mebo
Back to Chat
Data Protection & Privacy

Privacy Policy

Last Updated: September 2026. Compliant with the Nigeria Data Protection Act (NDPA) and global data protection standards.

Zero Video Recording

We never record, intercept, or store your video or voice calls. Media streams travel directly peer-to-peer between devices.

No Mandatory Signup

You can yarn freely without entering an email, phone number, or password. Ephemeral sessions require no identity documents.

Strict Data Protection

We process technical connection telemetry strictly to match connections, prevent spam, and enforce community safety.

1. Information We Do Not Collect

Mebo is architected with privacy by design. We explicitly state:

  • We do NOT record or store live video or audio streams. WebRTC creates an encrypted peer connection directly between your browser and your partner's browser.
  • We do NOT harvest biometric face scans. Camera and microphone streams are rendered locally inside your browser's standard HTML5 video elements.
  • We do NOT sell user data to advertising brokers or data brokers.

2. Information We Process to Provide the Service

To establish connections and safeguard our user community, we process the following limited categories of data:

  • Ephemeral Technical Data: Temporary IP addresses, browser user agent, WebRTC session connection metadata (SDP offers/answers, ICE candidates), and device capabilities needed to facilitate peer-to-peer signaling.
  • Coarse Geolocation: City and country-level geographic location derived automatically from your IP address to enable regional pairing (for example, matching Nigerian users by default). We do not request high-precision GPS coordinates.
  • Session Preferences: Ephemeral session options (such as preferred topics or language), which are stored client-side in your browser's local session storage and discarded upon browser closure.
  • Safety and Abuse Logs: When a user reports abuse or violates Terms of Service, we generate an irreversible cryptographic hash of the network identifier to block repeat access and safeguard our community.
  • Voluntary Account Data: If you voluntarily register for an optional account (to save streaks or custom settings), we store your email address and authentication credentials securely via encrypted authentication infrastructure.

3. Purpose and Legal Basis for Processing

Under the Nigeria Data Protection Act (NDPA) and applicable international data laws, we process data under the following legal bases:

  • Contractual Necessity: Processing technical signaling information is necessary to connect you with another user at your request.
  • Legitimate Interests: Enforcing community safety, automated bot detection, IP rate limiting, and investigating abusive reports.
  • Legal Obligations: Retaining security records where required to assist verified law enforcement inquiries regarding severe illegal activity or child safety.

4. Third-Party Infrastructure Providers

To maintain high uptime and resilient connectivity across Nigeria and Africa, we utilize vetted infrastructure partners:

  • Supabase: For WebRTC signaling, realtime presence tracking, and secure database authentication.
  • STUN and TURN Relays: Standard WebRTC network traversal relays used solely when direct peer-to-peer firewalls cannot be traversed. Media relayed through TURN servers is encrypted and never stored.
  • Cloudflare: For DDoS protection, edge caching, and SSL/TLS transport encryption.

5. Data Retention and Deletion

Signaling tokens and WebRTC candidate packets are discarded immediately once a call session connects or terminates. Matchmaking queue records in our database expire and are purged automatically within seconds.

Security ban hashes are retained only as long as necessary to enforce disciplinary actions and maintain community integrity.

6. Your Privacy Rights

Depending on your jurisdiction, you have the right to request access to, correction of, or deletion of any personal data we hold about you. Because Mebo does not require registration and does not link ephemeral sessions to real-world identities, we hold virtually no identifiable personal records for guest users.

If you have registered an account and wish to delete your profile and all associated data, you can do so directly or by contacting privacy@mebo.live.

7. Children and Age Restrictions

Mebo is strictly an adult platform (18+). We do not knowingly collect personal data from or permit access to anyone under 18. If we discover an account or session belonging to a minor, we immediately terminate the connection and ban the device.

8. Contact Our Data Protection Officer

If you have any questions or concerns regarding this Privacy Policy or our data handling practices, please email our Data Protection Officer at privacy@mebo.live.