Version 1.0 — DRAFT for legal review.
What we collect
| Data | When | Why | Kept |
|---|---|---|---|
| Device id, IP address, app version | always, including anonymous viewing | rate limiting, abuse prevention, security logs | IP in logs 30 days |
| Email, password hash, handle, display name, avatar | account creation | your account | until deletion |
| EULA acceptance (version, time, country) | sign-up and re-acceptance | legal record | 7 years |
| Camera and microphone streams | only while you are cast and in the green room or on stage | the show | not stored by us unless a producer records (Section "Recordings") |
| Queue joins, casting, roles played, show history | participating | running shows, your profile, rankings | until deletion (anonymised after) |
| Hearts, votes you give and receive, ratings, tiers | participating and watching as a member | rankings and matchmaking | until deletion (received votes anonymised) |
| Chat messages | chatting | the show | 30 days |
| AI prompts generated for AI understudies | shows with AI cast | running the show | not stored unless a producer enables logging on their own key |
| Producer AI provider keys | producers who bring their own key | calling the AI provider on your behalf | encrypted at rest until you remove them |
We do not sell personal data and do not show third-party advertising.
Live broadcast
When you are cast, your video, audio, handle and performance are transmitted to the audience in the app and, if the producer enables broadcasting, to platforms such as Twitch, YouTube, Kick or Facebook Gaming under those platforms' own privacy policies. See the EULA's broadcast and likeness release.
Recordings
By default we do not record shows. A producer may enable recording for their show; the app
shows a recording badge. Recordings are stored for [90 days] and are subject to withdrawal
requests at privacy@apphaus.us.
Processors
Cloudflare (hosting, networking), LiveKit (real-time video), Resend (email), Apple and Google (sign-in and app distribution, when used), the AI provider a producer selects through TokenX (for example Anthropic, OpenAI or Google) which receives the text prompts for AI understudies only, and the streaming platforms a producer chooses.
Your rights
Access, correction, export and deletion are available in the app (Settings → Account) or via
privacy@apphaus.us. EU/UK users have rights under GDPR; California users under CCPA/CPRA.
We respond within 30 days.
Children
The Service is not directed to children under 13 (16 in the EEA/UK); we delete accounts we learn belong to them.
Contact
privacy@apphaus.us · [AppHaus LLC, postal address] · [EU representative if required]