OFFICIAL DOCUMENT
Privacy Policy
Last updated: August 22, 2026 · Version 1.0
Applies to the web version, Under Android app (Google Play) and Under Telegram Bot.
Under respects your privacy. We are building a social network where you can be yourself, while keeping your data safe. This policy explains what data we collect, why, and how you can control it.
By using Under, you agree to this policy. If you do not agree, please do not use the service.
1. What data we collect
1.1 Account data you provide
- Email and password — for login. Password is stored only as a hash, we never see it.
- Profile: name, @username, status, avatars (up to 7 photos), active photo selection.
- Content: posts in feed, texts, images, group and channel descriptions.
- Social connections: fans, idols, subscriptions to groups/channels.
1.2 Messages and communication
- Direct messages, group and channel messages, reactions, reports.
- Technical chat metadata: participants, sent time, read receipts, typing indicator, online status.
- We do not read your private messages for ads. Moderation only happens after reports.
1.3 Data collected automatically
- Device: model, Android OS, app version, language, theme (light/dark), accent color.
- Usage: feed views (subs/recommended), search for users/groups/posts, clicks.
- Technical logs: IP address, login time, crash logs for stability.
- Notifications: push token (Firebase Cloud Messaging).
- Coins/activity: balance and in-app actions.
1.4 Telegram integration (optional)
- If you link Telegram, we generate a one-time code (valid for 10 minutes) and store your Telegram ID to forward notifications.
- Only notification headers are sent via Telegram bot, with your consent.
We do NOT collect: precise GPS location, phonebook contacts, biometrics, payment cards (no paid features yet).
2. Why we use your data
| Purpose | Example | Legal Basis |
|---|
| Provide the service | Login, showing feed, chats, groups/channels | Performance of contract |
| Personalization | Subs/Recommended feed tabs, user discovery | Legitimate interest |
| Safety | Fighting spam, bots, blocks, reports | Legitimate interest |
| Communication | Password reset, notifications, support, Telegram bot | Contract / Consent |
| Improvement | Crash analytics, feature usage | Legitimate interest |
3. Who we share data with
We do not sell your data. Sharing only in these cases:
- Other users — what you made public: name, username, avatar, status, posts, fans/idols if not hidden in privacy settings.
- Infrastructure providers: hosting, photo storage, Firebase (Google push notifications). They cannot use data for their own ads.
- Telegram — only if you connected the bot yourself.
- Legal requirements — upon lawful requests from authorities.
- Change of ownership — if service is sold, users will be notified in advance.
4. Storage, retention and security
- Data is stored on servers in the EU and other regions. Photos in encrypted object storage.
- Account is stored until you delete it. Messages — until the chat is deleted or you delete them.
- Logs and technical data — up to 12 months.
- Telegram link code — 10 minutes, then deleted.
- Protection: HTTPS/TLS, password hashing (bcrypt), login rate-limiting, access controls, regular backups.
- No system is 100% secure, but we do our best to protect your data.
5. Your rights, settings and deletion
In the app: Cabinet → Settings you can:
- Change name, status, username, avatars
- Set privacy: who can message you (Everyone / Only fans / Nobody), show online, show fans/idols, searchable, read receipts, reactions.
- Block users, mute channels, leave groups.
- Disable push notifications and Telegram bot.
Account deletion
- Settings → Account → Delete account. After deletion, profile, photos, fans/idols and messages are permanently deleted within 30 days (backups up to 90 days).
- You can request export or deletion by email below. We reply within 30 days.
- You have rights to access, rectify, delete, restrict processing under GDPR and other laws.
6. Children
Under is 12+. We do not knowingly collect data from children under 12. If you are a parent and believe your child created an account, contact us — we will delete the data.
7. Cookies and local storage
Web version uses:
- localStorage / IndexedDB — for session, theme, language, drafts.
- Cookies — only for authentication and security, no advertising.
Android app does not use cookies, except for auth web-view.
8. International data transfer
If you are in the EU, your data may be processed outside the EU to operate the service. We ensure protection via standard contractual clauses and technical measures.
9. Changes to this policy
We may update this policy. If changes are material, we will notify you in the app or by email. Continued use after update means acceptance.
Service: Under
Support & privacy email: akanchikir@gmail.com
In-app: Settings → Info → Contact
Legal entity: Akanchik Team
Address for data requests: Aqsay city 4-6-4
If you are in the EU and think your rights are violated, you can lodge a complaint with your local data protection authority.