AMV Privacy Policy — invite-only test period
Version test-2026-10 (this is the version you agree to at sign-up) · Last updated: 29 October 2026
Operator: Astral Metaphysic Pte. Ltd. (UEN 201825004N), Singapore ("AMV", "we")
Contact: support@amv-social.com · Privacy requests / Data Protection Officer: privacy@amv-social.com (same inbox)
1. In plain words
- AMV is in an invite-only test. Features may change and things may break.
- One-to-one chats are end-to-end encrypted. They are encrypted on your device, and AMV's servers don't have the keys to read them. The person you chat with, and anyone with your unlocked phone, can still see them.
- Channels, Blog posts, comments and profiles are not end-to-end encrypted. AMV moderators can see them to keep people safe.
- Chats and channels run on AMV's own chat server (open-source Matrix software), not a third-party chat service. Our main servers are in Singapore. Some supporting services, such as phone notifications and email delivery, process limited information overseas (section 5).
- AMV's servers never put names or message text into phone notifications.
- We don't sell your data and don't use it for advertising.
- You can download your data and delete your account in the app at any time.
2. What we collect
| Data | Why | Required? |
|---|---|---|
| Username, display name, password (stored only as a one-way hash) | Your account | Yes |
| Email address | Confirm your account, reset a forgotten password, security notices | Yes |
| Date of birth and, if you give it, birth time (both stored encrypted) | Date: AMV is for adults, and it can show your age or birthday if you choose. Time: makes BaZi 合 more exact | Date yes; time optional |
| Your statement that you are 18 or older | AMV is for adults. This is self-declared; we don't check ID | Yes |
| Which version of these documents you agreed to, and when | Record of your agreement | Yes |
| Profile: photo, bio, interests, what you're looking for (e.g. friends, networking, dating) | Astral Connect: help people with shared interests find you | Optional |
| Friends, follows, friend requests, blocks | Connect, Blog and safety | When you use them |
| Blog posts, photos, videos, likes, comments, and who can see each post | Astral Blog | When you use them |
| Channel messages, memberships, roles | Channels | When you use them |
| One-to-one messages and their files | Delivered and stored encrypted; our servers can't read the content | When you use them |
| Photos, voice notes, videos | To deliver them. The AMV app removes location data from photos before upload | When you send them |
| BaZi 合 (only if you switch it on) | We keep only your day stem (日干) and, with a birth time, your two 喜神 elements. Others see only a 合 mark | Optional, separate consent |
| Daily Insight | We keep only the time today's chart was set (one per day). No personal details are used for the reading | When you open it |
| Invitations: who invited you, plus coded network and device markers | Count genuine invitations and prevent reward fraud. The markers are stored as coded values (keyed hashes), not your plain IP address or device ID, and are used only to compare accounts | When you sign up |
| Reports you make, and moderation decisions | Safety and legal duties | When applicable |
| Devices and sign-ins; IP address; security events; error logs | Security, abuse limits, troubleshooting | Yes |
| A notification code from your phone or browser | To notify you (new message, new connection request) | Optional |
| Encrypted chat backup | Restore your chats on a new device. Your recovery key or passphrase is never sent to us | Optional |
We don't knowingly allow anyone under 18 to use AMV. If we learn an account belongs to someone under 18, we close it.
3. How we use it
- To run AMV: deliver messages and files, show posts to the right people, help people find each other in Connect.
- Safety: review reports, remove content that breaks the rules, suspend accounts, limit spam (new accounts have lower limits).
- To meet legal obligations and respond to lawful requests from authorities.
- Not for advertising, and never sold.
4. Who sees what
- Your birthday: private by default. You choose whether others see your age, or your day and month (never the year).
- Blog posts: Public, Friends only, or Only me — your choice per post; you can change it later.
- Connect: you can turn off "Show me in Connect" and "Find me by username" in Me. People you block can't find you.
- Reports: we don't tell the person you report who reported them.
- Online status and "last seen" are not shown.
5. Who we share data with
Service providers that run parts of AMV for us, under our instructions:
| Provider | What for | What they receive | Where |
|---|---|---|---|
| DigitalOcean | Servers for AMV and its chat | All AMV data (stored on our servers) | Singapore |
| Cloudflare | Encrypted backup storage; website addresses | Encrypted backup files (Cloudflare can't read them) | Asia-Pacific storage; Cloudflare's network is global |
| Resend | Sending account emails | Your email address and the email (e.g. a confirmation link) | Sending region Japan; Resend is a US company and may process data in the United States |
| Google (Firebase Cloud Messaging) | Delivering Android notifications | A code for your phone and a notification with no names or text | United States and other countries |
| Apple (Push Notification service) | iPhone notifications — not in use yet | Same as Google, once in use | United States and other countries |
| Astral Pavilion (operated by Astral Metaphysic Pte. Ltd., the same company) | Works out BaZi 合 and the Daily Insight reading | For 合: a birth date and time, with no name, email or account. For Daily Insight: only a time. It answers and doesn't store these | Singapore |
When data is processed outside Singapore, we choose providers that protect it to a standard comparable to Singapore's data-protection law, using their published data-protection terms.
Authorities: we share information when the law requires it, for example a valid order. We can't provide the content of end-to-end encrypted chats, because our servers don't hold the keys. We can provide information we do hold, such as account details, and when and between which accounts a chat took place.
Nobody else. No advertisers, no data brokers.
6. How long we keep data
- While your account exists, we keep what's needed to run it.
- When you delete your account (Me → Your data → Delete my account): your profile, settings, sign-ins, birthday, 合 data, friends, follows, blocks, Blog posts, comments, likes and uploaded files are deleted; your chat account is closed and erased; your username is held for 90 days so nobody can pretend to be you.
- Kept after deletion, without your name or account attached: reports and moderation decisions (for safety), invitation records (to stop reward fraud) and security records — only as long as needed for safety and legal purposes.
- Backups are kept for 14 days, with offsite copies for up to 28 days. If a backup is ever restored, deleted accounts are deleted again before AMV reopens.
- Server logs are rotated automatically and kept only for a short time.
- Unconfirmed sign-ups (email never confirmed) are removed after 48 hours.
7. Your choices and rights
- Download my data: Me → Your data.
- Delete my account: Me → Your data → Delete my account.
- Privacy settings: who can message you, find me by username, show me in Connect, read receipts, birthday display.
- Notifications: on or off; mute single chats.
- BaZi 合: switch off at any time.
- Questions, access or correction requests: privacy@amv-social.com. We aim to reply within 30 days.
8. Security
HTTPS for all connections; end-to-end encryption for one-to-one chats and their files; birth dates encrypted; passwords hashed; moderators use two-step sign-in and every decision is logged; encrypted backups. No system is perfectly secure. If a data breach affects you, we'll tell you and the Personal Data Protection Commission where the law requires.
9. Important limits
- People you chat with keep what you sent them, even after you delete your account.
- If you lose your recovery key and passphrase, AMV can't recover your old private messages.
- Someone may already have saved a file or post you shared.
10. Changes
We'll tell you in the app before important changes. A new version gets a new version number, and you may be asked to agree again.