privacy policy.
Effective Date: September 23, 2026 • Last Updated: September 23, 2026 • Version 2.3 • Developer: Addutech Inc.
01. Introduction, Identity & Architecture
This Privacy Policy governs the collection, processing, storage, and protection of personal and technical data by Addutech Inc. ("Addutech", "we", "our", or "us") in connection with the VayuStream mobile application (package: com.vayustream.app) and related online services hosted at https://vayustream.addutech.com.
VayuStream is an advanced mobile live streaming and screen recording studio for Android devices (minimum Android 10 / API 29). We designed VayuStream to prioritize creator privacy: our core video compositing and audio DSP engine processes live display pixels and microphone commentary directly on your local device hardware (RAM and GPU) without routing uncompressed private media through intermediary cloud relay servers.
By downloading, installing, accessing, or using VayuStream, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our application or services.
02. Categories of Personal Information Collected
In compliance with global data privacy frameworks (including CCPA/CPRA, GDPR, and Google Play Console requirements), the table below details the categories of personal data collected, their sources, business purposes, and third-party recipients:
| Category | Examples & Data Items | Sources | Business & Commercial Purpose | Recipients |
|---|---|---|---|---|
| Identifiers | Display name, email address, mobile number (optional for OTP), unique user ID, avatar URL, IP address. | Direct from creator, Google Sign-In OAuth, Android OS. | Authentication, account creation, account security, password recovery, customer support. | None (internal processing only; never sold). |
| Commercial & Billing Data | Google Play Order ID, purchase token, subscription tier (Free/Pro), 4-Hour Watermark-Free Pass counter, transaction timestamps. | Direct interaction, Google Play Billing API, AdMob SSV. | Managing Pro subscriptions, activating 4-Hour watermark passes, statutory accounting/tax records. | Google LLC (Google Play Billing). |
| Sensory Media (Ephemeral) | Screen capture display frames, Camera Facecam video, Microphone voice commentary, Internal game audio. | Android MediaProjection, Camera2 API, AudioPlaybackCapture. | Local on-device hardware encoding (MediaCodec) to broadcast directly to your chosen stream destinations. | Configured RTMP endpoints only (YouTube, Twitch, Facebook, Custom RTMP). 0 bytes stored on Addutech servers. |
| Device & Advertising Identifiers | Android Advertising ID (AAID), device manufacturer, hardware model, Android OS version, GPU renderer. | Android OS, Google Mobile Ads (AdMob) SDK. | Ad delivery in the free tier, anti-fraud Server-Side Verification (SSV), hardware encoder capability tuning. | Google LLC (AdMob SDK). |
| Telemetry & Network Activity | Broadcast duration, outgoing bitrate, real-time FPS, dropped frame ratios, crash diagnostics. | VayuStream core studio engine. | Real-time in-game HUD overlay display, stream quality optimization, crash diagnostics. | None (processed locally or aggregated internally). |
03. Sensory Media (Camera, Audio & Screen Capture)
In the process of broadcasting or recording, your screen pixels, facial/physical camera features, and voice commentary are temporarily processed directly on your physical device hardware (RAM and GPU). This sensory data is NEVER stored, cached, logged, or recorded on Addutech cloud servers.
• Display Screen Capture: When you initiate screen capture via Android's MEDIA_PROJECTION system dialog, pixels are piped directly into an offscreen OpenGL EGL texture surface and encoded in real time. Pixels are routed point-to-point over encrypted TLS (RTMPS) to your chosen destination or saved to local storage (Movies/VayuStream).
• Camera Facecam PiP: Front/rear camera video frames from android.permission.CAMERA are composited over the display surface. We never capture camera feeds in the background, never construct biometric faceprints, and never transmit uncompressed camera frames to our backend.
• Microphone & Game Audio: Microphone commentary (RECORD_AUDIO) and internal gameplay audio (AudioPlaybackCapture) are mixed locally via our low-latency DSP and encoded to AAC. No voiceprints or speech-to-text profiles are created.
04. Google API Services & YouTube Live Integration
VayuStream uses YouTube API Services. By connecting your YouTube account to VayuStream or streaming to YouTube Live via our application, you expressly acknowledge and agree to be bound by the:
- YouTube Terms of Service (https://www.youtube.com/t/terms)
- Google Privacy Policy (https://policies.google.com/privacy)
A. Google & YouTube Data Accessed & Collected
When you authenticate via Google Sign-In and authorize YouTube Live streaming features, VayuStream requests access to the following Google OAuth 2.0 scopes:
openid,profile,email: Used strictly to authenticate your creator identity, display your account name and avatar within the studio UI, and link your cloud preferences.https://www.googleapis.com/auth/youtubeand.../youtube.force-ssl: Used exclusively to retrieve your YouTube Live broadcast status, configure live stream metadata (stream title, description, privacy status, game category), create RTMP broadcast ingestion points, and transition broadcasts between "testing", "live", and "complete" states.https://www.googleapis.com/auth/youtube.upload: Used solely if you opt to archive or upload recorded clips directly to your own YouTube channel.
B. How YouTube API Data is Used, Stored, Refreshed, and Retained
- Storage: OAuth refresh and access tokens are transmitted over TLS 1.3 encrypted connections and stored securely in private, sandbox-isolated application storage on your Android device and on our encrypted database using industry-standard token encryption.
- 30-Day Refresh & Retention (YouTube Developer Policy Section III.E): In strict compliance with YouTube API Services Developer Policies, all stored Authorized YouTube Data is refreshed at least once every 30 days via Google OAuth API query. If an account is inactive for more than 30 days or access is revoked, all cached YouTube channel data and tokens are automatically purged.
- Zero Sale & Zero Advertising Use: Google and YouTube user data is never sold, rented, leased, or transferred to data brokers or third parties. It is never used for targeting advertisements, credit scoring, or user profiling.
- Human Access Prohibition: No Addutech employee or contractor reads or accesses your private YouTube user data unless you have given explicit consent for customer support troubleshooting or it is required to investigate security incidents.
C. User Revocation of Google & YouTube Access
In addition to disconnecting within the VayuStream settings screen (Settings → Connected Platforms → Disconnect YouTube), you can review and revoke VayuStream's access to your Google and YouTube data at any time via the official Google security controls:
D. Google API Services Limited Use Compliance
VayuStream's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
05. Android Permissions & Hardware Pipeline
In compliance with Google Play Store 2026 specifications, the table below provides an exact breakdown of all runtime permissions required by VayuStream:
android.permission.CAMERA)
Local Only
Captures front or rear camera video to display an optional Facecam Picture-in-Picture (PiP) overlay on your live stream or recording canvas. Processed strictly in device memory via OpenGL ES shaders; never stored on remote servers.
android.permission.RECORD_AUDIO)
Local DSP Only
Captures your voice commentary via the microphone and internal game audio via Android 10+ AudioPlaybackCapture. Routed directly to our local software mixer and hardware AAC encoder.
MEDIA_PROJECTION)
Hardware Surface Only
Captures mobile gameplay to broadcast to your streaming destinations or save locally. Requires explicit consent via the standard Android OS system confirmation dialog on every capture session.
SYSTEM_ALERT_WINDOW)
UI Feature
Renders a floating in-game HUD control bubble over your mobile game, displaying real-time stream telemetry (bitrate, FPS, dropped frames), mute toggles, privacy curtain triggers, and live chat.
FOREGROUND_SERVICE_*)
Service Persistence
FOREGROUND_SERVICE_MEDIA_PROJECTION, ..._MICROPHONE, and ..._CAMERA ensure that Android's operating system does not kill the active streaming/recording engine when you switch between games and applications.
06. AccessibilityService API Disclosure (Hardware Hotkeys)
VayuStream includes an optional Hardware Hotkey feature that utilizes the Android AccessibilityService API (com.vayustream.app.core.hotkeys.VolumeKeyAccessibilityService).
Exact Purpose of the Accessibility API:
- The Accessibility API is used exclusively to intercept physical hardware volume rocker button presses (e.g. Volume Up Double-Press, Volume Down Long-Press) while your game is running in full screen.
- This allows broadcasters to execute quick stream actions (such as muting/unmuting the microphone, toggling the Privacy Curtain, starting/stopping live broadcast, or saving an instant highlight clip) without interrupting their gameplay.
Strict Privacy Guarantees Regarding Accessibility:
- VayuStream NEVER monitors, logs, reads, captures, or transmits personal keystrokes, password entries, text input, credit card numbers, or messages.
- VayuStream NEVER inspects, captures, or reads on-screen UI text, accessibility node trees, or content from other applications.
- VayuStream NEVER uses Accessibility services for behavioral tracking, advertising, or automated clicks.
- 100% Optional: The Accessibility Service is completely disabled by default. Broadcasters must explicitly navigate to Android Settings to enable it, and can disable it at any time. All core streaming and recording studio features function completely without this permission.
07. Google Play Data Safety Summary Matrix
This summary table directly maps to the mandatory Google Play Console Data Safety questionnaire:
| Data Type | Collected? | Shared? | Encrypted in Transit? | Deletion Available? | Purpose |
|---|---|---|---|---|---|
| Name | Yes | No | Yes (TLS 1.3) | Yes | Account creation & profile display |
| Email Address | Yes | No | Yes (TLS 1.3) | Yes | Authentication, OTP verification, receipts |
| Phone Number | Optional | No | Yes (TLS 1.3) | Yes | Optional account verification (OTP) |
| User Identifiers | Yes | No | Yes (TLS 1.3) | Yes | User account indexing & database linking |
| Purchase History | Yes | Google Play | Yes (TLS 1.3) | Statutory Retained | Subscription status (Google Play Billing) |
| Photos & Videos | Ephemeral (Local) | Chosen RTMP | Yes (RTMPS) | Not saved on cloud | Camera Facecam & Display Capture (Local GPU/RAM) |
| Voice & Audio | Ephemeral (Local) | Chosen RTMP | Yes (RTMPS) | Not saved on cloud | Mic commentary & Game audio (Local AAC Encode) |
| Device / Advertising ID | Yes (AdMob) | Google AdMob | Yes (HTTPS) | Yes (OS Reset) | Ad delivery & 4h pass fraud prevention (SSV) |
| App Performance / Telemetry | Yes | No | Yes (TLS 1.3) | Yes | Broadcast telemetry (FPS, bitrate, duration) |
08. Google AdMob, In-App Purchases & Subscriptions
A. Google AdMob & 4-Hour Watermark-Free Passes
VayuStream offers a transparent freemium model. Free-tier users can remove the stream watermark by watching 3 consecutive rewarded video advertisements through Google AdMob to activate a 4-Hour Watermark-Free Pass.
- We integrate the official Google Mobile Ads (AdMob) SDK. Google AdMob may collect pseudonymous identifiers such as the Google Advertising ID (AAID) and device diagnostic signals to deliver contextual or personalized ads, in accordance with Google's Advertising Policies.
- We utilize Server-Side Verification (SSV) callbacks to verify that rewarded ads were completed legitimately before granting 4-Hour watermark passes.
- You can reset or opt out of personalized ad tracking anytime on your Android device: Settings → Google → Ads → Delete Advertising ID.
B. In-App Subscriptions (Google Play Billing)
For creators seeking permanent zero-watermark streaming, 4K UHD encoding, and zero advertisements across all screens, VayuStream offers optional Pro Monthly and Pro Annual subscriptions:
- All subscription payments are processed exclusively through Google Play In-App Billing. Addutech Inc. does not collect, receive, or store your credit card, debit card, or bank account numbers.
- Google Play sends our server a transaction identifier (Order ID) and digital purchase token to validate subscription status (
proorfree).
09. Data Sharing & Third-Party Services
Addutech Inc. does NOT sell, rent, monetize, or trade your personal information, stream metadata, or YouTube user data to data brokers, analytics aggregators, or marketing firms.
We share data with third-party service providers only as strictly necessary to operate the application:
- Google LLC: For Google Sign-In authentication, YouTube Live API streaming, Google Play Billing verification, and Google AdMob ad delivery.
- Broadcasting Platforms: Audio/video streams and RTMP packets are sent directly to the destination endpoints you configure (e.g. YouTube, Twitch, Kick, Facebook Live).
- Infrastructure Hosting: Our REST API and database infrastructure are hosted in secure, ISO/IEC 27001-certified datacenter facilities with Cloudflare DDoS protection and SSL/TLS termination.
- Legal & Law Enforcement: We may disclose information only if required by valid legal process, subpoena, or applicable court order.
10. Data Security & Technical Safeguards
We implement robust technical and organizational security controls to protect your data:
- Encryption in Transit: 100% of network traffic between the VayuStream Android application and our backend REST API is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS). RTMP streams to supported platforms utilize RTMPS (TLS-encrypted RTMP).
- Encryption at Rest: Sensitive user tokens, authentication secrets, and stream destination keys are stored in encrypted database fields using AES-256 standards.
- Access Isolation: Production databases are protected behind firewalls, strict role-based access controls (RBAC), and automated intrusion prevention.
11. Data Retention Schedule & Account Deletion
We retain personal data only for as long as necessary to fulfill service delivery, prevent abuse, or satisfy statutory tax and commercial requirements:
| Data Category | Retained Items | Statutory / Legal Basis | Retention Period |
|---|---|---|---|
| Sensory Stream Media | Display screen pixels, camera frames, mic commentary. | Ephemeral Real-Time Broadcast | 0 seconds (Not stored) |
| Active Account Profile | Name, email, mobile no, hashed password, stream keys. | Service Contract Performance | Until user requests deletion or account closure |
| YouTube OAuth Data | YouTube access & refresh tokens, channel broadcast IDs. | YouTube API Developer Policy | Refreshed every 30 days; purged upon disconnect |
| Commercial & Subscription Receipts | Google Play Order IDs, payment timestamps, tax amounts. | Electronic Commerce & Tax Legislation | 5 to 7 years (Statutory financial records) |
| Network Security & Anti-Abuse Logs | Server API access logs, IP addresses, rate-limiting counters. | Legitimate Interest (DDoS defense & security) | 90 days (automatically rotated) |
How to Exercise Account Deletion
Open VayuStream → Settings → Profile → Manage Account → Tap "Delete Account Permanently". All session tokens, destination keys, and profile data are wiped immediately.
Visit our public web portal at https://vayustream.addutech.com/data-deletion or email contact@addutech.com. Requests are processed within 24 to 48 hours.
12. U.S. Multi-State Privacy Rights (California CPRA & State Laws)
This section applies to residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Utah (UCPA), and other applicable U.S. states:
- Right to Know / Access: You may request disclosure of the specific pieces and categories of personal information we have collected, used, or disclosed about you.
- Right to Correct: You may request correction of inaccurate personal information maintained in your profile.
- Right to Delete: You may request the deletion of your personal data, subject to legal and statutory exceptions (e.g. tax records).
- No Sale or Sharing of Personal Data: We do NOT sell your personal information for monetary or valuable consideration. We do NOT share your personal data for cross-context behavioral advertising.
- Sensitive Personal Information (SPI): We do not collect or process Sensitive Personal Information beyond what is strictly necessary to perform streaming and studio services.
- Non-Discrimination: We will never discriminate against you, deny services, or charge different prices for exercising your statutory privacy rights.
13. European Economic Area (EEA) & UK Rights (GDPR)
Under the General Data Protection Regulation (EU GDPR) and UK GDPR, users in the European Union and United Kingdom enjoy the rights of Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction of Processing (Art. 18), Data Portability (Art. 20), and Objection (Art. 21).
Our legal bases for processing are: (a) Performance of Contract (account management, streaming delivery); (b) Legitimate Interests (app stability, anti-fraud); and (c) Consent (Google AdMob personalized advertising and Google OAuth scopes).
14. Verification Procedures & Authorized Agents
To safeguard user privacy and prevent unauthorized data tampering, we verify identity before executing data subject requests:
- In-App Verification: Requests submitted directly via the authenticated app session require no additional verification.
- Web Requests: Web deletion requests require confirmation sent to the registered account email address.
- Authorized Agents: Authorized agents acting on behalf of a user must submit written authorization signed by the consumer and proof of the agent's identity.
15. Children's Privacy Protection (COPPA / GDPR Art. 8)
VayuStream is designed and marketed strictly for content creators and mobile gamers who are at least 13 years of age (or 16 in the European Economic Area). We do not knowingly solicit, collect, or process personal data from children under 13. If we discover that a child under 13 has registered an account without verified parental consent, we will promptly purge that account and all associated data from our servers. Parents or guardians may contact us at contact@addutech.com.
16. Policy Revisions & Advance Notice Timeline
Addutech Inc. reviews this Privacy Policy periodically. For general updates or administrative clarifications, users will receive notice at least seven (7) days prior to enforcement via in-app banner or website notice. For significant, material modifications that affect user rights or data collection practices, advance notice of at least thirty (30) days will be provided before such changes take effect.
17. Data Protection Officer & Contact Information
If you have questions, feedback, or legal inquiries regarding this Privacy Policy, your Google User Data disclosures, or our data handling practices, please contact our Data Protection Team:
com.vayustream.app)