Privacy Policy
Last updated 22 August 2026
1. WHO WE ARE
This Privacy Policy explains how Vuonce ("we", "us") collects, uses, and protects personal data when you use vuonce.com, in accordance with Kenya's Data Protection Act, 2019, and — for visitors in the European Economic Area or UK — the General Data Protection Regulation (GDPR).
2. INFORMATION WE COLLECT
Account information: name, email address, and (for creators) identity/age verification details, mobile money or payout account details, and country. Purchase information: which Drops you've purchased, transaction amounts, and payment status. We do not store your full card or mobile money PIN — payments are processed by our third-party payment providers. Buyer/waitlist information: if you leave an email to be notified about a creator's future Drops, we store that email and which creator/drop it relates to. Usage and device information: IP address, browser/device type, pages viewed, and approximate location (derived from IP), collected automatically and via cookies (see our Cookie Policy). Content and communications: messages you send to support, content reports you file, and ratings you leave after a purchase.
3. HOW WE USE YOUR INFORMATION
To provide the service (process purchases, deliver content, issue payouts); to verify age and identity where required; to communicate with you about your account, purchases, or Drops you've asked to be notified about; to detect and prevent fraud, abuse, and policy violations; to comply with legal obligations; and to improve the platform.
4. LEGAL BASIS FOR PROCESSING (GDPR)
Where GDPR applies, we process your data based on: performance of a contract (providing the service you signed up for), legitimate interests (fraud prevention, platform security, service improvement), consent (where you've explicitly opted in, e.g. marketing notifications), and legal obligation (tax, record-keeping, and law-enforcement requests).
5. WHO WE SHARE DATA WITH
We share data with the service providers necessary to run Vuonce: video hosting/CDN infrastructure, payment processors (including M-Pesa and card gateways), transactional email delivery, and — only where legally required — law enforcement or regulatory authorities. We do not sell your personal data.
6. DATA RETENTION
We retain account and transaction data for as long as your account is active and as needed to comply with tax, accounting, and legal obligations. Waitlist/notify-me emails are retained until you unsubscribe or the associated creator account is deleted.
7. YOUR RIGHTS
Subject to applicable law (including the Kenya Data Protection Act, 2019 and, where applicable, GDPR), you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; and request a copy of your data in a portable format. To exercise these rights, contact us through your account settings or the support address provided there. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or your local supervisory authority.
8. CHILDREN'S PRIVACY
Vuonce is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18. If we become aware that we have done so, we will delete it and take appropriate action on the associated account.
9. INTERNATIONAL DATA TRANSFERS
Because our infrastructure providers may process data outside Kenya, your data may be transferred internationally. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.
10. SECURITY
We use industry-standard technical and organizational measures — including encryption in transit, access controls, and row-level data isolation — to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "last updated" date on this page.
12. CONTACT
Questions about this Privacy Policy, or requests to exercise your data rights, can be sent to the support address listed in your account settings.