When you create an account and use Fame Fight, we collect:

• Account information — your account identifier, username, profile picture (avatar), and account information returned by your chosen sign-in provider, which can include your name
• Email address — used for account authentication via Supabase
• Coin balance and transaction history — records of coins purchased, sent as gifts, and earned through streaming
• Creator payout details — if you request a payout, we collect the recipient and payment details needed for your chosen method. These can include your name, date of birth, address, phone number, PayPal email, Wise details, and bank account information. Saved payout details and withdrawal records are available to the team handling your payout.
• Stream history — records of your past live streams including viewer counts and coins earned
• Chat messages — comments you send during live streams
• Battle and gift activity — records of battles you participated in and gifts you sent or received
• Agency activity — agency ownership, membership, invitations, invite preferences, voluntary-leave cooldowns, and the commission ledger linking eligible gifts to agency earnings
• Camera and microphone access — if you go live or join a livestream's audio Box, the app accesses your device's camera and/or microphone solely to broadcast your video/audio to viewers in real time. We do not record or store your camera/microphone feed beyond what is necessary to transmit the live stream itself.
• Reports you submit — if you report another user or their content, we record the reported user, your reason, and any details you provide, for our team's review
• Blocks you create — if you block another user, we store that private preference so their comments and live presence can be hidden from you. We do not tell the blocked user who blocked them.
• Search and connection information — username searches are sent to our database provider. Our infrastructure and streaming providers process IP addresses, browser and device connection information, request logs, and performance diagnostics. Infrastructure logs can include an approximate area inferred from an IP address. This does not require device location permission.

• Credit card or payment details — we never see, store, or have access to your credit card number, expiry date, CVV, or any payment card information. Website payments are processed by Stripe or PayPal. Coin purchases in the iOS app are processed by Apple In-App Purchase, and coin purchases in the Android app are processed by Google Play. We verify store purchases and keep transaction records, but do not receive your payment card details.
• Device location — the app does not request device location permission or share your precise physical location with other users. An address supplied for a payout is separate from device location.

• To operate your account and the Fame Fight platform
• To process coin purchases and track coin balances
• To validate payout details, handle withdrawal requests, and maintain payment records
• To display leaderboards and podium history
• To enable live streaming, co-hosting, battles and gifting features
• To operate agencies, deliver invitations, calculate eligible commissions, process agency earnings, and prevent financial abuse
• To enforce our Terms of Service including chat muting and account suspension
• To review reports submitted about other users or content, and take appropriate action
• To secure connections, limit abusive requests, measure connection quality, and diagnose operational errors

Fame Fight uses the following third-party services to operate. Each has their own privacy policy:

• Google and Apple sign-in — authenticate your account and return the account information you authorize
• Wise — supplies payout requirements and validates recipient details. The Fame Fight team uses your saved details to arrange eligible payouts. See wise.com/privacy-policy
• Stripe — payment processing. Stripe handles all payment card data. We never receive your card details. See stripe.com/privacy
• PayPal — processes supported payments. PayPal handles payment card details directly. If you request a creator payout through PayPal, Fame Fight collects the PayPal email you supply and keeps a withdrawal record. See paypal.com/privacy
• Apple In-App Purchase — on the iOS app, coin purchases are processed by Apple. See apple.com/legal/privacy
• Google Play Billing — on the Android app, coin purchases are processed by Google Play. We send an obfuscated account identifier to associate a purchase with your Fame Fight account, verify the purchase with Google, and retain its token hash and transaction metadata. See policies.google.com/privacy
• Supabase — database and authentication. Your account data is stored securely via Supabase. See supabase.com/privacy
• LiveKit — live video and audio streaming infrastructure. See livekit.io/privacy
• Vercel — website hosting. See vercel.com/legal/privacy-policy

Your data is stored in Supabase databases. We take reasonable steps to protect your information from unauthorised access, loss, misuse or disclosure. However, no internet transmission is completely secure and we cannot guarantee absolute security.

We keep account data while it is needed to provide the service. After a verified account-deletion request, support manually deletes or de-identifies associated personal data within 30 days. In-app account closure also starts this cleanup request; you do not need to email separately.

Necessary purchase, gift-ledger, agency-commission, and payout records are retained for 7 years after the transaction is completed. Safety and moderation records are retained for up to 90 days after account closure or case resolution, whichever is later. Identifying deletion-request correspondence is retained for up to 90 days after completion. Specific legal obligations, active investigations, and unresolved disputes can require longer retention of relevant evidence, with a review every 90 days.

At the end of the applicable period, we delete or de-identify the data. Saved payout details that are not needed as transaction evidence follow the 30-day cleanup period. We request deletion from our service providers and explain any provider backup or security-log expiry period that affects a request. See the account and data retention schedule for the data categories, exceptions, and request process.

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Close your account from Settings → Account Settings → Delete My Account. This removes your login, replaces your public username, removes the profile-picture link, and starts the associated-data cleanup process described above.
• Request deletion of your account and associated data without reinstalling the app through our account and data deletion page. You can also ask which records remain, why they are retained, and for how long.

Email appfamefight@gmail.com for privacy, account, or data-deletion requests.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us via our Discord community: