Privacy policy
This policy explains what the streamLama mobile app for iOS and Android ("streamLama", "we", "us") does with your information. The short version: streamLama has no ads and no analytics, and an account is optional. Your stream key stays on your phone, and your live video goes directly from your phone to YouTube.
Summary
- An account is optional. Every feature works without one. If you create one, your email address and account ID are stored with our sign-in provider, Supabase, until you delete the account in the app.
- We do not run servers that receive your video, audio or stream key.
- We do not include advertising, analytics or tracking software in the app, and we do not sell or share personal information for advertising.
- Purchases are processed by Apple or Google. We use RevenueCat to confirm which purchases you own.
Information that stays on your device
- Your YouTube stream keys. Stored only on your device in secure storage: the iOS Keychain on iPhone and iPad, and encrypted storage protected by the Android Keystore on Android. The key you select is also copied into a private configuration file in the app's storage, because the streaming component reads it from there when you go live (on iPhone, also when you start a broadcast from Control Center). The app updates that copy when you select another key, empties it when you delete your last key, and leaves the file out of device backups.
- Your sign-in (if you have an account). The sign-in session is kept in the same secure storage, not in ordinary app storage, and stays on this device.
- Settings and scenes. Your stream settings and the layouts you design are saved in the app's private storage on your device.
- Images you add. When you add a picture to a scene, the app copies it into its private storage. It is not uploaded anywhere by us.
- Local recordings (Pro). If you turn on local recording, MP4 files are saved on your device. They are only saved to your photo library or shared with another app when you choose to do that.
On Android, deleting the app removes everything it stored on the phone. On iPhone and iPad, deleting the app removes its files, settings, scenes, images and recordings, but iOS can keep Keychain items after an app is deleted: your stream keys come back if you install streamLama again, and a leftover sign-in is removed the first time the reinstalled app opens. To remove your keys for good, delete them in the app (Settings > Stream keys) before you delete the app.
Device backups. The configuration file with the copy of your key and the files made for each broadcast are left out of iCloud, computer and Android backups. On Android, stream keys, the sign-in session and local recordings are left out too, while settings and scenes are backed up by Android to your Google account. On iPhone, recordings are part of your device backup, and stream keys in the Keychain follow Apple's encrypted Keychain backup.
Your account (optional)
You can use streamLama without an account. If you sign in, the account keeps streamLama Pro with you on every device. Signing in works with email and password, with Google, or with Apple on iPhone and iPad.
- What is stored: your email address, a random account ID, how you signed in (email, Google or Apple), when the account was created and last used, and your password if you chose one. Passwords are stored only as a salted hash; nobody, including us, can read them. For security, the sign-in service also logs sign-in activity, including your IP address and device type. These log entries are deleted with your account; copies in the service's own system logs and backups expire within 30 days.
- Sign in with Google: Google shares your email address, your name and a link to your Google profile picture, plus an ID for your Google account. We do not receive your Google password, and signing in does not give streamLama access to your YouTube channel.
- Sign in with Apple: Apple shares your email address, or a private relay address if you choose to hide yours, and an ID for your Apple account. We do not ask Apple for your name.
- What it is used for: signing you in, sending account emails (confirming your address and resetting your password), and linking your Pro purchases to your account (see Purchases). We do not use it for marketing and we do not sell it.
- Who processes it: Supabase, Inc. stores account data for us on servers in the United Kingdom (London). See the Supabase privacy policy at supabase.com/privacy. Account emails are sent through the email provider configured for our Supabase project, which receives your email address and the message only to deliver it.
- How long it is kept: until you delete your account. Signing out only removes the sign-in from your phone.
Deleting your account
In the app, open Settings > Account > Delete account and confirm. If you use Sign in with Apple on iPhone or iPad, Apple asks you to confirm once more so streamLama can also revoke its Sign in with Apple access. Your account, email address, password hash, Google or Apple sign-in link and sign-in activity log are deleted from Supabase right away, and you are signed out. Scenes, settings and stream keys are not part of the account and stay on your phone. If you no longer have the app, email us from the address on the account and we will delete it within 30 days. Step-by-step instructions are on the delete your account page.
Deleting your account does not cancel a Pro subscription. Cancel it in your App Store or Google Play account settings. Apple, Google and RevenueCat keep records of purchases as their own policies and the law require.
Information sent to YouTube
When you go live, streamLama sends your screen video, the game audio, your microphone audio (if turned on), the layout overlays you designed and your stream key directly from your device to the server saved with the key: YouTube's live ingest servers over an encrypted RTMPS connection, unless you entered another server for that key. A server address that starts with rtmp:// instead of rtmps:// is not encrypted. We are not in that path and do not receive, store or view your stream. The Test connection feature sends your stream key to the same server in the same way to check that it is accepted.
What YouTube does with your live stream is governed by YouTube's Terms of Service and Google's Privacy Policy (policies.google.com/privacy). Remember that anything visible on your screen while you are live, including notifications and messages, can be seen by your viewers.
Purchases
streamLama Pro is sold as an in-app purchase. Payment is handled entirely by Apple (App Store) or Google (Google Play); we never see your payment card or billing details.
To check which purchases you own and unlock Pro, the app uses RevenueCat, Inc., a purchase management service. RevenueCat receives an app user ID, your purchase and transaction records from Apple or Google, and basic technical information needed to process the request, such as the app version, operating system, store country and IP address. Without an account the app user ID is a random, anonymous ID created on your device. When you sign in it is your streamLama account ID, so Pro follows your account; we do not give RevenueCat your email address. RevenueCat processes this data on our behalf; see the RevenueCat privacy policy at revenuecat.com/privacy.
Connection speed test
When you run the connection speed test in Settings, the app makes a short latency check and then uploads random test data (at most 25 MB, for about 8 seconds) to Cloudflare's speed test service (speed.cloudflare.com) to measure your upload speed, then suggests stream settings. The test sends no personal data, and the result is shown once and not stored. Like any internet request, it reaches Cloudflare from your IP address; see cloudflare.com/privacypolicy.
Permissions
| Permission | Why streamLama asks |
|---|---|
| Screen broadcast (iOS) / screen capture (Android) | To capture your screen and game audio for the live stream. You confirm this each time you go live. |
| Microphone | To include your voice in the stream. Optional; you can stream with the mic off. |
| Notifications | To show the streaming status and Stop button (Android) and to alert you if the stream disconnects. |
| Photos | To pick images for your scenes, and to save recordings to your photo library when you ask. |
The app also checks whether your device is online so it can warn you before going live without a connection. This check happens on the device.
Children
streamLama is not directed to children under 13 and we do not knowingly collect personal information from children. YouTube requires creators to be at least 16 to live stream on their own.
Your choices and rights
We do not store your content, and the only personal information we keep is the optional account described above. You can see your account's email address in Settings and delete the account there at any time. You can delete your stream keys in the app at any time; see above for what deleting the app removes. If you would like a copy of your account data, a correction, RevenueCat's purchase records deleted, or you have any other privacy request under laws such as the GDPR or the CCPA, email us and we will help.
Security
Your stream keys and sign-in session are kept in the operating system's secure storage, live video goes to YouTube over encrypted RTMPS (a server you enter yourself is encrypted only if its address starts with rtmps://), and account data travels over HTTPS. Sign-in links only work as a one-time code for the phone that asked for them. No method of storage or transmission is perfectly secure, so keep your stream key private and reset it in YouTube Studio if you think someone else has it.
Changes to this policy
If we change how streamLama handles information, we will update this page and the effective date above before the change takes effect. Significant changes will also be noted in the app's release notes.
Contact
Questions about privacy: codedharmony.com@gmail.com.