Privacy is at the heart of Fanbles. This policy explains what personal data we collect, why we collect it, who can see it, how we protect it, and how you can control it.
1. Who we are
Fanbles operates fanbles.com and is the personal information controller for the personal data described in this policy. We follow the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).
Account details: email address, username, display name, and your password (stored only in protected, hashed form by our sign-in provider). If you sign in with Google, Google shares your name, email address, and profile picture with us; we never see your Google password. We keep a history of display name changes, visible only to you and our team, so we can spot someone changing their name to bother a creator again. We also keep the date of birth you give when you sign up, visible only to you and our team, to confirm you are 18 or older, and a record of when you accepted our Terms and which version you accepted.
Profile content: your photo, bio, and the other details you add to your profile, and whether your profile is public or private (see “What other users can see”), including when you made it public.
Content: the posts, photos, videos, and messages you share.
Activity: subscriptions, purchases, tips, messages, likes, the people you follow, reports, and support requests.
Comments and saves: the comments and replies you write, the people you @mention in them, whether comments are on for your posts, and the posts and clips you save. Saves are private: only you can see what you saved, and nobody is told.
Discover choices from before: earlier versions of Fanbles asked people who earn for a category (woman, man, or LGBTQ+) and everyone else who they wanted to see on Discover. We no longer ask, and Discover no longer uses these answers. They aren’t on your profile or shown to other users: only you and our team can see yours. Because they can say something about your sexual orientation, we treat them as sensitive. To have yours deleted, email us.
18+ creators setting: whether you turned on See 18+ creators in Account → Privacy. It’s off until you turn it on, except for creators who earn and people whose own page is 18+, for whom it starts on until they turn it off. No other user can see it, and we delete it when you delete your account. Pages you subscribe to or have bought from show to you either way.
Live streams: when you watch or host a live, which live it was, when you joined, and the IP address and browser you joined from, so we can investigate reports and meet our legal duties; and what you write in its chat. We don’t record live video.
Referrals: whose invite, join, or profile link you signed up from, and the rewards it earned. Someone who earns and invited you to earn sees your username once you are verified, and what they earned from you; anyone can see how many people joined from their own link and how many of them have posted, but not a list of who; a person who invites friends sees only how many joined and topped up.
Payment records: amounts, dates, items bought, and transaction references from our payment partners. When you buy credits, this includes the reference number you give us, any receipt screenshot you upload, and the sender name shown in our GCash or Maya history. We do not receive or store your full card number or e-wallet PIN.
Technical data: IP address, device and browser type, approximate location based on IP address, and security logs.
From people who turn on earning
Identity verification: legal name, date of birth, a government-issued ID, and a selfie holding that ID. Government IDs and ages are sensitive personal information under the Data Privacy Act, and we protect them accordingly.
Payout details: your GCash or Maya QR code and/or number and account name, or other payout details you provide, plus the records of every cash-out we send.
Consent records: identity, age, and consent records for other people who appear in your content, when we ask for them.
Live streams you host: each live’s title, who could watch, when it started and ended, and how many people watched.
Phone alerts: if you turn on alerts for your sales, the push address your browser or phone gives us, so we can send them. Turning alerts off deletes it.
3. How we use your data and why
We use personal data only for these purposes:
To provide the Service, such as creating your account, showing profiles, delivering content you have paid for, processing purchases, calculating earnings, and sending cash-outs. This is necessary to perform our agreement with you.
To verify age and identity, confirm that everyone on Fanbles is an adult, and prevent fraud and impersonation. For sensitive personal information, we rely on your consent and on our legal obligations.
To keep people safe by moderating content, investigating reports, blocking leaked or non-consensual content, and protecting our systems. Our team may review posts, photos, and videos at any time, including ones sent in chats. When a chat is reported, our team reads its most recent messages to check the report. This is based on our legitimate interests and our legal obligations.
To comply with the law, including tax, accounting, and anti-money-laundering rules, and our duties under the Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act (Republic Act No. 11930).
To communicate with you about your account, purchases, cash-outs, security, and changes to our policies. We will send marketing messages only if you agree, and you can opt out at any time.
We do not sell your personal data, and we do not show other companies’ ads on Fanbles. We do measure our own ads on Facebook and Instagram, as explained under Cookies.
4. What other users can see
Public profiles: everyone, including search engines, can see a public profile: username, display name, profile photo, cover photo, its look (theme, colours and background photo), bio, and post previews. Free posts open for anyone signed in. Anyone can find a public profile in search, follow it, and message it. New accounts are public from the start.
Private profiles: only you, people you already chat with, subscribe to or buy from (or who did so with you), and your followers can see it and your posts; Top Friends and testimonials show only to your friends. Other signed-in members who open your link see only your username and that the account is private; signed-out visitors see the same page as for a username nobody has. Private profiles aren’t in search engines, and in Fanbles search only people who can already see them find them. New people can’t message them, and the only new followers are people you follow, following you back. You can switch between public and private at any time in Account → Profile.
Every profile was made public on October 30, 2026. Fanbles is a social app, so we made the profiles that were private public, and we tell each person the next time they open Discover. You can make yours private again at any time in Account → Profile.
People you may know: we suggest people to follow: friends of your friends (naming one friend you share), people who follow you, and other members. A public profile can be suggested to anyone; a private one only to people who can already see it.
People who earn always have a public profile, so buyers can find who they pay. Turning earning on makes a private profile public.
18+ pages: if your page is marked 18+, it shows in full only to members who turned on See 18+ creators or who subscribe to or have bought from your page. Everyone else, including signed-out visitors and search engines, still sees your name, profile photo, and bio, but not your posts, cover photo, or background, and your page and 18+ posts don’t appear in their feed, search, Clips, or suggestions. 18+ pages aren’t in our sitemap.
Activity status: once you and someone who earns have both written in your chat, you can see roughly when they were last active (for example, “Online now” or “3 hours ago”). We never show it to strangers, to people who only opened a chat, or for people who don’t earn.
People who earn can see the username and display name of people who subscribe, buy, tip, or message them, and what they bought or sent. Nobody can see your email address or payment details.
Followers and friends: everyone can see how many people follow someone, but only that person can see who (see Your followers below). Adding someone as a friend follows them; if they don’t earn, they see it as a friend request (people who earn see a new follower). When they add or follow you back, you’re friends. Your friends can see your friends list (only the people on it they can see themselves), and nobody else can.
Likes: people who can see a post can see how many likes it has. Its owner can also see who liked it, by name, in their notifications.
Your followers: you can see who follows you, with their name, username, and photo, in Account → Followers, and remove anyone from there. We don’t tell them. So when you follow someone, they can see that you do. If you make your profile private, people who already follow you keep seeing it and your posts until you remove or block them.
Top Friends: if you turn them on, everyone who can see your profile sees the friends you pick, except friends whose own profile they can’t see. Any friend can take themselves off your Top Friends.
Testimonials: what friends write about you (and, if you earn, your followers) shows on your profile only after you approve it, with the writer’s name, photo, and a link to their profile. It shows to people who can see both profiles, so a private writer’s testimonial isn’t shown to people who can’t see their profile, or to search engines.
Status: the status you set shows on your profile for 24 hours.
Comments: your comments show your username, display name, and photo to people who can see the post, including only subscribers or buyers for locked posts. Whoever posted it can hide your comment (then only you and they see it) or delete it. People you block, or who block you, don’t see your comments, and you don’t see theirs.
Notifications: when you comment on someone’s post, reply to them, or @mention them, they may see your name, photo, and the start of what you wrote in their notifications. Someone you @mention is told only if they can see the post. A comment that’s hidden or deleted, or a block, takes it out of their notifications.
Mentions: anyone who can comment on a post can @mention you, and your username shows in their comment. If your profile is public, you’re told about mentions on posts you can see. If it’s private, you’re told only about mentions from people you follow; mentions from anyone else stay out of your notifications, including earlier ones, for as long as your profile is private.
Live streams: hosts see how many people are watching, not who. People watching see your username and what you write in the live’s chat. Our team can watch any live without being seen.
No other user ever sees your legal name, ID, selfie, or payout details.
5. Who we share data with
We share personal data only when needed, with:
Service providers that host and run Fanbles for us, such as database, sign-in, and file storage (Supabase), sign-in with Google if you choose it (Google), media storage, video streaming, and content delivery (Cloudflare), live video (LiveKit, in the United States, which carries a live’s video and audio and sees the IP address of everyone connected), website hosting, email, and payment processing. They may use your data only to provide services to us, under written agreements that require them to protect it.
Meta (Facebook and Instagram), to measure our ads, when you visit our homepage or sign-up page and once when you finish signing up, as explained under Cookies.
Payout channels such as GCash and Maya, which receive the details needed to send a creator’s cash-out.
Authorities, when the law requires it, to report child sexual abuse or exploitation material, to respond to a valid legal order, or to protect someone from serious harm.
A successor business, if Fanbles is merged or sold. We will tell you before your data becomes subject to a different privacy policy.
6. Data stored outside the Philippines
Some of our service providers store or process data outside the Philippines. When they do, we remain responsible for your data. We use providers that apply security protections comparable to those required by the Data Privacy Act and bind them by contract to protect it.
7. How we protect your data
We use organisational, physical, and technical safeguards, including encryption in transit, access controls on our database, and private storage for paid content and identity documents. Identity documents are kept in a separate private storage area. Only authorised staff can view them, through links that expire after a short time, and only to review a verification or investigate a report.
No system is perfectly secure. If a personal data breach is likely to cause you serious harm, we will notify you and the National Privacy Commission within 72 hours of learning of it, as the law requires.
8. How long we keep data
We keep personal data only as long as we need it for the purposes in this policy or as the law requires:
Account and profile data: while your account is open. When you delete your account (in Account → Delete account, or by emailing us), we delete your profile, posts, photos, videos, follows, and likes, and anonymise the rest, except for the records below. Messages you sent stay in the other person’s chat, shown as from “Deleted account”.
Purchases, earnings, and cash-out records: for as long as tax, accounting, and anti-money-laundering laws require, even after an account is closed.
Identity verification and consent records: while the account is open, and afterwards for as long as needed to meet our legal obligations or to establish or defend legal claims.
Live streams: the record of who joined a live and from which IP address for 6 months, and live chat for 1 year; then we delete them. If a live is reported, we keep its records until the report is closed.
Reported testimonials: if a testimonial is reported, we keep its text with the report, even after it’s deleted from the profile, so our team can check it.
Comments and saves: when a comment is deleted, by you or by whoever posted what it’s on, we erase its text; if it was reported, we keep the text until the report is closed. A comment our team removes after a report is kept as our record. When you delete your account, your comments are erased the same way and your saves are deleted.
Unsent messages: hidden from both people in the chat right away. We keep a copy, like the rest of the chat, so our team can check reports about it.
Content reported as illegal: preserved for as long as the law or the authorities require, and never republished.
When we no longer need data, we delete it or make it anonymous. Data in backups is deleted on a regular schedule.
9. Your rights
Under the Data Privacy Act, you have the right to:
be informed about how your personal data is processed;
access your personal data;
have inaccurate or incomplete data corrected;
object to processing, including withdrawing consent you gave earlier;
have your data erased or blocked, when the law allows;
receive a copy of your data in an electronic format you can use elsewhere;
claim damages if you are harmed by inaccurate, incomplete, outdated, false, or unlawfully obtained data, or by unauthorised use of your data; and
file a complaint with the National Privacy Commission at privacy.gov.ph.
To use any of these rights, email privacy@fanbles.com from the address on your account. We may ask you to confirm your identity first. Some requests are limited by law. For example, we cannot delete financial records we must keep, and withdrawing consent to identity verification means you can no longer earn on Fanbles.
10. Cookies
We use cookies and similar storage to keep you signed in, remember your settings, protect the Service, remember whose join link brought you, and measure our ads.
Our homepage and sign-up page load the Meta Pixel, a tool from Meta (the company behind Facebook and Instagram). It tells Meta that someone visited, and the first page you open after signing up tells Meta once that you signed up. Meta receives the page’s address, your IP address and device details, and may connect them to your Facebook or Instagram account with its own cookies, under Meta’s privacy policy. We use this to see which of our ads bring people to Fanbles and to show our ads to people likely to join. We don’t send Meta your name, email, posts, messages, or what you do inside Fanbles. It doesn’t run if your browser sends Global Privacy Control, and you can turn it off on this device:
If you open someone’s fanbles.com/join link, a cookie keeps that person’s account ID on your device for 30 days, so that if you sign up we can count who brought you. Only our team sees that record; the person whose link it was sees how many people joined and how many have posted, not a list of who. If that person earns and you buy from them or chat with them, they may be able to tell their link brought you. We delete the record when you delete your account.
Profile songs come from Spotify or YouTube. For a profile song we store only which song or video it is, never your listening. Their player loads when you open a profile with a song, unless you turned off “Play songs when I open a profile” or your device is saving data (then it loads when you tap Play). From then on, Spotify or YouTube receives your IP address and device details and may set their own cookies, under their own privacy policies. That setting is kept only on your device.
11. People under 18
Fanbles is only for adults. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will close the account and delete the data, except for anything the law requires us to keep or report. If you believe a minor is using Fanbles or appears in any content, email report@fanbles.com immediately.
12. Changes to this policy
We will update this policy as Fanbles changes and show the new date at the top. If we make a material change, we will notify you by email or in the app before it takes effect. This policy works together with our Terms of Service.