Privacy policy
Effective date: 19 October 2026 · Last updated: 19 October 2026
1. Who we are
Stream-It is an app for Android, iPhone and Windows. It lets you film a match or event with one or more phones and stream it live. Stream-It is made by CrickHunt.
Stream-It, India (“we”, “us”) decides how and why your personal data is used. Under India’s Digital Personal Data Protection Act, 2023 we are the “Data Fiduciary”. Elsewhere we are the “controller”.
This policy covers the Stream-It app, our server and our website. It explains what we collect, why, who we share it with, how long we keep it and what you can do about it.
Questions, requests or complaints: info@stream-it.app (section 15).
2. The short version
- You need an account to use Stream-It. We keep your phone number, your name and a few account details.
- Your recordings stay on your phone or PC. We never receive them.
- Stream keys you type in stay in your device’s secure storage. They never reach us.
- Your live video goes straight from your device to the platforms you choose (YouTube, Facebook, Instagram or your own server). It does not go through our server.
- If you connect YouTube or Facebook by signing in, our server keeps an encrypted access token so it can create, start and end your lives.
- Overlays and Screens you save to My overlays / My Screens are copied to your account, with their files, so you can use them on all your devices.
- We do not sell your data. We show no ads. We do not track you for advertising.
- You can delete your account yourself in the app or from our website at any time.
3. What we collect and why
| What | Why |
|---|---|
| Phone number with its country code | To create your account and log you in. Numbers from any country are accepted. |
| Password — we keep only a scrambled form (a hash), never the password itself | To log you in. |
| Name you choose | To show it in the app. |
| Email address, only if you add and confirm one, or sign in with Google | To send you codes (password reset, email login, account deletion) and important account messages. |
| Google account ID, email and name, only if you sign in with Google (Apple ID, later, if you sign in with Apple on an iPhone) | To log you in with that account. |
| Login code, only if you set one — kept as a hash, with the date it ends | So you can log in quickly with your number and your code. |
| One-time codes: where the code was sent (phone number or email), a hash of the code, the number of tries and the times | To check the code you type in. SMS codes are sent only to Indian (+91) numbers. Email codes are for password reset, email login, confirming your email and account deletion. |
| Your devices: type (Android, iPhone, Windows), model, app version, when first and last seen | To keep you logged in, and so you can see your devices and log them all out. |
| Sign-in records: when you logged in, the internet (IP) address used, when the sign-in ends | To keep your account safe and spot stolen sign-ins. |
| Production history: title, subtitle, type (for example cricket), start time, length, which kinds of platform you streamed to, whether you recorded, the number of cameras, and a short problem note if there was one | So your history is on every device you log in to. It has no video and no stream keys. |
| My overlays and My Screens: the name and settings of each saved overlay or Screen, and the files in it (pictures, logos, videos, music) | To keep your saved items in your account and bring them to all your devices. |
| Camera links: camera name, quality, a hash of the link code, when it was made and ends, and which account connected to it | So a producer can connect to a camera phone over the internet. |
| Connected YouTube or Facebook accounts (section 4) | To create, start and end your lives on that account and show the viewer count. |
| Waitlist email, only if you leave it with “Join the waitlist” on our website, and the date | To tell you when the Windows production desk is ready. Nothing else, and it is not linked to an account. |
| Messages you send us (email, “report a problem”) | To answer you and fix problems. |
| Crash reports and technical records (section 7) | To keep Stream-It working and safe. |
Camera video between your phones. When a camera phone and the producer are on the same Wi-Fi, video goes directly from phone to phone, encrypted, and never reaches us. Over the internet, video goes directly when it can. When a direct path is not possible, our server passes the camera’s video and sound on to the producer, encrypted while it travels. Our server does not save this video or sound. A camera link can also be opened in a web browser; the same rules apply.
Upload speed check. The app can send test data to our server to measure your upload speed. The server reads it and throws it away.
Our staff. A small number of our staff can see your account (including your full phone number) in our admin panel, for example to help you log in. Every time staff open or change an account, it is written in an internal audit log.
Our legal grounds. We use your data because you agree to it when you create your account and use a feature (your consent), and because it is needed to give you the service you asked for. We also use some data for security, fraud prevention and to meet the law, as the law allows. Outside India, these grounds are “contract”, “legitimate interests”, “legal obligation” and “consent”. You can withdraw consent at any time (section 11). This does not affect what was done before, but some features may then stop working.
4. YouTube and Facebook accounts
You can connect a YouTube channel or a Facebook profile or Page by signing in to it from the app. This is optional. You can also stream by typing a stream key, which stays on your device.
What we get and keep when you connect:
- the platform’s ID for you, and the name of your channel, profile or Page;
- an access token from Google or Facebook (for Facebook Pages, also a Page token). We store tokens only encrypted, on our server. We never see or store your Google or Facebook password;
- for each live we create for you: the platform’s video ID and when it started and ended.
What we do with it — only what you ask: create a live video on your channel or Page, give the app its stream address and key (passed on once, not stored by us), start and end the live, set the live thumbnail you choose (the picture goes straight to YouTube; we do not keep it), and read the viewer count while you are live. We do not read your other videos, messages, friends or contacts, and we do not post anything else.
YouTube. Stream-It uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service. Google’s use of your data is covered by the Google Privacy Policy. You can remove Stream-It’s access at any time in the app (remove the connection) or in your Google Account security settings. When you remove the connection in the app, we delete the token at once and ask Google to cancel it. If you cancel access in your Google settings, we delete the stored token and channel details within 7 days of learning about it.
Google user data — Limited Use. Stream-It’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features described here. We do not sell it, use it for advertising, or let people read it except with your permission, for security, or where the law requires.
Facebook. Facebook connection uses Meta’s APIs, under Meta’s Platform Terms and Privacy Policy. You can remove Stream-It in the app or in Facebook Settings → Apps and websites. To have your Facebook data deleted, remove the connection in the app or delete your Stream-It account (section 10).
5. What stays only on your phone or PC
These are kept on your device and are not sent to us:
- Recordings of your productions.
- Stream keys and server addresses you type in for YouTube, Facebook, Instagram or your own server — in your device’s secure storage.
- Productions, overlays, Screens, pictures, videos and settings you set up, unless you save them to My overlays / My Screens (section 3).
- A copy of your production history (also kept with your account).
If you uninstall the app or delete these files, they are gone. We cannot get them back.
6. Permissions the app asks for
- Camera — to film your match or event, and to scan camera-link QR codes.
- Microphone — so viewers can hear commentary and the crowd.
- Photos and media — only when you pick a picture, video or music file to use, and to save recordings to your gallery.
- Local network / nearby Wi-Fi devices — to find your camera phones and production PC on the same Wi-Fi.
- Notifications — to show that Stream-It is live or recording.
You can say no or turn these off in your device settings. Some features will then not work.
7. Crash reports and problem reports
- Crash reports. When the app crashes or hits a serious error, it can send a crash report to us through Firebase Crashlytics (Google). A report holds technical details: what went wrong in the app’s code, the device model, the operating system and app versions, free memory and storage, the time, and a random installation ID. It does not include your phone number, name, email, video, recordings or stream keys.
- Report a problem. If you choose to report a problem, your email app opens a message to us. It may include your app version, device model and a short technical log. You can read it before you send it. Passwords, codes and keys are hidden in these logs.
- Server records. Our server keeps technical records (for example errors, request times and IP addresses) to keep the service working and safe. Passwords, codes, tokens and keys are hidden in them.
- QR scanner. The QR code scanner on Android uses Google ML Kit, which may send Google basic usage and performance data about the scanner. It does not send your pictures.
We use no analytics or advertising tools.
8. Who we share data with
- The platforms you choose. When you go live, your device sends your video and sound straight to YouTube, Facebook, Instagram or the server you entered. Their own privacy policies apply.
- Websites you add as overlays. If you add a web page as an overlay, your device opens that page, so that website can see your device’s internet address.
- Service providers who run parts of Stream-It for us. They may use your data only to provide their service to us, under contract:
| Provider | What for | Data |
|---|---|---|
| Our cloud hosting provider | Runs our server, database and file storage | All server data in section 3 |
| MSG91 (India), and telecom operators | Sending SMS codes to Indian numbers | Phone number, the code message |
| Our email delivery provider | Sending email codes and account messages | Email address, the message |
| Google — Firebase Crashlytics | Crash reports | Section 7 |
| Google — ML Kit (Android) | QR code scanning | Section 7 |
| Google — Google Sign-In, YouTube API Services | Only if you sign in with Google or connect YouTube | Section 3 and 4 |
| Meta — Facebook APIs | Only if you connect Facebook | Section 4 |
| Apple — Sign in with Apple (iPhone, later) | Only if you sign in with Apple | Apple ID, email you choose to share |
If we change a provider, we update this list.
- CrickHunt. Connecting a CrickHunt account will be optional and is not available yet. You never need a CrickHunt account to use Stream-It. Before anything is shared with CrickHunt, we will ask you and show what is shared.
- When the law requires it. We may share data when a law, court order or government authority requires it, or when needed to protect someone’s safety, to stop fraud or abuse, or to defend our legal rights.
- If the business changes hands. If our business is merged or sold, your data may move to the new owner, who must respect this policy.
We do not sell your data and do not share it for advertising.
9. How long we keep your data
| Data | How long |
|---|---|
| Account details, devices, production history, My overlays / My Screens | Until you delete them or your account. A deleted saved item leaves only a small marker without content, so your other devices remove it too. |
| Login code | Until it ends, you remove it, or you delete your account. |
| Connected YouTube / Facebook accounts and their lives | Until you remove the connection or delete your account (section 4). |
| One-time codes | Deleted 24 hours after they are made. A code works for only 5 minutes. |
| Camera links | Deleted 30 days after the link ends. A link works for up to 12 hours. |
| Sign-in records and technical server records (including IP addresses) | 1 year, then deleted. Indian law asks us to keep certain logs for a minimum period. |
| Staff audit log | 1 year, then deleted. |
| Crash reports | 90 days, then deleted by Firebase Crashlytics. |
| Waitlist email | Until you ask us to remove it, or until we have told you about the launch. |
| Messages you send us | Up to 1 year after your question is solved. |
| Backups | Deleted data can stay in encrypted backups for up to 30 days, then it is gone. |
| After you delete your account | We keep only a note that an account was deleted, with no phone number, name or email. Security logs stay for the time above. |
We may keep data longer only if a law or a legal claim requires it.
10. Deleting your account
- In the app: Settings → Account → Delete account. Confirm with your password, or with a code we send you.
- On our website: Delete your account explains the steps, and how to ask us by email if you cannot log in.
Deletion is immediate and cannot be undone. We delete your account details, sign-ins, devices, camera links, production history, My overlays / My Screens with their files, connected YouTube and Facebook accounts, and one-time codes. Videos you streamed to YouTube, Facebook or other platforms are not deleted — delete them on those platforms. Files on your own phone or PC stay there until you remove them.
11. Your rights
You can:
- see and correct your details in the app — change your name, add or remove your email, and change your password;
- ask for a summary of the personal data we hold about you and who we shared it with;
- ask us to correct, complete, update or delete your data;
- withdraw your consent — remove a connection, turn off a permission, or delete your account;
- log out every device at once;
- name another person (a nominee) to use these rights for you if you die or cannot act yourself;
- complain to us (section 15).
Write to info@stream-it.app from your account’s email. We may ask you to prove the account is yours. We answer as soon as we can, and within 30 days.
If you are in India: if you are not happy with our answer, you can complain to the Data Protection Board of India after complaining to us first.
If you are outside India: you may also have the right to get your data in a portable format, to object to or limit some uses, and to complain to the data protection authority where you live (for example in the EU or UK). Ask us and we will help.
12. Security
- All connections between the app, our website and our server are encrypted (HTTPS).
- Passwords, login codes, one-time codes, camera-link codes and sign-in tokens are stored only as hashes. YouTube and Facebook tokens are stored only encrypted.
- Stream keys you type in never leave your device.
- Camera video between your devices is encrypted while it travels.
- Too many wrong passwords lock the account for a short time, and each code allows only a few tries.
- Staff use their own accounts, and what they do is logged.
No system is perfectly safe. If a breach affects your personal data, we will tell you without delay — what happened, what it means for you and what we are doing — and we will tell the Data Protection Board of India, CERT-In and other authorities as the law requires.
13. Children
Stream-It is for everyone — sports and events are entertainment for all ages. If you are under 18, the law in India (the DPDP Act) needs your parent or legal guardian to agree before we handle your data: they agree when the account is created, and they help you use the app safely. We do not track children or show them ads. If we learn that we hold a child's data without a parent's or guardian's agreement, we will delete it.
If you film or stream children — for example at a school match — you must have permission from their parents or guardians, and from the school or organiser where needed.
14. Where your data is kept
Our server and database are run by our hosting provider. Your data may be stored or processed in India or in other countries where we or our providers work (for example Google’s Firebase Crashlytics). When data leaves your country, we protect it as the law requires — for example with contract terms that keep the same level of protection. We do not send data to countries that Indian law does not allow.
15. Contact and complaints
Stream-It, India
Email: info@stream-it.app
Write to this email with any question, request or complaint about your data. We confirm your complaint within 24 hours and resolve it within 15 days (requests about your personal data within the time in section 11).
16. Changes to this policy
We may change this policy when Stream-It or the law changes. We will put the new date at the top. If a change is important, we will tell you in the app or by email at least 15 days before it applies (sooner only if the law or safety requires it). If we want to use your data for a new purpose, we will ask you first.