Privacy Policy

Last updated: October 2026

This Privacy Policy describes how Puzzerax ("we", "us") collects, uses, and protects your information when you use UGCKit ("the Service").

1. Information We Collect

1.1 Account Information

Name, email address, and authentication data when you sign up via Google, Apple, or email/password. Sign in with Apple may supply a private relay address rather than your real one; we store whichever address Apple sends.

1.2 Profile Information

Display name, bio, location, content niches, portfolio URLs, and avatar that you provide in your profile.

1.3 Payment Information

Bank account details, PayPal email, or other payment information you provide for receiving creator payments. This data is stored in our database and accessible only to project administrators for payment processing.

1.4 Social Media Tokens

When you connect social media accounts (TikTok, Instagram, YouTube, Twitter/X, LinkedIn, Pinterest), we store OAuth access tokens and refresh tokens to post on your behalf. We never store your social media passwords.

1.5 Content & Media

Images, videos, text, captions, and other media you create, upload, or generate using our tools. This includes AI-generated content.

1.6 Usage Data

Credit usage, content generation history, login activity, and feature usage for service improvement and billing.

1.7 Communications

Messages sent through our in-app messaging system, including messages forwarded via @ugckit.io email addresses.

2. How We Use Your Information

To provide, maintain, and improve the Service
To publish content to your connected social media accounts
To process creator payments
To facilitate communication between project members
To forward emails received at your @ugckit.io address to your in-app Messages
To send notifications about content status, payments, and important updates
To generate content using AI services on your behalf
To enforce our Terms of Service

3. AI Processing

When you use AI features, your prompts and content context are sent to third-party AI providers (Google Gemini, OpenAI) for processing. These providers process data according to their own privacy policies. We do not send your personal information (name, email, payment details) to AI providers — only content-related prompts.

4. Data Sharing

We do not sell your personal information. We share data only:

Social media platforms — when you publish content (media, captions, metadata)
AI providers — prompts and content for generation (Google, OpenAI)
Cloud infrastructure — Google Cloud Platform for hosting, storage, and processing
Email service — Brevo for transactional email notifications
In-app purchases — RevenueCat, together with the Apple App Store and Google Play, to validate purchases and manage subscriptions made inside the mobile app. We receive the purchase outcome and an anonymised customer identifier; we never receive your card details.
Payment processors — Stripe for subscription billing
Project administrators — your profile, content submissions, and payment info are visible to project admins you work with
Legal compliance — when required by law or to protect our rights

5. Creator-Specific Data

If you participate as a creator:

Your content submissions are visible to project administrators
Your payment information is accessible to project administrators for payment processing
Your display name and content are visible to other creators in the same project via the Community Feed
Your email address and @ugckit.io handle are NOT visible to other creators

6. Email Forwarding

If you are assigned an @ugckit.io email address, emails sent to that address are received by our Cloudflare Email Worker, processed, and delivered to your in-app Messages. Email content is stored as chat messages. We do not scan email content for advertising purposes.

7. Data Security

We implement industry-standard security measures including:

HTTPS encryption for all data in transit
Firebase Authentication for secure login
Google Cloud Platform infrastructure with SOC 2 compliance
Role-based access controls for project data

However, no system is 100% secure. We cannot guarantee absolute security of your data.

8. Your Rights

You can:

Access and update your profile information at any time
Disconnect social media accounts at any time
Delete your account and request removal of associated data
Request a copy of your personal data
Opt out of non-essential email notifications
Request correction of inaccurate data

To exercise these rights, contact us at privacy@ugckit.io.

9. Data Retention

We retain your data while your account is active. Upon account deletion:

Personal data is removed within 30 days
Content published to social media platforms remains on those platforms
Creator program content that has been approved/published is retained by the project owner
Anonymized usage data may be retained for analytics

10. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from minors. If we learn that we have collected data from a user under 18, we will delete it promptly.

11. International Data Transfers

Your data may be processed in the United States (Google Cloud), Singapore (Kling AI), and other jurisdictions where our service providers operate. By using the Service, you consent to these transfers.

12. Cookies & Tracking

We use essential cookies and local storage for authentication and user preferences. We do not use third-party advertising trackers.

13. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.

14. Contact Us

For privacy questions or data requests:
Email: privacy@ugckit.io
Address: Puzzerax, Lagos, Nigeria