Privacy Policy

How UBee collects, uses, shares, and protects your information — and the controls and rights you have.

Operated by WooWay LLC, a Virginia limited liability company · Effective: June 2026 · Last updated: June 2026 · Version 1.0 (baseline)

Related: Terms of Service · Cookie Policy · Children's Privacy · Community Guidelines · Units

1. Introduction & scope

This Privacy Policy explains how WooWay LLC ("WooWay," "UBee," "we," "us," or "our") collects, uses, shares, and protects information in connection with UBee. It applies to the UBee mobile apps for iOS and Android, the ubee.social website, and the related services we operate (together, the "Service"). When we say "you," we mean a person who uses the Service.

We have tried to write this policy plainly. Please read it together with our Terms of Service, Community Guidelines, Cookie Policy, and Children's Privacy Notice. This policy does not apply to third-party services that operate independently of UBee, even where you reach them through the Service; those services have their own privacy practices (see Section 26). By using UBee, you acknowledge the practices described here, to the extent permitted by applicable law. Where local law gives you specific rights or requires a specific legal basis, those laws govern, and the region-specific sections below supplement this policy.

UBee is a general-audience service intended for adults aged 18 and older, or the higher minimum age required where you live (see Section 22).

2. Definitions

To keep this policy precise, a few terms are used in a specific way:

Personal information / personal data

information that identifies, relates to, or could reasonably be linked with a particular individual or household. Different laws use slightly different definitions; we use the term broadly.

Process / processing

any operation performed on information — for example, collecting, storing, using, sharing, or deleting it.

Controller

the party that decides why and how personal information is processed. For the Service, WooWay LLC is the controller.

Service provider / processor

a company that processes personal information on our behalf and under our instructions, such as a hosting provider (see Section 15).

Content

the messages, posts ("Moments"), group activity, reactions, reports, and other material you create or share through the Service.

Sensitive personal information

categories that some laws treat as more sensitive (such as account log-in credentials, certain government identifiers, precise location, or data revealing health or other protected characteristics). UBee deliberately limits the sensitive information it handles (see Section 8).

Aggregated / de-identified information

information that has been combined or stripped of identifiers so that it no longer identifies you (see Section 16).

3. Who we are

UBee is operated by WooWay LLC, a Virginia limited liability company. For the purposes of the European Economic Area ("EEA") and United Kingdom ("UK") General Data Protection Regulation, and comparable laws, WooWay LLC is the controller of the personal information described in this policy. You can reach our privacy team at [email protected]. All of our contact channels are in Section 28.

4. Your privacy controls

Staying in control of your information is a core part of UBee. We give you tools to manage what you share and how we process your data:

• Access and update your information. You can view and edit most of your basic account and profile information directly in the app under Me → Settings.
• Delete your account and information. You can delete your entire account from Me → Settings → Delete account. When you do, your account is deactivated and hidden from other users, and you have 30 days to restore it by signing back in. After 30 days, your account and its associated data are permanently deleted and can no longer be restored by you, subject to the limited legal and safety exceptions described in Section 19. You can also delete individual content you have created, such as messages and posts, within the app.
• Control who can contact you. You can block and mute other users. Blocking is bidirectional and prevents further contact and visibility between you and the blocked person.
• Manage device permissions. You control device-level permissions through your operating system — for example, whether UBee may send you push notifications. You can change these at any time in your device settings; turning some off may limit certain features.
• Export your information. You can request a machine-readable copy of certain information by contacting [email protected].
• Manage communications. You can opt out of non-essential messages from us by following the instructions in the message or adjusting your settings (see Section 11). We may still send you essential service, security, and transactional messages.
• Object to or restrict processing. Depending on where you live and the data involved, you may ask us to stop or limit certain processing (see Section 21).

We describe the legal rights behind these controls — and how to exercise them where the in-app tools don't cover your request — in Section 21 (Your rights), Section 24 (U.S. state rights), and Section 25 (regional disclosures).

5. Information you provide to us

When you use UBee, you provide certain information directly:

• Account and sign-in information. To create an account, we receive an email address and a unique account identifier. We currently support signing in with your email, with Sign in with Apple, and with Google; we may add additional sign-in methods over time. Where you sign in through a third-party provider (such as Apple or Google), that provider supplies the email address and identifier needed to create and secure your account. Sign-in credentials, including any password, are handled by our authentication provider; we do not store your password ourselves.
• Profile information. A display name, a profile avatar, an optional short "About me," and any other profile details you choose to add as the Service evolves. Profile avatars are currently generated within the app from a set of preset styles rather than uploaded photographs; if we later offer additional profile media options, we will describe how that information is handled.
• Age and date of birth. An age confirmation and/or date of birth, which you provide so that we can confirm you meet the minimum-age requirements for your country, apply appropriate protections, and operate age-appropriate features.
• Hometown and current area. The places associated with your profile are self-reported and entered by you as a country → region → city selection. The level of detail shown to others may be limited (for example, to a broader area), as described in the app.
• Content and communications. The content and interactions you create through the Service — for example, direct messages, posts ("Moments"), group activity, and reactions — together with information about that content, such as the date and time it was created and who it was shared with. As features evolve, the types of content you can create may expand.
• Reports and safety submissions. Information you submit when you report another user or piece of content, including the reason for the report and any details you provide.
• Communications with us, and research. Information you provide when you contact our support, privacy, legal, or safety addresses, and information you choose to share if you take part in a survey, beta, or other research we may run, together with records of our response.

6. Information we generate when you use UBee

When you use the Service, we collect a limited amount of information about how it is used and the device you use it on. We collect this to operate, secure, and improve UBee.

• Usage and activity information. Information about how you interact with the Service — for example, the features you use, the actions you take, the communities and groups you join, your settings and preferences, and the frequency and duration of your activity.
• Content metadata. Information about the content you create or interact with — such as when it was created, the format, and the audience it was shared with — which helps us deliver, organize, and secure the Service.
• Device and software information. Technical information about the device and software you use, which may include your device type and model, operating system and version, the UBee app version and build, a device or installation identifier, language and locale, time zone, and display and appearance settings (such as light or dark mode).
• Connection and network information. Your IP address and related connection information, from which we derive an approximate country and region (not a precise location) for security, fraud and abuse prevention, rate limiting, and to meet legal-compliance obligations such as applying export-control and sanctions rules.
• Diagnostics and reliability information. Crash reports, error logs, performance data, and similar diagnostic information needed to detect problems and keep the Service running reliably.
• Push notification token. If you enable notifications, we store the device token your platform issues so we can deliver alerts such as a new message or friend request.
• Cookies and similar technologies (website). When you visit ubee.social, we use the limited cookies and similar technologies described in our Cookie Policy.

7. Information we receive from others

We may receive a limited amount of information about you from sources other than you:

• Sign-in providers. When you sign in using a third-party method (such as Apple or Google), that provider gives us the email address and account identifier needed to create and secure your account, consistent with that provider's terms and your settings with them.
• Infrastructure and security signals. Our service providers may supply technical signals needed to deliver, secure, and troubleshoot the Service.
• Other users. Other people may provide information that involves you — for example, when they interact with content you shared, or when they submit a report that names you. We use this information for the purposes described in this policy, including safety and moderation.

We do not buy personal information from data brokers, and we do not obtain information about you from outside sources to build advertising profiles.

8. Information we do not collect

Part of UBee's design is collecting less. Today, UBee does not:

• track your device's precise or GPS location;
• access your device's contacts/address book, camera, microphone, photo library, or device sensors for collection;
• collect biometric identifiers, government-ID images, call or SMS logs, or your browsing history outside the app; or
• collect payment-card numbers (we do not currently sell anything in the app; if we ever introduce paid features, payments would be handled by the app stores or a payment processor under their own terms).

If we introduce a feature that would change any of this — for example, an optional feature that requests access to your camera or photos to share media — we will request the appropriate permission, describe the new data handling, and update this policy.

9. How we use information

We use the information described above for the purposes below. Where the law requires a legal basis, each purpose maps to a basis in Section 12.

• Provide, operate, and maintain the Service — make UBee available, keep it working across devices and operating systems, and provide customer support.
• Create and secure your account — register you, sign you in, authenticate you, and protect your account from unauthorized access.
• Enable social features — connect you with hometown-based communities near your current area, and run chat, Moments, friends, and groups.
• Personalize and make recommendations — remember your settings and suggest communities, groups, friends, and content that may be relevant (see Section 10).
• Communicate with you — send service, security, and administrative messages, respond to your requests, and (where permitted and not opted out) share news and updates (see Section 11).
• Keep the Service safe and secure — prevent, detect, investigate, and respond to spam, fraud, abuse, harassment, ban evasion, security incidents, and other harmful, deceptive, or unlawful activity, and protect the integrity of features such as the cosmetic Units counter.
• Moderate content and enforce our rules — operate our reporting and moderation systems and enforce our Community Guidelines, Terms of Service, and related policies (see Section 17).
• Research, analyze, and improve — understand how UBee is used, troubleshoot problems, measure and improve performance, and develop new features.
• Comply with law and protect rights — meet our legal obligations, respond to lawful requests, report child sexual abuse material as required, apply export-control and sanctions requirements, and establish, exercise, or defend legal claims.
• With your consent or at your direction — for any other purpose we describe to you and to which you agree.

We do not sell your personal information, we do not "share" it for cross-context behavioral advertising, and we do not show third-party advertising in the UBee app. We do not use the content of your private messages to build advertising or marketing profiles.

10. Personalization & automated processing

To help UBee feel relevant, we may use information about you and your activity to personalize your experience — for example, to suggest communities, groups, friends, or content that may interest you, and to organize what you see. As UBee grows, we may use information such as your self-reported area and your age or date of birth to help operate community and group features, including how people are grouped or matched, and to keep experiences age-appropriate.

This personalization is automated in part, but UBee does not make decisions that produce legal or similarly significant effects about you solely by automated means without a way for you to seek human review where the law provides for it. Where automated processing is subject to specific rights under applicable law (for example, in the EEA/UK), you can exercise those rights as described in Section 21. We do not use this information for third-party advertising.

11. Marketing & communications

We send two broad kinds of messages:

• Service and transactional messages — for example, confirmations, security alerts, important changes to our policies, responses to your requests, and notices about your account or activity (such as a new message or friend request, if you have notifications enabled). These are part of providing the Service, and you generally cannot opt out of them while you have an account, though you can control push notifications through your device settings.
• News and updates — occasional, non-essential messages about features and improvements, where permitted. You can opt out of these at any time by following the unsubscribe instructions in the message or adjusting your settings, without affecting your ability to use the Service.

We do not provide your contact information to third parties for their own marketing. We do not show third-party advertising in the app, and we do not sell or "share" your information for cross-context behavioral advertising.

12. Legal bases for processing (EEA/UK and similar regimes)

Where data-protection law requires a legal basis, we rely on the following:

• Performance of a contract — to provide the Service you sign up for and operate its core features.
• Legitimate interests — to secure the Service, prevent and address abuse and fraud, understand and improve UBee, and keep our community safe, balanced against your rights and freedoms.
• Legal obligation — to comply with applicable laws, including mandatory child-safety reporting and responding to lawful process.
• Consent — where we ask for it (for example, push notifications, or any optional processing that requires consent), which you may withdraw at any time without affecting processing already carried out.
• Vital interests / public interest — in limited cases, to protect someone's life or safety, or where processing is necessary in the public interest as recognized by law.

13. What others can see

UBee includes both more-private and more-public spaces, and it helps to understand the difference:

• Profile basics — your display name, avatar, "About me," and the hometown/area you have chosen (at the level of detail the app displays) are visible to other users you interact with.
• Direct messages are visible to you and the people in the conversation. They are not a public space.
• Moments and group activity are visible to the people or communities you share them with. Depending on the space, this audience may be broad.

Please choose the space and audience appropriate for what you want to share. Keep in mind that people who can see your content may be able to copy, save, or re-share it outside UBee, and we cannot control everything others do, although other users are bound by our terms. Content you have shared with others may remain visible to them even after you delete it from your own view or close your account, as described in Section 19.

14. How we share information

We share personal information only in the limited ways below. We do not sell it, and we do not "share" it for cross-context behavioral advertising (as those terms are defined under California and other U.S. state laws).

• With other users, by design — as described in Section 13.
• With service providers who process information on our behalf, under contract and confidentiality and security obligations, and only to provide services to us (see Section 15).
• For legal reasons and safety — to comply with law, valid legal process, or an enforceable government request; to enforce our terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, and safety of UBee, our users, and the public. We may do so without notice to you where we believe it is necessary or are legally required. Requests from law enforcement are handled under our Law Enforcement Guidelines.
• Child-safety reporting — we report apparent child sexual abuse material to the National Center for Missing & Exploited Children ("NCMEC") and preserve the related information for the period the law requires — currently at least one year for such reports, and longer where legally required — including after an account is deleted.
• Business transfers — if UBee is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, information may be transferred as part of that transaction, subject to this policy or a successor policy with comparable protections. The acquirer would assume the rights and obligations described here as permitted by law.
• With your direction or consent — when you ask us to share information, or otherwise consent.

15. Service providers

We rely on a small number of trusted providers to run UBee. They may process personal information only to provide services to us, under contractual confidentiality and security obligations, and not for their own purposes. We use providers in the following categories:

• Cloud hosting & infrastructure — to run our application and databases;
• Authentication / sign-in — to verify your identity when you sign in;
• Messaging & notifications — to deliver push notifications and transactional messages;
• Diagnostics & reliability — to monitor errors, crashes, and performance;
• Safety & moderation tooling — to help classify and review reported content; and
• Website delivery — to serve and secure the ubee.social website and route messages to our contact addresses.

Our set of providers may change as the Service evolves. To request the current list of our key service providers, contact [email protected].

16. Aggregated & de-identified information

We may create aggregated, anonymized, or de-identified information that does not identify you (for example, statistics about how features are used). We may use and retain this information for any lawful business purpose, including to operate, analyze, and improve the Service. Where we maintain information in de-identified form, we will maintain and use it without attempting to re-identify it, except as permitted by law.

17. Safety, moderation & child protection

Safety is central to UBee. Every place where users can post or message includes an in-app report tool. When you submit a report, we may review the reported content and limited related information to decide what action to take, consistent with our Community Guidelines. Possible actions include dismissing the report, warning the user, removing content, and limiting, suspending, or terminating accounts.

For most content, our review is reactive — triggered by a user report — rather than proactive scanning of private conversations. To help prioritize and route reports, we may use automated tools to classify reported content. We have zero tolerance for child sexual abuse and exploitation; see our Child Safety Standards and CSAM reporting page. We also operate a notice-and-removal process for non-consensual intimate imagery under the TAKE IT DOWN Act, and a DMCA process for copyright. If we introduce features that involve images or other media, additional automated safety measures may apply, which we will describe.

18. Cookies & similar technologies

The UBee mobile app does not use advertising cookies or third-party ad trackers. Our website uses only the cookies and similar technologies needed to operate and secure the site and to remember your language and preferences. We do not respond to browser "Do Not Track" signals in a standardized way, because there is no common industry standard; we instead operate as described in this policy and the Cookie Policy, which has further details.

19. How long we keep information

We keep personal information only as long as we need it for the purposes described in this policy, and to meet our legal, safety, security, dispute-resolution, and record-keeping obligations. When you delete your account, it is first deactivated and hidden from other users, and you enter a 30-day grace period during which you can restore the account by signing back in. If you do not restore it, your account and the social data associated with it are permanently deleted after the grace period ends, and your sign-in record is removed. Some information is kept for longer, and may be retained even after your account is deleted, where we are legally required or permitted to do so — for example, to comply with law, prevent fraud, abuse, and ban evasion, resolve disputes, enforce our agreements, or preserve evidence in connection with a safety or law-enforcement matter. In particular, where we make a child-safety report or receive a legal-preservation or law-enforcement request, we preserve the related information for the period the law requires — currently at least one year for child-safety reports, and longer where legally required — independently of, and surviving, the account-deletion process. Residual copies may also persist for a limited time in routine backups before they are overwritten. The table below summarizes our general approach; actual periods vary with context and legal requirements.

20. Security & your responsibilities

We use technical and organizational measures appropriate to the risk to protect personal information — including encryption in transit, access controls, and the principle of least privilege. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we work to protect your information and to detect, investigate, and respond to incidents. If a breach affecting your personal information occurs, we will notify you and the relevant regulators where and as required by applicable law.

You also play a part in keeping your account safe: keep your sign-in method secure, be thoughtful about what you share and with whom, and report anything that looks wrong. Please don't share content you wouldn't want others to be able to save or pass on.

21. Your rights

Depending on where you live, you may have some or all of these rights:

• Access — request a copy of the personal information we hold about you;
• Correct — ask us to fix inaccurate information;
• Delete — delete your entire account in the app, or ask us to delete personal information;
• Portability / export — request a machine-readable copy of certain information;
• Object to or restrict certain processing, and (where applicable) opt out of profiling or solely-automated decision-making;
• Withdraw consent where processing relies on consent (for example, by turning off notifications); and
• Opt out of sale/"sharing" for targeted advertising — which we do not do, so there is nothing to opt out of.

You can exercise many of these rights using the in-app tools in Section 4. For anything else, email [email protected]. We will respond within the time required by applicable law (for example, 30 days under the GDPR, 45 days under the CCPA, subject to permitted extensions). We will not discriminate against you for exercising your rights. You may use an authorized agent where the law allows; we may need to verify your identity, and the agent's authority, before acting. If you believe we have not adequately addressed your concern, you may have the right to lodge a complaint with your local data-protection or supervisory authority.

22. Children & minors

UBee is intended for adults aged 18 and older. UBee is not directed to children, we do not direct UBee to anyone under 18, and we do not knowingly collect personal information from anyone under 18. Where local law sets an even higher minimum age for using an online service or for consent to data processing, that higher age applies, and we will not knowingly allow use, or collect personal information, contrary to those requirements. If you believe someone under 18 has provided us personal information, contact [email protected] and we will take appropriate steps to delete it. For more, see our Children's Privacy Notice.

23. International data transfers

UBee is operated from the United States. If you use UBee from outside the United States, your information will be transferred to and processed in the United States and in other countries where we and our providers operate, which may have different data-protection laws than your own and where your information may be accessible to courts, law enforcement, and authorities under applicable law. Where required, we use appropriate safeguards for such transfers — for example, the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum — and you may request a copy of the relevant safeguard at [email protected]. In some jurisdictions — including Japan, South Korea, and Malaysia — a transfer of your information to the United States is made on the basis of the consent you provide when you agree to this policy, or on another basis permitted by local law; the region-specific details are in Section 25.

24. United States state privacy rights

This section provides the disclosures and rights required by U.S. state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (the "CCPA/CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), and comparable laws in Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states.

No sale or sharing. In the preceding 12 months, we have not sold personal information and have not "shared" it for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of consumers under 16.

Categories of personal information we collect, with the business/commercial purposes and disclosure for each:

Sources of this information are: you; your automatic use of the Service; and our sign-in and infrastructure providers (see Sections 5–7). Your rights. Residents of states with comprehensive privacy laws may have rights to know/access, delete, correct, and obtain a portable copy of their personal data, to opt out of sale, sharing, targeted advertising, and certain profiling (we do none of these), and to limit the use of sensitive personal information (we already limit such use to permitted purposes). To exercise a right, or to appeal a denied request, contact [email protected]. We retain each category for as long as described in Section 19. As WooWay LLC is a Virginia company, Virginia residents are welcome to contact us through the same channel.

California "Shine the Light" (Cal. Civ. Code §1798.83). We do not disclose personal information to third parties for their own direct-marketing purposes, so there is nothing to request under this law.

Nevada (SB 220). We do not sell covered personal information as defined under Nevada law. Nevada residents may still submit a verified opt-out request to [email protected].

No financial incentives. We do not offer financial incentives or price or service differences in exchange for the collection, sale, or retention of personal information.

25. Additional disclosures by region

Depending on where you live, the following supplements may apply. Where a supplement conflicts with the rest of this policy, the supplement controls for residents of that place. This list is not exhaustive, and we will provide any further region-specific disclosures the law requires for the places where UBee is available.

• European Economic Area / United Kingdom. The legal bases in Section 12 apply; you have the GDPR/UK GDPR rights of access, rectification, erasure, restriction, portability, and objection, rights related to automated decision-making, and the right to lodge a complaint with a supervisory authority. International transfers are addressed in Section 23. Where required, we will designate an Article 27 representative for the relevant region.
• Switzerland. The Swiss Federal Act on Data Protection (nFADP) applies; you have rights of access, correction, and deletion, and may contact the Swiss Federal Data Protection and Information Commissioner.
• New Zealand. We handle personal information consistent with the Privacy Act 2020 and its Information Privacy Principles; you may complain to the Office of the Privacy Commissioner.
• Singapore. We handle personal data consistent with the Personal Data Protection Act 2012 (PDPA); you may request access and correction and may contact the Personal Data Protection Commission.
• Hong Kong. We handle personal data consistent with the Personal Data (Privacy) Ordinance (Cap. 486) and its Data Protection Principles; you may complain to the Privacy Commissioner for Personal Data.
• Taiwan. We handle personal data consistent with the Personal Data Protection Act.
• Israel. We handle personal information consistent with the Protection of Privacy Law and its regulations.
• Mexico. We handle personal data consistent with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP); you may exercise your ARCO rights (access, rectification, cancellation, opposition) via [email protected].
• Canada (including Quebec). We handle personal information consistent with PIPEDA and, for Quebec residents, Law 25; our Privacy Officer can be reached at [email protected].
• Japan. We handle personal information consistent with the Act on the Protection of Personal Information (APPI). Where, in providing the Service, we cause information stored on your device to be transmitted to third parties, we make the disclosures required by the external-transmission rules of the Telecommunications Business Act. Transfers of your information to the United States are made with your consent given after this notice, or on another basis permitted by the APPI.
• South Korea. We handle personal information consistent with the Personal Information Protection Act (PIPA). A Korean-language version of this policy is available at /privacy-ko/. Our privacy officer can be reached at [email protected]. Transfers of your information to the United States are made with your consent or on another basis permitted by PIPA.
• Malaysia. We handle personal data consistent with the Personal Data Protection Act 2010 (as amended). Transfers of your personal data outside Malaysia, including to the United States, are made with your consent or on another basis permitted by the PDPA.
• Chile. We handle personal data consistent with Chilean law, including Law No. 21.719 as its provisions take effect. You may exercise rights of access, rectification, deletion, and objection by contacting [email protected].
• India. We handle personal data consistent with the Digital Personal Data Protection Act, 2023 and applicable Information Technology Rules as they take effect. You may raise a grievance with us at [email protected], and we will respond within the period required by law. UBee is intended for adults aged 18 and older. Because UBee's minimum age is 18, and the Act treats a person under 18 as a child, we do not knowingly process the personal data of a child, and the Act's verifiable parental-consent requirements do not arise for UBee.

26. Third-party links & services

UBee may link to or interoperate with third-party websites and services that we do not control — for example, your sign-in provider, or a link another user shares. This policy does not apply to those services, and we are not responsible for their practices. We encourage you to review the privacy policies of any third party before providing information to it.

27. Changes to this policy

We may update this policy from time to time — for example, when we add features, change our practices, or to reflect changes in the law. When we make material changes, we will update the "Last updated" date above and, where appropriate or required, provide additional notice (for example, in-app or by email). We will always handle previously collected information in accordance with the policy in effect when it was collected. Your continued use of UBee after an update takes effect means you accept the revised policy, to the extent permitted by law.

28. How to contact us

For privacy questions, requests, or concerns, contact our privacy team at [email protected]. For general support, use [email protected]. For legal matters and legal notices, use [email protected]. Email is the fastest and best way to reach us; please use the address that best fits your request, and we will route it appropriately.