01 · Overview
Introduction
Kruzer Ultraverse ("we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and safeguard personal information through the UltraStream mobile application (the "App"), and the rights you have in relation to that information.
This policy is designed to meet the requirements of the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), applicable app store requirements (Apple App Store and Google Play), and applicable global privacy laws and best practice. Where local laws apply to you, the rights and protections in those laws are in addition to the general protections set out in this policy.
By downloading, installing, registering for an account on, or otherwise using the App, you acknowledge that you have read and understood this Privacy Policy.
This policy is a companion to the Kruzer Ultraverse website Privacy Policy. Where you also use our websites, that policy applies to your use of the websites.
Some features described in this policy, including age verification and reward checkout, are being progressively rolled out and may not yet be fully active for all users. Where a feature is not yet active, we do not process the related personal information until it goes live.
02 · Controller
Who we are
Kruzer Ultraverse is the operator of the App and acts as the "data controller" (under GDPR/UK GDPR), "APP entity" (under the Australian Privacy Act), and "business" (under the CCPA/CPRA) responsible for your personal information.
For any privacy-related questions, requests, or complaints, please contact:
- Privacy contact: admin@kruzer.com.au
- Postal address: Kruzer Ultraverse Pty Ltd (ABN 62 686 962 783), Level 13, 60 Castlereagh Street, Sydney NSW 2000, Australia
If you are in the EU or UK and require an Article 27 representative, please contact us at the address above and we will provide current details.
03 · Scope
Scope
This Privacy Policy applies to the UltraStream mobile application and the services accessed through it, including creating an account, live streaming, viewing streams, chatting, participating in the Founding Creator Programme, and receiving creator payouts. It does not apply to third-party websites or services linked from or integrated with the App; those third parties have their own privacy policies which we encourage you to review.
04 · Collection
Personal information we collect
We collect personal information in the following categories:
4.1 Account and profile information
When you create an account or sign in to the App, we collect information such as:
- Your name, display name or username, and custom handle
- Email address
- Password (stored in hashed form: we never store plain-text passwords)
- Where you sign up or sign in via Google or Apple, the identifier and basic profile information (such as name and email) shared with us by that provider
- Profile information you choose to provide, such as a profile picture or bio
- Account preferences and settings
- Authentication metadata (for example, sign-in timestamps, IP address used to sign in, and approximate location derived from IP for security purposes)
4.2 Age verification
To confirm you are 18 or older before sign-up, the App captures a single live selfie photo (JPEG) on your device. This is biometric-related information.
- The App sends that image to the UltraStream verification API, which forwards it to our age-verification partner, Yoti, for facial age estimation and liveness/anti-spoofing. UltraStream does not store the face image in our database or file storage. Yoti processes the image under Yoti’s privacy policy.
- UltraStream stores only the pass/fail result (is_18_plus), not facial geometry and not a predicted age. The result is used solely to determine 18+ sign-up eligibility. It is not used for identification, advertising, or profiling.
- Face images are processed in memory for the request only and are discarded after verification. Verification outcomes are kept for the life of the account and up to 24 months after account closure (see Section 12). A short-lived cache may hold a pass result for up to 7 days or a fail result for up to 5 minutes.
We rely on your consent for this biometric processing. You may withdraw consent by not completing sign-up or by contacting us.
4.3 Creator payout, purchases, and financial information
If you join the App as a creator and are eligible for revenue share, we (and our payment processor, Stripe) collect information necessary to verify your identity and pay you, including:
- Full legal name and date of birth
- Bank account or payout details
- Tax information (for example, a tax file number or equivalent, as required by law)
- Identity verification documents required by Stripe for Know Your Customer (KYC) checks
- Earnings, payout history, and referral or competition activity relevant to the Founding Creator Programme
If you reward a creator using Squad Legacy items, we (and Stripe) also collect information needed to process that purchase, including:
- Payment details processed by Stripe at checkout
- A record of the items and quantities purchased, and the creator rewarded
- Your contribution and transaction history, visible to you in the App's Transaction Log
Payment card and full bank account details are collected and stored by Stripe on our behalf. We do not store full card numbers or full bank account numbers ourselves.
Reward checkout via Stripe is in development and not yet processable end-to-end in the current release.
4.4 Device permissions and device information
To provide live streaming, the App requests access to certain device features. We only access these when needed to provide the relevant functionality, and you can manage permissions at any time through your device settings:
- Camera: age-verification selfie, and (for creators) ID face match via Yoti.
- Microphone: to capture and broadcast your live audio
- Photo/video library: where you choose to upload a profile picture, thumbnail, or pre-recorded clip
- Push notification token: to send you alerts about your stream, followers, and account activity
- Device identifiers, operating system, app version, and crash/diagnostic data: to keep the App secure and working properly
If you do not grant camera or microphone permission, you will not be able to broadcast a live stream, but you can still use other parts of the App.
4.5 Streaming content and activity
When you use the App to stream, watch, or interact with content, we collect:
- Your live video and audio stream while broadcasting, and any short-form or uploaded video content
- Chat messages, comments, likes, dislikes, and reactions you post
- Follows, subscriptions, and other interactions with creators and viewers
- Watch history, including videos, Shorts, and live content you view. You can pause watch history tracking or clear your watch history at any time in the App
Live streams may be recorded and stored so they can be replayed as video-on-demand where you enable that option. You can delete your recordings at any time in the App. We keep recordings while published and for up to 30 days after removal, unless we must retain them longer to investigate a report or comply with law. Creators can choose not to store recordings in stream settings.
4.6 App analytics and technical information
When you use the App, we and our analytics providers automatically collect certain technical information, including:
- IP address and approximate geographic location
- Device type, operating system, and app version
- Pages/screens viewed and features used within the App
- Date, time, and duration of sessions
- Clickstream and in-app interaction data
This information is collected using reputable third-party analytics, crash-reporting, and content-delivery providers, who are contractually required to handle it consistently with this policy.
4.7 Support, contact forms, and communications
When you contact us through in-app support, a contact form, or otherwise communicate with us, we collect:
- Your name and email address
- Any other information you choose to include in your message
- Subscription preferences and email engagement data, if you sign up to receive updates
4.8 Information we do not knowingly collect
Other than the age-verification biometric processing described in Section 4.2 above, we do not knowingly collect "sensitive information" (as defined under the Australian Privacy Act) or "special category" data (as defined under the GDPR), such as health information, racial or ethnic origin, religious beliefs, political opinions, or sexual orientation, unless you voluntarily provide it (for example, in a support message) and it is necessary for the purpose of your enquiry.
05 · Sources
How we collect personal information
- Directly from you, when you register, log in, set up creator payouts, stream, chat, or otherwise interact with the App
- Automatically, through device permissions, app analytics, and diagnostic tools when you use the App
- From third-party service providers, such as Stripe (payments), authentication providers, analytics platforms, and referral/competition tracking tools, in accordance with their own privacy policies
06 · Purpose
Why we use your personal information
We use personal information to:
- Create and manage your account and authenticate you
- Provide live streaming, chat, and viewing functionality
- Verify your age and determine which content categories are appropriate to show you
- Process reward purchases and calculate, process, and pay creator revenue share through Stripe
- Run the Founding Creator Programme, including referral tracking and eligible competitions
- Operate, maintain, and improve the App, including troubleshooting and security
- Communicate with you about your account, support requests, and (where you have opted in) marketing updates
- Comply with legal, tax, and regulatory obligations, including identity verification for payouts
We will not use your personal information for a purpose materially different from the purpose for which it was collected without first notifying you and, where required, obtaining your consent.
Where the GDPR or UK GDPR applies, our lawful bases are: performance of our contract with you (account, streaming, payouts); your consent (age estimation, optional marketing, non-essential tracking); our legitimate interests (security, product improvement, fraud prevention), balanced against your rights; and compliance with legal obligations (tax, KYC/AML, safety). You can withdraw consent at any time where we rely on it.
07 · Tracking
Cookies and tracking technologies
The App uses device identifiers, SDKs, and similar technologies (rather than browser cookies) to make the App work, remember your preferences, and understand how the App is used.
| Category | Purpose |
|---|---|
| Strictly necessary | Required to operate the App, including session and authentication tokens. These do not require separate consent. |
| Functional | Remember your preferences, such as display settings. |
| Analytics | Help us understand App usage in aggregate so we can improve it. |
| Marketing | Used in limited circumstances to measure the effectiveness of campaigns, if and where deployed. |
Where required by law, we will request your consent before using non-essential tracking technologies. You can manage permissions such as advertising identifiers through your device settings. Disabling certain technologies may affect App functionality.
08 · Sharing
Disclosure of personal information
We may disclose personal information to:
- Stripe, to process creator payouts, reward purchases, and carry out identity verification
- Yoti, to carry out video-based age verification (once this feature is active)
- Google and Apple, where you choose to sign up or sign in using those providers
- Service providers who help us operate the App, including hosting, streaming infrastructure, authentication, analytics, push notifications, customer support tools, and security providers. These providers are contractually required to handle personal information only as instructed by us and consistent with this policy.
- Referral and competition tracking tools used for the Founding Creator Programme
- Professional advisers such as legal counsel, accountants, and auditors, where necessary
- Government authorities and regulators, where we are required by law, court order, or to protect our or others' rights, safety, or property
- A successor entity in connection with a merger, acquisition, restructuring, or sale of all or part of our business, subject to the recipient committing to protect personal information in a manner consistent with this policy
We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA. We will update this policy and provide a "Do Not Sell or Share My Personal Information" control if that ever changes.
09 · Transfers
International data transfers
We are based in Australia. Some of our service providers, including Stripe, may store or process personal information outside your country of residence, including in the United States, the European Union, the United Kingdom, and other jurisdictions.
Where personal information of EU or UK residents is transferred outside the EEA or UK to a country that has not been recognised as providing an adequate level of protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), or another lawful transfer mechanism. A copy of the safeguards can be requested at the contact details in Section 2.
By using the App, you understand and acknowledge that your personal information may be transferred to and processed in countries other than your own.
10 · Marketing
Marketing communications
If you have opted in to receive updates from us, we will use the email address and preferences you provided to send you those communications.
You can unsubscribe at any time by following the link in any marketing email, adjusting your notification settings in the App, or contacting us at admin@kruzer.com.au. Unsubscribing from marketing communications does not affect transactional or service-related communications, such as account security notices, payout confirmations, or important changes to the App or these terms.
11 · Security
Data security
We implement reasonable technical and organisational security measures designed to protect personal information from unauthorised access, disclosure, alteration, or destruction, including:
- Encryption of data in transit (TLS) and at rest where appropriate
- Hashing of passwords using industry-standard algorithms
- Payment and identity verification data handled by Stripe under its own PCI-compliant security standards
- Access controls and authentication requirements for our personnel
- Regular review of our security practices and service providers
No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. If you believe your account or information has been compromised, please contact us immediately.
If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme, and other regulators where applicable.
12 · Retention
Data retention
| Data | Retention period |
|---|---|
| Account information | For the life of the account plus up to 24 months |
| Creator payout, tax, and KYC records | 7 years after the last payout, to meet tax and anti-money-laundering obligations |
| Live-stream recordings | While published and for up to 30 days after removal (see Section 4.5) |
| Chat messages | Up to 12 months |
| Support and contact submissions | Up to 24 months |
| Analytics and diagnostic data | Identifiable for up to 14 months, then aggregated or deleted |
When personal information is no longer required, we will securely delete or de-identify it.
13 · Your rights
Your privacy rights
Subject to the laws that apply to you, you may have the following rights in relation to your personal information:
- Access: request a copy of the personal information we hold about you
- Correction / rectification: ask us to correct information that is inaccurate or out of date
- Deletion / erasure: ask us to delete personal information in certain circumstances
- Restriction / objection: ask us to restrict or object to certain processing
- Data portability: request a copy of certain personal information in a machine-readable format
- Withdraw consent: withdraw consent at any time where we rely on consent (this does not affect the lawfulness of processing before withdrawal)
- Opt out of marketing: opt out of receiving marketing communications at any time
- Opt out of "sale" or "sharing": under the CCPA/CPRA. We do not sell or share personal information as defined under that law, but if this changes we will provide a "Do Not Sell or Share My Personal Information" option
- Non-discrimination: exercise your rights without being discriminated against for doing so
- Watch history controls: you can pause watch history tracking or clear your watch history at any time in the App, under Profile
Some information, such as payout and tax records, may need to be retained even after a deletion request in order to meet our legal obligations.
To exercise any of these rights, please contact us at admin@kruzer.com.au. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law (typically within 30 days under the GDPR/UK GDPR; 45 days under the CCPA/CPRA, with the possibility of an extension).
If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority:
- Australia: the Office of the Australian Information Commissioner (OAIC): oaic.gov.au
- EU: your local Data Protection Authority
- UK: the Information Commissioner's Office (ICO): ico.org.uk
- California: the California Privacy Protection Agency or the California Attorney General
We would, however, appreciate the chance to address your concerns first.
14 · Minors
Children's privacy
The App is not directed to children under the age of 18, and we do not knowingly collect personal information from children under 18. If you believe that a child has provided us with personal information, please contact us at admin@kruzer.com.au and we will take steps to delete that information.
While Viewers must be at least 18, Creators who receive payouts must be at least 18. We do not knowingly enable payouts to anyone under 18.
15 · Automation
Automated decision-making
We use automated tools to help verify age, recommend content, and detect content or conduct that may breach our Terms or the law. These tools support human review; we do not make decisions producing legal or similarly significant effects on you based solely on automated processing without a route to human review. Where a moderation or account decision significantly affects you, for example removing content or restricting payouts, you can ask us to review it at admin@kruzer.com.au.
16 · Third parties
Third-party links and integrations
The App may contain links to third-party websites, plug-ins, or services, or integrate with third-party tools such as Stripe for payouts. Clicking on those links or using those integrations may allow third parties to collect or share data about you. We do not control these third parties and are not responsible for their privacy practices. We encourage you to read the privacy policy of every third-party service you use.
17 · Updates
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this policy. If we make a change that materially and adversely affects your rights, we will give you reasonable advance notice, for example by email or an in-app notification, before it takes effect, and will seek your consent where required by law. If you do not agree to a material change, you may stop using the App and close your account before it takes effect.
18 · Contact
Contact us
If you have any questions, concerns, or requests about this Privacy Policy or our handling of your personal information, please contact us:
- Email: admin@kruzer.com.au
- Postal: Kruzer Ultraverse Pty Ltd (ABN 62 686 962 783), Level 13, 60 Castlereagh Street, Sydney NSW 2000, Australia