1. Overview

HydroX ("HydroX," "we," "us," or "our") operates the HydroX mobile application and website at hydroxapp.com (together, the "Service"). This Privacy Policy explains what information we collect, why we collect it, and the choices you have. By using the Service, you agree to the practices described here.

HydroX is a social platform for short-form stories and live video. Some features described below may not be available yet — we are in pre-launch testing and will update this policy as features ship.

2. Information we collect

Information you provide

  • Account details — name, username, email address, phone number, date of birth, and profile photo.
  • Authentication — one-time passcodes (OTPs) sent to your email or phone to verify sign-in. We do not store the OTP after it is consumed.
  • Content you post — videos, livestreams, captions, comments, reactions, direct messages, and any metadata attached to that content (e.g., a video's duration or thumbnail).
  • Support communications — messages you send to support@hydroxapp.com or other support channels.

Information collected automatically

  • Device and technical data — device model, operating system version, app version, language, time zone, and a device identifier used for crash reporting and abuse prevention.
  • Usage data — actions you take inside the app (e.g., which videos you watch, who you follow, when you go live), session timestamps, and basic performance telemetry.
  • Approximate location — derived from your IP address. We do not collect precise GPS location unless you explicitly grant the permission for a feature that requires it.
  • Log data — IP address, user-agent strings, and timestamps for security and debugging.

Information from third parties

  • Sign-in providers — if you sign in using a third-party identity provider, we receive the basic profile data that provider releases (typically name, email, and a stable identifier).
  • Cross-platform streaming destinations — when multi-platform streaming becomes available (e.g., YouTube, Facebook), we will receive only the tokens and identifiers needed to publish your stream to the destinations you choose.

3. How we use information

  • Operate the Service — create accounts, deliver content, host livestreams, and surface things you follow.
  • Verify identity — send OTP codes by email (via Amazon SES) and SMS (via Amazon SNS, including a verification link routed through our deep-link provider).
  • Keep the platform safe — detect spam, fraud, account takeover, and Terms of Service violations.
  • Improve the product — measure feature usage, fix bugs, and prioritize work.
  • Communicate with you — service announcements, transactional messages, and replies to support requests. We will not send marketing emails without your consent.
  • Comply with law — respond to lawful requests, enforce our Terms of Service, and protect our rights.

4. When we share information

We share information only as described below. We do not sell your personal information.

  • With other users — your profile, public content, and livestreams are visible to other HydroX users by design. Direct messages are visible to their recipients.
  • With service providers — vendors that host our infrastructure or deliver messages on our behalf (listed below).
  • With third-party platforms you connect — if you choose to simulcast to YouTube, Facebook, or another destination, your stream and the metadata you provide are sent to that platform under its own terms and privacy practices.
  • For legal reasons — when we believe in good faith that disclosure is required by law, court order, or to protect the rights, property, or safety of HydroX, our users, or the public.
  • In a corporate transaction — if HydroX is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

5. Service providers we rely on

The Service is built on the following providers. Each processes data only as instructed by us and is bound by data protection terms.

  • Amazon Web Services (AWS) — hosting, storage, databases, and infrastructure. Primary region: US East (Ohio).
  • Amazon SES — outbound transactional email (sign-in codes, account notifications). Sender domain: hydroxapp.com.
  • Amazon SNS — outbound transactional SMS for US phone verification.
  • Agora — real-time audio and video infrastructure used to power livestreams.
  • Branch.io — deep-link routing used to open verification links and shared content directly in the HydroX app.
  • Apple App Store / Google Play — distribution of the HydroX app. Their privacy practices apply to information they collect during install and in-app purchases.

6. Data retention

We keep personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

  • Account data — retained until you delete your account, then purged within 30 days, except where law requires longer retention.
  • Content you posted — public posts and livestream recordings are removed when you delete them or close your account; cached or backup copies may persist for up to 90 days.
  • Logs and telemetry — typically retained for up to 12 months.
  • Bounces, complaints, and suppression list — retained indefinitely to comply with anti-spam requirements.

7. Security

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest for stored data, hardened cloud infrastructure, and least-privilege access controls. No system is perfectly secure; if we become aware of a breach that affects you, we will notify you as required by applicable law.

8. Your choices and rights

  • Access and update — you can view and edit your profile in the app at any time.
  • Delete your account — you can delete your account from the in-app settings, or email us at support@hydroxapp.com.
  • Notification controls — adjust push notifications in your device settings and email preferences in the app.
  • Regional rights — depending on where you live (e.g., California, the EEA, the UK), you may have additional rights to access, correct, port, restrict, or delete your personal information, and to object to certain processing. To exercise these rights, contact us at support@hydroxapp.com. We will respond within the timeframe required by applicable law.
  • Do Not Sell or Share — we do not sell personal information and we do not share it for cross-context behavioral advertising as those terms are defined under California law.

9. Children's privacy

HydroX is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it. In some jurisdictions a higher minimum age applies; see our Terms of Service.

10. International users

HydroX is operated from the United States. If you use the Service from outside the US, you understand that your information will be transferred to, stored, and processed in the US and other countries where our service providers operate. We rely on appropriate safeguards for such transfers where required by law.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app, by email, or by posting a prominent notice on the website before the changes take effect. The "Last updated" date at the top reflects the current version.

12. Contact us

Questions about this Privacy Policy or your information? Email us at support@hydroxapp.com.