Privacy Policy
1. Data Controller
uStreamers is a software service developed and operated by its proprietor and development team based and legally domiciled in the City of Córdoba, Province of Córdoba, Argentine Republic (hereinafter, "uStreamers", "we", "us", or the "Data Controller"). uStreamers is the data controller for the personal data described in this policy, collected through the mobile app, the API, and the website associated with the Service. For any privacy-related inquiries or requests, our official contact email is legal@ustreamers.app.
2. Data We Collect
- Twitch, Kick, and TikTok profile data: username, account identifier, profile picture, and associated email address (if provided), retrieved when you authorize sign-in or voluntarily link external streaming channels.
- OAuth access tokens: stored encrypted using robust cryptographic algorithms (AES-256) and used exclusively to perform, on your behalf, the actions you authorized (reading your chat, receiving live stream events, moderating your channel, etc.).
- Technical data: IP address, device identifier, operating system, and app version, used for security, rate limiting, and error diagnostics.
- Chat messages: content you send in the merged chat is processed to display it to other users and to power moderation and reporting tools.
- Push notification tokens: to alert you when a channel you follow goes live.
- Subscription data: if you purchase uStreamers Plus+, your subscription status and purchase source (App Store, Google Play). uStreamers does not store card numbers or payment details: those are handled exclusively by the relevant app store.
- Discord Webhooks: if, as a streamer, you set up automated Tops publication to your Discord community, we store the webhook URL encrypted using AES-256 and the destination channel label returned by Discord. uStreamers does not access or store messages, member lists, or private server data from your Discord server.
- Audio recordings and voice messages (Microphone): if you voluntarily choose to use the Voice Alerts feature to send an audio message to a streamer, we temporarily collect the audio recording captured via your device's microphone. Biometric data safeguard (Illinois BIPA and GDPR Art. 9): uStreamers does NOT extract identifying acoustic vectors, voiceprints, or conduct biometric profiling or voice-based identity recognition. Audio files are processed strictly as ephemeral media files for community interaction.
- Optional personal and location data: country, state/region, and birthday (day and month only, without year). You may voluntarily provide these in the app's Settings. If you turn on the corresponding visibility toggles, your location and birthday will be shown on your public profile (as a streamer or as a viewer) and will enable your discovery in the catalog's local filters. While those toggles are off, the data is not shown to other users.
- Mobile device permissions: to operate specific features, the mobile app requests explicit operating system permissions (Android / iOS): (a) Microphone: requested optionally and strictly when the user taps to record a live voice alert; (b) Push notifications: to deliver alerts when a followed channel goes live (which can be disabled at any time within app settings or device OS settings); (c) Storage / Photo library: requested strictly when a streamer voluntarily attaches an image to a community feed post or updates their avatar.
4. Source of the Data
Profile and broadcast event data comes directly from Twitch, Kick, and TikTok through their respective official OAuth 2.0 (PKCE) authentication flows and developer APIs, which we access only after your explicit authorization during sign-in or when linking accounts in Settings.
Direct revocation from issuing platforms: In addition to unlinking accounts at any time from within uStreamers Settings, you may immediately and directly revoke permissions by accessing each platform's native security settings: on Twitch via Settings → Connections → Other Connections; on Kick via Account Settings → Applications; on TikTok via Settings and Privacy → Security & Permissions → Manage App Permissions; and on Discord via User Settings → Authorized Apps (or by deleting the channel webhook).
5. Purpose of Processing
- Operating the Service: displaying your profile, your merged chat, live room events, and the status of your favorite channels.
- Enabling moderation of your own channel, if you are a streamer.
- Sending notifications you requested (e.g. "your favorite streamer just went live").
- Preventing abuse, spam, and fraudulent access (rate limiting, detection of unauthorized minor accounts).
- Processing and broadcasting in real time the voice notes and audio alerts you voluntarily submit to a channel, applying authorized audio filters or modulation effects where applicable.
- Managing your uStreamers Plus+ subscription, if purchased.
- Complying with legal obligations, including those described in section 3 of the Terms of Service regarding minors.
6. Legal Basis
We process your data based on: (a) performance of the contract you accept by using the Service; (b) your explicit consent when authorizing Twitch, Kick, or TikTok OAuth access; and (c) compliance with legal obligations, including the protection of minors.
7. Minors
uStreamers is not directed at individuals under 13 years of age and does not knowingly collect personal data from that age group. If you are between 13 and 17 years old, using the Service requires the consent of your parent or legal guardian (see section 3.2 of the Terms of Service).
If a parent or legal guardian discovers that a child under 13 is using uStreamers without authorization, they may request the immediate deletion of the account and associated data by writing to legal@ustreamers.app. The account is suspended and the data is irreversibly anonymized or deleted.
9. Data Retention
We retain your data while your account is active. If you delete your account from Settings, your personal data is irreversibly anonymized or erased, except for data we must retain to comply with legal obligations (for example, moderation audit logs).
Ephemeral Data Processing for TikTok LIVE (Zero-Persistence): In compliance with TikTok Developer Policies, live stream comments, viewer identifiers, avatars, and gift/coin events (*Gifts/Coins*) received from TikTok LIVE are not stored in persistent databases or server disks. They are processed strictly ephemerally within server volatile memory during the broadcast to distribute them in real time to authorized streamer endpoints (stream overlay, OBS dock, and, when available and authorized via official developer APIs, the mobile app), and are purged immediately after dispatch.
Ephemeral Lifecycle for Voice Alerts (Maximum 48 Hours): Voice recordings and audio files sent through Voice Alerts are stored on a strictly temporary basis. An automated cleanup worker permanently and irrecoverably deletes audio files from cloud object storage within a maximum of 48 hours following submission (or immediately for discarded/unapproved recordings in moderation), retaining no residual copies.
10. Your Rights
Depending on your jurisdiction, you may have the right to access, rectify, delete, restrict, or object to the processing of your personal data, and to data portability. You can exercise these rights by deleting your account directly from the app (Settings → Delete account) or by writing to us at legal@ustreamers.app.
10.1. Argentine Personal Data Protection Act (Law 25,326)
Pursuant to Law No. 25,326, users are advised that: "The holder of personal data has the right to exercise the right of access free of charge at intervals of not less than six months, unless a legitimate interest is established pursuant to article 14, section 3 of Law No. 25,326. The AGENCY FOR ACCESS TO PUBLIC INFORMATION, in its capacity as the Oversight Body of Law No. 25,326, has the authority to handle complaints and claims filed by individuals whose rights are affected by non-compliance with personal data protection regulations."
10.2. Notice for California and U.S. Residents (CCPA / CPRA)
If you are a resident of California or a U.S. state with comprehensive privacy legislation: (a) No Sale or Sharing of Personal Information: uStreamers does not sell your personal information, nor do we share or disclose personal information for cross-context behavioral advertising under the CCPA/CPRA; (b) Non-Discrimination: you will not face discrimination or diminished service quality for exercising your privacy rights; (c) Sensitive Personal Information: we do not collect or process sensitive personal information for the purpose of inferring user characteristics. You may exercise these rights by contacting legal@ustreamers.app.
11. Security
Access tokens are stored encrypted, connections travel over HTTPS/TLS, and administrative access to data is role-limited and audited. No system is 100% foolproof; if we detect a security incident affecting your data, we will notify you as required by applicable law.
12. International Transfers
Some of our infrastructure providers may process data outside your country of residence. In such cases, we take reasonable measures to ensure the processing maintains a level of protection equivalent to the one described in this policy.
13. Changes to this Policy
We may update this Privacy Policy to reflect regulatory or Service changes. Material changes will be communicated within the app before taking effect.
14. Contact
For questions about this Privacy Policy, or to exercise your rights, write to us at legal@ustreamers.app.