Privacy Policy

1. Information We Collect

Account information: your email address, username, display name, date of birth or age confirmation, and profile details you choose to add (bio, avatar, links).

Content you create: posts, shorts, stories, messages, comments, and media you upload.

Usage information: interactions such as likes, follows, views, and engagement signals used to personalize your feed, along with device, log, and approximate (IP-based) location data needed to operate and secure the service.

Subscription information: limited billing records (plan, amount, renewal dates, transaction IDs) processed by our payment provider. We do not store your full card number.

2. How We Use Information

To operate Surf: deliver your content, sync across devices, process subscriptions, and keep your account secure.

To personalize your experience: feed ranking and recommendations are driven by your engagement signals and the preferences you set in feed settings. You control these dimensions and can switch feed modes at any time.

To keep Surf safe and improve it, to communicate with you about your account, and to comply with law. We make money from subscriptions, not advertising: we do not sell your personal information or share it for cross-context behavioral advertising, and we do not run an ad network.

3. End-to-End Encrypted Messages

Conversations marked as end-to-end encrypted are encrypted on your device. Their plaintext content is never readable by Surf servers and is excluded from server-side features such as translation and summaries.

4. On-Device AI and Biometrics

Some features (branded Surf Vision) run on your device, for example detecting that a face is present to reframe a video, separating a subject from its background, screening images for unsafe content, or generating captions. These features are designed to keep their processing on your device.

Surf Vision detects that a face is present; it does not recognize or identify who you are, and we do not create or store a faceprint, voiceprint, or other biometric template to identify you. If any feature ever uses biometric identifiers as defined by law, we will give you notice, obtain any required consent, and publish a retention schedule first.

5. Sharing

We do not sell your personal information. We share data only with service providers needed to run Surf (such as hosting, storage, media processing, email, and payments), under contracts that limit their use of it; with other users according to your settings; when required by valid legal process; or to protect the safety of people and the service. If we are ever part of a merger or sale, data may transfer under this policy or a successor with comparable protection.

6. Data Retention and Deletion

Your content stays on Surf until you delete it or your account. When you delete your account from settings, your profile and content are removed within about 30 days, except for limited records we must keep by law (such as billing) or to prevent fraud, abuse, or safety risks; content others have re-shared; and residual backup copies, which are purged on a rolling basis.

7. Your Privacy Rights

Depending on where you live (for example California under the CCPA/CPRA, the EEA/UK under the GDPR, and other U.S. states), you may have rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of any sale, sharing, or targeted advertising, none of which we do. We honor the Global Privacy Control and similar browser opt-out signals.

You can exercise many rights directly in settings (including data export and account deletion), or contact us at privacy@surfplatforms.com. We verify requests and respond within the time the law requires, and we will not discriminate against you for exercising your rights.

8. Security and Data Breaches

We use administrative, technical, and physical safeguards, including encryption in transit, access controls, and monitoring, to protect your information. No system is perfectly secure, and security also depends on your devices, networks, and credentials and on third parties, so we cannot guarantee absolute security; this is a description of our practices, not a warranty.

If a breach affects your personal information, we will investigate, take steps to mitigate it, and notify affected users and regulators where and within the timeframes the law requires. Tell us right away at security@surfplatforms.com if you think your account is no longer secure.

9. Children and Teens

Surf is not directed to children under 13, and we do not knowingly collect personal information from them; if we learn an account belongs to someone under 13, we remove it. For teen accounts we apply additional protections, and we do not show targeted advertising to anyone.

10. The Full Policy

This in-app summary is part of our complete Privacy Policy, available at surfplatforms.org/privacy-policy, which is incorporated by reference and includes additional detail and region-specific rights (CCPA/CPRA and GDPR). Our Terms of Service and EULA are at surfplatforms.org/terms and surfplatforms.org/eula.

11. Changes to This Policy

We may update this policy as Surf evolves. Material changes will be announced in-app or by email before they take effect, and we will update the date above.