Privacy Policy

SpheraLive is an iOS application that enables users to create and manage YouTube Live broadcasts and interact with live chat in real time. This policy explains what data is accessed, how it is used, how it’s stored, and what controls you have.

Definitions & Interpretation

"You" means the user of the application. "App" or "SpheraLive" refers to this iOS application. "Services" refers to the functionality provided via YouTube Live and related features that require Google OAuth consent.

1. Data We Collect

The application does not collect personal data on its own servers. All user information is obtained directly from Google APIs with your explicit consent via OAuth 2.0.

2. How Data Is Used

• To authenticate you with your Google account.
• To create and manage YouTube Live streams on your behalf.
• To display your live chat messages during broadcasts.

3. Data Storage

• Access and refresh tokens provided by Google are securely stored in the Apple iOS Keychain on your device.
• No tokens or personal data are kept on any external servers.
• All video and audio streams are transmitted directly from the device to YouTube’s RTMP servers. SpheraLive does not store, process, or relay any media content.

4. Data Security

We use Google’s official SDKs for all API communication, which operate over HTTPS with industry-standard encryption to protect your data in transit.

All OAuth access and refresh tokens are stored locally on your device using the iOS Keychain - a secure, encrypted storage that is only accessible by this app.

No user credentials, tokens, or stream metadata are ever stored on external servers. All YouTube livestream operations occur directly between your device and Google services.

We request only the necessary scopes to enable app functionality, and access is granted only through explicit user consent via Google’s OAuth flow.

5. Legal Basis for Processing (GDPR Article 6)

• Consent (Article 6(1)(a)) - for access to Google/YouTube APIs.
• Legitimate Interest (Article 6(1)(f)) - to provide core functionality and limited error logging to keep the app usable.

6. Your Rights Under GDPR

You have the right to:

• Access - request a copy of your data.
• Rectification - correct inaccurate information.
• Erasure - delete your data (“right to be forgotten”).
• Data Portability - obtain your data in a structured format.
• Object - object to processing.
• Withdraw Consent - revoke permissions at any time.

To exercise any of these rights, contact: [email protected].

7. Data Retention

• OAuth Tokens: retained until you sign out or revoke access.
• Error Logs: kept for up to 30 days solely for troubleshooting.
• Analytics: none are collected by the app.

8. International Data Transfers

Your data may be transferred to Google LLC in the United States for API services. Such transfers are protected by Google's compliance mechanisms, including Standard Contractual Clauses and applicable safeguards.

9. Third-Party Services

• Google / YouTube API - used for authentication, live stream control, and chat retrieval. Privacy Policy: https://policies.google.com/privacy. Data shared: account information, channel access, chat messages.
• Apple iOS Keychain - secure local storage for OAuth tokens; data does not leave the device unless explicitly authorized.

10. Revoking Access

You can revoke the application's access to your Google account at any time via your Google account permissions: https://myaccount.google.com/permissions.

11. Children’s Privacy

SpheraLive is not intended for use by children under the age of 16. We do not knowingly collect data from children.

12. External Links

This policy contains links to third-party sites (e.g., Google account pages). We are not responsible for their content or practices.

13. Changes to This Policy

We may update this policy from time to time. The effective date at the top will be updated when material changes occur.

14. Contact

For questions, concerns, or to exercise your data rights, contact: [email protected]