Privacy Policy

Effective date: 23 June 2026 · Last updated: 23 June 2026

Template notice. This policy is a good-faith starting template for DigiWallGlobe and Capsealo and is aligned with Google Play’s Data Safety requirements, the EU/UK GDPR, and India’s DPDP Act 2023. It is not legal advice. Have it reviewed by a lawyer and replace every [BRACKETED] placeholder before publishing. The data practices described here must match what the apps actually do and your Play Console Data Safety form.

This Privacy Policy explains how [OPERATOR LEGAL NAME] (“we,” “us”) collects, uses, shares, and protects your personal data when you use the DigiWallGlobe website and the Capsealo mobile app (the “Services”). We are the data controller for that personal data.

1. Data we collect

Information you give us

Account & profile — your name, email address, and profile photo, received from Google when you sign in with Google.
Your content — the time capsules you create: text, photos, voice notes, and video clips (including clips you crop and upload), plus titles, descriptions, and whether each capsule is private or public.
Optional profile details — a short bio and any location or country you choose to add to your DigiWallGlobe card.
Communications — messages you send us (e.g. support requests) and waitlist sign-ups.

Information collected automatically

Usage & device data — app interactions, pages viewed, approximate device/browser type, and similar analytics, used to improve the Services.
Diagnostics — crash reports and performance data to find and fix bugs.
Identifiers — a push-notification token (if you enable notifications) and security/session identifiers.

Payments

Subscriptions and purchases are processed by Google Play Billing. We do not receive or store your full card or bank details; we receive only the purchase/entitlement status needed to unlock features.

2. How we use your data

To create and manage your account and authenticate you;
To store, display, and reveal your capsules according to your privacy choices;
To show subscribers’ profile cards and public capsule content on the DigiWallGlobe Wall and map;
To process subscriptions, purchases, and promo-code redemptions;
To send service messages and, if enabled, push notifications (e.g. when a capsule is due to reveal);
To keep the Services secure, prevent abuse, and enforce our Terms;
To analyze and improve the Services and fix problems;
To comply with legal obligations.

3. Legal bases (GDPR / DPDP)

Where the GDPR or India’s DPDP Act applies, we rely on:

Contract — to provide the Services you sign up for;
Consent — for optional features like push notifications, making content public, or analytics where required (you can withdraw consent at any time);
Legitimate interests — to secure, maintain, and improve the Services;
Legal obligation — to comply with applicable law.

4. How we share data

We do not sell your personal data. We share it only with service providers that help us run the Services, under contracts that require them to protect it:

Provider	Purpose
Google (Sign-In, Play Billing, Firebase Cloud Messaging)	Authentication, payments, push notifications
Cloudflare (R2 storage, CDN/Stream)	Storing & delivering media (photos, voice, video)
Render & Vercel	Backend API and website hosting
Resend	Transactional email
Sentry	Crash & error diagnostics
PostHog	Product analytics

We may also disclose data if required by law, to protect rights and safety, or in connection with a merger or acquisition (with notice where required). Public capsule content and subscriber profile cards are, by design, visible to anyone who visits DigiWallGlobe.

5. International transfers

Your data may be processed in countries other than yours (our providers operate globally). Where required, we use appropriate safeguards such as Standard Contractual Clauses for such transfers.

6. Data retention

We keep your data while your account is active and as needed to provide the Services. When you delete content or your account, we delete or anonymize the associated personal data within a reasonable period, except for limited copies kept in backups for a short time or where the law requires longer retention.

7. Your rights

Depending on where you live, you may have the right to:

access a copy of your personal data;
correct inaccurate data;
delete your data (“right to be forgotten”);
object to or restrict certain processing;
withdraw consent; and
data portability.

To exercise these rights, email privacy@digiwallglobe.com. You can delete your account at any time from within the app; see Account deletion below. You may also complain to your local data-protection authority.

8. Account & data deletion

You can request deletion of your account and associated data at any time by using the in-app delete option (Profile → Settings → Delete account) or by emailing privacy@digiwallglobe.com. We will delete your personal data as described in Section 6.

9. Security

We protect your data with encryption in transit (HTTPS), access controls, scoped credentials, security headers, and rate limiting. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires.

10. Children

The Services are not directed to children under 13 (or the higher minimum age in your country). We do not knowingly collect data from children below that age. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. We will change the “Last updated” date and, for material changes, notify you in-app or by email. Continued use after changes take effect means you accept the updated policy.

12. Contact

Data controller: [OPERATOR LEGAL NAME], [REGISTERED ADDRESS].
Privacy contact: privacy@digiwallglobe.com