Privacy Policy

Effective Date: July 16, 2025

This Privacy Policy outlines how the Android application Spikestream ("the App") collects, uses, protects, and discloses information gathered from users. The App is owned and operated by Leonardo Sartori.

1. Data Controller

The data controller responsible for processing personal data under this policy is:
Leonardo Sartori
Email: spikestream.app@gmail.com
Website: https://spikestream.tooolky.com

2. Description of the App

Spikestream is an Android application that processes live video streams in real-time by overlaying scoring information. The application does not store, record, or transmit any video content. The stream is processed locally and discarded immediately after processing. Users are fully responsible for any video they transmit using the application.

3. Personal Data Collected

We only collect data necessary for authentication and account functionality:

• Google Account Information: Full name, email address, and Google user ID (via Google Sign-In)
• Login metadata: Time of account creation and last login timestamp
• Device metadata: Anonymized device type, operating system version, and crash diagnostics (if applicable)

4. Purpose of Processing

• To allow user registration and secure login through Google authentication
• To manage user sessions and account data
• To ensure service security and monitor unauthorized access attempts
• To comply with legal obligations, if applicable
• To improve the App's functionality and fix issues

5. Legal Basis for Processing

The processing of personal data is based on the following legal bases in accordance with Article 6 of the GDPR:

• Consent (Art. 6.1(a)): Explicit user consent for Google Sign-In
• Contract (Art. 6.1(b)): Processing necessary to provide the App’s functionalities
• Legitimate Interest (Art. 6.1(f)): Security and operational improvement of the service

6. Data Hosting and Storage

All user data (account and login data) is securely stored in a private database hosted on a Virtual Private Server (VPS) directly rented and managed by the data controller. The VPS is located in the European Union and complies with GDPR standards regarding data location and protection.

7. Data Sharing and Third Parties

Your personal data is not sold or shared with any third parties except:

• Google LLC – Used exclusively for authentication via Google Sign-In. See Google's Privacy Policy.
• Legal authorities, only if required by law or court order

8. Data Retention

• Personal data is retained for as long as your account remains active
• Upon account deletion, all associated data is deleted within 30 days
• Server logs and diagnostic data are retained for no more than 90 days

9. Data Security

We implement industry-standard measures to protect user data:

• All communication is encrypted via HTTPS/TLS
• Database access is restricted and secured with authentication
• The VPS is regularly updated, monitored, and protected with firewall and access logs

10. International Data Transfers

No data is transferred outside the European Economic Area (EEA) unless authorized by the user through services like Google. If transferred, it will be under appropriate safeguards such as Standard Contractual Clauses (SCCs).

11. Children's Privacy

The App is not intended for use by individuals under the age of 14. We do not knowingly collect or process personal data from children. If we learn that personal data from a child has been collected, we will delete it immediately.

12. User Rights under the GDPR

As a user, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to access and receive a copy of your data
• Right to correct inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us via email at: spikestream.app@gmail.com

13. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date. We encourage users to review this page regularly.

14. Contact

For any questions or concerns regarding this Privacy Policy or data processing, you may contact:

Spikestream
Email: spikestream.app@gmail.com
Website: https://spikestream.tooolky.com