This Privacy Policy describes how Heart2Beatz Inc. ("Heart2Beatz", "we", "us", or "our") collects, uses, stores, discloses, and protects your personal information when you access or use the Villa of Love website located at villaoflovenaija.com, the Villa of Love mobile application available on iOS and Android (collectively, the "Platform"), and any related products, services, features, content, or applications offered by Heart2Beatz Inc. in connection therewith (collectively, the "Services").
By accessing or using our Platform in any way — including but not limited to browsing the website, downloading the mobile application, registering an account, submitting an early access application, purchasing a Founder Circle membership, purchasing a Premium subscription, participating in community features, voting, or engaging with any content — you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy in its entirety.
If you do not agree with any part of this Privacy Policy, you must immediately discontinue your use of the Platform and all associated Services.
We know privacy policies can be lengthy. This summary highlights important points.
Villa of Love is an 18+ platform. You must be at least 18 years old to use it.
We currently use Smile ID and Persona for identity and age verification. Depending on the verification flow, these providers may process government identification documents, photographs, selfies, facial information, biometric information, and other verification information.
We collect information you provide, including name, username, date of birth, email, phone number, profile information, photographs, videos, messages, posts, casting information, payment and transaction information, and other information you choose to provide.
We use Firebase Analytics, Microsoft Clarity, Sentry and Meta App Events for analytics, product improvement, technical monitoring and attribution.
Villa Coins are digital units used within Villa of Love for activities such as voting, gifts, communities, events and other Platform experiences.
Heart2Beatz does not currently sell personal information for monetary consideration and does not currently operate targeted advertising.
Villa of Love operates internationally, so information may be processed outside your country of residence.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or otherwise control certain uses of your personal information.
The Villa of Love Platform is operated by Heart2Beatz, Inc., 16192 Coastal Highway, Lewes, DE 19958, United States.
Privacy contact: hello@villaoflovenaija.com. General/corporate contact: info@heart2beatz.com.
Heart2Beatz, Inc. is the primary entity responsible for determining the purposes and means of processing personal information in connection with Villa of Love.
In Nigeria, Heart-2-Beatz Productions Ltd may provide local operating, production, payment, settlement, administrative or other services associated with Villa of Love. The precise legal role of an entity may depend on the processing activity.
This Privacy Policy applies to Villa of Love mobile applications, websites, account registration, authentication, identity and age verification, profiles, communities, direct messages, stories, moments, episodes, livestreams, video and audio calls, voting, rankings, Villa Coins, gifts, creator experiences, Founder Circle, Premium subscriptions, events, casting, contestant applications, customer support, marketing communications, analytics, security and fraud prevention, and other services that link to this Privacy Policy.
It does not govern the independent privacy practices of third parties.
Villa of Love is intended exclusively for adults. You must be at least 18 years old to create or use an account.
We collect date-of-birth information and may require identity and age verification.
We do not knowingly permit individuals under 18 to use Villa of Love.
If we discover that a person under 18 has created an account contrary to this requirement, we may suspend or terminate the account and take reasonable steps to delete associated information, subject to applicable law.
When you register, we may collect full name, username, email address, phone number, date of birth, profile photograph, authentication information, country or region, account identifiers, preferences, and other information necessary to create and operate your account.
Villa of Love currently supports authentication through email, telephone number, Google and Apple. We do not currently offer Facebook authentication.
Firebase Authentication supports authentication and account access.
We currently use Smile ID and Persona for identity and age verification.
Depending on the verification flow, the provider may process name, date of birth, government-issued identification, passport information, driver's licence or other identity documents, identification numbers, photographs, selfies, facial images, biometric information, document authenticity information, device information, location or country information, fraud indicators, and other information necessary to complete verification.
Some verification systems use biometric technology to compare information from an identification document or photograph with a selfie or other image.
Where Smile ID or Persona processes biometric information, processing may occur on behalf of Heart2Beatz or independently according to the applicable service arrangement.
We seek to receive and retain only information reasonably necessary to determine verification status and administer the Platform.
We do not intend to use identity-verification biometric information for advertising or unrelated purposes.
Where applicable law requires a specific lawful basis, explicit consent, special-category condition, or other additional protection, we will apply the relevant requirement.
You may provide biography, interests, preferences, photographs, videos, stories, moments, comments, messages, community information, event participation, creator information, casting information, personal statements, and other information you choose to submit.
You should consider carefully whether information is appropriate to share publicly.
Profiles may include display name, username, profile photograph, biography, interests, location or country, public activity, creator information, community participation, achievements, Founder Circle status, and other information you choose to make available.
Some profile information may be publicly visible.
Users may create, upload, publish or transmit photographs, videos, audio, stories, moments, comments, posts, messages, livestream content, profile information, reactions, and other content.
Depending on the feature, content may be visible to selected users, community members, followers, participants, other Villa of Love users, or the public.
Public content may be copied, screenshotted, recorded or redistributed by others. Villa of Love does not currently provide a general download function for all user content, but cannot prevent screenshots or recordings.
The rights granted to Heart2Beatz concerning user-generated content are governed by the Terms of Use.
We may use certain user-generated content for Villa of Love marketing, advertising, social-media promotion, trailers, promotional campaigns, editorial content, entertainment, publicity and other Platform-related promotional activities.
Where applicable law requires separate permission or consent for a particular use, we will obtain it.
Villa of Love may provide direct messages, group communications, community communications, invitations, comments, reactions, audio calls, video calls and other communications.
We may process communications and associated metadata for delivery, security, fraud prevention, moderation, abuse prevention, technical troubleshooting and legal compliance.
Private communications are not represented as absolutely confidential or immune from lawful access, technical processing, security review, reports or other circumstances permitted by law.
Villa of Love may provide video, livestreaming and audio/video calling.
Technology providers may include Mux, Cloudflare, Agora and other providers necessary to deliver media services.
Depending on the feature, we may process video, audio, images, livestream information, call metadata, device information and technical information.
Villa of Love may conduct casting for seasons, productions, events and other entertainment experiences.
Initial applications may collect name, photographs, videos, biography, contact information, answers to casting questions, and information concerning what the applicant is seeking from the Villa of Love experience, including whether they are seeking love, relationships, money, entertainment opportunities or other experiences.
Shortlisted applicants may be required to provide passport information, government identification, travel information, additional photographs or videos, eligibility information and information required for production.
Casting information may be accessed by authorized Heart2Beatz personnel, casting agencies, production companies, third-party producers, professional advisers and other authorized parties involved in the relevant production.
Unsuccessful casting applications are intended to be deleted within 180 days after completion of the applicable overall casting review, unless particular information must reasonably be retained for legal, security, fraud, dispute-resolution or other lawful purposes.
Casting applicants may voluntarily disclose information treated as sensitive or special-category information under applicable law, including information concerning health, sexual orientation, sex life, religion, ethnicity, family circumstances, financial circumstances or other highly personal experiences.
We do not seek sensitive information merely because it is interesting. Where it is not reasonably necessary for casting, production, eligibility, safety, legal compliance or another legitimate purpose, applicants should not provide it.
If sensitive information is necessary for a particular casting or production process, we will process it in accordance with applicable law and apply appropriate safeguards.
Villa of Love may allow users to vote for contestants or participate in other voting experiences.
We may process account identifier, contestant selected, date and time of the vote, voting eligibility, Villa Coins used, votes awarded through membership benefits, technical information and voting history.
Individual voting activity is not ordinarily displayed publicly. Voting may be anonymous to other users while remaining associated with your account internally.
We may retain voting information to calculate rankings, prevent duplicate or fraudulent voting, enforce rules, validate results, investigate disputes, produce aggregated statistics and administer the Platform.
Public results may be displayed in aggregate, including percentages or other summarized results.
At the time of this Privacy Policy, eligible Premium users may receive 100 votes per week and eligible Founder Circle members may receive 200 votes per week.
Unused weekly votes may expire at the end of the applicable voting period.
Users may purchase additional voting capacity using Villa Coins where the relevant feature is available. Commercial voting rules are governed by the applicable Terms.
Villa Coins are digital units used within Villa of Love. They may be purchased, awarded, earned, gifted, received from other users, or otherwise granted through qualifying Platform activities.
Villa Coins may be used for voting, gifts, creator experiences, communities, events and other Platform features.
We process information about purchases, wallet balances, coin balances, transaction history, gifts, votes, promotional awards, redemptions, account adjustments, fraud investigations and other wallet activity.
The commercial denomination may be expressed approximately as US$0.10 per Villa Coin.
Example denominations: 10 Villa Coins — approximately US$1; 50 — approximately US$5; 100 — approximately US$10; 250 — approximately US$25; 500 — approximately US$50; and 1,000 — approximately US$100.
These figures describe the intended commercial denomination and do not mean that Villa Coins constitute cash or redeemable monetary value.
Users may pay in local currency. Actual checkout prices may differ based on exchange rates, taxes, payment-provider requirements, app-store pricing, country or storefront, regulatory requirements and other applicable pricing rules.
The detailed commercial rules are contained in the Villa Coins & Virtual Goods Terms.
Where voting is available through Villa Coins, 1 Villa Coin may provide 3 votes, subject to applicable voting rules.
The relationship between Villa Coins and voting may change as the Platform develops. The current conversion or use rate displayed at the time of purchase or use will govern the relevant transaction.
Users may use Villa Coins to send gifts or participate in creator-related experiences. Where permitted by the applicable program, qualifying creator activity may generate rewards.
Some rewards may ultimately be eligible for cash payment.
Where cash rewards are available, we may need to collect or verify legal name, identity information, payment information, tax information, account information, eligibility information and other information required to administer the reward.
Receiving a digital gift or Villa Coins does not automatically guarantee a cash payment. Cash rewards are subject to eligibility, applicable reward rules, verification, fraud controls, tax requirements, payment requirements, applicable law and the terms governing the program.
Founder Circle is a one-time paid membership.
Founder Circle may provide priority consideration for Villa of Love Season 1 casting and eligible future productions; a permanent founder number; Season 1 Premium access; priority access to future drops; founder recognition; and recognition in Season 1 credits where applicable.
Founder Circle records may include membership status, transaction information, founder number, account information, eligibility, benefits and participation.
Founder numbers are intended to be permanent. If you delete your account, certain historical Founder Circle information may remain where reasonably necessary for permanent Founder Circle records, production records, credits, legal obligations or other lawful purposes, subject to applicable privacy rights.
Villa of Love may offer Premium subscriptions, which may include recurring billing.
Subscription information may include tier, status, start date, renewal date, cancellation information, purchase information, transaction identifiers, benefits used and account information.
Where Premium is purchased through Apple or Google, the applicable app-store billing system processes the transaction. RevenueCat may be used to administer in-app purchase entitlements and subscription status.
Depending on the platform and transaction, Villa of Love may use Apple App Store, Google Play, RevenueCat, Stripe, Paystack, Flutterwave, Apple Pay, Google Pay and other payment providers.
We generally do not need to store your complete payment-card number. Payment providers may process payment information directly.
We may receive transaction identifiers, amount, currency, payment status, product purchased, subscription status, refund information, chargeback information, fraud information and limited payment-method information.
Heart-2-Beatz Productions Ltd may participate in local Nigerian payment operations, settlement or related processing.
Certain digital purchases, including virtual currency and digital subscriptions, may be required to use Apple or Google billing depending on the applicable platform, product, country and program rules.
We may use different payment methods for different products, platforms, countries or transaction types where permitted.
When you use Villa of Love, we may automatically collect device type, operating system, app version, IP address, approximate location derived from technical information, device identifiers, network information, crash information, performance information, screen views, feature interactions, timestamps, session information, referral information and other technical information.
We use Firebase technologies including Firestore, Firebase Authentication, Firebase Cloud Messaging and Firebase Analytics.
Firebase Analytics may process registration, login, screen views, moments, stories, episode plays, votes, direct messages, gifts, wallet top-ups, Founder Circle checkout, invitations and other feature interactions.
We use this information to understand product usage, improve features, identify problems, measure engagement, analyze user journeys and make product decisions.
We use Microsoft Clarity for heatmaps, interaction analysis, rage-click information, dead-click information and session recordings.
We configure our implementation to reduce unnecessary exposure of sensitive information where technically possible.
We use Sentry for crash reporting, error reporting, performance tracing, technical logs, application monitoring and session replay associated with errors.
Our current configuration includes performance tracing at a high sampling level and may attach session replay to errors. Video players are masked in relevant replay configurations. Development and production environments are maintained separately.
We may use Meta App Events for attribution and conversion measurement. Our current implementation may send CompleteRegistration, ViewContent, InitiateCheckout and Purchase events.
We currently do not use Meta App Events for targeted advertising.
If analytics or advertising practices materially change, we will update our privacy information and provide consent or opt-out mechanisms where required.
We use Firebase Cloud Messaging and other applicable technologies to provide push notifications, including messages, events, voting reminders, account information, security notifications, community activity, creator activity, product announcements and promotional messages.
You can generally control push notifications through your device settings.
We use technologies such as ChottuLink to support invitation links, referral links, deep links, campaign attribution and navigation into relevant Platform experiences.
These technologies may process technical information and referral information necessary to operate the link.
We use personal information to provide Villa of Love; create and maintain accounts; authenticate users; provide profiles, communities and messaging; enable voting; operate events; provide creator features; administer subscriptions and Founder Circle; deliver Platform services; verify age and identity; prevent fraud and abuse; process payments; administer Villa Coins and wallets; process rewards; calculate voting results; evaluate casting applicants; improve the Platform; communicate with users; and comply with legal obligations.
Depending on your location and circumstances, we may rely on contract, legal obligation, legitimate interests, consent, or another lawful basis recognized by applicable law.
Contract may apply to account creation, Platform services, purchases, subscriptions, Villa Coins and Founder Circle.
Legal obligation may apply to tax, accounting, identity, fraud, legal-order and regulatory requirements.
Legitimate interests may apply to securing the Platform, preventing fraud, improving services, understanding product performance, protecting users, enforcing our Terms, maintaining records and administering the business.
Consent may apply where required or appropriate, including certain marketing, non-essential tracking, cookies, sensitive-data processing and biometric processing.
Some information may be sensitive or special-category information, including biometric information used for identity verification, government identification information, health information voluntarily disclosed during casting, information concerning sexual orientation, sex life, religion, ethnicity or racial origin, and other information classified as sensitive under applicable law.
We seek to apply data minimization to sensitive information and do not intend to collect sensitive information that is unnecessary for the relevant purpose.
Where heightened legal protections apply, we will use the applicable legal basis and additional condition or safeguard.
We may use automated technologies for identity verification, fraud detection, account security, product analytics, recommendations, ranking, voting administration, abuse detection and other Platform functions.
We may use voting information to calculate rankings and aggregated results and analytics to understand user behavior and Platform performance.
We do not intend to make decisions producing legal or similarly significant effects solely through automated processing unless permitted by applicable law and subject to required safeguards.
We may share personal information with technology providers; identity-verification providers; payment providers; analytics providers; production partners; legal and regulatory authorities; and parties involved in corporate transactions, where reasonably necessary and permitted by law.
Technology providers may provide cloud infrastructure, databases, authentication, push notifications, video, livestreaming, audio/video communications, analytics, crash reporting, monitoring, deep links and other technical infrastructure.
Identity-verification providers currently include Smile ID and Persona. Payment providers may include Apple, Google, RevenueCat, Stripe, Paystack, Flutterwave, Apple Pay, Google Pay and applicable payment networks.
Production partners may include casting agencies, production companies, third-party producers, contractors, professional advisers and other authorized production partners.
We may change or add service providers as Villa of Love develops.
Our service providers may process information on our behalf, independently for their own legal purposes, or in accordance with their own privacy policies, depending on their role.
Where a provider acts as a processor or service provider for us, we seek to establish appropriate contractual protections governing processing.
Third-party providers may also be subject to their own legal obligations. We encourage you to review the privacy policies of services you interact with directly.
Villa of Love is an international service. Your information may be transferred to and processed in countries other than the country in which you live, including the United States, Nigeria, the United Kingdom, European countries and other countries where our service providers operate.
Where applicable law restricts international transfers, we will use an appropriate legal mechanism and safeguards, which may include an adequacy decision, standard contractual clauses, an international data-transfer agreement, another approved contractual mechanism or another legally permitted transfer mechanism.
We may send product announcements, promotional emails, event announcements, voting reminders, community notifications, creator notifications, offers, newsletters and other marketing communications.
Where required, we will obtain appropriate consent.
You can unsubscribe from marketing emails through the unsubscribe mechanism included in the message.
You may continue to receive essential non-marketing communications such as security alerts, account notices, transaction receipts, purchase confirmations and subscription notices.
We do not currently operate targeted advertising.
We also do not currently sell personal information for monetary consideration.
Our analytics and attribution technologies may nevertheless involve disclosure of limited technical or event information to technology providers.
If we introduce targeted advertising or practices that create additional privacy rights, we will update our privacy practices and provide notices, choices and consent mechanisms required by applicable law.
We may process information to detect fraudulent transactions, prevent fake or duplicate accounts, identify suspicious voting, prevent abuse of Villa Coins, prevent manipulation of rankings, detect payment fraud, prevent unauthorized access, investigate account compromise, prevent exploitation of Platform features and protect users and the Platform.
This may involve automated tools, device information, transaction patterns, account activity and other signals.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.
Retention may depend on the type of information, purpose, user's relationship with Villa of Love, legal requirements, financial requirements, security, fraud prevention, dispute resolution, contractual obligations, production requirements and legitimate business requirements.
We may retain information in backup systems for a reasonable period after deletion.
We generally retain account information while an account remains active.
After deletion, we may delete, anonymize or retain particular information where necessary for legal compliance, fraud prevention, security, financial records, dispute resolution, enforcement, historical records, Founder Circle records or other lawful purposes.
Unsuccessful casting applications are intended to be deleted within 180 days after completion of the applicable overall casting review.
Information concerning successful or shortlisted participants may be retained longer where necessary for production, contractual obligations, legal compliance, publicity, credits, production records or other legitimate purposes.
Transaction information may be retained as reasonably necessary to comply with accounting and tax requirements, resolve disputes, prevent fraud, process chargebacks, establish legal claims, maintain financial records and comply with applicable law.
Identity-verification information is retained according to the applicable verification process, technical configuration, contractual arrangements, legal requirements, fraud-prevention requirements and legitimate operational needs.
We seek to minimize the amount of raw identity and biometric information retained directly by Heart2Beatz.
Where a provider retains verification information, its applicable retention policies and contractual arrangements may apply.
Analytics and technical information may be retained according to the configuration of the applicable service, internal operational requirements, security requirements, product-analysis needs and applicable law.
Retention may differ between production, development, error-reporting and analytics systems.
We use reasonable technical, administrative and organizational measures designed to protect personal information.
Our security environment includes authenticated access, cloud infrastructure, access controls, environment separation, technical monitoring, payment-provider security, identity verification, application monitoring and security features provided by our infrastructure providers.
No system connected to the internet can be guaranteed to be completely secure.
If we become aware of a security incident involving personal information, we will investigate, assess its nature and scope, take reasonable steps to contain and remediate it, assess whether notification is required, notify affected individuals or authorities where required by applicable law, and take reasonable measures to prevent recurrence.
Depending on where you live, you may have rights including the right to be informed, access, correction, deletion or erasure, restriction, objection, data portability, withdrawal of consent, rights concerning automated decision-making, the right to complain to a supervisory authority, and other rights established by applicable law.
These rights are subject to applicable exceptions, including where information must be retained to comply with legal obligations or establish, exercise or defend legal claims.
Where the Nigeria Data Protection Act applies, Nigerian users have rights provided by the NDPA, which may include the right to be informed, access, rectification, objection, restriction, data portability, erasure, withdrawal of consent and rights relating to automated decision-making.
We will handle qualifying requests according to applicable Nigerian law.
Where UK data-protection law applies, users may have rights under the UK GDPR and Data Protection Act 2018, including access, rectification, erasure, restriction, objection, portability, withdrawal of consent and rights relating to automated decision-making.
Where applicable, you may complain to the Information Commissioner's Office.
U.S. privacy rights vary by state.
Depending on your state of residence and whether applicable law covers Heart2Beatz, you may have rights including access, correction, deletion, data portability, opting out of certain targeted advertising, opting out of certain profiling, limiting certain uses of sensitive personal information, and appealing certain privacy decisions.
We do not currently sell personal information and will honor applicable rights and exemptions.
California residents may have additional rights under applicable California privacy laws, including the California Consumer Privacy Act as amended.
Depending on applicability, these may include rights to know/access, delete, correct, obtain information about categories and purposes of processing, opt out of certain forms of sharing or targeted advertising, limit certain uses of sensitive personal information, and exercise other rights provided by California law.
We do not currently sell personal information and will not discriminate against a California resident for exercising applicable privacy rights.
You may submit a privacy request by contacting hello@villaoflovenaija.com or info@heart2beatz.com.
Please provide enough information for us to identify you, identify your account, understand your request and verify that you are the relevant individual or authorized representative.
We may request additional information to verify your identity.
We will process requests within the time periods required by applicable law.
You may request deletion of your Villa of Love account. Account deletion may be available through the Platform where implemented, or by contacting us.
Deletion may not result in immediate deletion of every record. We may retain information necessary for legal obligations, financial records, fraud prevention, security, dispute resolution, enforcement, Founder Circle records, production records or other lawful purposes.
Where information no longer needs to be retained, we will seek to delete or anonymize it.
You are responsible for protecting your account credentials, keeping account information accurate, choosing carefully what you make public, not sharing another person's private information without authorization, and notifying us if you believe your account has been compromised.
Villa of Love may contain links to third-party services. Those services may have their own privacy policies and terms. We are not responsible for the independent privacy practices of third parties. You should review their privacy policies before providing information to them.
If Heart2Beatz participates in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, corporate reorganization or similar transaction, personal information may be transferred as part of that transaction. Where required, we will provide appropriate notice and comply with applicable law.
We may update this Privacy Policy as Villa of Love evolves, including when we introduce new features, change technology, add service providers, introduce payment methods, change advertising practices, enter new jurisdictions, change data practices or respond to changes in law.
We will update the Last Updated date when changes are made. Where required by law, we will provide additional notice or obtain consent.
Heart2Beatz, Inc.
16192 Coastal Highway
Lewes, DE 19958
United States
Privacy: hello@villaoflovenaija.com
General / Corporate: info@heart2beatz.com
Nigerian Operating Company: Heart-2-Beatz Productions Ltd
This Privacy Policy is intended to operate alongside the privacy laws applicable to you.
Nothing in this Privacy Policy is intended to remove or reduce a privacy right that cannot lawfully be excluded under the law applicable to you.
Where the laws of your jurisdiction provide greater privacy protections than those described here, those protections will apply to the extent required by law.
Effective Date: October 6, 2026
Last Updated: October 6, 2026