ZYMIX Privacy Policy

Last updated: August 2026

1. Who We Are

ZYMIX is a social and community platform for user interaction, content sharing, social discovery, messaging, and community engagement. The platform is operated by:

Company	FLICKNMIX LTD
Registered address	15 Fitzroy Street, London, England, W1T 4DG
Privacy contact	privacy@flicknmix.io
Support contact	support@flicknmix.io
ICO registration	Registered with the UK Information Commissioner's Office as a data controller.

Throughout this policy, 'ZYMIX', 'we', 'us', and 'our' refer to FLICKNMIX LTD. 'You' means anyone who uses the ZYMIX app, website, or related services (together, the 'Platform').

As data controller, we decide how and why your personal data is used. This carries legal responsibilities under the UK GDPR, the UK Data Protection Act 2018 and, where applicable, the EU GDPR, and we take those responsibilities seriously.

2. What Information We Collect

We only collect information that we genuinely need. Here is a full account of what we collect and how.

2.1 Information you give us

• Registration details — your phone number or email address when you create an account, together with your confirmation that you are 18 or over.
• Profile information — your nickname, username, profile photo, bio, date of birth, and any other details you choose to add to your profile.
• Content you post — text, photos, images, audio, and video content you upload or share on the Platform.
• Messages — content sent through the Platform's direct messaging features.
• Correspondence with us — information you provide when contacting support, submitting feedback, making a complaint, or responding to a survey.
• Event and promotion participation — information you submit when taking part in ZYMIX events, contests, challenges, or promotions.
• Payment information — if you make or receive a payment through the Platform, relevant financial details processed securely through our payment provider (currently Mangopay).

2.2 Information collected automatically

When you use the Platform, we and our service providers automatically collect the following:

• Device information — device type, operating system, device identifiers, app version, and browser type.
• Usage and activity data — features you use, content you view or interact with, time and duration of activity, search terms, and engagement patterns, including your activity in any mini apps and mini games within the Platform.
• Log data — IP address, access times, screens or pages visited, and error logs.
• Location information — if you enable location features, we may collect your precise or approximate location. You can control this through your device settings at any time.
• Behavioural data — how you interact with content, other users, and recommendations on the Platform. This feeds our personalisation and recommendation systems (see Section 8).
• Analytics data — collected via analytics tools and SDKs to help us understand how the Platform is used and where to improve it. Only with your consent do we collect marketing attribution data, which helps us understand which advertising campaign led you to install ZYMIX (see Sections 6.1.4 and 11).

2.3 Information from your contacts

If you give us permission, we can access your device's contact list to help you find people you know on ZYMIX. We always ask before accessing your contacts. You can withdraw permission at any time through your device settings.

2.4 Information from third-party services

Some information about you reaches us from services operated by other organisations. For example, if you choose to create your account or log in using an Apple or Google account, we receive limited information from that provider: typically your name, the email address associated with the account, and a unique account identifier, depending on your settings with that third party.

2.5 Moderation-related information

If you report content or another user, or if content you have posted is reported to us, we collect information about that report and any moderation review that follows. See Section 12 for more on how moderation works.

3. How We Use Your Information

We only use your personal data where we have a valid legal reason to do so — known as a 'lawful basis'. The table below explains the lawful bases we rely on and when we use each one.

Lawful basis	When and why we use it
Contract	Running the Platform
Legitimate interests	Personalisation and recommendations; improving the Platform; fraud and abuse prevention; platform security; moderation and safety; enforcing our Terms of Service; service communication
Consent	Marketing communications; analytics or behavioural cookies beyond what is essential; accessing your device contacts or location; advertising attribution and measurement, and the use of audience-matching advertising tools. We will always ask before relying on consent, and you can withdraw it at any time.
Legal obligation	Legal and regulatory compliance
Vital interests	Where necessary to protect someone's life or physical safety in urgent circumstances.

In more practical terms, here is what we use your information for:

• Running and improving the Platform — creating and managing your account; enabling you to post, message, and use all Platform features (including mini apps and mini games); personalising your experience; developing and testing new features; diagnosing and fixing technical problems.
• Moderation and safety— reviewing content for compliance with our Terms of Use; using AI tools and human moderators to detect harmful or illegal content; investigating abuse and safety reports; preventing fraud; maintaining records to enforce bans.
• Communications — sending service-related notifications and account alerts; sending push notifications about your activity on the Platform (manageable in your device settings); sending marketing communications where you have opted in.
• Marketing, advertising, and campaign measurement — with your consent, measuring how our advertising campaigns perform and which campaigns bring users to ZYMIX, and using Meta’s advertising tools to show ZYMIX ads to our users or to similar audiences on Meta’s platforms (see Sections 6.1.4 and 11). Consent is the only legal basis we rely on for these activities — never contract or legitimate interests.
• Legal and regulatory compliance — meeting our obligations under the UK GDPR, the UK Online Safety Act, and other applicable law; responding to lawful requests; handling legal claims.

4. Your Rights

Under UK and EU data protection law, you have a number of important rights over your personal data. These are set out below. To exercise any of them, contact us at privacy@flicknmix.io or use the relevant in-app tools. We will respond within one calendar month.

Your right	What it means in practice
Right to access	Ask us for a copy of all the personal data we hold about you, along with details of how and why we use it.
Right to rectification	If any information we hold is inaccurate or incomplete, ask us to correct it. You can also update most profile details directly within the app.
Right to erasure	Ask us to delete your personal data — for example, where it is no longer needed for the purpose it was collected, or where you withdraw consent. To delete your account: Me > Account > Delete Account, or email us. We may retain some data where legally required (e.g. financial records, safety records). A 30-day cancellation window applies to account-deletion requests (see Section 7).
Right to data portability	Where we process your data based on consent or contract, ask us to provide it in a structured, machine-readable format — or to transfer it directly to another provider where technically possible.
Right to restriction	Ask us to pause or limit processing of your data — for example, while we investigate a dispute about its accuracy.
Right to object	Object to us processing your data based on our legitimate interests — including for profiling and recommendations. We will stop unless we have compelling grounds that override your interests.
Right to withdraw consent	Withdraw any consent you have given at any time. This does not affect anything that happened before you withdrew it.
Automated decisions	Where we make decisions about you based solely on automated processing that have a significant effect on you, ask for human review, express your view, or challenge the decision.
Right to complain	Lodge a complaint with the UK ICO (ico.org.uk / 0303 123 1113) or, if you are in the EU, with your local data protection authority. We would always welcome the chance to resolve your concern first — please email privacy@flicknmix.io.

5. What Others Can See

ZYMIX is a social platform, so some of your information is visible to other users. This section explains what is public and what you can control.

5.1 Default visibility

• Your username and profile photo are visible to other users and may be publicly searchable depending on your settings.
• Content you post publicly — photos, videos, text, and other posts — is visible to all users on the Platform.
• Your interactions with public content may be visible to other users in certain contexts.

5.2 Location and nearby discovery

ZYMIX currently offers, and intends to develop further, features that allow you to discover other users nearby. If you enable location or proximity-based features:

• Your approximate location may be visible to other users within that feature.
• You may become discoverable to users near you.

Location sharing is always opt-in. We will ask for your explicit permission before enabling it, and you can turn it off at any time through your device settings or within the app.

Unverified accounts: Location and proximity-based features are off by default and are not available to accounts that have not completed age assurance. We strongly encourage you to keep location features switched off unless you actively choose to use them. You can contact us at privacy@flicknmix.io at any time if you have concerns about location settings.

5.3 Privacy controls

We offer settings within the Platform to control who can see your profile, content, and activity. These controls are expanding as the Platform develops. We encourage you to review your privacy settings regularly and to think carefully about what you share publicly.

6. Who We Share Your Information With

We do not sell your personal data to anyone. We may share it in the following circumstances:

6.1 Third-party service providers

We use trusted third-party companies to help run ZYMIX — including cloud hosting and storage, content delivery and security, authentication and messaging, real-time voice and video, error and performance monitoring, transactional email, audio transcription, and analytics. Our current providers include Amazon Web Services, Cloudflare, Twilio, Agora, Sentry, Axiom, Resend, and AssemblyAI. These providers act as data processors on our behalf, meaning they can only use your information for the specific services we have engaged them for. They are contractually required to keep your information secure. Some of our providers are located outside the UK and the EEA (including in the United States); where that is the case, we put appropriate safeguards in place for any transfer of your personal data, as described in Section 9.

6.1.1 Moderation providers

Content you post, together with information from moderation reports and reviews, may be shared with our third-party moderation partners for safety assessment and enforcement of our Terms of Use.

6.1.2 Payment partner (Mangopay)

Payments on ZYMIX are processed by Mangopay, our payment services partner. When you use payment features, the information needed to process your payments and to meet Mangopay’s own legal obligations — including identity verification (KYC) checks — is shared with Mangopay, which acts as an independent controller of that information under its own privacy policy. We may rely on the outcome of the identity verification for age assurance purposes (see Section 10).

6.1.3 Age assurance partner

ZYMIX is an 18+ platform and uses a specialist third-party age-assurance provider to help keep under-18s off the service (see Section 10).

6.1.4 Advertising and attribution partners

We advertise ZYMIX on third-party platforms, currently Meta Platform, and use Adjust, a mobile measurement and attribution provider, to understand how those campaigns perform. With your consent, Adjust collects device identifiers, IP address, and install, session, and in-app event data through its SDK and processes that data on our behalf as our processor.

Where you consent, limited data of this kind — such as device identifiers and app session and event data — is also shared with the advertising networks on which we run campaigns, currently Meta Platforms, so that they and we can measure whether their ads led to installs or activity on ZYMIX. Meta uses this data as an independent controller in accordance with its own privacy policy.

Consent is the only legal basis we rely on for the advertising activities described in this Section 6.1.4 (Article 6(1)(a) UK GDPR / EU GDPR) — we do not rely on contract or legitimate interests for any of them. If you do not consent, or you later withdraw consent, we simply will not use your data in these ways, and this has no effect on your ability to use ZYMIX. We never share the content you post, your messages, or your contact list with Meta or any other advertising partner, and we do not use these tools to show you third-party advertising inside ZYMIX. You can withdraw your consent at any time in your device or app settings.

6.1.5 Sign-in providers (Apple and Google)

If you choose to register or log in with Apple or Google, your authentication request is handled by that provider as an independent controller under its own privacy policy. We receive only the limited account information described in Section 2.1 — we do not receive your password, and we do not send the provider information about your activity on ZYMIX.

6.2 Other users

Information you choose to make public — your profile, username, and public posts — is visible to other users of the Platform as described in Section 5. Please think carefully about what you share.

6.3 Law enforcement and regulatory authorities

We may share your information with regulators, law enforcement agencies, courts, or other public authorities where we are legally required to do so, or where we reasonably believe it is necessary to:

• comply with a legal obligation, court order, or regulatory requirement;
• enforce our Terms of Use or investigate suspected violations;
• investigate or respond to suspected illegal activity, fraud, or platform misuse;
• protect the safety of any person; or
• protect the rights, property, or security of ZYMIX, our users, or the public.

6.4 Business transfers

If FLICKNMIX LTD is involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will take reasonable steps to ensure any such transfer is subject to appropriate protections and that you are informed of any material changes to how your information is handled.

6.5 Aggregated and anonymised data

We may share aggregated or anonymised information — data that cannot reasonably be used to identify you — with third parties for research, analysis, or business purposes.

7. How Long We Keep Your Information

We keep your personal data for as long as we genuinely need it. The table below sets out our approach by data type.

Type of information	How long we keep it
Account and profile information	While your account is open. Deleted within a reasonable period after account closure, except where the law requires us to keep it.
Content you have posted	Until you delete it or close your account. Some content may be briefly retained following deletion for safety or operational reasons.
Payment and transaction records	Up to 7 years — required by financial and tax law.
Moderation and safety records	As long as necessary for the relevant safety, security, legal, or enforcement purpose, including preventing re-registration after a ban.
Analytics and usage data	Generally, no longer than 24 months. Aggregated or anonymised data may be retained for longer.
Legal compliance records	As long as required by applicable law or regulation.

To delete your account, go to Me > Account > Delete Account in the app, or email privacy@flicknmix.io. When you submit a deletion request, you then have 30 days to cancel it — if you change your mind within that window, your account can be restored. Once the 30 days have passed, the deletion process will be initiated, and your account cannot be recovered. It may take up to 90 days from the beginning of the deletion process to complete it. While we’re deleting your account, it's not visible or accessible to other users.

8. Recommendations, AI, and Profiling

ZYMIX uses automated systems to personalise your experience and to keep the Platform safe. This section explains what those systems do and how they affect you.

8.1 Content recommendations

Our recommendation system analyses your activity on the Platform — what you engage with, what you skip, how you interact with other users — to suggest content, people, and events you are likely to find interesting. This is a form of automated profiling. Our recommendations are currently based on your activity within ZYMIX only. We do not currently use third-party advertising data for this purpose.

Recommendations and profiling are off by default for accounts that have not completed age assurance. You can object to profiling or modify your personalisation settings at any time by contacting us at privacy@flicknmix.io. See Sections 8.3 and 4 for your rights in relation to profiling.

8.2 AI-assisted moderation

We use AI-powered tools alongside human moderators to help keep the Platform safe. To avoid setting out the same information twice, full details of how our content moderation works — including what our automated tools do, when humans review content, and the legal bases we rely on — are set out in Section 12.

8.3 Your rights in relation to profiling

Where automated processing produces a decision that has a significant effect on you, you have the right to ask for human review of that decision, to tell us your point of view, and to contest the outcome. You also have a general right to object to profiling. See Section 4 for how to exercise these rights.

9. International Data Transfers

Your personal data is stored and processed primarily in the United Kingdom and the EU. Some of our service providers are located in other countries, including the United States. Where personal data is transferred outside the UK or the EEA, we ensure that appropriate safeguards are in place before any transfer takes place. These may include:

• UK International Data Transfer Agreements (IDTAs), EU Standard Contractual Clauses (SCCs), or UK International Data Transfer Addendum to EU SCCs (UK Addendum) ;
• an adequacy decision by the UK Government or European Commission confirming that the destination country provides adequate protection; or
• other transfer mechanisms permitted under applicable data protection law.

We will update this section if our international transfer arrangements change.

10. Minimum Age and Age Assurance

ZYMIX is intended for adults. You must be 18 or over to use the Platform. We use age-assurance measures and other safeguards designed to keep the Platform safe and to help prevent under-18s from using it. Our age and safety measures include:

• Age-assurance measures, including facial age-estimation technology provided by a specialist third-party provider, are used to help confirm that users are 18 or over before they access certain features or adult content. The provider returns only an age-band label, which we store together with a timestamp and delete within 30 days of account closure.
• Where you have completed identity verification (KYC) checks with our payment partner Mangopay in order to use payment features, we may rely on the outcome of that verification instead of asking you to complete a separate age check. In that case we receive and store only confirmation of whether your verification indicates that you are 18 or over, together with the date of the check — never your date of birth, your identity documents, or the underlying information you provided to Mangopay — and we delete it within 30 days of account closure.
• Content reporting tools so you can flag harmful content or interactions directly within the app.
• A moderation team that reviews all reports and escalates serious safety concerns, including any safeguarding concerns, as a priority.
• A complaints and appeals process for age-estimation/moderation decisions, details of which are available within the app.

If you are a parent or guardian with a concern, or if you believe a user under 18 is on the Platform, please contact us at privacy@flicknmix.io. We will investigate and take appropriate action promptly.

11. Cookies and Tracking Technologies

11.1 What cookies are

Cookies are small text files stored on your device when you use the Platform. They help the Platform function, remember your preferences, and tell us how the Platform is being used. Similar technologies — including SDKs (software development kits built into the app), pixels, and device identifiers — work in a similar way and are covered by this section.

11.2 Types of cookies we use

Type	Your choice	What it does
Essential	Always on — cannot be switched off	Keeps you logged in, maintains session security, and enables core Platform features.
Analytics	We ask for your consent	Helps us understand how the Platform is being used so we can improve it. Collected via analytics tools and SDKs.
Behavioural / Preference	We ask for your consent	Remembers your settings and preferences and supports the personalisation of your experience.
Advertising	We ask for your consent	We use attribution and advertising-measurement technologies to measure how our advertising campaigns perform and to support ZYMIX’s advertising on advertising networks such as Meta. We do not show third-party advertising inside ZYMIX.

11.3 Managing your preferences

You cannot opt out of essential cookies, as these are required for the Platform to function. For all other cookies and tracking technologies, you can manage your preferences through the settings within the app, your device's privacy controls, or by contacting us at privacy@flicknmix.io. Please note that disabling certain technologies may affect some features of the Platform.

12. Moderation and Online Safety

Keeping ZYMIX safe is one of our most important responsibilities. Here is how we approach it.

12.1 How moderation works

We use a combination of automated AI tools and human moderators to review content on the Platform. In practice, this means:

• AI tools automatically scan content — including text, images, audio, and video — for potential policy violations and harmful material.
• Human moderators review content flagged by the automated systems and handle all serious or disputed cases.
• User reports submitted through the app's reporting tools are reviewed by the moderation team.
• Serious safety concerns — including potential illegal content — are escalated to internal teams and, where required, to law enforcement or regulatory authorities.

12.2 Reporting harmful content

You can report any content or user you believe is violating our Terms of use or applicable law using the reporting tools within the app. We take all reports seriously and aim to respond promptly.

12.3 Appealing a moderation decision

If we remove your content, restrict your account, or take other enforcement action, you may be able to appeal that decision through the complaints and appeals process in the app. We will provide further details about this process within the Platform.

12.4 UK Online Safety Act 2023

As a user-to-user service accessible in the United Kingdom, ZYMIX is subject to the UK Online Safety Act 2023. This means we have legal duties relating to illegal content, children's safety, user reporting, and transparency. Our compliance programme is ongoing and we will continue to develop our practices as our obligations become fully applicable.

12.5 EU Digital Services Act

Where ZYMIX is accessible to users in the EU, relevant requirements of the EU Digital Services Act (DSA) apply — including obligations relating to content moderation transparency, recommender systems, and user redress. We are working towards full DSA compliance and will provide further information within the Platform as applicable.

13. Security

We take the security of your personal data seriously. The measures we currently have in place include:

• Access controls — personal data is accessible only to authorised personnel, and only to the extent required for their role.
• Encryption — we encrypt the transmission of personal data between your device and our systems.
• Monitoring and logging — we maintain logs and monitoring to detect and respond to security incidents.

No system is completely immune to security risks. While we work hard to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account credentials secure. If you believe your account has been compromised, please contact us at privacy@flicknmix.io immediately.

14. Third-Party Links and Services

The Platform may contain links to third-party websites, apps, or services. This Privacy Policy does not apply to those third parties, and we are not responsible for how they collect or use your information. We encourage you to check the privacy policies of any third-party services before sharing information with them.

15. Changes to This Policy

We may update this Privacy Policy from time to time — to reflect changes in the Platform, in how we use personal data, or in applicable law.

If we make a significant change, we will notify you through the app or by other appropriate means before the change takes effect. The 'last updated' date at the top of this document always reflects when the policy was most recently revised.

Important: by continuing to use ZYMIX after an updated policy takes effect, you accept the updated policy. If you do not agree with a change, you should stop using the Platform and, if you wish, delete your account.

16. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or the way we process your personal data, please get in touch: