Privacy Policy — Unique & Fun

This Privacy Policy explains how Unique & Fun ("Unique & Fun", "we", "us") handles personal data when you use the Unique & Fun mobile app on Android and iOS, our website and related services (together, the "Service"). It applies to everyone who uses the Service.

Short version: we collect what we need to run a live social app. We don't sell your data, we don't show ads, and we don't use analytics or tracking SDKs. Unique & Fun is only for people aged 18 and over.

1. What we collect

Information you give us

Account: email address, password (stored only as a secure hash), display name, country and language, your confirmation that you are 18 or older, and the version of the Terms you accepted.
Phone number (optional): only if you choose to link one for signing in.
Profile: profile photo, bio, gender (optional) and time zone. We assign you a public Unique ID.
Content: chat messages, posts, comments, photos and videos you upload, room settings, and gifts you send or receive.
Reports and support: reports you file, including the content you report, and anything you send us by email.

Information created when you use the Service

Live audio and video: when you go live, join a seat or make a call, your audio and video are streamed in real time to other participants. We do not record live streams or calls.
Activity and virtual items: Beans and Diamonds balances and transactions, gifts, levels, SVIP status, store items, game results, followers, friends and blocks.
Device and technical data: a device identifier, device platform, app version, language and time zone, push notification token, and sign-in session details such as device type.
Security logs: IP address and request details, used for security, fraud prevention and rate limiting. In our audit logs IP addresses and user agents are stored as one-way hashes.
Moderation records: warnings, blocks, suspensions and the reasons for them.

What we don't collect

We don't collect your precise or approximate location from your device (your country may be inferred from your network connection), and we don't access your contacts. There are no advertising or analytics SDKs in the app, and we don't track you across other apps or websites. Face stickers and beauty effects are processed on your device. The image of your face is not sent to us for these effects.

2. How we use your information

To create and run your account, sign you in and keep your sessions secure.
To provide features: live streams, party rooms, PK battles, calls, chat, posts, gifts, games, levels and the store.
To keep Beans and Diamonds balances accurate and to prevent fraud and abuse.
To keep the community safe: reviewing reports, moderating content, enforcing our Terms and Child Safety Standards, and cooperating with law enforcement where required.
To send service messages such as account confirmation emails and push notifications you can control.
To respond to your questions and requests.
To comply with legal obligations and to establish or defend legal claims.

Where data protection law requires a legal basis, we rely on performing our contract with you (running the Service), our legitimate interests (security, fraud prevention, improving the Service), your consent (for example, optional permissions and notifications), and legal obligations. You can withdraw consent at any time in your device settings or the app.

3. What other users can see

Your display name, Unique ID, profile photo, bio, gender (if set), level, SVIP status and frames are visible to other users. Anything you say or show in a live stream, party room or PK battle is seen and heard by the people in that room in real time. Posts, comments and room chat are visible to the people they are shared with. Please don't share personal information you want to keep private.

We don't sell or rent your personal data. We share it only as follows:

Recipient	Purpose	Data
Agora (real-time audio/video)	Delivering live streams, party rooms, PK battles and calls	Audio and video streams and a numeric stream ID that is separate from your account ID
Google Firebase Cloud Messaging	Delivering push notifications	Push token and notification content
Cloudflare	Network security, content delivery, media storage and transactional email	Uploaded media, IP address and request data, your email address for service emails
Our hosting providers	Running our servers and databases, including encrypted backups	Data stored in the Service

We may also disclose information:

to law enforcement, regulators or other authorities when the law requires it, or to protect someone's safety, including reporting child sexual abuse material as described in our Child Safety Standards;
to protect the rights, property and safety of Unique & Fun, our users and the public;
to a successor if Unique & Fun is involved in a merger, acquisition or sale of assets, with notice to you.

5. Device permissions

Camera: for going live, video calls and taking a profile photo. It is used only while you use these features.
Microphone: for live streams, party room seats and calls. It may keep working in the background during an active call or live session.
Photos: to choose a profile photo or media to upload. On iOS you can share selected photos only.
Notifications: to tell you about messages, follows and live rooms.
Bluetooth (Android): to use Bluetooth headsets during audio sessions.

You can turn permissions off at any time in your device settings. Features that need them won't work without them.

6. How long we keep your information

Account and profile data: for as long as your account is open.
Content you share: until you delete it or your account is deleted, except as described in section 7.
Beans and Diamonds transaction records: kept after account deletion for accounting, fraud prevention and legal compliance, linked to an anonymous user rather than your profile.
Security and audit logs: at least 12 months, longer where needed to investigate abuse or meet legal obligations.
Reports and evidence: as long as needed to handle the report and any legal process. Evidence may be preserved longer when the law requires it.
Backups: encrypted backups are kept for a limited time and then overwritten.

7. Deleting your account

You can delete your account in the app at Settings → Delete account, or by following the steps on ouraccount deletion page. Deletion happens straight away and can't be undone.

When your account is deleted:

you are signed out on every device and your push tokens are removed;
your email address and password are removed, and your profile is replaced with "Deleted user", with your photo, bio, gender and country cleared;
your profile is hidden from other users, and any remaining Beans and Diamonds are forfeited.

Some information is kept, as described in section 6: transaction records, safety reports and evidence, and records we must keep by law. Messages you sent in conversations or rooms may stay visible to the other participants, shown as from "Deleted user". If you want specific content removed, contact us.

8. Your rights

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR, you may have the right to:

access a summary of your personal data and how we use it;
correct or update inaccurate data (most of it you can edit in the app);
delete your data or your account;
receive a copy of your data, or ask us to move it;
object to or restrict some processing, and withdraw consent;
nominate someone to exercise your rights if you die or become incapacitated (India);
complain to your data protection authority.

To exercise these rights, email contact@uniqueandfun.live from the email address on your account and include your Unique ID. We may need to verify your identity. We reply within 30 days, or sooner if the law requires it.

9. Security

Data is encrypted in transit with TLS. Passwords and session tokens are stored only as secure hashes on our servers, and the app keeps your sign-in tokens in your device's secure storage (Keychain or Keystore). Backups are encrypted. Staff access is limited by role and logged. No system is perfectly secure. If you think your account is at risk, change your password and contact us.

10. International transfers

Our service providers may process data in countries other than yours, including through Cloudflare's and Agora's global networks. When we transfer personal data internationally, we use the safeguards the law requires.

11. Children

Unique & Fun is for adults aged 18 and over. We don't knowingly collect personal data from anyone under 18. If we learn that a user is under 18, we will close the account and delete their data, except where we must keep it for safety or legal reasons. If you believe a minor is using the app, report the account in the app or email us. See our Child Safety Standards.

12. Changes to this policy

We may update this policy. If we make important changes, we'll tell you in the app or by email before they take effect. The date at the top shows the latest version.

13. Contact and grievances

Questions, requests or complaints about privacy: contact@uniqueandfun.live. This address also reaches our Grievance Officer, who will acknowledge your complaint within 24 hours and resolve it within 15 days, as required by Indian law.