Privacy Policy

1. Information We Collect

1.1 Account Information

• Phone Number — Required for OTP-based authentication via Firebase Phone Auth
• Name & Username — Displayed on your public profile
• Profile Photo — Optional; uploaded by you
• Email Address — Only if you sign in via Google Sign-In
• Date of Birth — To verify you are 18 years or older
• Gender — Optional; displayed on profile
• Bio / Country — Optional profile fields

1.2 Content You Create and Share

• Reels (Videos) — Short video clips you upload, stored in Firebase Storage
• Live Streams — Real-time video/audio when you host a live room (via Agora RTC)
• Audio Room Participation — Voice when you join or host an audio room
• Chat Messages — Direct messages to other users (stored encrypted in transit)
• Gifts & Gift Animations — Gift activity, virtual gift transactions
• Comments & Reactions — On reels and live streams

1.3 Financial & Transaction Information

• Coin Balance — Your virtual currency balance within the app
• Transaction History — Coin purchases, gifts sent/received, withdrawals
• USDT Recharge Data — Crypto payment metadata (via NOWPayments); we do not store your wallet private key or full payment credentials
• Withdrawal Requests — Amount, destination, status
• Host Earnings Records — For qualifying Host accounts

1.4 Technical & Device Information

• Device Type & OS Version — For compatibility and support
• IP Address — For security, fraud prevention, and abuse detection
• FCM Token — Firebase Cloud Messaging token for push notifications
• Crash Reports — Anonymized crash data via Firebase Crashlytics
• Usage Data — Feature usage, session length (no keystroke logging)
• Log Data — Server-side request logs for debugging and security auditing

1.5 Face Verification Data

To become a verified Host, we perform a face-liveness check. The image is processed locally on-device and on our server to generate a verification score. We do not use facial recognition to identify individuals. Verification images are not retained after the check is complete.

2. How We Use Your Information

• Create and manage your account
• Provide live streaming, audio rooms, reels, and messaging services
• Process virtual currency (coin) transactions and host withdrawals
• Send push notifications you have opted into (streams going live, messages, gifts)
• Enforce our community standards and Terms of Service
• Detect, investigate, and prevent fraudulent or illegal activity
• Maintain service reliability, security, and performance
• Comply with applicable laws and legal obligations
• Respond to your support requests

We do not use your data for advertising profiling or sell it to third parties.

3. Information Sharing

We do not sell, rent, or trade your personal data. We share data only with the following trusted service providers, and only as needed to operate the app:

We may disclose your information to law enforcement or government authorities when required by law or to protect the safety of our users or the public.

4. Data Retention

• Account data — Retained while your account is active
• Transaction records — Retained for 7 years to comply with financial regulations
• Chat messages — Retained while the conversation exists; deleted when both users delete the conversation
• Live stream recordings — Not retained; streams are real-time only
• Server logs — Retained for 90 days for security and debugging
• Deleted accounts — Personal data removed within 30 days of deletion; anonymized transaction records may be retained for legal compliance

5. Your Rights & Choices

• Access & Update — View and edit your profile at any time in the app
• Push Notifications — Disable via your device's notification settings
• Data Export — Request a copy of your data by emailing support@samilive.live
• Account Deletion — Delete your account via Settings → Delete Account
• Withdrawal — Qualifying Hosts may withdraw earned coins via the app

For users in the European Economic Area (EEA), UK, or other regions with data protection laws, you may have additional rights including the right to erasure, restriction of processing, and data portability. Contact support@samilive.live to exercise these rights.

6. Security Measures

• All data is transmitted over HTTPS/TLS (SSL certificate from Let's Encrypt)
• Passwords are hashed with bcrypt (never stored in plain text)
• JWT authentication tokens expire and rotate
• Admin actions are logged for audit purposes
• MongoDB Atlas enforces IP allowlisting and encryption at rest
• Firebase Security Rules enforce per-user data access
• Rate limiting on all API endpoints

No method of transmission over the internet is 100% secure. We continuously review and improve our security practices to protect your data.

7. Children's Privacy

Sami Live is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If we discover that a person under 18 has created an account, we will promptly delete the account and all associated data.

If you believe a minor is using Sami Live, please contact us immediately at support@samilive.live.

8. Account Deletion

You may delete your account at any time from within the app: Settings → Account → Delete Account. After deletion:

• Your profile, username, and public content are immediately hidden
• Personal data is permanently deleted within 30 days
• Coin balance and any unredeemed virtual currency are forfeited
• Anonymized transaction records may be retained for legal compliance

You may also request account deletion by contacting support@samilive.live.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through an in-app notification before changes take effect. The effective date at the top of this page shows when it was last updated. Continued use of Sami Live after an update constitutes your acceptance of the revised policy.

10. Contact Us