Privacy Policy

We collect information in several ways when you use Doing Live (com.doing.live):

We use the collected information to:

• Provide, operate, and maintain the Doing Live platform and live streaming features
• Create and manage your account, including social login via Google
• Enable real-time audio/video streaming through Gravix Cloud's SFU-based streaming infrastructure
• Process coin purchases, virtual gifts, and in-app transactions
• Send push notifications about stream activity, followers, and platform updates via OneSignal and Firebase Cloud Messaging
• Monitor app performance, detect crashes, and fix bugs using Firebase Crashlytics and Firebase Performance
• Analyse usage patterns to improve features using Firebase Analytics
• Enforce our Terms of Service, prevent fraud, and maintain platform safety
• Moderate live and recorded content to protect users from abuse and illegal material
• Communicate service updates, policy changes, and support messages
• Personalise your experience including recommended streams and content

Doing Live integrates third-party services that may collect and process your data under their own privacy policies:

• Firebase (Google): Used for authentication, push notifications, analytics, crash reporting, and performance monitoring. Governed by Google's Privacy Policy.
• Gravix Cloud: Powers live audio and video streaming through Selective Forwarding Unit (SFU) infrastructure. Gravix Cloud's nodes route and forward encrypted audio/video media between session participants and do not record, store, or inspect the content of that media. See Gravix Cloud's Privacy Policy.
• OneSignal: Used to deliver push notifications. OneSignal collects device tokens and notification interaction data. See OneSignal's Privacy Policy.
• Google Sign-In: Used for social authentication. We receive your basic profile information as permitted by that platform.
• Parse Server: Our primary backend infrastructure for storing user data, content, gifts, and platform records.
• Google Play Billing: Used to process in-app purchases of coins and virtual currency. Governed by the Google Payments Privacy Notice.

We do not sell your personal data to third parties. Data shared with service providers is used solely to operate Doing Live.

Doing Live (com.doing.live) requests the following Android permissions. All permissions are used strictly for the functionality described:

• CAMERA (android.permission.CAMERA): To broadcast live video, create reels and stories, and capture profile photos or content.
• RECORD_AUDIO (android.permission.RECORD_AUDIO): To transmit audio during live streams, voice rooms, and voice messages.
• READ_MEDIA_IMAGES / READ_MEDIA_VIDEO / READ_EXTERNAL_STORAGE: To access and upload photos and videos from your gallery, and to save downloaded content.
• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION: To provide location-relevant content recommendations and comply with regional content restrictions.
• POST_NOTIFICATIONS (android.permission.POST_NOTIFICATIONS): To send alerts about stream activity, new followers, gifts, and platform announcements.
• INTERNET / ACCESS_NETWORK_STATE: Required for all live streaming, chat, and backend communication.
• FOREGROUND_SERVICE / FOREGROUND_SERVICE_MICROPHONE / FOREGROUND_SERVICE_MEDIA_PLAYBACK: To keep your audio session and live stream running reliably while the app is active.
• BLUETOOTH_CONNECT: To route live audio to connected Bluetooth headsets or speakers.
• VIBRATE / WAKE_LOCK: For in-app feedback and to keep the screen active during a broadcast.

You may revoke any permission at any time through your device's Settings → Apps → Doing Live → Permissions. Revoking certain permissions may limit app functionality.

The following summary matches our Google Play Data Safety declaration for com.doing.live. All data practices are described in full in the sections above.

We retain your personal data for as long as your account is active or as needed to provide services:

• Account data is retained until you delete your account.
• Live stream recordings and user content may be retained for up to 90 days after deletion for safety and legal review purposes.
• Transaction and payment records are retained as required by applicable financial regulations.
• Records of serious safety violations may be retained in minimised form to prevent banned users returning.
• Analytics and crash report data may be retained in anonymised form for app improvement purposes.

Upon account deletion, we will remove or anonymise your personal data within 30 days, except where retention is required by law.

Doing Live is intended for users aged 18 and above. We do not knowingly collect personal information from anyone under 18, and we do not permit minors to appear in any broadcast on the platform.

If we become aware that a minor has provided us personal data or is using the app, we terminate the account and delete the associated information promptly. If you believe a minor has registered on our platform, please contact us immediately at privacy@babylive.xyz.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data (see Section 12 below).
• Portability: Request your data in a portable, machine-readable format.
• Objection: Object to processing of your data for certain purposes such as marketing.
• Restriction: Request that we limit how we use your data in certain circumstances.
• Withdraw consent: Revoke any permission or consent you previously granted, at any time.

To exercise any of these rights, contact us at privacy@babylive.xyz. We will respond within 30 days.

We implement industry-standard security measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS) for all API communications, and encrypted media transport for real-time streaming via Gravix Cloud
• Encrypted storage of sensitive credentials and authentication tokens
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security monitoring via Firebase Crashlytics and Performance tools

While we take reasonable steps to protect your information, no method of transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via in-app notification or push notification
• Require re-acknowledgement for material changes affecting your rights

Continued use of Doing Live after changes are posted constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

You have the right to permanently delete your Doing Live account and the personal data associated with it. Google Play requires all apps that allow account creation to also provide a way to request account deletion.

How to delete your account

• In-app: Go to Profile → Settings → Account → Delete Account and follow the prompts.
• By email: Send a deletion request to privacy@babylive.xyz from your registered email address with the subject line "Account Deletion Request – com.doing.live".

What happens when you delete your account

• Your profile, username, bio, and profile photo are permanently removed.
• Your messages, comments, and social connections are deleted.
• Your live stream content, reels, and stories are removed within 30 days.
• Your coin balance and virtual gifts are forfeited and cannot be refunded.
• Transaction records (purchases, payouts) may be retained for up to 5 years as required by applicable financial regulations.
• Anonymised analytics data (not personally identifiable) may be retained for service improvement.