1. Overview & Scope
Welcome to HumTum Live ("we", "our", "us", or "the Platform"), operated by HumTum Live Media & Technologies, India. This Privacy Policy describes how we collect, store, process, transfer, and disclose your personal data when you access or use our mobile applications (Android & iOS), web interfaces (including humtum.live), voice rooms, and related interactive streaming services.
By installing, registering, or using HumTum Live, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please refrain from using the Platform or proceed to our Account Deletion Portal.
Key Principle: HumTum Live never sells your personal information or private broadcast data to third-party data brokers or advertisers.
2. Information We Collect
We collect information to provide high-performance social live streaming, audio rooms, secure virtual gifting, and fair interactive games:
A. Information You Provide Directly
- Profile Information: Nickname, avatar/photo, gender, birthday, bio, and language preferences.
- Contact & Account Credentials: Mobile phone number, email address, password hashes, or social login authentication tokens.
- User-Generated Content (UGC): Live video broadcasts, audio streams, real-time chat messages, virtual gifts sent/received, host follow lists, and fan club memberships.
- Support Communications: Inquiries, error reports, and identity verification documents submitted during streamer verification or agency registration.
B. Information Collected Automatically
- Device & Hardware Identifiers: Device model, operating system version, unique device identifier (IDFV/Android ID), screen resolution, IP address, and mobile network operator.
- Live Stream & Room Activity: Duration of broadcasts, voice room seats occupied, viewers count, PK battle interactions, and interactive game participation logs.
- Approximate Location: Country, city, and time zone determined via IP address (precise GPS is never accessed without explicit permission).
4. Live Streaming & Audio Room Data (ZEGOCLOUD)
HumTum Live integrates industry-leading Real-Time Communication (RTC) technology powered by ZEGOCLOUD (Zego Express Engine) to deliver ultra-low latency live video broadcasts, multi-mic audio party rooms, and PK battles.
- Camera & Microphone Access: We request hardware permissions for your camera and microphone only when you actively choose to go live, occupy a voice seat, or record profile media.
- Server Tokens & Security: Real-time media streams are encrypted in transit using industry-standard WebRTC SRTP/TLS encryption. Backend servers issue temporary, authenticated cryptographic tokens for room entry.
- Stream Lifecycle & Moderation: Automated stream lifecycle webhooks monitor room activity for community guideline compliance (e.g., detecting prohibited adult or violent content). Live video streams are not indefinitely recorded unless flagged for safety audits.
5. Virtual Coins, Gifts & Financial Ledger
To guarantee zero loss of funds and complete integrity, all financial transactions on HumTum Live are governed by strict database safeguards:
- Double-Entry Ledger Architecture: Every coin purchase, virtual gift sent, PK reward, and reseller transaction is recorded across immutable double-entry ledger tables in our PostgreSQL database using row-level locking (
SELECT ... FOR UPDATE). Client balances are never trusted without server-side verification. - Payment Gateways: In-app coin purchases are processed securely through Google Play Billing and Apple In-App Purchase. We never store raw credit card numbers or banking passwords on our servers.
- Agency & Reseller Transfers: Authorized coin resellers and talent agencies transact through verified administrative portals with audited IP logging and two-factor authentication.
6. How We Share Your Information
We do not sell, rent, or trade your personal data. We disclose information only in the limited circumstances outlined below:
| Recipient | Purpose | Data Shared |
|---|---|---|
| ZEGOCLOUD | Real-time audio & video streaming infrastructure | Encrypted RTC media stream, temporary stream token, room ID |
| App Stores (Google / Apple) | Processing in-app coin purchases and subscriptions | Transaction receipt tokens, purchase order IDs |
| Infrastructure & Cloud (AWS / Vercel / Redis) | Secure database hosting, cache, pub/sub game countdowns | Encrypted user records, session states, room metadata |
| Legal Authorities & Regulators | Compliance with lawful court orders, subpoenas, or prevention of imminent harm | Applicable records mandated by Indian IT Act, DPDP Act, and law enforcement |
8. Data Retention & Storage
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Active Accounts: Maintained for the duration of your active membership on HumTum Live.
- Deletion Cooling-Off Period: When you submit an account deletion request, your profile is immediately de-indexed and permanently erased after a 30-day grace period.
- Financial & Legal Audit Logs: Transaction ledger records, anti-money laundering (AML) audit logs, and fraud prevention records are retained for up to 5 to 7 years strictly as required by Indian financial and taxation statutes, after which they are irreversibly purged.
9. Security Measures
We implement bank-grade administrative, technical, and physical safeguards:
- All web and API traffic is encrypted via Transport Layer Security (TLS 1.3).
- Authentication passwords and sensitive tokens are cryptographically salted and hashed using modern algorithms (Argon2 / bcrypt).
- Real-time WebSocket and Redis room states utilize hardened access control lists (ACLs).
- Continuous server monitoring, automated rate limiting, and DDoS protection safeguards our servers against unauthorized access.
10. Your Privacy Rights & Choices
Under the Indian Digital Personal Data Protection (DPDP) Act 2023, GDPR, and international data protection laws, you possess the following rights:
- Right of Access & Summary: You may request a digital copy of all personal data held about you.
- Right to Rectification: You can update inaccurate profile information directly inside app settings or via our support team.
- Right to Erasure (Right to be Forgotten): You may request complete, permanent account and data deletion at any time via humtum.live/delete-account.
- Right to Grievance Redressal: You have the right to register complaints regarding data processing with our appointed Grievance Officer.
11. Account Deletion Process
In full compliance with Google Play Store Developer Guidelines and Apple App Store Review Guidelines, HumTum Live provides a clear, accessible, and automated deletion workflow:
Dedicated Deletion Portal: You do not need to keep the app installed to delete your account. You can trigger deletion instantly through our web portal:
👉 Go to HumTum Live Account Deletion Portal (/delete-account)
You may also initiate deletion directly in the mobile application by navigating to Profile > Settings > Account Security > Delete Account.
12. Child Safety & Age Restriction (18+)
HumTum Live is strictly designed and intended for users who are at least 18 years of age (or the legal age of majority in their jurisdiction). We do not knowingly collect personal data from minors under 18 years of age. If we discover that a user under 18 has created an account, we will immediately ban the account and permanently scrub all associated personal data from our servers.
If you believe a minor has registered on HumTum Live, please report it immediately to admin@humtumlive.com.
13. Grievance Officer & Contact Details
In accordance with the Indian Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer and Data Protection Officer are as follows:
3. Third-Party Authentication (Google, Facebook & Apple)
HumTum Live offers simplified one-tap sign-in using trusted identity providers including Google Sign-In, Facebook Login, and Apple Sign-In. Here is exactly how we use this data:
Revocation of Social Access: You may revoke HumTum Live’s access to your Google or Facebook account at any time via your Google Account Security settings or Facebook App Settings. Doing so will not immediately delete your HumTum Live data; to delete your data permanently, visit our Account Deletion Page.