VividLook Privacy Policy
Last updated: July 10, 2026
This Privacy Policy explains how VividLook ("we", "us", or "the app") collects, uses, and
protects your information when you use the VividLook mobile application. By using VividLook, you
agree to the practices described below.
1. Information We Collect
We collect only the minimum data needed to operate the service:
- Account information: your email address (used to create your account, verify
it, and reset your password), your chosen username (display name), your password, and a session
token that keeps you signed in. See "How We Store Your Data" below for how each of these is
protected at rest.
- Approximate location: with your permission, we use your device location to
place your dot on the in-app globe and to group nearby live broadcasts. Your coordinates are
snapped to an approximate (~1 km) grid before they leave your device, so your exact
position is not shared.
- Camera and microphone: accessed only while you are actively broadcasting a
live stream, in order to transmit your audio and video to viewers. Microphone use is optional —
you can broadcast muted.
- Live stream content: the audio and video you broadcast is delivered to
viewers in real time through our streaming provider. Streams are limited in duration and are
not retained by us after they end. While you are live, periodic still frames (thumbnails) of
your video are held on our servers and shown publicly in the app's broadcast list so viewers
can see what's streaming; thumbnails are discarded when your stream ends.
- AI stream summaries: if a viewer chooses to get an AI summary of a stream
they just watched, a small number of still frames sampled from that stream are sent to
Google's Gemini API to generate the summary. The frames are used to produce the summary and
are not retained by us afterward.
- Stream history: we keep a record of when you streamed, for how long, and at
what general location tag (not GPS coordinates), used to power your profile stats, streaks, and
the leaderboard.
- Reports: if you report a stream or user, we keep the report (who filed it,
what it was about, and when) so our safety team can review it. Reports are not hashed or altered,
since our team needs to read them to act on them.
- Advertising data: we show ads through Google AdMob. AdMob and its partners may
collect your advertising ID, IP address, device and app information, and general (non-precise)
location to serve and measure ads, and to prevent fraud. Where required (for example in the
EEA and UK), we ask for your consent to this before any personalized ads are shown; see
"Your Rights" below for how to change that choice.
2. How We Use Your Information
- To create and secure your account and keep you signed in.
- To send account-related emails (verification codes and password resets).
- To show live broadcasts and approximate locations on the globe.
- To power public, opt-in-by-design features: your profile, followers/following, and the
leaderboard, all of which are built around your username, which you chose to be visible to
other users.
- To review reports and enforce our community guidelines.
- To operate, maintain, and improve the service.
3. How We Store Your Data
Every field we store is protected in the way that's actually appropriate for what it's used for:
- Password: hashed with bcrypt (industry standard, salted per-account). We never
store your password in plain text, and we cannot look it up or recover it — when you log in,
we hash what you type and compare hashes.
- Email address: stored only as a one-way cryptographic hash (HMAC-SHA256), never
in plain text. We can check whether an email you type matches an existing account, but a copy of
our database on its own cannot be turned back into a list of email addresses.
- Session tokens: the token your device holds to stay signed in is stored on our
server as a one-way SHA-256 hash, the same way passwords are protected. A database copy can't be
used to impersonate a live session.
- Username: stored as plain, searchable text. This is intentional and necessary:
your username is a public display name shown live to other viewers, ranked on the leaderboard,
and used so people can search for and follow you — the same way a handle works on any social
app. It is not treated as confidential information.
- Streams / stream history: stored in plain text, linked to your username, so we
can show you (and the leaderboard) your own broadcast stats. Location on these records is a coarse
tag (e.g. a city or grid cell), never precise GPS.
- Reports: stored in plain text and never hashed, so our safety team can read and
act on them.
4. Sharing of Information
We do not sell your personal data. We share data only with the service providers
required to run the app:
- Agora — real-time audio/video streaming.
- Resend — sending account verification and password-reset emails.
- Google AdMob — serving ads within the app. See "Advertising data" above
for what AdMob collects.
- Google (Gemini API) — generating optional AI stream summaries. See
"AI stream summaries" above for what is sent.
- Google Maps Platform / Google Play services — displaying the in-app
map and location features.
- Our hosting and database providers (used to store your account information).
We may also disclose information if required by law or to protect the safety, rights, or property
of our users or the public.
5. Data Retention
We keep your account information for as long as your account is active. Live streams are not
retained after they end. You may request deletion of your account and associated data at any time
(see Delete Your Account below).
6. Children's Privacy
VividLook is not intended for children under 13. You must confirm you are at least 13 years old
during account setup to use the app, and we do not knowingly collect personal information from
children under 13.
7. Security
We protect your information using industry-standard measures, including the hashing described in
"How We Store Your Data" above and encrypted connections. However, no method of transmission or
storage is completely secure, and we cannot guarantee absolute security.
8. Your Rights
You may access, update, or delete your account information, and you can revoke location, camera,
or microphone permissions at any time in your device settings. To request data deletion, see our
account deletion page or contact us using the details below. If you
are shown an ad-consent form (EEA/UK users), you can change your choice at any time from within the
app; you can also opt out of personalized advertising generally through your device's ad settings.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an
updated "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
anshpsolanki@gmail.com.
See also our Terms & Conditions.