Privacy Notice

1. Who is responsible for your data

Centiment is responsible for deciding how and why personal data is processed through Centiment. This notice applies to Centiment's websites, applications, and related services.

2. Data we collect

• Account data: email address, password hash, handle, display name, and, when you choose Google sign-in, Google's stable account identifier, verified-email signal, name, and profile-image URL.
• Profile and preference data: biography, profile and header images, location, website, date of birth, your choice about whether to display your date of birth, and interests you select to personalise suggestions.
• Content and interactions: posts, replies, likes, retweets, moderation outcomes, reports, and related timestamps.
• Wallet and purchase data: wallet balance, paid actions, top-up amount, transaction history, refunds, disputes, and payment-provider references.
• Technical data: session tokens, IP address and request information available in server and security logs, browser or device information, and diagnostic events.
• Communications: information you include when you contact support, make a privacy request, or appeal a moderation decision.

Most of this information comes directly from you. Technical and activity data is created when you use the Service. External sign-in or payment providers may send us the information needed to complete the action you requested.

Centiment requests only Google's basic OpenID, email, and profile information for authentication. We do not request ongoing access to your Google account or store a Google refresh token.

3. Why we use it

Where consent is required, we will ask for it and you may withdraw it for future processing. Where we rely on legitimate interests, we balance those interests against your rights and reasonable expectations.

4. What is public

Your handle, display name, public profile fields, profile images, posts, replies, likes, and retweets may be visible to anyone, including people without an account. Public content can be copied, indexed, or shared by others outside Centiment. Your email address, password hash, session token, private date of birth, and wallet balance are not public profile fields.

5. Automated moderation

Before a post or reply is published, Centiment sends its text and moderation questions to TypeSafe AI's Jev API. We do not intentionally include your email address, password, wallet balance, or profile details in that request. We store the resulting scores, reason, model, policy version, and action so we can apply and audit our rules.

A result may allow publication, trigger a kindness nudge, place content in review, hold it, or block it. Jev is a service of TypeSafe AI, Inc.; its processing is also described in TypeSafe's privacy policy. Its public materials state that inputs are not used to train its models, but zero-data-retention is a separate enterprise option and should not be assumed for every account.

If you believe moderation made a mistake, you may ask for review through the contact channel below.

6. Who receives data

• Other people and the public for fields and activity you make public.
• Google when you choose Google sign-in, so Google can authenticate you and return the basic account information described above.
• Bachs and other payment providers we make available when you purchase wallet balance. The provider operates the checkout, processes the payment, and sends Centiment the identifiers and payment status needed to fulfil, refund, and reconcile your purchase. Centiment does not receive your complete card or mobile-money credentials.
• Other service providers that supply hosting, databases, storage, security, transactional email delivery, content moderation, or support, under appropriate instructions or agreements.
• Authorities or affected parties where disclosure is required by law or reasonably necessary to protect rights, safety, and the integrity of the Service.
• A successor organisation as part of a merger, financing, reorganisation, or sale, subject to applicable safeguards.

Centiment does not sell personal data or use it for third-party behavioural advertising.

7. International processing

Some providers may process data outside the country where you live. Where required, we use contracts, adequacy findings, consent, or other lawful safeguards intended to protect personal data during an international transfer.

8. How long we keep data

We keep personal data only for as long as reasonably needed for the purposes above. Account and profile data is generally kept while your account is active. Session records expire or are invalidated; the current sign-in cookie lasts up to 30 days. Public content remains until it is deleted or the account is removed, subject to moderation, legal, dispute, fraud-prevention, and backup retention.

Wallet transactions and related financial records may be retained longer where needed for accounting, fraud prevention, refunds, or law. Moderation records may be retained to enforce rules consistently, investigate abuse, and handle appeals. When retention is no longer justified, data is deleted, anonymised, or securely destroyed.

9. Your choices and rights

Depending on the law that applies to you, you may ask to access, correct, update, delete, restrict, or obtain a copy of personal data; object to particular processing; withdraw consent; or challenge a significant automated decision. You may also edit many profile fields directly and choose whether your date of birth is public.

We may need to verify your identity and may preserve data where law allows or requires it. We aim to respond within the period required by applicable law; requests covered by Uganda's data protection framework are ordinarily addressed within 30 days.

You may complain to the Personal Data Protection Office of Uganda or the data protection authority where you live.

10. Children and security

Centiment is not directed to children who cannot lawfully consent to this processing or agree to the Terms. If you believe a child provided personal data without required permission, contact us.

We use reasonable organisational and technical safeguards designed to protect personal data. No online service can promise absolute security, so use a unique password and notify us if you suspect account compromise.

11. Changes and contact

We may update this notice when the Service, our providers, or the law changes. We will update the date above and provide additional notice when a change materially affects your rights.

A dedicated privacy request address will be added before public launch.