Privacy Policy — Blaze Live

01 Overview

Blaze Live ("we", "our", or "us") is a live streaming, video reels, and social feed application developed and operated by Gravity Compile. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the rights you have over your information.

By downloading or using Blaze Live, you agree to the practices described in this Privacy Policy. If you do not agree, please uninstall the app and discontinue use.

App name

Blaze Live

Developer

Gravity Compile

Platform

Android (Google Play)

Min Android

Android 7.0 (API 24)

02 Data safety summary

The table below summarises what Google Play's Data Safety section displays for Blaze Live. All data types listed are collected in ways described in detail in the sections that follow.

Data type	Data collected	Shared with 3rd parties	Required / Optional
Name	✔ Collected	Not shared	Required
Email address	✔ Collected	Not shared	Required
Phone number	✔ Collected	Not shared	Optional
User IDs	✔ Collected	Shared (Firebase, Agora)	Required
Profile photo	✔ Collected	Not shared	Optional
Photos & videos	✔ Collected	Not shared	Optional
Voice & sound	✔ Collected	Shared (Agora RTC)	Required (streaming)
Messages (in-app chat)	✔ Collected	Not shared	Optional
Purchase history	✔ Collected	Shared (Google Play Billing)	Optional
App interactions / usage data	✔ Collected	Shared (Firebase Analytics)	Required
Crash logs	✔ Collected	Shared (Firebase Crashlytics)	Required
Device IDs	✔ Collected	Shared (OneSignal, Firebase)	Required
Coarse location	✔ Collected	Not shared	Optional

Security practices disclosed to Google Play:

→ Data is encrypted in transit using TLS/HTTPS
→ You can request deletion of your data (see Section 15)
→ Data is not sold to third parties
→ No data is collected from children under 13

03 Data we collect

We collect data you provide directly, data generated automatically by your use of the app, and data received from third-party login providers.

Data you provide directly:

→ Account registration: name, username, email address, phone number, date of birth, gender
→ Profile content: profile photo, bio, and other optional profile fields
→ Social login data: name, email, and profile photo from Google or Facebook (when used to sign in)
→ Communications: chat messages, comments, gifts sent, and live stream interactions
→ Uploaded media: photos, videos, audio clips, and stories you publish

Data collected automatically:

→ Device identifiers: Android ID, device model, OS version
→ App usage: screens viewed, features used, tap events, session duration
→ Network data: IP address, connection type (Wi-Fi / mobile data), carrier
→ Performance data: response latency, frame rates, API error rates
→ Crash reports: stack traces, ANR logs, device state at crash
→ Push tokens: Firebase Cloud Messaging (FCM) token, OneSignal player ID
→ Coarse location: country/region derived from IP or device locale setting

04 Device permissions

Blaze Live requests the following Android permissions. Runtime permissions are requested only when the related feature is first used. You may deny any permission; some features will be unavailable as a result.

📷

Camera

Required to broadcast live streams, record video reels, and capture profile photos.
🎤

Record Audio (Microphone)

Required for audio during live broadcasts, video reels, and voice messages.
🖼️

Read Media — Images, Video, Audio

Allows you to select and upload media from your device gallery to the app.
💾

Write External Storage

Used on Android 9 and below to save media locally. Not required on Android 10+.
📲

Read Phone State

Used to detect incoming calls and pause live streams to prevent disruption.
🔔

Post Notifications / Receive Boot Completed

Delivers push notifications for gifts, new followers, messages, and live alerts. Boot-completed allows notification service to restart after device reboot.
🔊

Modify Audio Settings

Adjusts microphone and speaker routing during active live streaming sessions.
📶

Access Network State / Wi-Fi State

Detects connection type to optimise stream quality and warn when bandwidth is low.
🔵

Bluetooth / Bluetooth Connect / Bluetooth Scan

Routes audio to Bluetooth earphones and headsets during streams (Android 12+ requires explicit Bluetooth Connect permission).
💡

Wake Lock / Turn Screen On

Prevents screen from dimming while you are broadcasting or watching a live stream.
📳

Vibrate

Provides haptic feedback for incoming gifts, messages, and notification events.
👤

Get Accounts

Used by Google Sign-In to list available Google accounts on the device for login.
🪟

System Alert Window

Enables Picture-in-Picture (PiP) mode so you can watch streams while using other apps.

05 Third-party services

Blaze Live integrates the following third-party SDKs and services. Each operates under its own privacy policy, accessible on their website.

🔥

Firebase — Google

Authentication (email, phone, OAuth), push notifications via FCM, Analytics, Crashlytics, and Performance Monitoring

🔑

Google Sign-In

OAuth 2.0 social login via Google account. Receives name, email, and profile picture from Google.

👤

Facebook Login

OAuth social login via Facebook account. Receives name, email, and public profile from Facebook.

🗄️

Parse Server (Back4App)

Primary backend — stores user accounts, posts, live metadata, gifts, coins, messages, and virtual assets.

📣

OneSignal

Cross-platform push notification delivery. Stores device push tokens and notification engagement events.

🎥

Agora RTC

Real-time audio and video transmission for live broadcasts and PK battle mode. Agora may process voice/video data on its servers.

☁️

DigitalOcean Spaces

Object storage (S3-compatible) for uploaded media: profile photos, reel videos, gift animations (SVGA/VAP), and static assets.

🛒

Google Play Billing

Processes in-app purchases of virtual coins. Google manages payment processing; we receive a purchase token and transaction ID only.

All third-party processors are bound by data processing agreements. We do not permit them to use your data for their own marketing purposes.

06 Live streaming

When you broadcast a live stream, your audio and video are transmitted in real time to viewers via Agora RTC infrastructure. Agora's servers route media streams; you can review Agora's privacy policy at agora.io.

        Live content is public by default. Any viewer may record or screenshot your stream. Do not broadcast sensitive personal information, private locations, or content you would not want made permanently public.
      

Stream metadata — including your username, broadcast duration, peak viewer count, and gifts received — is stored on our backend and may appear on your public profile and in leaderboards.

07 User-generated content

Content you create and share — videos, reels, profile photos, stories, comments, and chat messages — is stored on our servers (Parse Server / DigitalOcean Spaces). Public content is accessible to all users. Private messages are encrypted in transit via TLS.

You may delete your own content at any time. Deleted content is removed from public view immediately and purged from our servers within 30 days, except where retention is required by law or for ongoing abuse investigations.

08 In-app purchases & virtual currency

Blaze Live offers in-app purchases of virtual coins ("Blaze Coins") through Google Play Billing. Virtual coins can be used to send gifts to broadcasters and unlock premium features.

What we receive from Google Play: When you make a purchase, Google provides us with a purchase token, order ID, and product ID. We do not receive or store your payment card details — these are handled entirely by Google Play.

→ Virtual coins and gifts have no real-world monetary value and are non-refundable except as required by applicable law
→ Coin balances are tied to your account; they are forfeited if your account is deleted
→ For purchase refunds, contact Google Play support directly
→ Transaction records are retained for up to 7 years for financial and legal compliance

09 How we use your data

We use the information we collect to:

→ Create and maintain your account, profile, and virtual wallet
→ Enable live streaming, video reels, gifting, and social interaction
→ Process in-app purchases and manage coin balances
→ Deliver push notifications you have opted into (gifts, follows, live alerts)
→ Personalise content recommendations, rankings, and search results
→ Monitor, diagnose, and improve app performance and stability
→ Detect, investigate, and prevent fraud, abuse, harassment, and policy violations
→ Comply with applicable laws, regulations, and legal obligations
→ Communicate with you about your account, policy changes, and security alerts

We do not use your data for third-party advertising. We do not sell your personal information to data brokers or advertisers.

11 Data retention

We retain your personal data while your account is active or as needed to provide services. When you delete your account (see Section 15), the following timelines apply:

→ Profile and account data — deleted within 30 days
→ Messages and chat history — deleted within 30 days
→ Uploaded media (DigitalOcean Spaces) — purged within 30 days
→ Push notification tokens — deregistered within 7 days
→ Transaction and purchase records — retained up to 7 years (financial compliance)
→ Crash logs and analytics — anonymised and retained in aggregated form indefinitely

12 Security

We apply industry-standard measures to protect your data:

→ All data in transit is encrypted via TLS 1.2 / HTTPS
→ Passwords and auth tokens are hashed and never stored in plain text
→ Access to production systems is restricted to authorised personnel with MFA
→ DigitalOcean Spaces files are stored with server-side encryption
→ Firebase services provide built-in security rules and access control

No method of internet transmission is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

13 Children's privacy

        Blaze Live is rated for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has created an account, contact us immediately at the address in Section 16 and we will promptly delete the account and associated data.
      

Users in the European Economic Area (EEA) must be at least 16 years of age, or have verifiable parental consent, to register an account.

14 Your rights

Depending on where you live, you may have the following rights over your personal data. To exercise any right, contact us at the address in Section 16. We will respond within 30 days.

Right	What it means
Access	Request a copy of the personal data we hold about you, in a portable format.
Correction	Request correction of inaccurate or incomplete information. You can also update most data directly in the app settings.
Deletion	Request deletion of your account and personal data (see Section 15 for the in-app deletion flow, required by Google Play).
Portability	Receive your data in a machine-readable format to transfer to another service.
Object / Restrict	Object to or request restriction of specific processing activities, such as analytics.
Withdraw consent	Withdraw consent at any time for consent-based processing, e.g. marketing push notifications. This does not affect prior processing.
Opt out of notifications	Disable push notifications at any time via Android system settings or in-app notification preferences.

15 Account & data deletion

        Google Play requires all apps to provide a way to delete your account and data. You can delete your Blaze Live account and all associated personal data using either method below.
      

Option 1 — In-app (recommended):

→ Open Blaze Live and go to Profile → Settings → Account
→ Tap Delete Account
→ Confirm deletion. Your account and data will be permanently deleted within 30 days.

Option 2 — Email request:

→ Send an email to privacy@blazelive.app with the subject line: "Account Deletion Request"
→ Include the email address or username linked to your account
→ We will confirm deletion within 30 days

What is deleted: Profile, username, messages, uploaded media, follower/following data, coin balance, and gift history.
What is retained: Transaction records required for financial compliance (up to 7 years) and anonymised, aggregated analytics that cannot be linked back to you.

16 Contact us

For any questions, requests, or complaints about this Privacy Policy or your data, please contact our privacy team:

Company