Last updated: July 2026

This policy explains what data the VIRUS app (“VIRUS”, “we”, “us”) collects and how we use it. VIRUS is a real-world, proximity-based game.

What we collect

Account / device identifier. On first launch VIRUS creates a random device identifier and an account on our server. No email, password, phone number or real name is required.

Username (optional). If you set a username, it is stored and shown to other players on leaderboards and, when nearby, on the radar/map.

Location. With your permission, VIRUS uses your device location to show nearby points of interest (hotspots, hospitals) on the map and to place you on it. Your precise coordinates are used on our server only to compute the map you see and are never shared with other players. Any outbreak “heat” shown to others is aggregated across an area with a minimum number of players, so no individual can be identified or located.

Bluetooth proximity data. VIRUS advertises a short-lived, anonymous, rotating token over Bluetooth and scans for other players’ tokens to detect who is nearby. Only our server can link a token to an account; other players see only a random token. We store recent proximity “contacts” (which anonymous token was seen, signal strength, duration) to run the game fairly and prevent cheating.

Gameplay data. Your role, health, scores, achievements, infections and heals are stored to run the game and show leaderboards.

How we use it

• To provide the game: detect nearby players, assign roles, run infections and heals, show the map and leaderboards.
• To keep the game fair (anti-cheat validation on our server).
• Not for advertising, and not to track you across other companies’ apps or websites.

Data sharing

We do not sell or rent your data, and we do not share it with third parties for their own purposes. We use a hosting provider (Railway) to run our server; data is processed there solely to operate VIRUS.

Data retention & deletion

We keep your data while your account is active. You can request deletion of your account and associated data at any time by emailing us. We will delete your data within 30 days.

Security

Data in transit is encrypted with TLS (HTTPS/WSS). Credentials on your device are stored in the iOS Keychain.

Children

VIRUS is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from children.

Your rights

Depending on where you live (e.g., GDPR in the EU), you may have rights to access, correct, export or delete your data. Contact us to exercise them.

Changes

We may update this policy; we will post the new version at this URL and update the date above.

Contact

support@makemeill.app