App Activity, Cloud Mining & Financial Ledgers

  • Mining Session Records: Timestamps of cloud mining activations, active mining duration logs, mining rate calculation multipliers, and daily streak counters.
  • Virtual Balance & Transaction Ledgers: Real-time token balances, earning histories, streak bonus logs, daily check-in rewards, and referral milestone claims.
  • Task & Gamification Progress: Records of completed social tasks, daily quests, and streak milestones achieved within the app.

D. Ad Monetization & Interactive Data

  • Google AdMob SDK Metrics: Non-sensitive ad interactions, ad placement views, rewarded video completions, and advertising identifiers (e.g., Google Advertising ID / GAID) handled directly by Google AdMob in compliance with Google's Advertising Policies.

E. Know Your Customer (KYC) & Solana Wallet Data (Roadmap Alignment)

In accordance with Phase 3 & Phase 4 of our strategic network roadmap (Pioneer Verification, Solana Address Binding & TGE Pre-Listing Distribution), to prevent sybil attacks, bot multi-accounting, and ensure fair distribution of $VVX tokens, users may undergo identity verification (KYC):

  • KYC Identity Verification Data: Government-issued identification details (e.g., National ID Card / Passport / Driver's License scans), facial liveness check photos / selfies, full legal name, date of birth, document ID number, and issuing country.
  • Solana Wallet Address: Pioneer-submitted Solana (SPL) public wallet address for pre-listing token distribution and TGE transfers.

POST-KYC IMMEDIATE RAW DATA DELETION POLICY: To protect user privacy and minimize data retention risks, raw identity document scans, ID images, and facial selfie photos are IMMEDIATELY PURGED AND PERMANENTLY DELETED from active storage as soon as the verification process is completed and validated (or rejected). Only an encrypted, non-sensitive verification status flag (kyc_verified = true) and a salted cryptographic hash are retained in our Supabase database. We DO NOT permanently store your raw physical ID images.

3. How We Use Your Information & Legal Basis for Processing

We process your personal data under legal, transparent, and defined legal bases as defined by applicable data protection laws (including GDPR Article 6):

Purpose of Processing Category of Data Used Legal Basis (GDPR Art. 6)
Account Creation & Authentication Google OAuth credentials, Email, Name, Username, Country Contractual Necessity (Art. 6(1)(b))
Cloud Mining Synchronization & Ledgering Mining session timestamps, token balances, referral rewards, daily check-in state Contractual Necessity (Art. 6(1)(b))
Anti-Cheat, Anti-Fraud & Fair Play Enforcement ANDROID_ID, Root status, Emulator metrics, IP address, Device fingerprinting Legitimate Interest (Art. 6(1)(f))
KYC Pioneer Identity Verification & Solana Binding Government ID / Selfie (temporary), Solana Wallet Address Legal Obligation & Contractual Necessity (Art. 6(1)(b/c))
Public Community Leaderboard Username, Country, Mining Rank, Virtual Token Balance Legitimate Interest (Art. 6(1)(f))
App Security, Maintenance & Debugging Crash logs, API metrics, System versions, Error stack traces Legitimate Interest (Art. 6(1)(f))
Customer Support & Communications Support emails, tickets, feedback messages Consent & Contractual Necessity (Art. 6(1)(a/b))

4. Third-Party Services, SDKs & Data Processors

To ensure secure user authentication, reliable cloud data synchronization, and ad monetization, Vivex Network integrates third-party software development kits (SDKs) and cloud service providers:

  1. Google Play Services / Google Credential Manager
    Purpose: Secure OAuth 2.0 user authentication, identity verification, and Google Account sign-in.
    Data Processed: Google User ID, Name, Email, Profile Picture URL.
  2. Supabase Inc. (Cloud Infrastructure)
    Purpose: Backend cloud database management (PostgreSQL), authentication services (GoTrue), Row-Level Security (RLS), and secure object storage.
    Security Standard: Enterprise-grade AES-256 database encryption at rest, TLS 1.3 encryption in transit, and strict database Row-Level Security (RLS) policies.
  3. Google AdMob (Ad Network)
    Purpose: Serving banner, interstitial, and rewarded video ads to support cloud server hosting costs and maintain free app access.
    Data Processed: Google Advertising ID (GAID), IP address, coarse location, ad view metrics.
  4. Google Play Install Referrer API
    Purpose: Attribution tracking for user referral links and protection against automated referral fraud.

5. Publicly Displayed Information

To foster community engagement, social proof, and competitive transparency, certain non-sensitive account metrics are visible to other registered users:

  • Public Leaderboards / Rankings: Your Username, Country of Residence, Global Rank, and Total Virtual Token Balance may be displayed on public Leaderboard screens (RankScreen).
  • Referral Team Views: Your chosen Username may be visible to your direct inviter or invited team members as part of your mining team tree.

What We NEVER Display Publicly: Your email address, full real name, phone number, physical address, unique Device ID (ANDROID_ID), IP address, root status, raw KYC identification documents, password hashes, or private security logs are strictly private and will NEVER be displayed publicly or shared with other users.

6. Data Sharing, Disclosure & International Transfers

A. Zero Sale of Personal Data

Vivex Network does NOT sell, rent, trade, or monetize your personal information, KYC data, or device data to data brokers, third-party advertisers, or telemarketing firms under any circumstances.

B. Legal Disclosures & Protection

We may disclose personal information or technical logs only if required to do so by applicable law, regulation, or legal process to comply with valid subpoenas, court orders, or government law enforcement requests.

C. International Data Transfers

Your data is stored in cloud servers operated by Supabase. All data transfers across international boundaries are conducted using enterprise AES-256 encryption at rest, TLS 1.3 in transit, and Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Storage, Security & Supabase AES-256 Encryption Standard

We employ rigorous industry-standard technical, organizational, and physical security measures to safeguard your personal data:

  • Supabase AES-256 Encryption at Rest: Database tables, user records, and cloud storage buckets hosted on Supabase are encrypted using enterprise AES-256 encryption standards.
  • TLS 1.3 Transport Layer Security: All API communications between the mobile application and backend services are encrypted in transit via TLS 1.3 / HTTPS.
  • Database Row-Level Security (RLS): Database policies enforce strict Row-Level Security (RLS), ensuring that users can only access their own authorized data records.
  • Salted Cryptographic Hashing: Device IDs, anti-fraud hashes, and verification tokens are salted and hashed using one-way cryptographic algorithms (SHA-256) to ensure raw identifiers are never exposed.

8. Data Retention & Immediate KYC Document Deletion Policy

We maintain a strict, transparent data retention lifecycle:

  • Active Accounts: User profiles, virtual balances, and referral networks are retained continuously for active accounts.
  • IMMEDIATE DELETION OF RAW KYC IDENTITY DOCUMENTS: As detailed in Section 2(E), raw scans of government IDs (National ID / Passport / Driver's License) and facial liveness selfies submitted during Phase 3 / Phase 4 KYC verification are IMMEDIATELY AND PERMANENTLY PURGED / DELETED from active Supabase cloud storage buckets as soon as verification is confirmed (or rejected). Only an encrypted boolean flag (kyc_verified = true) and a cryptographic hash are kept in the database.
  • Inactive Accounts: Accounts that remain completely inactive for a continuous period of 12 consecutive months may be archived or reset.
  • Anti-Fraud Audit Retentions: If an account is permanently banned for severe violations of our Anti-Cheat Policy, salted cryptographic hashes of associated Device IDs are retained to prevent banned hardware from re-registering.

9. Comprehensive User Rights (GDPR & CCPA Compliance)

Depending on your jurisdiction, you possess specific legal rights regarding your personal data:

A. European Union (GDPR) & Global Privacy Rights

  • Right of Access (Art. 15): Request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): Request correction of inaccurate profile data.
  • Right to Erasure / Right to be Forgotten (Art. 17): Request permanent deletion of your personal account and data.
  • Right to Restrict Processing (Art. 18): Request temporary limitation of data processing.
  • Right to Data Portability (Art. 20): Request a machine-readable export of your personal data.
  • Right to Object (Art. 21): Object to data processing based on legitimate interests.

B. California Residents (CCPA / CPRA Rights)

  • Right to Know & Access: Disclosure of categories and specific pieces of personal information collected.
  • Right to Delete: Request deletion of personal information.
  • Right to Opt-Out of Sale/Sharing: We do NOT sell or share your personal information.

10. Direct Instant Account & Data Deletion Policy (Google Play Compliant)

In strict adherence to the Google Play Developer Program Policies on Data Safety and Account Deletion, Vivex Network provides a direct, instant, self-service account deletion mechanism directly within the mobile app. Users do not need to wait for email approvals or manual processing.

Primary Method: Direct Instant In-App Account Deletion (Self-Service)

You can permanently delete your account and wipe all associated personal data instantly at any time:

  1. Open the Vivex Network Android application.
  2. Navigate to Settings (SettingsScreen).
  3. Scroll down to the Danger Zone section and tap Delete Account.
  4. Tap Confirm Delete in the confirmation dialog.

INSTANT DATA WIPING: As soon as you tap Confirm Delete, our backend system (profileRepository.deleteUserProfile) IMMEDIATELY AND PERMANENTLY PURGES your user profile, Google authentication bindings, mining balance, streak history, avatar images, and referral network records from Supabase database servers and clears your local device session. No manual email request or waiting period is required.

Backup Method: Email Account Deletion Request (For Lost Devices)

If you have uninstalled the app or lost access to your device, you can request account deletion via email:

  • Send an Email to: [email protected]
  • Subject Line: Account Deletion Request - [Your Username]
  • Required Info: Registered Google Email Address and Username.
  • Backup email deletion requests will be processed within 24 to 48 hours of identity verification.

11. Strict Age Policy (18 Years Minimum)

Vivex Network is STRICTLY PROHIBITED for use by individuals under 18 years of age.

We do not knowingly solicit, collect, or process personal information from anyone under 18 years of age. If we discover that an individual under the age of 18 has created an account, passed fake age details, or provided personal data, we will immediately terminate the account and permanently delete all associated data. If you suspect a user is under 18 years of age, please report them to [email protected].

12. Updates & Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time. When material updates occur, we will notify you by updating the "Last Updated" date at the top of this policy and posting an in-app notice. Continued use of Vivex Network constitutes acceptance of the revised policy.

13. Contact Us & Data Protection Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Application Name: Vivex Network

Package Name: com.vivexnetwork

Official Website: https://vivexnetwork.com

Customer Support Email: [email protected]

Response Commitment: We respond to all data inquiries within 30 days of receipt.