Who you are dealing with
Sawtix is built and run by one individual developer, not a company. There is no registered company behind it, no company number and no business address — and where data protection law speaks of a "controller", that controller is that individual.
We would rather state this plainly than leave you to infer a company from the way a policy is written. Practically, it means two things. Requests under this policy are read and answered by one person rather than a department, so allow for that in the timescales below. And the email address in section 9 is the whole of the contact surface: there is no postal address to write to and no phone number to call.
01Collection & purpose
Sawtix collects the categories below. There is no advertising SDK and no third-party analytics SDK in the app — we do not build an advertising profile of you and we do not sell personal information.
Account identifier
Signing up creates an account against your device rather than against
an email address or a phone number. We do not upload the raw device
identifier: the app derives a one-way identifier from the platform value
(identifierForVendor, with a keychain-stored fallback) mixed
with our application and bundle identifiers, and sends only the derived
value. It is the login key for your account, and it is used for fraud and
abuse prevention.
Profile you provide
Nickname, avatar, date of birth, gender, country and, if you write one, a short bio. Your date of birth supports the 18+ requirement. A numeric UID is assigned to your account and is visible to others — it is what you quote when you contact support.
What you send and post
Room chat and private messages — both are text only; the app has no photo, voice or video messaging. Messages and their history are delivered and stored by our messaging provider so that they arrive when the recipient is offline.
The only images that leave your device are the ones you pick deliberately: your avatar, and screenshots you attach to a report. Those are stored in our object storage and served over a CDN.
Live audio and video
A host's camera video and audio are carried in real time by our real-time communications provider to the people watching the room. In this version you take part as a viewer: nothing in the app sends your own microphone audio or camera video into a room. We do not record streams as a matter of course.
Activity on the platform
Who you follow and who follows you, the rooms you enter, gifts sent and received, and reports you file. This is what makes the follow list, the leaderboards and the room history work.
Purchases
Recharge orders, order codes, the receipt issued by the App Store, the diamonds credited and what they were spent on. We verify every purchase against Apple before crediting a balance. We never receive your card number — Apple handles payment.
Technical data
Device model and operating system version, app version, interface language, network type, IP address and server-side logs of requests. This is used to deliver the service, to debug failures and to detect abuse.
What you tell support
If you write to us, or fill in the feedback form with an email address, we keep that correspondence so we can answer it.
02Retention & deletion
We keep each category for as long as the account exists, and then for the period described here.
| Profile, identifier, social graph | Until the account is deleted, then removed. |
|---|---|
| Messages and uploaded images | Removed with the account. A message you sent to someone else remains in their copy of the conversation, which belongs to their account. |
| Live audio and video | Not retained. It exists only while the room is running. |
| Purchase and order records | Retained after deletion for as long as tax, accounting and chargeback rules require. |
| Reports, enforcement and risk-control records | Retained after deletion so that a removed account cannot simply return, and so that a case can be reopened. |
| Child-safety evidence | Preserved for law-enforcement cooperation as described in the Child Safety Standards, regardless of deletion. |
| Server logs | Kept on a rolling short-term basis for operations and security, then overwritten. |
04Device permissions
Each is asked at the moment it is first needed, never on launch, and each can be refused or withdrawn later in your system settings — the rest of the app keeps working.
- Microphone
- Declared by the real-time communications library the app is built on, but no feature in this version sends your voice — watching a live room only receives. If your system asks for it, you can refuse and nothing you can reach in the app stops working.
- Camera
- Declared by the real-time communications library, but no feature in this version opens the camera — an avatar is picked from your photo library, not taken in the app. If your system asks for it, you can refuse and nothing you can reach in the app stops working.
- Photos
- Asked when you pick an avatar or a screenshot for a report — the only two places the app reads your library, and it reads just the image you chose. Private chats cannot send photos at all. We receive only the images you choose.
- Bluetooth and audio settings
- Used to route room audio to a headset and to manage the audio mode. No data leaves the device for this.
05Security
- Traffic between the app and our servers runs over TLS, and request and response payloads are additionally encrypted with AES on top of it.
- Data cached on your device is held in an encrypted key-value store, whose key is kept in the iOS Keychain rather than in the app's files.
- Access to production data is limited to the single operator of the service, and used only to run it and to act on reports.
No system is perfect. If you believe an account has been compromised or you have found a vulnerability, write to singaporehotu@gmail.com and we will treat it as urgent.
One consequence of a device-tied account worth repeating: whoever has your unlocked phone has your Sawtix account, since there is no password to stop them. Lock your device.
06Your rights
Depending on where you live, you may have the right to access your data, to correct it, to receive a copy in a portable form, to have it deleted, to object to or restrict certain processing, and to withdraw consent. We honour these requests wherever you are, not only where the law compels us to.
- Correct it yourself
- Nickname, avatar, gender and date of birth are editable in Profile → Edit profile. Country is set when the account is created and cannot be changed in the app — email us to correct it.
- Access, export or delete
- Email singaporehotu@gmail.com from the device that holds the account and quote your UID. We verify that the request comes from the account holder before we act — with no password on the account, that verification is what protects you from someone else deleting it.
- Withdraw consent
- Stop using the app and ask us to delete the account. Withdrawing consent does not undo processing that already happened lawfully.
- Complain
- If you are in a jurisdiction with a data protection authority, you may complain to it. We would rather you told us first so we can fix it.
We answer within 30 days. There is no charge unless a request is repetitive or excessive, in which case we will say so before doing anything.
07Children
Sawtix is an 18+ service. We do not knowingly collect data from anyone under 18. When we learn that an account belongs to a minor we remove the account and its data, without waiting for a request.
If you are a parent or guardian and believe a minor has created an account, write to singaporehotu@gmail.com with the nickname or UID and we will act on it. Our full standards, including how we handle child sexual abuse and exploitation, are on the Child Safety Standards page.
08International transfers
Sawtix is available in many countries, and our servers and the service providers listed in section 3 operate across borders. Your data will therefore be processed in countries other than the one you live in, and those countries may have different data protection rules.
Where we transfer personal data out of a jurisdiction that restricts it, we rely on the transfer mechanisms that jurisdiction provides — standard contractual clauses or an equivalent — and we require the same protections of our providers as we apply ourselves.
09Changes & contact
When this policy changes materially we update the version and effective date at the top of this page and ask you to accept the new version in the app before you continue. Minor clarifications are made in place.
Questions, requests and complaints about privacy go to:
Quote your UID if the request concerns your account. For anything involving a minor, see the Child Safety Standards contact.