ABYGRAM PRIVACY POLICY

This Privacy Policy applies to information processed through Abygram, including information you provide directly, information generated through your use of the platform, information shared by other users, and information received from service providers or other permitted sources.

By using Abygram, you should understand that certain information is necessary for us to provide the services and features you choose to use.

Some information is optional and can be controlled through your account or privacy settings.

Where applicable law provides you with additional privacy rights, those rights remain available to you.

Abygram is operated by:

You can also submit privacy-related requests through the in-app Support system where available.

Abygram may use third-party service providers to process certain information on our behalf. These providers may include infrastructure, payment, identity-verification, communications, security, analytics, and other technical service providers.

When you create and use a Abygram account, you may provide information including:

• Full name
• Username
• Email address
• Phone number
• Date of birth
• Password
• Profile photo
• Biography
• Gender
• Website
• Business or contact information
• Other profile information
• Privacy preferences
• Security settings

Some information is required to create an account. For example, account registration currently requires:

• Email address
• Phone number
• Full name
• Username
• Date of birth
• Password

Your profile photo is optional. Email and phone verification may also be optional in ordinary circumstances, although Abygram may require additional verification or security measures in certain circumstances.

After creating an account, you may add or modify information such as:

• Profile photo
• Biography
• Gender
• Website
• Business/contact information
• Other profile information

You control the visibility of many profile details through available privacy settings. Your registration email address and phone number are not automatically displayed to other users.

If you choose to add a separate business or contact email address or phone number to your profile, you may choose to make that information visible to other users.

Abygram stores your date of birth because it is part of account information and may be relevant to age-related features and account functionality.

Where Abygram provides birthday-related information or reminders to other users, the visibility of that information is controlled according to the relevant feature and your settings.

We do not intend to make your full date of birth publicly visible simply because it is stored on your account.

Gender may be provided as an optional profile field.

You may choose whether your gender information is visible through the privacy and profile controls made available by Abygram.

You are not required to provide gender information merely to use Abygram.

Abygram may provide features that help users discover people they may know.

Where you choose to use contact-discovery functionality, Abygram may temporarily process phone-number information for matching purposes.

Contact information used for this matching process is not intended to be uploaded and permanently stored in your Abygram account database merely because you used contact discovery.

If a person is not already using Abygram, Abygram may provide an option to invite that person through normal communication methods, such as SMS, where supported.

Abygram allows users to create, upload, send, publish, or otherwise share different types of content. Depending on the features available, this may include:

• Photos
• Videos
• Text-based posts
• Stories
• Reposts
• Audio
• Voice content
• Voice notes
• Documents
• Files
• Live streams
• Comments
• Replies
• Polls
• Other content formats introduced by Abygram in the future

The exact content types available may change as Abygram develops.

When you upload or create content, Abygram processes and stores that content so that the relevant Abygram features can operate.

You control what information and content you choose to share through Abygram, subject to the functionality of the platform.

Depending on your settings and the feature you use, information may be visible to: The public, Your followers, Approved followers, Specific users, Members of a group or community, Other participants in a conversation, Other users who are permitted to view the relevant content.

Information you intentionally make public may be visible to people outside your immediate network. Examples may include: Public username, Public profile information, Public posts, Public comments, Public interactions, Followers/following information where applicable, Other information you intentionally make public.

If your account is private, your content is subject to the privacy controls associated with private accounts.

Abygram provides privacy controls that may allow you to manage who can interact with or access certain parts of your account. Depending on the feature, these controls may include settings for:

• Stories
• Messages
• Comments
• Mentions
• Tags
• Account visibility
• Profile information
• Other interactions

The availability of a particular setting may depend on the feature, account type, age, location, or applicable requirements.

We collect information about activities you perform on Abygram. Depending on the features you use, this may include:

• Searches
• Accounts you follow and unfollow
• Likes, Comments, Shares, Reposts, Saves, and Bookmarks
• Videos you view and interaction with content
• Content you create and interact with
• Feature usage and other activity within Abygram

We use activity information for operating the platform, improving features, analytics, personalization, recommendations, search relevance, safety and moderation, marketing, preventing abuse, and improving the overall experience.

We do not collect activity merely because it is technically possible to collect it. Information is processed in connection with legitimate platform functions and purposes described in this Privacy Policy.

Abygram uses information about how you use the platform to personalize parts of your experience. Depending on the feature, personalization may consider signals such as:

• Accounts you follow
• Content you like and view
• Searches
• Shares, reposts, and saves
• Topics and interests inferred from your activity

This helps Abygram recommend content, recommend accounts, rank feeds, improve search, and enhance relevance. Where applicable, Abygram provides controls allowing users to manage personalization choices.

Abygram may process location information when you use a feature that requires location, including GPS or other location information.

Abygram does not continuously collect precise GPS location in the background simply because your device is capable of providing it.

Location may be used for location-related content, location-based views, and regional engagement. Abygram does not automatically publish your location to other users. You must deliberately choose to add or share location through a feature before it is made available. You can manage device permissions through your device settings.

Abygram does not currently intend to collect unnecessary device or technical information simply for profiling users.

The platform may process limited technical information where necessary for the operation, security, reliability, or delivery of a feature. As Abygram develops, the types of technical information processed may change, and this Privacy Policy will be updated accordingly.

Abygram may use cookies and similar technologies where applicable to support authentication, sessions, security, preferences, analytics, platform functionality, personalization, and measurement.

You may be able to manage certain cookie settings through your browser or device. Disabling certain technologies may affect the operation of some features.

Abygram provides private communication features including text messages, photos, videos, documents, files, voice messages, reactions, and replies.

Messages are stored privately within the relevant conversation until they are deleted or otherwise handled according to the applicable messaging feature. Abygram does not make private messages publicly visible simply because they are stored on the platform.

Abygram currently provides a Delete for Everyone functionality for supported messages. Abygram does not currently provide a separate "delete only for me" option for ordinary messages where Delete for Everyone applies.

Certain messaging features may also include disappearing messages, one-time-view content, message reporting, blocking, and other privacy and safety controls.

Abygram provides voice and video calling functionality. Normal voice and video calls are not recorded by Abygram.

We may process limited information associated with calls that is necessary to provide, secure, troubleshoot, or manage the service (participants, call status, timing, duration, connection, technical operation). Call metadata is different from call content.

Abygram may provide live-streaming features. Depending on the feature, a live stream may be recorded. A recording may initially be available to the streamer, who may decide whether the recording should be made available to other users and whether interaction is allowed.

Abygram processes information about relationships and interactions between users (following, followers, blocks, mutes, likes, shares, comments, groups, memberships) to operate social features and enforce privacy and safety controls.

When you block another user, Abygram processes information necessary to enforce the block and associated privacy and safety restrictions. Blocking information may be retained as necessary to maintain the functionality of the block and protect users.

Users may report accounts, posts, messages, comments, media, or other rule violations. When a report is submitted, Abygram processes information relating to the reporter, the reported entity, the reason, investigation details, and moderation decisions to protect the community.

Abygram may use automated systems, including AI-supported systems, together with human review to identify or evaluate potential violations. Actions may include warnings, restrictions, temporary suspension, removal of content, or permanent account action based on severity.

Where Abygram provides an appeal process, users may request review of moderation actions (content removal, restrictions, suspensions). Appeals require Abygram to review relevant moderation records.

Abygram may operate systems recognizing the quality and reliability of reports or community-safety contributions with trust badges, recognition, or visibility rewards.

AI is integrated into content analysis, recommendations, personalization, caption generation, hashtag generation, and safety analysis. Abygram's AI processing is designed to operate within Abygram's own systems rather than sending user content to external providers for ordinary feature processing.

Abygram does not use users' personal information or user-generated content to train Abygram's AI models. AI is used to provide and improve features for users, not to create a separate training dataset from personal content.

Individual verification may involve legal identity documents (passport, national ID, driver's licence). Business verification involves business documents. Verification provides verified badges, verified status, and enhanced customization.

Where a third-party verification provider is used, identity documents are processed and retained by the verification provider according to its practices rather than being permanently stored in Abygram's account database. Abygram receives the verification result.

For verified accounts, Abygram may publicly display a verified legal or verified identity name alongside the badge. Abygram may maintain an internal history of previous verified names for security and fraud prevention.

Some verification tiers operate via recurring subscriptions. If a subscription ends or verification is revoked, the verification badge may be removed immediately.

Abygram manages advertising internally rather than relying on external ad networks for ordinary delivery. Advertisers do not receive users' personal information merely because an ad is displayed.

Abygram may send announcements and promotional communications. You may manage marketing preferences or opt out at any time. Security, transactional, and service messages will continue regardless.

We send push notifications for messages, likes, comments, follows, mentions, calls, and security events. You can customize notification preferences in app settings and device settings.

Abygram supports card payments, mobile money, and digital wallets. Payment providers process sensitive payment credentials directly. Abygram retains order history, transaction amounts, status, and receipts necessary for fulfillment and compliance.

Abygram offers subscriptions, gifts, creator monetization tools, and boost features. Certain platform balances may only be used within Abygram and may not be convertible into cash.

Payout methods (mobile money, bank accounts) vary by region. Abygram retains payout records for accounting, verification, fraud prevention, and statutory tax obligations.

Refund availability depends on the product, feature, payment method, and applicable terms. Subscriptions and utilized credits are generally non-refundable once activated except where required by law.

When participating in marketplace transactions, Abygram processes buyer/seller details, orders, delivery addresses where required, and dispute records.

Depending on the feature and merchant tier, payments may be released immediately or held temporarily in pending status pending order fulfillment.

Dispute and investigation records are retained for the duration of the review and for a reasonable statutory period afterward for accounting and fraud protection.

Abygram works with cloud hosting, storage, payment, verification, email, SMS, and analytics providers under formal data processing contracts. Some providers operate internationally.

Personal information may be processed in Tanzania and other global data centers operated by our infrastructure providers, adhering to applicable international data protection safeguards.

Abygram discloses user information only in response to valid, lawful court orders or statutory government requests. We notify affected users where legally permissible.

We deploy strict authentication, access controls, security monitoring, role-based administration, and encryption. Users must maintain confidentiality of their passwords and credentials.

Two-factor authentication (2FA) is available to all users and is mandatory for verified accounts to maintain platform security.

We retain personal information only for as long as necessary to provide requested services, maintain accounts, complete transactions, comply with legal obligations, and prevent fraud.

When you initiate full account deletion, Abygram provides a 30-day recovery period. Logging back in during this period restores your account. After 30 days, account information is permanently and irreversibly purged, with certain transaction records retained solely for statutory compliance.

Individual content deletion (posts, stories, messages) is separate from account deletion. Stories expire automatically within 24 hours. Delete for Everyone removes messages across conversation participants.

You can request and download a complete copy of your personal account information and content archives via the in-app Accounts Center with secure time-limited download links.

You can edit profile details directly in your account settings or contact the privacy team for assistance with rectifying inaccurate personal records.

You can revoke optional permissions (contacts, location, notifications) at any time through app or device settings without affecting the legality of previous processing.

Depending on your jurisdiction (including the Tanzania Personal Data Protection Act 2022, GDPR, and other global frameworks), you have the right to access, rectify, erase, restrict, port, or object to personal data processing.

Submit privacy requests directly via in-app Support or email hello@shaymah.com. Identity verification may be required to protect your security.

Privacy requests progress through structured stages: Submitted → Verification → Processing → Completed, handled promptly according to statutory deadlines.

Abygram's minimum age is 13 years old. Accounts belonging to users under 13 are prohibited and promptly terminated upon discovery.

Sensitive documents used for identity verification are processed by accredited verification providers and are not permanently held in the primary account database.

Internal administrative access is strictly governed by the principle of least privilege, role-based controls, multi-factor authentication, and comprehensive audit logging.

We maintain an active incident response protocol to investigate, contain, remediate, and notify users and regulatory authorities of security incidents in compliance with applicable law.

The in-app Privacy Center gives users centralized tools for privacy overview, data download, account deletion, personalization toggles, messaging privacy, and security controls.

We strictly collect only what is reasonably necessary to provide requested features and maintain platform safety, refusing unnecessary data harvesting.

As new features, communication channels, and monetization tools are introduced, this Privacy Policy will be updated to describe corresponding data practices.

Material revisions to this policy will be communicated via prominent in-app notices and updated effective dates, preserving revision history for transparency.

External links and third-party integrations maintain independent privacy policies. Users are encouraged to review external terms when navigating outside Abygram.

Lawful processing grounds include contractual necessity, compliance with statutory legal obligations, protection of platform security, legitimate business interests, and explicit consent.

Abygram respects international privacy frameworks without reducing mandatory statutory rights afforded in your local country of residence.

If you have concerns about our privacy practices, please contact our Privacy Team. For users in Tanzania, complaints may also be lodged with the Personal Data Protection Commission (PDPC).

We commit to: Minimizing data collection, honoring user privacy controls, enforcing robust security safeguards, retaining data only as long as necessary, never training AI models on personal content, and aligning legal promises with verified technical architecture.

This Privacy Policy reflects currently planned and provided services. Specific features may introduce supplementary notices, and certain statutory records are preserved per legal requirements.

END OF PRIVACY POLICY