This Privacy Policy describes how SH Live ("we", "us", or "our") collects, uses, and shares information when you use our live streaming mobile application (com.shlive.user) on Android. By using SH Live, you agree to the practices described in this policy.
Table of Contents
Information We Collect
We collect information in several ways when you use SH Live (com.shlive.user):
Account Information
Name, email, phone number, profile photo, username, date of birth, gender, country, and password when you register or sign in with Google, Facebook or Apple.
User Content
Live streams, recorded videos, reels, photos, audio, messages, comments, and stories you create or share on the platform.
Device Information
Device ID (Android ID), device model, OS version, app version, language, and unique device identifiers.
Usage Data
Features you access, streams you watch, interactions (likes, gifts, comments), session duration, and crash reports.
Location Data
Approximate location derived from your IP address and the country you select, to personalise content and enforce regional rules.
Payment & Transaction
Coin purchases, gift transactions, agency payouts, and VIP membership records. Payment processing is handled by third-party providers.
How We Use Your Information
We use the collected information to:
- Provide, operate, and maintain the SH Live platform and live streaming features
- Create and manage your account, including social login via Google, Facebook or Apple
- Enable real-time audio/video streaming through Agora's real-time streaming network
- Process coin purchases, virtual gifts, and in-app transactions
- Send push notifications about stream activity, followers, and platform updates via OneSignal and Firebase Cloud Messaging
- Monitor app performance, detect crashes, and fix bugs using Firebase Crashlytics and Firebase Performance
- Analyse usage patterns to improve features using Firebase Analytics
- Enforce our Terms of Service, prevent fraud, and maintain platform safety
- Moderate live and recorded content to protect users from abuse and illegal material
- Communicate service updates, policy changes, and support messages
- Personalise your experience including recommended streams and content
Third-Party Services
SH Live integrates third-party services that may collect and process your data under their own privacy policies:
- Firebase (Google): Used for authentication, push notifications, analytics, crash reporting, and performance monitoring. Governed by Google's Privacy Policy.
- Agora: Powers real-time audio and video streaming in live rooms. Agora transmits encrypted media between participants. See Agora's Privacy Policy.
- OneSignal: Used to deliver push notifications. OneSignal collects device tokens and notification interaction data. See OneSignal's Privacy Policy.
- Google Sign-In: Used for social authentication. We receive your basic profile information as permitted by that platform.
- Parse Server: Our primary backend infrastructure for storing user data, content, gifts, and platform records.
- Payment providers: Coin purchases and payouts are processed by third-party payment providers under their own privacy policies. We do not store your full card or bank details.
We do not sell your personal data to third parties. Data shared with service providers is used solely to operate SH Live.
Permissions We Request
SH Live (com.shlive.user) requests the following Android permissions. All permissions are used strictly for the functionality described:
- CAMERA (
android.permission.CAMERA): To broadcast live video, create reels and stories, and capture profile photos or content. - RECORD_AUDIO (
android.permission.RECORD_AUDIO): To transmit audio during live streams, voice rooms, and voice messages. - READ_MEDIA_IMAGES / READ_MEDIA_VIDEO / READ_EXTERNAL_STORAGE: To access and upload photos and videos from your gallery, and to save downloaded content.
- POST_NOTIFICATIONS (
android.permission.POST_NOTIFICATIONS): To send alerts about stream activity, new followers, gifts, and platform announcements. - INTERNET / ACCESS_NETWORK_STATE: Required for all live streaming, chat, and backend communication.
- FOREGROUND_SERVICE / FOREGROUND_SERVICE_MICROPHONE: To keep your audio session and live stream running reliably while the app is active.
- BLUETOOTH_CONNECT: To route live audio to connected Bluetooth headsets or speakers.
- VIBRATE / WAKE_LOCK: For in-app feedback and to keep the screen active during a broadcast.
You may revoke any permission at any time through your device's Settings → Apps → SH Live → Permissions. Revoking certain permissions may limit app functionality.
Data Safety (Google Play)
The following summary matches our Google Play Data Safety declaration for com.shlive.user. All data practices are described in full in the sections above.
| Data Type | Collected | Shared | Purpose |
|---|---|---|---|
| Name, email, phone number | Yes | No | Account management |
| Profile photo, username | Yes | Yes — public | User identity on platform |
| Photos & videos (user content) | Yes | Yes — public | Live streaming, reels, stories |
| Voice or sound recordings | Yes | Yes — via Agora | Live audio streaming |
| Device ID / Android ID | Yes | No | Fraud prevention, analytics |
| Approximate location | Yes | No | Content personalisation |
| Purchase history (coins) | Yes | No | In-app transactions |
| App interactions, crash logs | Yes | No | Analytics, bug fixes |
| Messages / chat | Yes | No | In-app messaging |
📌 Data is encrypted in transit using HTTPS/TLS. Users can request deletion of their data. We do not sell personal data. Data is not used for tracking across third-party apps.
Data Retention & Deletion
We retain your personal data for as long as your account is active or as needed to provide services:
- Account data is retained until you delete your account.
- Live stream recordings and user content may be retained for up to 90 days after deletion for safety and legal review purposes.
- Transaction and payment records are retained as required by applicable financial regulations.
- Records of serious safety violations may be retained in minimised form to prevent banned users returning.
- Analytics and crash report data may be retained in anonymised form for app improvement purposes.
Upon account deletion, we will remove or anonymise your personal data within 30 days, except where retention is required by law.
Children's Privacy
SH Live is intended for users aged 18 and above. We do not knowingly collect personal information from anyone under 18, and we do not permit minors to appear in any broadcast on the platform.
If we become aware that a minor has provided us personal data or is using the app, we terminate the account and delete the associated information promptly. If you believe a minor has registered on our platform, please contact us immediately at privacy@hmlive.xyz.
⚠️ This application is not intended for children. The app contains live user-generated content, virtual currency purchases, and real-time interaction features. Parents and guardians should monitor their children's app usage.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your account and associated personal data (see Section 12 below).
- Portability: Request your data in a portable, machine-readable format.
- Objection: Object to processing of your data for certain purposes such as marketing.
- Restriction: Request that we limit how we use your data in certain circumstances.
- Withdraw consent: Revoke any permission or consent you previously granted, at any time.
To exercise any of these rights, contact us at privacy@hmlive.xyz. We will respond within 30 days.
Security
We implement industry-standard security measures to protect your personal information, including:
- Encrypted data transmission (HTTPS/TLS) for all API communications, and encrypted media transport for real-time streaming via Agora
- Encrypted storage of sensitive credentials and authentication tokens
- Access controls limiting employee access to personal data on a need-to-know basis
- Regular security monitoring via Firebase Crashlytics and Performance tools
While we take reasonable steps to protect your information, no method of transmission or electronic storage is 100% secure. We cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:
- Update the "Last updated" date at the top of this page
- Notify you via in-app notification or push notification
- Require re-acknowledgement for material changes affecting your rights
Continued use of SH Live after changes are posted constitutes your acceptance of the revised policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
Account Deletion
You have the right to permanently delete your SH Live account and the personal data associated with it. Google Play requires all apps that allow account creation to also provide a way to request account deletion.
How to delete your account
- In-app: Go to Profile → Settings → Account and Security → Cancel account and follow the prompts.
- By email: Send a deletion request to privacy@hmlive.xyz from your registered email address with the subject line "Account Deletion Request – com.shlive.user".
What happens when you delete your account
- Your profile, username, bio, and profile photo are permanently removed.
- Your messages, comments, and social connections are deleted.
- Your live stream content, reels, and stories are removed within 30 days.
- Your coin balance and virtual gifts are forfeited and cannot be refunded.
- Transaction records (purchases, payouts) may be retained for up to 5 years as required by applicable financial regulations.
- Anonymised analytics data (not personally identifiable) may be retained for service improvement.
⏱️ Account deletion requests are processed within 30 days. You will receive a confirmation email once your data has been removed. Deletion is irreversible — your account cannot be recovered after this period.