This notice describes how Armii handles personal data when you use its website and mobile applications, including profiles, content, Collection purchases, messages, verification, Treasure, web coin purchases and event ticket transactions. It covers information Armii receives from a checkout provider; the provider’s separate practices are governed by its own notice.
1. Controller and privacy contact
Armii App S.A. de C.V. is responsible for the personal data covered by this notice. Its legal domicile is Av. Canal Río Churubusco 2179, Col. Agrícola Oriental, Iztacalco, Ciudad de México, C.P. 08500, México. Send privacy questions, ARCO requests or deletion requests to support@armii.gg. Administrative correspondence may also be sent to admin@armii.gg.
This notice explains processing; it does not replace a specific consent request when the law requires one. Required service processing and optional uses are distinguished below.
2. Account and profile information
When you register, we process your email address, authentication information, account identifier, username and registration records. Firebase Authentication handles sign-in credentials. We also process information you add to your profile, such as a display name, biography, avatar, banner, social links and preferences.
We use these details to create and authenticate the account, reserve a username, provide your profile, communicate service information and prevent misuse. You can choose what optional profile details to add. We do not need your bank details simply to create a regular account.
3. Posts, messages and social activity
We store the content and attachments you upload, their audience and timestamps, and records of follows, subscriptions, reactions, comments, gifts and other interactions needed for the features you use. Messaging includes message contents, participants, attachments and delivery or unread state. The app also uses online status, last-connection and typing indicators.
Content is made available according to the feature and selected audience. Message recipients can read and retain what you send. Messages are not end-to-end encrypted. We may process content and related records to deliver the service, investigate reports, resolve disputes and meet legal obligations. Authorized personnel may access relevant records for those purposes.
Collection keeps purchased content accessible to its buyer when the creator removes the item from their profile, blocks that buyer or deletes their profile. To provide that access, Armii retains the purchased media and the item, creator and purchase references needed to connect it to the buyer’s entitlement. Subscription access alone is not a Collection purchase. Continued Collection access does not authorize public redistribution and remains subject to lawful content restrictions and privacy rights.
4. Public information and website previews
Your public profile, username, biography, social links and displayed follower/subscriber counts may be visible to people without an account and to search engines. Posts and interactions may also be visible to the audience allowed by the relevant feature. Treasure’s in-app winner list displays the winner’s username and profile image, coin prize and recorded share of entries.
Public web profiles display clear, reduced-size copies of profile artwork and permanently blurred copies of public post images or video thumbnails. The guest website does not receive original media download URLs through these preview features. The displayed copies can still be saved or captured; this is not a guarantee that material can never be copied or that previously shared links stop working.
Choose your audience carefully. Removing information from Armii does not automatically remove independent copies, recipient records or search-engine caches.
Creators can receive the profile, subscription or purchase status and interaction information made available by the features you use, as well as messages you send them. A public alias does not make those interactions anonymous to their participants. A subscription does not itself authorize disclosure of your legal identity, email address, full payment details or unrelated private messages to a creator or agency. See section 9 for the obligations that apply to anyone authorized to handle member information.
5. Creator verification and financial information
If you apply for creator verification, we process the information you submit to establish identity, age and authority over your content, including content samples, social-account references, identity-document images and verification decisions. An identity document can contain a legal name, photograph, date of birth, document number and other identifying details.
For monetization and payouts, we process subscription prices, fee and agency arrangements, earnings, eligible balances, withdrawal requests and payout details such as PayPal contact information or bank-account/CLABE details. We use these for verification, fraud prevention, calculation and delivery of payments, dispute handling and applicable accounting or tax duties.
Financial or patrimonial data and legally sensitive information require the form of consent or legal exception applicable to the processing. Acceptance of general terms is not unrestricted authorization to use sensitive information. Do not send identity documents through public posts or ordinary support messages unless we have explained a suitable verification process.
Verification documents and payout details are used for the limited purposes above, not as public profile material or permission for unrelated advertising. Access is limited to authorized personnel and providers who need it for the relevant task. Agency representation alone does not authorize access to these documents.
6. Purchases, Treasure, support and technical records
We process transaction and product identifiers, purchase receipts or tokens, coin credits and debits, subscription terms, refunds and status records. Apple or Google handles payment-card details for in-app purchases; Armii does not receive the full card number through that purchase flow. RevenueCat helps link purchase information to the Armii account and maintain purchase records.
For Treasure we process entries, coin deductions, event results, prize credits and relevant eligibility or payout records. These records are needed to administer the feature and investigate disputes. Participation and winner display are described in the Treasure rules.
Support requests and abuse reports include what you send, relevant account identifiers, the reported account or content, and our response. Operational and error records may contain an account identifier, IP address, device/browser or operating-system information, timestamps, service requests and error details. These records may be personal data; they are not automatically anonymous.
For event tickets, the website links to a Stripe-hosted checkout. Stripe collects the payment information entered there. Depending on the checkout fields and transaction, Armii may receive the purchaser’s name, email or other contact details, ticket or order details, amount and currency, payment/refund status and limited payment-method information. We use the information received to identify purchases, support admission and receipts, send necessary event updates, handle refunds or disputes, prevent fraud and keep required financial records. The linked checkout does not send full card numbers or card security codes to Armii’s website. Stripe’s practices are explained at https://stripe.com/privacy.
A report, appeal or transaction dispute may require us to review the relevant offer, item, message, purchase entitlement and previous decision. We use what is necessary to assess the case and communicate with the people involved. Providing evidence does not authorize its publication; we may disclose relevant parts to a responding party or authority when necessary and lawful, with unrelated personal information limited or redacted where appropriate.
For web coin purchases, we send Stripe the signed-in account identifier, account email, order reference and selected package information needed to process and attribute payment. Stripe collects payment information in its hosted checkout. Armii processes order and payment identifiers, package quantities including bonuses, amount, currency, payment status, refunds, disputes and related coin adjustments to deliver purchases, prevent duplicate credits, provide support and keep necessary financial records. This checkout does not send full card numbers or security codes to Armii's website. RevenueCat handles the supported in-app purchase flow; it does not record this separate web payment flow. Stripe's own practices are explained in its Privacy Policy. For web coin prices, we use the country estimate supplied by our Firebase hosting provider based on your IP address, with a local country database as a fallback. This pricing feature does not separately store your IP address or send it to an additional geolocation service; the estimate is used to suggest a payment currency, not to establish your card’s country.
7. Permissions, notifications and local storage
When you choose to upload, create or save media, the app may request the permissions or file-selection access needed for that action. Push notifications use device/app identifiers and notification tokens. You can manage device permissions and notification settings through your operating system; refusing optional access may limit the related feature.
The website stores your language preference in local storage. Authentication uses browser persistence, such as IndexedDB or local storage, to maintain a session. The mobile app stores preferences and caches some content locally. You can sign out or clear site/app data, but doing so does not delete information already stored in your account.
The current website does not load advertising pixels or an analytics SDK. Necessary hosting, authentication and operational records are still processed. Following an external link is subject to that destination’s storage and privacy practices. Any future optional tracking will require an updated disclosure and choices where applicable.
8. Purposes and legal grounds
Core purposes are to run accounts and profiles; deliver content, Collection access, messages and notifications; manage audience access, in-app purchases and web coin purchases; verify creators; calculate fees, earnings and payouts; administer Treasure; support event ticket purchases and admission; respond to requests, reports and appeals; maintain security; and comply with applicable legal duties. Information necessary for a requested service may be required to provide that service.
We rely on the legal grounds available under the law that applies to a particular processing activity. In Mexico these include processing needed for the legal relationship with you, other statutory exceptions and consent where required. Consent to optional marketing is separate from service acceptance and may be withdrawn by contacting support@armii.gg without losing core account access.
Where European or UK rules apply, account and purchase delivery may rely on contract, legal recordkeeping on legal obligations, proportionate fraud prevention and service security on legitimate interests, and optional activities on consent where needed. These grounds do not override separate requirements for sensitive data or international transfers. We do not use this notice to claim permission for undisclosed future AI processing.
Data use at a glance
This summary links the main data categories to their purpose, recipients and retention criteria. The detailed sections govern; exact retention depends on the remaining purpose and applicable requirements, not a blanket fixed period.
Account and profile. Account identifiers, contact details and profile fields support sign-in, profile display and service notices. Recipients: Google/Firebase, authorized service personnel and the audience you select for public fields. Retention: while needed for the account, then only for a remaining justified purpose under section 11.
Content, Collection and messages. Media, purchase entitlements, messages and activity records deliver content and interactions. Recipients: infrastructure providers, the selected audience, buyers or message recipients, and authorized reviewers when needed. Retention: for the relevant access or conversation, existing Collection purchases, and any justified complaint or legal obligation; creator deletion does not automatically erase purchased media.
Verification and payouts. Identity documents, verification decisions and financial details support creator eligibility, fraud checks and payment. Recipients: authorized reviewers, infrastructure providers and the selected payout provider for necessary payment details. Retention: only as needed for verification, payment and a justified compliance, dispute or legal-record purpose; not automatic permanent storage of ID images.
Purchases and Treasure. Web orders, payment identifiers, receipts, coin movements, subscription terms, entries and results establish access, administer the feature and resolve payments. Recipients: relevant store/payment providers, RevenueCat for in-app purchases, Stripe for web coin purchases, infrastructure providers and authorized support; published winner information is described in section 4. Retention: as needed for entitlements, event resolution, financial duties and disputes.
Event tickets. Checkout contact, order and payment-status information supports admission, necessary event notices, refunds and accounting. Recipients: Stripe, authorized support and fulfillment personnel limited as explained in section 9. Retention: for event delivery and support, then any outstanding refund, dispute or financial-record obligation.
Reports and technical records. Case details, decisions, identifiers and operational logs support complaints, appeals, troubleshooting and security. Recipients: authorized support and service providers, with necessary disclosures to responding parties or authorities as described above. Retention: while needed for the case or security purpose and any justified legal preservation; not indefinite retention of all logs.
9. Recipients and service providers
Google/Firebase provides hosting, authentication, databases, file storage, backend processing and notifications. RevenueCat supports in-app purchases. Apple and Google process purchases made through their stores. Stripe processes linked event checkout and web coin purchases. Selected payout providers, including PayPal and banks, receive the details necessary to execute a payout. Providers may process service information under their own notices as well as data on our behalf.
Other users receive information through the visibility, messaging, gifting and community features you use. If you are represented by an agency, information necessary for the disclosed arrangement may be shared with that agency, such as your creator identity, agreed fee and relevant earnings or payout records. Agency representation does not automatically give access to private messages or identity-document images.
We may disclose information in response to a valid legal requirement, to protect rights or investigate abuse, or in a business reorganization subject to applicable notice and privacy obligations. A third-party transfer requiring consent will be presented for acceptance or refusal before that transfer; you may also contact support@armii.gg to limit or revoke consent. We do not treat silence as consent where affirmative consent is required.
An authorized agency or assistant may handle interactions within the scope the creator has permitted. That scope must be limited to what the service needs, and a creator must disclose team handling before offering an interaction as personally provided by that creator. There is no automatic agency right to every subscriber record, message or payment detail.
Creators and authorized representatives must protect member information, use it only for the requested service, support or a lawful obligation, and avoid unauthorized disclosure, sale or unrelated marketing. They must limit access, notify Armii promptly of a data incident, assist with privacy requests and stop retaining data when its authorized purpose ends unless legally required. These obligations continue when their relationship with Armii or the creator ends. You can report misuse or request help through support@armii.gg; these duties do not imply that Armii can recall every copy held by another person.
For an event, personnel or an organizer responsible for fulfillment may receive the minimum order, attendee or payment-status details needed for entry and support. This does not authorize sharing your Armii messages, creator subscriptions or identity-verification file with a venue. Any additional recipient or use requiring notice or consent must be disclosed before sharing. Buying a ticket is not blanket permission for attendee marketing.
10. International processing and AI features
Armii operates from Mexico, while infrastructure and service providers may process information in the United States or other countries. Transfers and processor arrangements must use the safeguards and legal grounds required by applicable law. Contact support@armii.gg for information about the arrangements relevant to your data; this notice does not claim that all data stays in Mexico.
AI image editing is not currently available. Before introducing it, we will explain what images or instructions would be sent to an AI provider, that provider’s role, relevant retention and model-training practices, and any consent or choices required. Accepting this notice does not authorize undisclosed AI training on user content.
11. Retention and account deletion
We retain account and service information while needed for the account or the features you request. This includes purchased media and limited references necessary to continue delivering valid Collection purchases after a creator removes an item, blocks a buyer or deletes their profile. Additional retention may be necessary for an unresolved transaction, accounting or tax duty, fraud investigation, legal claim or other lawful requirement. The criteria depend on the data, purpose, outstanding obligations and applicable retention period; retention is not automatically unlimited.
You can request account deletion in the app’s settings or by emailing support@armii.gg. We may take proportionate steps to verify ownership. Armii uses an automated deletion process, with support handling exceptions and questions. Account deletion does not mean that all of a creator’s media is taken down: content already purchased by others can remain accessible in their Collection. Submitting a request or seeing a sign-out is not confirmation that every record or backup has been erased.
Data no longer needed is deleted or irreversibly de-identified, subject to lawful retention and provider backup cycles. Where records must be retained, they should be restricted to the remaining purpose. We will explain applicable exceptions when responding to your request. Recipient copies, public reposts and records another organization independently must retain may remain outside Armii’s deletion control.
Creator verification documents should be kept only as long as needed for verification, a justified compliance or fraud purpose, or a legal obligation. An ordinary profile-deletion request is not a reason to keep every identity document indefinitely. Deleting the app or clearing local storage is separate from deleting your account.
Collection retention is limited to fulfilling existing purchases and related lawful purposes; it is not a reason to keep every former profile field, private message or identity document. Where retained media identifies you, it remains personal data. You may request an explanation of what remains, its purpose and the applicable deletion or restriction options. We assess requests against the ongoing purchase obligations and mandatory privacy and content-removal rights. Lawful deletion, restriction or takedown requirements can override continuing access.
12. Access, correction and other privacy choices
You may request access, rectification, cancellation or opposition (ARCO), limit use or disclosure, or revoke consent where applicable. Email support@armii.gg with your name or account identifier, a reply address, the right you wish to exercise and enough detail to identify the relevant data. If you act for another person, explain your authority. We will request only the identity evidence reasonably necessary; do not send a password or proof of EU residence.
Under Mexican law, the general ARCO response period is 20 business days from receipt, with an approved request implemented within the following 15 business days after the response. Legally permitted extensions must be justified and communicated. Exercising the rights is generally free, subject to the limited costs allowed by law. If we cannot comply, we will explain the reason and available next steps.
Where applicable, European/UK and other privacy laws may provide additional access, erasure, restriction, objection, portability and consent-withdrawal rights and their own deadlines. You may complain to the competent authority, including Mexico’s Secretaría Anticorrupción y Buen Gobierno for matters within its competence or your local data-protection authority. We will not require you to give up mandatory rights to obtain support.
13. People under 18
Armii is intended only for people aged 18 or older who also meet the local age of adulthood. We do not offer a parental-consent route for under-18 accounts. If you believe a minor has an account or that we have received a minor’s personal data, contact support@armii.gg so we can investigate, restrict access and address deletion or legally necessary preservation.
14. Security and incidents
We use technical and organizational measures intended to protect information, including authenticated services, access controls and encrypted connections. No online service can guarantee perfect security. Protect your account and report suspected misuse promptly. Where an incident requires notice to you or an authority, we will provide that notice under the applicable requirements.
Public artwork derivatives and blurred previews are limited disclosure measures; they are not anonymization of a creator’s identity or a promise that all possible media access paths are protected. We do not claim end-to-end encryption of the service.
15. Updates and contact
We will publish a revised notice and effective date when practices change, and use an appropriate account, in-app or email notice for material changes where required. New purposes or transfers requiring consent will be presented before that processing begins. Future feature plans do not silently expand the uses described here.
For this notice, a privacy-rights request or a deletion question, email support@armii.gg. Please include only the information needed for your request. The English and Spanish versions are intended to describe the same practices.