Beamiza Privacy Policy
This policy explains what personal data Beamiza collects, why, how long we keep it, and how you use your rights. Beamiza is only for adults aged 18 and over.
1. Who is responsible
The controller of your personal data is Beamiza, reachable at privacy@beamiza.com.
Contact for anything about your data: privacy@beamiza.com. We answer within one month (GDPR Art. 12).
2. What we collect
- Account data: email address (or a private relay address from Apple), display name, public handle, profile photo, bio, country, interests, year and date of birth (to check you are 18+), sign-in methods (Google or Apple account link, email code, password hash).
- Content you create: live room titles, live chat messages, direct messages, stickers and gifts you send, reports you file.
- Live audio and video: when you go live or take a seat, your camera and microphone are streamed in real time to the people in the room through our own media server. We do not record live streams.
- Transactions: coin purchases and spending, gifts, host diamonds and withdrawal requests. Coins and diamonds are recorded in a ledger.
- Stars and games: your free Stars balance and its history, wheel and dice results, and temporary cosmetic items. Stars cannot be bought and have no cash value.
- Device and security data: a hashed device identifier, the last IP address used, push notification tokens, sign-in records.
- Crash reports: technical error reports with no name, email, IP address or message content. You can switch them off in Settings.
We do not collect your contacts, precise location, or advertising identifiers, and we do not sell personal data.
3. Why we use it, and the legal basis
- To provide the service (contract, Art. 6(1)(b)): your account, live rooms, chat, direct messages, gifts, coins, diamonds and withdrawals.
- Safety and security (legitimate interest, Art. 6(1)(f)): preventing fraud and abuse, enforcing the age limit and the community guidelines, moderating content (automated filters and human review), handling reports, and keeping the service stable. Crash reports without personal data are also based on legitimate interest, and you can object at any time with the Settings switch.
- Private messages between consenting adults (your choice): if you and the other person both switch on "Allow sensitive media in private messages" (adults only) and you follow each other or both trust the chat, photos and videos in that chat are not sent to any automatic image check, are not blurred, and no check result is stored. The option ends at once if either person is no longer a confirmed adult, and reports and blocks work as always. You can switch it off at any time in Settings.
- Legal obligations (Art. 6(1)(c)): accounting records, responses to lawful requests from authorities, and child-safety reporting.
- Marketing notifications (consent, Art. 6(1)(a)): only if you switch them on. You can switch them off at any time in Settings, as easily as you gave consent.
4. Who processes data for us
- Hosting: Hetzner Online GmbH, Germany (EU).
- Error reports: GlitchTip, run on our own servers. No third party receives crash data.
- App stores and payments: Google (Google Play) and Apple (App Store) process store purchases under their own privacy policies. If store billing is enabled, RevenueCat Inc. validates purchase receipts.
- Sign-in: Google and Apple, only when you choose to sign in with them.
- Live media: LiveKit, the open-source media server, run on our own servers (see Hosting). It relays live audio and video between the people in a room and does not record it.
- Push notifications: Google Firebase Cloud Messaging, Apple Push Notification service, or UnifiedPush through the distributor app you install (for example ntfy), only if push delivery is enabled on your device.
- Safety checks on what you post and send: photos, videos, glimpses, posts, stories, profile photos, messages, comments and live captions are checked automatically for illegal or harmful content (for example sexual content involving minors, nudity sent without consent, graphic violence, self-harm, hate and threats). OpenAI (Moderation API) checks photos, videos and text; Microsoft (Azure AI Content Safety) and Sightengine SAS (France) are fallbacks. An image classifier we run on our own server is also used. Private photos and videos in a chat where both adults opted in are not checked (see Terms, section 13).
- Human review: people on our safety team look only at content that the automatic checks flagged or that a user reported. They never browse private conversations. Flagged media stays blurred until a reviewer opens it, and every opening is logged.
- Captions and transcripts: speech in lives and in clips you ask to caption is turned into text by Groq, Inc. (USA), Cloudflare, Inc. (Workers AI) or Microsoft (Azure AI Speech), in that order of availability.
- Translation: LibreTranslate, run on our own server; Microsoft (Azure AI Translator) or Google (Cloud Translation) when configured.
- Beamiza AI assistant and AI editing: OpenRouter, Inc. (USA), which routes your request to the model we chose (currently Google Gemini) with data collection by the model provider switched off.
Some of these providers may process data outside the European Economic Area. They do so under the European Commission's standard contractual clauses or an adequacy decision.
5. How long we keep data
- Your account: until you delete it. Deletion has a 30-day grace period. During that time you can sign in and cancel. After 30 days we anonymise the account: your email, name, handle, photo, bio, birth date, sign-in links, device records, push tokens, follows and blocks are removed, and your chat and direct messages are replaced by "[deleted]".
- Coin, gift, diamond and payment records: 5 years from the end of the year they relate to (Polish Accounting Act). After deletion they stay linked only to an anonymous id.
- Moderation flags on chat: 90 days, then they are removed, unless they are needed for an open case.
- Flagged or reported photos and videos (including glimpses that disappear after viewing): an encrypted copy for 30 days, or until the review is finished if that takes longer. Suspected child sexual abuse material is kept, encrypted, for as long as the law and the authorities require.
- Automatic safety-check results: 90 days.
- Reports about child sexual abuse or other illegal content: as long as the law requires, and as long as authorities need them.
- Crash reports: 90 days.
- Age-check refusals: a hash of the email and device, for 90 days, to stop a minor retrying with a different birth year.
6. Your rights
You have the right to access, correct, delete, restrict and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time.
- Download your data: Settings > Privacy > Download my data (a JSON file, once every 24 hours).
- Delete your account: Settings > Account > Delete account, or on the web at https://beamiza.com/delete-account/, or by email to privacy@beamiza.com.
- Correct your data: edit your profile in the app.
- Withdraw consent: Settings > Privacy (marketing notifications, crash reports).
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority in your country of residence.
7. Adults only
Beamiza is not for anyone under 18. We check the date of birth at sign-up. We do not knowingly collect data from children. If we learn that an account belongs to someone under 18, we close it and delete its data, except records the law requires us to keep.
8. Security
Passwords are stored only as salted scrypt hashes. Connections use TLS. Device identifiers and IP addresses in exports are hashed. Access to the admin tools is limited and logged.
9. Changes
When this policy changes in a meaningful way, the app asks you to review it again before you continue. The version and date are shown at the top of this page.