Legal

Privacy Policy

Last updated: 4 March 2026·Effective date: 4 March 2026
1.

Introduction

Welcome to Rovo ("we", "us", "our"). We operate a short-form video sharing platform accessible via our mobile application and website (collectively, the "Platform").

We are committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This Policy applies to all users of the Platform, including visitors, registered users, and content creators ("you", "User").

2.

Data Controller

The data controller responsible for your personal data is:

ROVO HOLDINGS LTD

Registered address: 20 Wenlock Road, London, N1 7GU

Company registration number: 17030662

Contact email: business@rovo-app.com

3.

Data We Collect

3.1Data You Provide Directly

The first category of personal data we collect is information that you provide to us directly through your use of the Platform. This includes:

  • Account information: your username, email address, phone number, and password (stored in hashed form)
  • Profile information: your profile picture, biographical description, and any links you choose to display
  • Content: all videos, captions, comments, messages, and any other material you upload or share on the Platform
  • Communications: any messages you send us through our support channels or feedback forms
  • Payment data: the billing details necessary to process transactions, handled exclusively by third-party payment providers — we do not store full card numbers at any point

3.2Data Collected Automatically

The second category comprises data we collect automatically when you access or use the Platform. This includes:

  • Device information: your device model, operating system version, unique device identifiers, mobile network details, and browser type
  • Usage data: videos you have watched, interactions you have made (likes, shares, comments, and follows), time spent on the Platform, scroll behaviour, and search queries
  • Location data: derived from your IP address to establish an approximate location; collected with greater precision only where you have expressly granted permission
  • Log data: your IP address, access times, pages visited, referring URLs, and crash reports
  • Cookies and tracking technologies: described in further detail in Section 8 of this Policy

3.3Data from Third Parties

The third category consists of data we receive from third parties. This includes:

  • Basic profile data provided by social login providers (Google, Apple, or Facebook) where you choose to register or sign in using one of those services
  • Aggregated and pseudonymous behavioural data received from analytics partners
  • Where applicable, interest segments and ad interaction data shared by advertising partners for the purpose of serving and measuring targeted communications
4.

How We Use Your Data

We use your data to create and manage your account, and to ensure that you can access and use the Platform in a secure and personalised manner. Where you upload content, we process the relevant data to display, distribute, and promote that content to other users in accordance with your settings.

We also use your data to personalise your experience on the Platform, including through the use of recommendation algorithms that analyse your interactions and preferences in order to curate a feed of content that is relevant and engaging to you.

Your personal data further enables us to provide the social and interactive features of the Platform, such as the ability to follow other users, send and receive messages, create duet videos, and engage with content through reactions and comments.

Where you make use of paid features or participate in our creator monetisation programme, we process the necessary financial and transactional data in order to handle payments and administer your earnings accurately and securely.

We also process your data as part of our ongoing efforts to maintain the integrity and safety of the Platform. This includes detecting and preventing fraudulent activity, abuse, spam, and the circulation of illegal or harmful content, as well as enforcing our Terms and Conditions and Community Guidelines.

We may use your contact details to send you service-related notifications, security alerts, and operational updates. Where you have given your consent, we may also send you marketing communications. You may withdraw this consent at any time.

We conduct analytics on how the Platform is used in order to understand user behaviour, identify areas for improvement, and develop new features and services. We also process personal data to the extent necessary to comply with applicable laws, regulations, and any court orders or other binding legal instruments.

5.

Content and User-Generated Data

When you post an image, video, or any public content on the Platform, that content is visible to other users and, depending on your privacy settings, to the general public. We are not responsible for how other users interact with or share your public content.

You retain ownership of your content. By posting it, you grant us a non-exclusive, royalty-free, worldwide licence to host, display, distribute, and promote it within the Platform and for marketing purposes (subject to your settings).

6.

Sharing Your Data

We do not sell your personal data to third parties, nor do we use it for purposes incompatible with those for which it was originally collected.

We may share your personal data with certain categories of recipients where necessary for the operation of the Platform or as required by law. In all cases where we engage third parties to process personal data on our behalf, we ensure that appropriate contractual safeguards are in place.

We work with a range of service providers who assist us in delivering and improving the Platform. These include providers of hosting and content delivery infrastructure, analytics services, payment processing, customer support tools, and content moderation solutions. Such providers are permitted to process your personal data solely for the purposes we have specified.

We may also share your personal data with business partners where you have given your explicit consent to such sharing, or where it is strictly necessary for the performance of a service you have requested.

Where we are under a legal obligation to do so, or where disclosure is necessary to protect the rights, safety, or property of our users or the general public, we may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent public bodies.

In the event of a merger, acquisition, reorganisation, or sale of all or part of our assets, your personal data may be transferred to the relevant acquirer or successor entity, subject to standard confidentiality obligations.

Please be aware that certain information you choose to make available on the Platform — including your public profile, username, and any content you post publicly — is by its nature visible to other users and, depending on your privacy settings, to the general public.

7.

International Data Transfers

Where we transfer data outside the EEA or UK, we rely on Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements (IDTAs), or adequacy decisions, as applicable.

8.

Cookies and Tracking Technologies

A cookie is a small text file placed by a website on the user's computer or mobile device when they visit the site. Some operations cannot be performed without using cookies, and in some cases they are therefore technically necessary.

We use:

Essential cookies

Required for the Platform to function (login sessions, security).

Preference cookies

Remember your settings and preferences.

Analytics cookies

Measure usage and performance.

Advertising cookies

Serve and measure personalised ads (where applicable).

You can manage cookie preferences via our Cookie Settings panel at any time.

9.

Your Rights

Under applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 and the UK Data Protection Act, you are entitled to exercise the following rights:

Right of access

Request confirmation of whether we are processing your data and receive a copy of it.

Right to rectification

Request correction of inaccurate or incomplete personal data without undue delay.

Right to erasure

Request deletion of your data (the "right to be forgotten") where it is no longer necessary, consent has been withdrawn, or it has been unlawfully processed.

Right to restriction

Request that we restrict processing of your data in certain circumstances.

Right to withdraw consent

Withdraw consent at any time where processing is based on consent. Withdrawal does not affect prior lawful processing.

Right to data portability

Receive your data in a structured, machine-readable format and transmit it to another controller where technically feasible.

Right to object

Object to processing based on legitimate interests at any time, and unconditionally where data is processed for direct marketing.

To exercise any of the rights described above, please contact us at business@rovo-app.com. We may need to verify your identity before acting on your request.

10.

Minors

The Platform is not intended for users under the age of 13 (or 16 where required by applicable law). We do not knowingly collect personal data from children below these ages.

If you believe a minor has registered on our Platform, please contact us at business@rovo-app.com.

11.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in any case for no longer than permitted or required by applicable law.

Your account data is retained for the entire duration of your relationship with us. Upon deletion of your account, we will retain your personal data for a further period solely to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Content you have uploaded to the Platform — including videos, comments, and captions — will be permanently deleted within a reasonable period following the closure of your account, unless we are required to retain it for legal, regulatory, or safety reasons, such as in connection with an ongoing investigation or a court order.

Technical log data, including IP addresses and access records, is retained for a maximum period as required by applicable law, after which it is automatically deleted or anonymised.

Financial and transactional records relating to payments made through the Platform are retained in accordance with applicable accounting and tax legislation.

Where data is no longer required for any of the above purposes, we ensure it is securely deleted or irreversibly anonymised in accordance with our internal data management procedures.

12.

Security

We implement appropriate technical and organisational measures including encryption in transit (TLS) and at rest, access controls, and regular security audits.

In the event of a data breach posing a risk to your rights and freedoms, we will notify you and the relevant authorities as required by law.

13.

Changes to This Policy

We will notify you of material changes via in-app notification or email before they take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

14.

Contact Us

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us:

ROVO HOLDINGS LTD — Privacy Team

Email: business@rovo-app.com

Address: 20 Wenlock Road, London, N1 7GU

Effective: 4 March 2026