Privacy Policy

Last updated: May 2, 2026

Introduction

This Privacy Policy describes how Sangoly ("we", "our", or "us") collects, uses, and shares information when you use our mobile application (the "App"). By using Sangoly, you consent to the practices described here.

Information We Collect

Account Information

Email address (required for sign-up and email verification)
Display name and username (chosen by you)
Profile photo (optional, uploaded by you)
Bio (optional, written by you)
Authentication identifiers (Firebase user ID, Google or Apple Sign-In tokens)

Payment Information

PayPal email address (only collected if you choose to enable creator payouts)
We do NOT store credit card numbers, PayPal passwords, or any banking details
Subscription transactions are processed by Apple — we never see your payment method

Usage Data

Watch minutes per room/livestream (used to calculate creator payouts)
Subscription status and history
Chat messages you send in rooms and livestreams (stored on our servers so they can be displayed to other participants and reviewed if reported)
Crash reports and diagnostic data, linked to your account when you are signed in (used to debug app issues)
Push notification token (for sending you alerts)

Device Data

Device locale (for language detection)
Device timezone
Operating system version

What We Do NOT Collect

Sangoly is committed to minimizing data collection. We DO NOT collect:

Audio recordings of live audio rooms (rooms are streamed in real-time only)
Video recordings of livestreams (livestreams are streamed in real-time only)
Your contacts, photos library, or device files
Your precise GPS location
Browsing history outside the App
Health, fitness, or biometric data

Live Audio and Video Are NOT Recorded

This is a core privacy commitment. Sangoly uses the Agora.io platform to transmit live audio and video in real time between participants. Audio rooms and livestreams are STREAMED LIVE and are NOT stored, recorded, or persisted to Sangoly's servers when the session ends.

When a room or livestream ends, no audio or video remains on our servers. We retain only metadata such as session duration and participant counts (used for analytics and creator payouts).

We cannot prevent other users from independently recording sessions using third-party screen recorders or audio capture tools. By participating in a public room or livestream, you accept this risk.

Third-Party Services We Use

Firebase (Google LLC)

Authentication (sign-in, password management)
Firestore database (storing your profile, subscription state, watch sessions)
Cloud Functions (serverless compute for backend logic)
Cloud Messaging (push notifications)

Agora.io

Real-time audio and video transmission for live rooms and livestreams
Agora processes audio and video streams for routing only — they do not store recordings

RevenueCat

Subscription management and receipt validation
Receives subscription transaction details from Apple

Apple App Store

Subscription processing and billing

Resend

Transactional email delivery (creator payout notifications)

PayPal (only if you enable payouts)

Receives your PayPal email and payout amount when we process creator payments

How We Use Your Information

We use your information to:

Operate and maintain the Sangoly service
Authenticate your account and prevent unauthorized access
Process your subscription and creator payouts
Calculate and distribute creator earnings based on watch time
Send you transactional emails (account verification, payout confirmations)
Send push notifications about content from people you follow
Detect, prevent, and respond to fraud, abuse, or violations of our Terms
Comply with legal obligations

Information We Share

We do NOT sell your personal information.

We share information ONLY in these limited cases:

With Apple, RevenueCat, Firebase, Agora, Resend, and PayPal as necessary to operate the service (see Third-Party Services above)
With law enforcement when required by valid legal process
To protect the rights, property, or safety of Sangoly, our users, or the public
In connection with a business transfer (merger, acquisition) — but only with continued privacy protections

Your username, display name, profile photo, and bio are PUBLIC information visible to all Sangoly users.

Data Retention

We retain your data for as long as your account is active. When you delete your account:

Your profile, posts, and personal information are deleted within 30 days
Anonymized aggregate data (e.g., total app watch minutes) may be retained indefinitely
Some data may be retained longer if required by law (e.g., financial records for tax purposes)

Your Rights

Depending on your jurisdiction, you may have rights to:

Access the personal data we hold about you
Correct inaccurate personal data
Delete your account and personal data (Settings → Account → Delete Account)
Export your data (contact support@sangoly.com)
Withdraw consent at any time
Lodge a complaint with a data protection authority

Children's Privacy

Sangoly is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we discover we have collected data from a user under 18, we will delete it immediately. If you believe a minor has provided us with personal information, contact us at support@sangoly.com.

Security

We use industry-standard security measures to protect your data, including:

HTTPS/TLS encryption for all data in transit
Encrypted storage of authentication credentials
Limited employee access to user data
Firebase Security Rules enforcing per-user access controls

However, no internet transmission or storage system is 100% secure. We cannot guarantee absolute security.

International Data Transfers

Your data may be stored and processed in the United States and other countries where our service providers operate. By using Sangoly, you consent to such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email.

Contact Us

For questions about this Privacy Policy or our data practices:

Email: support@sangoly.com