Privacy Policy

Who we are

Streamling is a desktop app for streamers, together with its account, subscription, website and dashboard services (the "Service"). It is provided by DevNome (Pvt) Ltd ("DevNome", "we", "us"), a company incorporated in Sri Lanka.

DevNome is the controller of personal information about streamers who use Streamling and people who visit our website or contact us. Section 6 explains our role for information about a streamer's viewers.

• DevNome (Pvt) Ltd, 381/B/3, Wijethunga Mawatha, Pilimathalawa, Sri Lanka.
• Email, for support, privacy and data requests, and security reports: info@devnome.com
• Data Protection Officer: Praveen Bandara, at the same email address

Scope and summary

This Privacy Policy explains what personal information we collect, why, who we share it with, how long we keep it, and your rights. It applies to streamers, website visitors, people who contact us, and the viewers of streamers who use Streamling. It does not cover the platforms you connect (such as Twitch or YouTube), which have their own policies.

In short:

• We collect only what we need to run Streamling. We do not use any analytics or advertising tools.
• We do not sell personal information or share it for targeted advertising.
• Chat message content is not stored on our servers, unless you choose to leave it in a log you send us.
• Your platform logins are stored on your PC, encrypted, and are not kept on our servers.
• Payments are handled by Paddle. We never see your card details.
• You can download or delete your data from the app at any time.

Information we collect

3.1 Your account

• Email address and password. The password is stored only as a secure hash by our authentication provider.
• Display name and, if you add one, an avatar image.
• If you sign in with Google, Twitch or Discord: the account identifier, name and email address that service shares with us.
• Your plan (Free or Premium), the plan period (monthly or yearly), and the Paddle customer and subscription identifiers and status we receive from Paddle.
• When your account was created and updated, and an identifier for the device currently signed in (Streamling allows one active device at a time).

3.2 Your stream and community

To run community features and the website dashboard, we store with your account: your Pal's pet stats; your community XP and level; today's and this week's community goal counters; a short activity history (for example "a viewer followed" or "a mini-game finished", including the viewer's username and any amount shown with the event), kept for 24 hours and at most 100 entries; a daily count of chat interactions; and a status record the app updates while it is open (app version, which platforms are connected, OBS connection status, whether you are live, the Pal on screen and its last reaction).

3.3 Your viewers

When viewers interact with your stream while Streamling is running, we store a record for each viewer with your account: platform, platform username, first and last seen time, number of chat interactions and reward uses, XP and level, loyalty points balance, daily quest progress, lifetime activity counts, streaks and achievements. We do not store the content of chat messages on our servers.

3.4 Connected platforms

When you connect Twitch, YouTube, Kick, Streamlabs or OBS, Streamling processes the information needed for the features you turn on. Depending on the platform, this can include your channel identity, live chat, viewer counts, follows, subscriptions and gifted subscriptions, memberships, raids, Bits, Super Chats, donations and channel point redemptions. Platforms provide different events: for example, Kick currently provides chat, viewer counts, subscriptions and gifted subscriptions, but not follows or raids. Section 7 has more about YouTube and Google.

3.5 Platform logins

Login tokens for Twitch, YouTube, Kick and Streamlabs are stored on your PC, encrypted with Windows Data Protection (DPAPI). They are not stored on our servers. The sign-in is exchanged through our server so that Streamling's own secret keys stay private, but your tokens are not kept there. If you use the shared "Streamling Bot" identity to post in chat, the bot account's own credentials are kept on our servers and used only to send the message types you turn on.

3.6 Information kept only on your PC

• Your settings, rewards, overlay layout and alert wording.
• Images and sounds you add for alerts.
• The optional voice pack and a cache of lines the Pal has spoken.
• Diagnostic logs (about 10 MB, with the oldest entries overwritten). These can include chat messages unless you turn chat logging off in Settings.
• Viewer progress waiting to be uploaded. Progress is saved on your PC first and uploaded to your account about every 30 seconds; anything not yet uploaded (for example while you are offline) is uploaded the next time you open Streamling.
• The local overlay server for OBS. It can only be reached from your own PC unless you turn on access from other devices on your network, and it is protected by a private access key.

You can remove this information in the app, or by uninstalling Streamling and choosing "Delete the application data".

3.7 The Pal's voice

The Pal's voice is generated on your PC by the optional voice pack. Text the Pal speaks, including text viewers submit through rewards, is checked by a filter and spoken on your PC. It is not sent to us.

3.8 Support and contact

When you contact us we keep your name, email address, topic and message. If you choose Settings → System → Send my log, we receive the log file you send; chat messages are removed by default, and you can read the log before sending it.

3.9 Payments

Paddle.com Market Limited ("Paddle") is the merchant of record for Premium. Checkout and subscription management happen on Paddle's pages. We never receive your card details. We receive your subscription status, plan, customer and subscription identifiers, and the country used for tax.

3.10 Technical information

Our hosting provider processes IP addresses and request logs when the app or website contacts our servers, to operate and protect the Service. We keep IP-based rate-limit records for 7 days. The website keeps your sign-in session in your browser's storage (see our Cookie Policy). When Streamling checks for updates or downloads the voice pack, it connects to GitHub, which receives your IP address.

3.11 What we do not collect

• No analytics or advertising tools, tracking pixels or device fingerprinting.
• No crash reporting or usage telemetry.
• No monitoring of your screen, files or other apps.
• No chat message content on our servers (unless you leave it in a log you send us).
• No payment card details and no precise location.

How we use information, and our legal bases

We use personal information only for the purposes below. Where a law such as Sri Lanka's Personal Data Protection Act No. 9 of 2022, as amended by Act No. 22 of 2025 ("PDPA"), or the GDPR requires a legal basis, we rely on the basis shown.

We do not make automated decisions about you that have legal or similarly significant effects. Levels, points, quests and achievements are game features.

Who we share information with

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share it only with:

• Service providers acting for us: Supabase (accounts, database, file storage and server functions, hosted in Japan (Tokyo)), Cloudflare (hosts our website and processes visitors' IP addresses to deliver and protect it) and our email delivery provider for account emails. They may use the information only to provide services to us and must protect it.
• Paddle, our merchant of record, which handles payments as an independent controller under its own privacy policy.
• Sign-in providers and platforms you choose: Google, Twitch or Discord when you sign in with them, and Twitch, YouTube, Kick and Streamlabs when you connect them. These receive requests from the app, including chat messages the app posts for you.
• GitHub, which hosts app updates and voice pack downloads.
• Authorities and others where required by law, to protect rights, safety and the Service, or to prevent fraud.
• A buyer or successor if DevNome is involved in a merger, acquisition or sale of assets. We will tell you before your information becomes subject to a different privacy policy.

Viewers' information: roles and responsibilities

A streamer decides to use Streamling on their channel and which features to turn on. For viewer records, the streamer acts as the controller, and DevNome processes the records on the streamer's behalf to provide the Service. DevNome is also a controller where it uses information for its own purposes, such as security and meeting legal obligations.

Streamers must use Streamling in line with the laws that apply to them and each platform's rules. This may include telling viewers that Streamling is used on the channel, for example in the channel description. Streamers can delete any viewer's record on the Viewers page, and must respond to viewers' requests about their data. The data processing terms in the Annex to our Terms of Service set out what DevNome does with viewer information on a streamer's behalf.

If you are a viewer, you can ask the streamer, or contact us at info@devnome.com with the platform and your username. We will verify the request and then delete or correct your record, or pass the request to the streamer where appropriate.

Google and YouTube

• When you connect YouTube, Streamling uses YouTube API Services. By connecting YouTube you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's Privacy Policy (https://policies.google.com/privacy) also applies.
• Streamling asks for two YouTube permissions. With the read-only permission (youtube.readonly), it finds your own active live broadcast and its live chat. To show and react to your chat, Streamling reads the public chat of your own live stream.
• The second permission (youtube.force-ssl) is only requested if you turn on a feature that needs it, never when you first connect: posting chat bot messages from your own YouTube account to the live chat of your own broadcast, or adding the Streamling Bot as a moderator of your live chat. It is never used to upload, edit or delete videos, comments, playlists or anything else on your channel, and nothing is posted unless you turn this on.
• Information from YouTube is used only to provide Streamling's features to you. It is not used for advertising and is not shared except as described in this Policy. We refresh or delete stored YouTube API data at least every 30 days, as YouTube's policies require.
• You can remove Streamling's access at any time in your Google account's security settings (https://security.google.com/settings/security/permissions), as well as by disconnecting YouTube in Streamling.
• Streamling's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

International transfers

DevNome is based in Sri Lanka, and our service providers process information in other countries, including Japan, the United Kingdom and the United States. We transfer information abroad only as the law allows. Under Sri Lanka's PDPA, the transfers are needed to provide the Service you asked for, and the information stays protected as this Policy describes. For the GDPR and UK GDPR: Japan, where our database is hosted, has an adequacy decision, and for other countries we rely on adequacy decisions or the standard contractual clauses in our providers' data processing terms. You can ask us for a copy of the safeguards.

How long we keep information

When you delete your account, your account information and viewer records are deleted from our live database straight away. We do not currently keep database backups; if we start to, we will update this policy to say how long backups are kept, and deleted information will be removed from them when they expire. We may keep information longer where the law requires it or to establish, exercise or defend legal claims.

Your rights

Wherever you live, you can:

• get a copy of your information (Settings → Account → Download my data gives a full JSON export);
• correct inaccurate information;
• delete your account and information (Settings → Account → Delete account), or ask us to delete specific information;
• withdraw consent where we rely on it;
• object to, or ask us to restrict, processing based on legitimate interests;
• receive your information in a portable format;
• complain to a data-protection authority.

Depending on where you live, you may have more rights, for example:

• Sri Lanka: rights under the PDPA, including access, rectification, erasure, withdrawal of consent, objection and review of decisions. You can complain to the Data Protection Authority of Sri Lanka.
• European Economic Area, United Kingdom and Switzerland: your rights under the GDPR, the UK GDPR and Swiss law, including the right to complain to your local supervisory authority.
• California and other US states: the rights to know, delete and correct personal information, and not to be discriminated against for using these rights. We do not sell or share personal information as those laws define it, and do not use sensitive personal information to infer characteristics about you.

To make a request, use the in-app tools or email info@devnome.com. We will verify your identity before acting, respond within the time required by applicable law, and will not charge you unless a request is clearly unfounded or excessive. Where the law allows, you can make a request through an authorised agent.

Children

Streamling is not for children under 13, and we do not knowingly collect their information. Users under 18 must have permission from a parent or guardian, who must agree to our terms for them where the law requires. If we learn that we have collected information from a child under 13, or from a child without a consent the law requires, we will delete it. Parents and guardians can contact info@devnome.com.

Streamling cannot know the age of a streamer's viewers. Streamers must follow each platform's rules about young audiences.

Security

We protect information with measures including encrypted connections, access controls, row-level security so each account can reach only its own data, keeping bot credentials on the server, and encrypting platform logins on your PC. No system is completely secure. If a personal-data breach is likely to affect you, we will notify you and the relevant authorities as the law requires. Please keep your password and your PC secure.

Messages from us

We send service messages such as email verification, password resets, billing, security and important changes to the Service. We send marketing emails only if you opt in, and you can unsubscribe at any time.

Third-party services

Twitch, YouTube and Google, Kick, Streamlabs, Discord, Paddle, OBS and GitHub have their own privacy policies, which apply when you use them. We are not responsible for their practices.

Changes to this Policy

We may update this Policy. If a change is material, we will tell you in the app or by email at least 30 days before it takes effect, unless the law requires it to take effect sooner. The date at the top shows the current version.

Contact

• DevNome (Pvt) Ltd, 381/B/3, Wijethunga Mawatha, Pilimathalawa, Sri Lanka.
• Email, for support, privacy and data requests, and security reports: info@devnome.com
• Data Protection Officer: Praveen Bandara, at the same email address