Privacy Policy

1. Introduction

BloxFeed ("we", "us", or "our") operates the BloxFeed mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App. Please read this policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information from Roblox Sign-In

When you sign in with your Roblox account, we receive and store your Roblox user ID, username, display name, and avatar URL. We do not receive or store your Roblox password.

2.2 Connected Accounts

If you choose to connect your Google (YouTube) or TikTok accounts, we store encrypted OAuth tokens to publish content on your behalf. These tokens are encrypted at rest using AES-256-GCM. We do not access your accounts for any purpose other than publishing videos you explicitly initiate.

2.3 Video Content

Videos you record and edit are processed locally on your device. When you choose to publish, the video is uploaded to the destination platform (YouTube or TikTok) and metadata (title, description, thumbnail URL, game reference) is stored on our servers.

2.4 Automatically Collected Data

We collect minimal technical data necessary to operate the service: device type, operating system version, and error logs. We do not collect location data, contacts, or browsing history.

3. How We Use Your Information

• To create and maintain your account
• To publish videos to connected platforms on your behalf
• To display your profile and content in the BloxFeed feed
• To moderate content for community safety
• To improve the App and fix bugs

4. Data Sharing

We do not sell your personal information. We share data only with the third-party platforms you explicitly connect (YouTube, TikTok) and with infrastructure providers (hosting, database) necessary to operate the service. All third-party providers are bound by their own privacy policies and data processing agreements.

5. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account at any time from the App's profile screen, which will permanently delete your account, all your videos, likes, and associated data from our servers. Connected platform tokens are immediately revoked and deleted.

6. Children's Privacy (COPPA)

BloxFeed complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. Users must verify their age before creating an account. If a user indicates they are under 13, the App requires a parent or guardian's email address to obtain consent before the account is activated. For full details, see our COPPA Notice.

7. Security

We use industry-standard security measures including AES-256-GCM encryption for stored tokens, HTTPS for all data in transit, JWT-based authentication with token rotation, and rate limiting on all authentication endpoints.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Delete your account and all associated data
• Disconnect any connected third-party account at any time
• Export your data upon request

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the App and updating the effective date. Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@bloxfeed.app.