Privacy Policy

1. Introduction

Welcome to Webroom ("we", "us", or "our"). This Privacy Policy explains how we collect, use, and protect your information when you use the Webroom Android application (the "App"). By using the App, you agree to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Full name — used to identify you in rooms.
• Email address or phone number — at least one is required for account creation and login. Both are optional; you may provide either or both.
• Password — stored as a secure hash on our servers. We never store your plaintext password.

2.2 Device Information

We automatically collect:

• Device identifier— a randomly generated UUID stored in your device's secure keystore. This is used to manage your active sessions.
• Device name — the friendly name of your device (e.g., "Galaxy S24"), used to display active sessions in your profile.
• App version — used to ensure compatibility with our servers.

2.3 Audio Data

• Microphone access — the App requests microphone permission when you join an audio room. Audio is streamed in real time via Stream Video. We do not store live audio on our servers.
• Recordings — if you choose to record a session, the recording is saved locally on your device only. We do not upload or store recordings on our servers.

2.4 Usage Data

We collect minimal operational data such as room membership events and session activity solely to deliver the App's core features (e.g., knowing who is in a room, handling join/leave events). We do not collect analytics, crash reports through third-party analytics SDKs, or usage telemetry beyond what is needed to operate the service.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Authenticate you and maintain your session security.
• Enable real-time audio communication within rooms.
• Allow admins to manage rooms and participants.
• Send you service-related communications (e.g., account approval status).
• Detect and prevent abuse or unauthorised access.

We do not use your data for advertising, profiling, or sale to third parties.

4. Third-Party Services

The App uses the following third-party service to deliver core functionality:

• Stream Video (GetStream.io)— provides real-time audio infrastructure for rooms. Audio data is transmitted through Stream's infrastructure during active calls. Stream's privacy practices are governed by their Privacy Policy.

We do not integrate any advertising networks, analytics SDKs, or social media SDKs.

5. Data Storage and Security

• Account data is stored on our servers, which are protected by industry-standard security measures including encryption in transit (HTTPS/TLS) and at rest.
• Sensitive credentials (session tokens, device IDs) are stored in your device's secure storage (Android Keystore).
• We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days.
• Recordings are stored locally on your device and are subject to your device's own storage and security settings.

6. Permissions Requested

Microphone permission is only active while you are in an audio room. It is not accessed in the background.

7. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing of your data.
• Lodge a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France).

To exercise any of these rights, contact us at the email address below.

9. Data Sharing

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We may share data only:

• With service providers that help us operate the App (e.g., Stream Video as described above).
• If required by law or to protect the rights and safety of our users.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the App after changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We will respond to all legitimate requests within 30 days.