Privacy Policy
1. Introduction
This Privacy Policy explains how ScrollSolution FZCO (“ScrollSolution FZCO”, “we”, “us”, or “our”) collects, uses, discloses, and protects your personal information when you use the Viral Drama mobile application (the “App”), the website at viraldrama.app, and related services (together, the “Services”).
Viral Drama is a freemium short-form vertical-drama streaming application offering serialized drama series and related content. By creating an account or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.
Data Controller: ScrollSolution FZCO, a Free Zone Company established in the United Arab Emirates (Emirate of Dubai), Trade License No. 68463, issued by the Dubai Integrated Economic Zones Authority (IFZA / Dubai Silicon Oasis). Registered office: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. For privacy questions, contact privacy@viraldrama.app.
2. Scope of This Policy
This Policy applies to personal information we process about: (a) registered users of the App; (b) visitors to our website; and (c) individuals who contact our support team. It does not apply to third-party services that have their own privacy policies, which are identified in Section 6.
3. Information We Collect
3.1 Information you provide directly
- Account information — your name or display name, email address, and a password (managed securely through our authentication provider, Supabase; we do not store plaintext passwords).
- Profile information — optional details you choose to add, such as a profile photo, language preference, or display preferences.
- Support communications — the content of your messages and your contact details when you contact us.
3.2 Information from third-party sign-in
If you choose to sign in using Google, Apple, or Facebook, we receive basic profile information from that provider, which may include your name, email address, profile picture, and a unique user identifier. We do not receive your password for those accounts. If you use “Sign in with Apple” and choose to hide your email, we receive a private relay email address instead of your real address.
3.3 Subscription and purchase information (coins & subscriptions)
Viral Drama uses a model of coins (a virtual currency used to unlock episodes) and auto-renewable Premium subscriptions. When you buy coins or a subscription, the transaction is processed by the Apple App Store or Google Play and managed through our subscription/purchase provider (RevenueCat). We receive confirmation of your purchase, subscription status, entitlement information, and your coin balance and spend history.
We do not collect or store your full payment card number or bank details — these are handled directly by Apple, Google, and their payment processors.
3.4 Information collected automatically
- Device and technical data — device model, operating system and version, app version, language and region settings, time zone, and crash or diagnostic data.
- Network data — IP address and general (city/country-level) location inferred from it.
- Identifiers — a unique account identifier and device identifiers.
- Usage data — content you view, watch history and progress, episodes unlocked, coins earned and spent, search queries, features used, and interactions within the App.
- Push token — if you enable notifications, a Firebase Cloud Messaging (FCM) device token used to deliver them.
3.5 Unlocking episodes
Unlocking episodes. The first episodes of each series are free. Later episodes can be unlocked by spending coins (purchased in-app or earned) or with a Premium subscription. We do not display third-party advertising and do not track you across other apps or websites.
3.6 SDKs and similar technologies
The App uses software development kits (SDKs) and similar technologies from our service providers (for example, for video playback, analytics, crash reporting, and push). The website may use cookies and similar technologies; where required by law, we request your consent first. See our separate Cookie & Tracking Technologies Policy for details.
4. How We Use Your Information
We use personal information to:
- create and manage your account and authenticate you;
- provide, operate, and maintain the Services, including streaming content and saving your watch progress;
- process coin purchases and subscriptions, and manage entitlements and coin balances;
- personalize content recommendations and your experience;
- communicate with you about the Services, including service messages and, where permitted, updates and offers;
- provide customer support and respond to your requests;
- monitor, prevent, and detect fraud, abuse, and security incidents;
- analyze and improve the Services, develop new features, and conduct aggregated analytics;
- comply with legal obligations and enforce our Terms of Service.
5. Legal Bases for Processing (EEA/UK Users)
Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases: performance of a contract (to provide the Services you request); consent (for example, for push notifications, which you may withdraw at any time); legitimate interests (such as securing the Services, preventing fraud, and improving our product, balanced against your rights); and legal obligation (to comply with applicable law).
6. How We Share Your Information
We do not sell your personal information for money. We share information only as described below.
- Service providers (processors) — trusted third parties that process data on our behalf, listed in the table below.
- Legal and safety — where required to comply with applicable law, legal process, or governmental request, or to protect the rights, property, or safety of ScrollSolution FZCO, our users, or others.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
- With your consent — for any other purpose disclosed to you at the time.
6.1 Service Providers and Sub-Processors
The following key providers help us deliver the Services. Each processes only the data needed for its function and is bound by appropriate data-protection obligations.
| Provider | Purpose | Data processed |
|---|---|---|
| Supabase | Authentication, database, and backend data | Account ID, email, hashed credentials, profile, watch history, entitlements |
| Railway | Application/API server hosting | Operational and request data, IP address |
| Mux | Video hosting, encoding, and streaming delivery | Playback requests, device/network data, IP address |
| RevenueCat | Coin and subscription purchase management | Purchase events, subscription status, entitlements, app user ID |
| Sentry | Error monitoring and crash reporting | Account ID, request data, error context |
| Firebase Cloud Messaging | Push notification delivery (if enabled) | Device push token, app instance identifier |
| Google / Apple / Facebook | Third-party sign-in (if you choose it) | Name, email, profile, provider user ID |
| Apple App Store / Google Play | Payment processing for coins & subscriptions | Payment and transaction data (handled directly by the stores) |
7. Data Retention
We retain personal information for as long as your account is active and as needed to provide the Services. When you delete your account, we hard-delete your personal information from our active systems, except where we must retain certain data to comply with legal, tax, accounting, or fraud-prevention obligations, or to resolve disputes and enforce our agreements. Residual copies may persist in encrypted backups for a limited period before being overwritten. Aggregated or anonymized data that can no longer identify you may be retained for analytics.
8. Advertising and Unlocking Episodes
Unlocking episodes. The first episodes of each series are free. Later episodes can be unlocked by spending coins (purchased in-app or earned) or with a Premium subscription. We do not display third-party advertising and do not track you across other apps or websites.
9. Data Security
We implement technical and organizational measures designed to protect personal information, including encryption of data in transit, access controls, row-level security (RLS) on user data, and least-privilege practices for administrative access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.
10. International Data Transfers
ScrollSolution FZCO is based in the United Arab Emirates (Emirate of Dubai), and our service providers may process data in other countries, including the United States and the European Union. Where personal information is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms, and we take steps to ensure your information receives an adequate level of protection.
11. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — to obtain a copy of the personal information we hold about you;
- Rectification — to correct inaccurate or incomplete information;
- Erasure — to request deletion of your information (see Section 12);
- Restriction / Objection — to restrict or object to certain processing, including direct marketing and profiling;
- Portability — to receive your information in a portable format;
- Withdraw consent — where processing is based on consent, at any time;
- Opt out of “sale” or “sharing” — for residents of jurisdictions such as California;
- Non-discrimination — we will not discriminate against you for exercising your rights.
To exercise any of these rights, contact privacy@viraldrama.app. We may need to verify your identity before responding. You also have the right to lodge a complaint with your local data-protection authority. Residents of the UAE may have rights under Federal Decree-Law No. 45 of 2021 (PDPL); EEA/UK residents have rights under the GDPR; California residents have rights under the CCPA/CPRA.
12. Account and Data Deletion
You can delete your account and associated personal information at any time using any of these methods:
- In the App: go to Settings → Account → Delete Account and confirm.
- On the web: visit https://viraldrama.app/data-deletion and follow the instructions.
- By email: send a request from your registered email address to privacy@viraldrama.app.
When you delete your account, we hard-delete your profile, watch history, search history, coin balance, preferences, and other personal data associated with your account from active systems, subject to limited retention required by law (for example, transaction records held by Apple/Google needed for tax or accounting purposes). Some information may persist in encrypted backups for a limited period before being overwritten. Deletion is permanent and cannot be undone. For full details, see our Data Deletion Policy.
13. Children’s Privacy
The Services are not directed to anyone under the age of 16, and you must be at least 16 years old to use them. We do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has provided us with personal information, please contact privacy@viraldrama.app and we will take steps to delete it. Certain content in the App is intended for mature audiences, and the App is rated accordingly in each store.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other appropriate means and update the “Effective date” above. Your continued use of the Services after the changes take effect constitutes acceptance of the updated Policy.
15. Contact Us
If you have questions, requests, or complaints about this Privacy Policy or our handling of your personal information, contact:
ScrollSolution FZCO
Attn: Privacy Team
Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Email: privacy@viraldrama.app
General support: support@viraldrama.app
Website: https://viraldrama.app