Last updated: April 2026

1. What Is This Privacy Policy and What Does It Cover?
We at Poosting want you to understand what information we collect about you and how it is used and shared. For this reason, we strongly recommend reading our Privacy Policy. This document was created to help you use our services in the way that best suits your needs.
In this Policy, we detail how your data is collected, used, shared, stored, and transferred. We also clarify your rights. Each section includes practical examples and uses accessible language so that our practices are easy to understand. We also include links to additional resources should you wish to explore specific privacy topics further.
For us, it is essential that you have full control over your privacy. For this reason, we also indicate where you can manage your information in the settings of the Poosting Products you use.

2. What Information Do We Collect?
In this Policy, we list the types of data we collect. Here are some of the most relevant:
Data you provide to us: Information you enter when registering for our services and creating a profile, such as your email address, phone number, or age.
Your interactions on our Products: What you do on our platforms, including likes, clicks, posts, photos, and messages. On some services, you can use end-to-end encrypted messages.
Data about your connections: Who your friends or followers are and what they do on our Products.
Information from your device: Data about the phone, computer, or tablet you use to access our services, such as the device model and the version of the installed application.
Data about your activity outside Poosting: What you do on other websites, applications, or online games.
The collection and processing of your information depends on how you use our services.

3. Age Verification and Liveness Detection During Registration
Poosting is a social network intended exclusively for individuals who are 18 years of age or older. To ensure the safety of all users and compliance with applicable Brazilian legislation — including the Statute of the Child and Adolescent (ECA), Law 15,211/2025 (Digital ECA), and the General Data Protection Law (LGPD) — we perform two mandatory biometric processes during registration: facial age verification and real-time liveness detection.
3.1 Age Verification via Facial Photo (Selfie)
During the registration process, we ask the user to capture a photo of their own face (selfie) using the device’s camera. This image is securely transmitted to a specialized Artificial Intelligence service that performs an estimate of the applicant’s apparent age.
The sole purpose of this collection is to verify whether the applicant appears to be 18 years of age or older, as a condition for accessing the platform. The image is not used for any other purpose.
Legal basis (LGPD): Art. 7, II (compliance with a legal or regulatory obligation) and Art. 11, II, a (protection of health and safeguarding of children and adolescents).
3.1.1 Data Collected and How It Is Processed
• The selfie is captured locally on the device and transmitted in encrypted form to the AI analysis service.
• The AI service returns only the result of the age estimate (approved / rejected), without permanently storing the image.
• The selfie image is retained temporarily only for the period strictly necessary for processing and validation, and is automatically deleted upon completion of the analysis.
• No facial image is stored in Poosting’s database after the registration process is completed.
• The verification result (approved or rejected) is recorded solely as a boolean marker associated with the account, with no link to the original image.
3.1.2 Sharing
The captured image is shared exclusively with the AI provider responsible for age analysis, which acts as a data processor under the LGPD and is contractually obligated not to use, store, or share the image for any other purposes.

3.2 Real-Time Liveness Detection
To ensure that the verification process is being performed by a real, physically present person — and not by a photograph, video, or other form of fraud — Poosting performs a liveness detection check during registration, with the camera open in real time.
3.2.1 How the Process Works
During the liveness check, the system will display a sequence of simple instructions for the user to perform in front of the device’s front-facing camera, in real time. The actions requested may include:
• Moving the head up and down (vertical nod);
• Opening the mouth;
• Blinking the eyes.
The system detects and validates each gesture using facial landmark analysis technology, confirming the physical presence and liveness of the user.
100% local processing: All liveness detection processing takes place entirely on the user’s own device (on-device). No video, video frame, image, or biometric data generated during this step is transmitted, stored, or recorded by Poosting or any third party. The process is completely local and ephemeral.
3.2.2 What Is NOT Collected During Liveness Detection
• No video or video recording is stored.
• No frame (individual image) from the video is captured or saved.
• No raw biometric data (facial meshes, landmark coordinates, etc.) is transmitted or persisted.
• The device’s microphone is not accessed during this step.
Upon completion of the process, the system records only the binary result of the validation (liveness check passed: yes/no) on the user’s account, with no data associated with the video or the gestures performed.
3.2.3 Legal Basis and Data Protection
Liveness detection is a security measure adopted by Poosting to fulfill its obligation to verify the authenticity of the registration and to protect minors from accessing the platform improperly. Since no personal data is collected or stored during this step, it does not constitute personal data processing under the LGPD.

3.3 User Rights Regarding Biometric Verification
In accordance with the LGPD, the user has the right to:
• Be clearly informed about the collection and use of the selfie for age verification (as described in this Policy).
• Request the deletion of the selfie if processing has not yet been completed.
• Obtain confirmation regarding the processing of their biometric data.
• Contact our Data Protection Officer (DPO) for any questions or requests related to this process.
Should the user not agree to the collection of the selfie for age verification, it will not be possible to complete the registration process, as this verification is a legal and security requirement for access to the platform.

4. Your Activity and the Information You Provide
On our products, you can send messages, take photos, record videos, make purchases, and perform other actions. We refer to everything you can do on our platforms as “activity.” We collect information about your activity, including:
• Content you create, such as posts, comments, or audio recordings.
• Content provided through our camera feature, your device’s photo gallery settings, or our voice-activated features.
• Messages you send and receive, including their content, in accordance with applicable laws.
• Metadata related to content and messages, also subject to applicable legislation.
• Your interactions with Poosting’s AI and associated metadata, such as messages you or other users receive, share, or send to the AI.
• The types of content, including ads, that you view or interact with.
• The apps and features you use and the actions you take within them.
• Purchases or other transactions you make, including credit card data.
• Hashtags you use.
• The time, frequency, and duration of your activities on our Products.

5. Information with Special Protections
You have the option to provide information about your religion, sexual orientation, political views, health, racial or ethnic origin, philosophical beliefs, or trade union membership. These and other types of data may have special protections under the laws of your jurisdiction.

6. Friends, Followers, and Other Connections
We collect information about your friends, followers, groups, accounts, Poosting Pages, and other communities and users you interact with. This includes how you engage with them on our Products and which ones you interact with most.
We also collect information from your contacts, including name, email, or phone number, if you upload or import them from a device, such as when syncing your address book. If you do not use or use Poosting Products without an account, your information may still be collected.
We collect and also infer information about you based on the activity of others. For example, we may suggest a friend through the “People You May Know” feature if both of you are on a contact list that someone uploaded.

7. Information from Apps, Browsers, and Devices
We collect and receive information from and about the different devices you use and how you use them. The device information we collect includes:
• The device and software in use and other technical characteristics.
• What you are doing on the device, such as whether our app is in the foreground or if the mouse is moving, which helps us distinguish users from bots.
• Identifiers that distinguish your device from those of other users.
• Device signals.
• Information you share with us through device settings, such as GPS location, camera access, and photos.
• Information about the network your device is connected to.
• Some location-related data, even if location services are turned off in your device settings, including the use of IP addresses to estimate your general location.
• Data on the performance of our Products on your device.
• Information from cookies and similar technologies.

8. Information from Partners, Vendors, and Other Third Parties
We collect information about various activities inside and outside our apps. Here are some examples of information we receive from third parties:
• Data about purchases and payments.
• Websites visited and cookie data, such as through Poosting Social Plugins or the Poosting Pixel.
• Our partners also provide us with information such as your email address and advertising device ID, which helps us associate your activities with your account.
We receive this information regardless of whether you are logged in or have an account on our Products. To understand how a company handles your information, you should read its privacy policy.

9. How Do We Use Your Information?
We do not sell your information to anyone and never will. We also require our partners and other third parties to follow clear rules about how they use and disclose the information we provide to them.
We use your information to provide a personalized experience, including ads, and for the other purposes detailed below. For some of these purposes, our systems process data automatically. However, in certain cases, we also perform manual analysis of your information.
We use data to verify whether a product is working correctly, fix problems, test new products and features, collect feedback on product or feature ideas, and conduct research on what you like about our Products and what can be improved.

10. How We Use Location Information
We use location information you allow us to receive when you enable location services on your device. This includes, for example, GPS location. We also receive and use some location information even when services are disabled, such as IP addresses to estimate your general location. We use this data to personalize and improve our Products, including ads, and to detect suspicious activity and protect your account.

11. How Do We Share Information with Third Parties?
We do not sell your information to anyone and never will. We require our partners and other third parties to follow clear rules about how they use and disclose the information provided.

12. How Can You Manage or Delete Your Information and Exercise Your Rights?
We provide tools to delete your information. You may also have other privacy rights under applicable laws. To exercise them, access our Help Centers in the settings. If you have questions, you can contact us as described below.

13. How Long Do We Keep Your Information?
We retain information for as long as necessary to provide our Products, comply with legal obligations, or protect our interests or those of others. The decision on retention time is made on a case-by-case basis. For example, messages sent in temporary mode are retained for a shorter time than regular ones.
Regarding images collected during age verification (selfie), these are retained only for the period strictly necessary for processing and are automatically deleted upon completion of the analysis.

14. Why Is Information Transferred to Other Countries?
We share data globally, both internally (across our offices and data centers) and externally (with our service providers). As Poosting is a global company, transfers are necessary to operate the services, allowing you to connect with friends and family around the world, and to improve our Products.

15. How Do We Protect Your Information?
We apply appropriate safeguards whenever we transfer your information. For example, we encrypt data when it is in transit over public networks to protect it from unauthorized access. Images collected during age verification are transmitted using end-to-end encryption protocols (TLS/HTTPS).

16. How Do We Respond to Legal Requests, Comply with the Law, and Prevent Harm?
Sometimes we have to provide information in response to legal requests. We access, preserve, and share your data to respond to legal requests such as search warrants, court orders, or subpoenas, and to comply with applicable legislation. We may also retain information that we believe will help prevent harmful activities.

17. How Will You Know That the Policy Has Changed?
We will send you a notification before changing this Policy. You will have the opportunity to read the revised version before deciding whether you wish to continue using our Products.

18. How to Contact Poosting with Questions
If you have questions or inquiries related to your information, please contact us by mail:
Poosting Rede Social LTDA
Av. Desembargador Moreira 2020, room 801, Aldeota
Fortaleza – CE – Brazil
ZIP Code: 60.170-002

19. Privacy Notice for Brazil (LGPD)
This section addresses personal data processing operations in compliance with Brazilian legislation and serves as a supplement to this Privacy Policy.
19.1 How We Process Your Information
In compliance with Brazil’s General Data Protection Law (LGPD — Law No. 13,709/2018), organizations must have legitimate and well-defined purposes for processing your data. The categories of data used and the reasons for their processing are detailed in the table “Why and How We Process Your Data” below.
For the processing of biometric data collected during age verification, the legal basis is compliance with a legal obligation (Art. 7, II) and the protection of health and safeguarding of children and adolescents (Art. 11, II, a).
19.2 How Can You Exercise Your Rights Under the LGPD?
Under Brazil’s LGPD, you have the right to access, correct, and delete your data, as well as to confirm its processing and request its portability. In certain situations, you also have the right to object to and restrict the processing of your personal data or to withdraw the consent that serves as the basis for the processing of data you have provided to us.
19.3 How We Use Your Information for AI on Poosting
At Poosting, we use your interactions with Poosting’s AI, based on legitimate interests, to develop and improve generative AI models for our AI features and experiences. We do not use private messages between individuals and their friends and family for these purposes, unless the individual or someone in the conversation chooses to share those messages with our AIs. We also do not use information from user accounts belonging to individuals under 18 years of age in Brazil.
You have the right to object to the use of your information for these purposes. If your objection is accepted, we will no longer use your information to develop and improve generative AI models from that point forward.
19.4 International Data Transfers
We may transfer information globally when necessary, both internally, among our offices and affiliated entities, and externally, to our partners and service providers. The transfer period is restricted to what is strictly necessary to achieve the objectives described in this Policy. We adopt appropriate mechanisms for international data transfers, including encryption in transit.
19.5 Contacting Poosting or the Data Protection Officer (DPO)
If you have additional questions about this Notice or about how to exercise your rights under the LGPD, you may request more information about our data practices. The data controller responsible for your information is Poosting Rede Social Ltda. You also have the right to contact Brazil’s National Data Protection Authority (ANPD) directly.

© 2026 Poosting Rede Social Ltda — All rights reserved