MyUniverse Privacy Policy

Last updated: September 4, 2025


Company: My Universe, LLC (“MyUniverse,” “we,” “us,” “our”)
Applies to: myuniverse.com, our mobile apps, and related products/services (the “Services”). If you have questions or requests, admin@myuniverse.com.

1) What this policy covers

This Privacy Policy explains what personal data we collect, how we use and share it, and your choices. It applies when you use our websites, apps, and features—including contact/identity tools and any enrichment we provide (collectively, the Services). If you do not agree, please don’t use the Services.

We may update this Policy from time to time. If we make material changes, we’ll update the “Last updated” date and, where required, provide additional notice.

2) The data we collect

2.1 Data you provide to us

  • Account & profile: name, email, phone, username/handles, photo, preferences, and similar info.
  • Credentials: password and security details.
  • Purchases (if applicable): payment information is processed by our payment processor; we don’t store full card numbers.
  • Content you upload: media files, thumbnails, titles, descriptions, comments, messages.
  • Surveys, support, promotions: responses and contact details.
  • Contacts/Address book (with your permission): if you import/sync contacts or calendars, we process that data to provide features you select (see §2.4 and §6).

All information must be accurate and kept up to date.

2.2 Data collected automatically

  • Device & usage: IP address, cookie identifiers, device type, OS, browser, app version, language, settings, referring/exit pages, clickstream, pages or screens viewed, and interactions.
  • Log & diagnostic data: performance, crash reports, and analytics.
  • Approximate location: derived from IP or device settings.
  • Cookies/SDKs: see §7 (Cookies).

2.3 Data from others

  • Other users: when others share or sync contacts with the Services, we may receive information about you.
  • Third parties & public sources: service providers, partners, publicly available databases, and social platforms (subject to your settings with those platforms).
  • Enrichment sources: if you enable enrichment/identity features, we may use vetted data providers to help confirm or supplement contact elements (see §3.2).

2.4 Mobile permissions (apps)

With your consent we may access your device’s camera, microphone, photos/files, contacts, and calendar to deliver features you choose. You can change permissions in device settings.

3) How we use data (purposes & legal bases)

We process personal data to:

  • Provide and operate the Services (create/maintain your account, host and display content, enable sharing and communications). (Legal bases: contract; legitimate interests)
  • Process transactions and send administrative messages (receipts, service changes, policy updates). (contract; legal obligations)
  • Personalize and improve (analytics, troubleshooting, feature development, recommendations). (legitimate interests; consent where required)
  • Security and integrity (fraud, abuse, spam, and incident detection/prevention). (legitimate interests; legal obligations)
  • Communications (support, surveys, feedback). (legitimate interests; consent where required)
  • Marketing (emails, in-product prompts; you can opt out). (consent where required; legitimate interests)
  • Compliance (law enforcement requests, regulatory requirements, recordkeeping). (legal obligations)

3.1 Contacts & identity features you choose to use

If you import or sync Contacts or calendars, we process that data only to provide the features you select (e.g., lookup/match, deduplication, invite flows, or enriching your own records). We do not use your imported address book for our own marketing.

  • We may generate hashed identifiers (e.g., hashed email) for matching.
  • Unless you explicitly choose to store contacts in your cloud account with us, we process imported contacts ephemerally or as scoped to your account for the selected feature(s).
  • You can revoke access in your device or account settings; feature functionality may stop when you revoke.

3.2 Identity resolution & enrichment (advanced/enterprise features)

If you enable enrichment or identity resolution, we may:

  • Match an input contact to a unique profile and return associated fields;
  • Deduplicate contact sets;
  • Verify the accuracy/recency of contact elements;
  • Return limited additional fields (e.g., professional info, social handles, basic demographics, profile photos), subject to your contract, applicable law, and this Policy.

We implement controls to prevent misuse and respect opt-outs where applicable.

4) When we share data

We share information in these situations:

  • Service providers/Processors: hosting, cloud storage, analytics, anti-abuse/security, customer support, communications, payments, and similar vendors under contract.
  • Affiliates: within our corporate group under similar protections.
  • Other users: per your settings and actions (e.g., when you post content or share a link).
  • Legal/Compliance: to comply with law, enforce terms, or protect safety, rights, and property.
  • Business transfers: as part of a merger, acquisition, financing, or sale of all/part of the business (we will require the recipient to honor this Policy).
  • Advertising & measurement partners [optional]: If you enable advertising cookies/SDKs, we may “share” identifiers and device data for cross-context behavioral advertising as defined under some U.S. state laws. You can control this via our “Do Not Sell or Share My Personal Information” link and cookie preferences. If you don’t use advertising cookies/SDKs, set this section to not applicable and remove the “sell/share” language.

We do not sell personal information for money. If your implementation uses ad tech that qualifies as a “sale”/“share” under California or other state laws, enable the [optional] controls and disclosures described in §12 and §13.

5) International transfers

We may transfer, store, and process information in countries other than your own. Where required (e.g., EEA/UK), we use appropriate safeguards such as the EU Standard Contractual Clauses (and UK Addendum/IDTA) with recipients. [optional] If applicable, include your EU-U.S./UK-U.S. Data Privacy Framework participation statement here.

6) Social logins & third-party platforms

If you connect a third-party account (e.g., Google), we’ll receive information permitted by that service. Your use of third-party platforms is governed by their terms and privacy policies. We do not control how they process your data.

7) Cookies, SDKs, and similar tech

We use cookies/SDKs to operate the Services, remember preferences, measure usage, and (if enabled) personalize marketing. Manage preferences via our cookie banner and your browser/device settings. See our Cookie Policy for details.

Global Privacy Control (GPC). Where required by law, we honor GPC signals for “sale”/“share” opt-outs.

Do Not Track. The Services don’t respond to DNT headers (industry standards are not uniform), but you can use the controls above.

8) Data retention

We retain personal data only as long as needed for the purposes in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we delete or de-identify data. Typical retention examples include: account data for the life of the account; logs and security records for a limited period; transactional records for the period required by tax/accounting law; and backup copies for a limited time.

9) Security

We use administrative, technical, and physical safeguards designed to protect personal data (e.g., encryption in transit, access controls, monitoring). No system is 100% secure. If you believe your account has been compromised, contact customerservice@myuniverse.com.

10) Children’s privacy

The Services are not directed to children under 13 and we don’t knowingly collect personal data from them. If you believe we have collected data about a child under 13, contact us and we will take appropriate steps to delete it.

11) Your choices & rights

11.1 Core controls (everyone)

  • Access/Update: review and edit your profile in settings.
  • Delete: request deletion or close your account; we’ll delete or de-identify data unless we must keep it for legal/security reasons.
  • Marketing: opt out via email links or opt-out@myuniverse.com.
  • Cookies/Ads: manage via our cookie banner; see §7 and [Do Not Sell/Share] link where applicable.
  • Permissions: revoke app permissions in device settings.
  • Contacts: stop syncing or remove access at any time.

11.2 EEA/UK (GDPR) rights

Where GDPR applies, you have the right to access, rectify, erase, restrict, object, and port your data, and to withdraw consent where processing is based on consent. Our legal bases are listed in §3. You may also lodge a complaint with your local supervisory authority. To exercise rights, email customerservice@myuniverse.com.

Controller. My Universe, LLC is the controller for personal data described here. [optional] Insert EU/UK representative contact if required.

11.3 U.S. state privacy rights (CA/CO/CT/UT/VA and others)

Residents of certain states have the right to know/access, correct, delete, obtain a portable copy, and opt out of:

  • Sale of personal information;
  • Sharing for cross-context behavioral advertising;
  • Targeted advertising; and
  • Profiling in furtherance of decisions that produce legal or similarly significant effects (if applicable).

Sensitive personal information (CA): If we collect SPI (e.g., precise geolocation, account logins, government IDs), you may limit its use to permitted purposes. We do not use SPI for additional purposes without your consent.

How to exercise rights:

  • Use our “Privacy Choices” or “Do Not Sell or Share My Personal Information” links (if enabled).
  • Or email customerservice@myuniverse.com.
    We will verify your request and respond as required by law. You can use an authorized agent (we may require proof of authorization). If we deny your request, state laws may allow you to appeal; instructions will be included in our response.

12) California “Notice at Collection”

Categories collected (depending on your use): identifiers (name, email, IP), customer records, commercial info (purchases), internet/network activity, geolocation (approximate; precise only with permission), user content, audio/visual content you upload, inferences (to personalize), and professional info (for contact enrichment if enabled). We don’t intentionally collect protected characteristics unless you provide them (e.g., in content).

Sources: you; your devices; other users; service providers; public sources; partners; and, if enabled, vetted enrichment providers.

Purposes: see §3.

Retention: see §8.

Disclosure: we disclose personal information to service providers and, where applicable, affiliates, other users (per your actions), and lawful authorities. [optional] If you enable ad cookies/SDKs, we may “share” limited identifiers/device data for cross-context behavioral advertising; opt out via our Do Not Sell/Share link.

We do not knowingly sell/share data of users under 16.

13) Social features & public content

Content you post in public areas (comments, profiles, public pages) may be visible to others and indexed by search engines. Please use caution when sharing.

14) Third-party sites & services

Our Services may link to third-party websites or apps that we don’t control. Their practices are governed by their policies.

15) Contact us

  • General/privacy requests: admin@myuniverse.com
  • Marketing opt-outs: admin@myuniverse.com