• Android via Google Play only. This document does not cover iOS, iPhone, App Store, Apple ID, or non-Android clients.

3. Eligibility & access model

• 18+; no age-gate or technical age verification beyond first-use age declaration.

• Registration and login required; Privacy Notice + Terms of Use (in-app acceptance).

• In-app purchases via Google Play; product types not specified here unless your product documentation does.

4. Data inventory

We process the following, consistent with our Data safety form:

1. Live video and audio session content processed through the service for calls — Provide HD video calls, routing, and synchronized messaging features — Required when you use live video or voice calling.

2. Chat messages and user-shared photos and videos (including emoji-related message content) — Operate instant messaging, media sharing, and community safety workflows — Required when you send messages or share media in chat.

3. Account identifiers and authentication-related data — Provide registration, sign-in, session integrity, fraud prevention, and account security — Required when you create or use an account.

4. In-app purchase and entitlement signals processed in the App — Deliver digital goods or features and reconcile entitlements with Google Play — Collected when you purchase or restore as applicable.

5. Usage events and diagnostics — Measure performance, troubleshoot issues, and improve product quality — Required.

6. Safety reports and block or report records you submit — Investigate abuse reports, enforce policies, and protect users — Optional; only when you use block or report flows.

5. Sharing matrix

We do not sell personal and sensitive user data.

Cloud Hosting / CDN: We share Photos and videos uploaded by users, Media file metadata, and Storage access related file metadata with Cloud Hosting / CDN providers to Store, deliver, and accelerate media content for core app features.

Content Moderation Service: We share User-uploaded photos and videos and Related moderation metadata with a Content Moderation Service to Detect and prevent illegal, abusive, or policy-violating content.

Analytics / Performance Monitoring: We share Usage events and Device and app diagnostics with Analytics / Performance Monitoring tools to Measure performance, troubleshoot issues, and improve product quality.

Google Play (payments): Google processes in-app payments; we receive entitlement-related data per Data safety.

6. Permissions

We request access only when needed for features:

• Camera: for live video sessions and related capture when you start a call or feature that uses the camera. Camera is not in the background for unrelated recording. You can revoke camera in Android settings.

• Microphone: for voice audio during calls. Microphone is not in the background for unrelated listening. Revoke in settings to disable audio features.

• Photos and videos (read; Android READ_MEDIA_IMAGES / READ_MEDIA_VIDEO or scoped access as applicable): to let you attach items from your library to chat. Photos access is not in the background for unrelated scanning.

• Photos and videos (write / MediaStore) when saving or sharing images or clips from the app: when you save or export content. Revoke write access in settings if you do not want saves.

Collection scope and wording align with our Data safety declarations and the permission prompts shown at runtime in your build. Exact permission labels, Android permission strings, and trigger screens must match your finalized Data safety and production dialogs; align with your product documentation if it differs.

7. Legal bases

Where GDPR or UK GDPR applies, we rely on legal bases that may include performance of a contract (calls, chat, account services, in-app purchases), legitimate interests (security, abuse prevention, product improvement), legal obligation, and consent where we ask for it. Where we rely on consent, you may withdraw consent without affecting prior lawful processing.

8. Transfers

We may process information in countries where we or providers operate. Where GDPR or UK GDPR requires safeguards for transfers, we use mechanisms such as standard contractual clauses where appropriate, plus technical and organizational measures to protect personal information.

9. Retention

We keep personal data only as long as needed for the purposes described, dispute handling, or legal requirements. Retention periods vary by data type: call and message content may be retained for operational delivery, safety review, and legal compliance; diagnostics may be retained in shorter rolling windows; account-related data follows the same principles. When no longer needed, we delete or irreversibly anonymize information consistent with operational constraints. You may request deletion where applicable by contacting us; we respond within 15 business days where required. Some records may be retained for transactions or legal duties, including Google Play purchases.

10. Security

We apply reasonable technical and organizational measures, including access controls and secure transmission practices. No method is perfectly secure; protect your device and credentials you use on it.

11. Rights & U.S. notices

Regardless of where you live, you have the right to know whether your personal data or personal information is shared with third parties. We explain what we share, with which types of recipients, and for what purposes in Section 5. Sharing matrix, consistent with our Google Play Data safety form. If you want confirmation or a plain-language summary of whether your data is shared beyond what is described here, email gibsonvanessa920@gmail.com and we will respond within 15 business days where we can verify and where applicable law requires.

Depending on law, you may have rights to access, delete, correct, port, restrict, or object, including where applicable the right to know whether your personal data is shared (see Section 5. Sharing matrix and Right to know (data sharing) above). Submit requests to gibsonvanessa920@gmail.com. We respond within 15 business days where applicable.

Request correction

You may request correction of inaccurate or incomplete personal data or personal information by emailing gibsonvanessa920@gmail.com.

California Consumer Privacy Act (CCPA) / CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA) may apply. You have the right to know whether we process your personal information, including sharing with third parties as described. Contact gibsonvanessa920@gmail.com.

You have the right to know whether we sell personal information; we do not sell personal information as defined under California law for this App, consistent with the no-sale statement in this policy. Where applicable, you may request to opt out of sale or certain sharing of personal information by emailing gibsonvanessa920@gmail.com with the subject line “California opt-out of sale or sharing.”

Under California law, sharing can include disclosures described in the specific definition under California law, including contexts related to cross-context behavioral advertising where applicable. Moki Live is a communication product; we describe sharing where Cloud Hosting / CDN, Content Moderation Service, and Analytics / Performance Monitoring providers assist us. To exercise right to know requests, email gibsonvanessa920@gmail.com; we respond within 15 business days where required.

Virginia Consumer Data Protection Act (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) may apply. How you can opt out:

• Targeted advertising: If we engaged in targeted advertising using your personal data, you may opt out by emailing gibsonvanessa920@gmail.com with subject line “Virginia targeted advertising opt-out.”

• Sale: We do not sell personal data under VCDPA. If practices change, email gibsonvanessa920@gmail.com with “Virginia sale opt-out.”

• Profiling: If we performed profiling producing legal or similarly significant effects, you may opt out by emailing gibsonvanessa920@gmail.com with “Virginia profiling opt-out.”

12. Children

The App is for users 18+ only. We do not operate an age-gate or technical age verification beyond the first-use age declaration you confirm in the app. We do not knowingly collect personal information from children below applicable thresholds.

13. Changes & contact

Policy may change; Last updated will reflect it. Privacy contact: gibsonvanessa920@gmail.com.

Additional operational detail

To keep personal data processing transparent for Google Play review, note that Usage events and Device and app diagnostics may include app version, device model, network quality indicators, and error logs to Measure performance, troubleshoot issues, and improve product quality. Photos and videos uploaded by users may traverse Cloud Hosting / CDN systems so we can Store, deliver, and accelerate media content for core app features. User-uploaded photos and videos may be reviewed through a Content Moderation Service using Related moderation metadata to Detect and prevent illegal, abusive, or policy-violating content. Storage access related file metadata may be processed when you attach media consistent with Android scoped storage rules. Chat messages and user-shared photos and videos (including emoji-related message content) remain subject to Operate instant messaging, media sharing, and community safety workflows and are Required when you send messages or share media in chat. Live video and audio session content processed through the service for calls remains Required when you use live video or voice calling to Provide HD video calls, routing, and synchronized messaging features. If you submit a report, Safety reports and block or report records you submit are Optional; only when you use block or report flows and support Investigate abuse reports, enforce policies, and protect users. In-app purchases use Google Play as described above.

Supplementary transparency for reviewers

This section reinforces how personal information maps to live features on Android distributed through Google Play. Moki Live - Live Video Chat combines real-time audiovisual sessions with rich messaging. When you participate in a live video or voice session, Live video and audio session content processed through the service for calls is processed to Provide HD video calls, routing, and synchronized messaging features and is Required when you use live video or voice calling. When you compose messages, Chat messages and user-shared photos and videos (including emoji-related message content) are processed to Operate instant messaging, media sharing, and community safety workflows and are Required when you send messages or share media in chat. Operational reliability relies on Usage events and diagnostics, which are Required to Measure performance, troubleshoot issues, and improve product quality. If you use block or report, Safety reports and block or report records you submit are Optional; only when you use block or report flows and help us Investigate abuse reports, enforce policies, and protect users.

Third parties assist under contracts: Cloud Hosting / CDN receives Photos and videos uploaded by users, Media file metadata, and Storage access related file metadata to Store, deliver, and accelerate media content for core app features. A Content Moderation Service processes User-uploaded photos and videos and Related moderation metadata to Detect and prevent illegal, abusive, or policy-violating content. Analytics / Performance Monitoring receives Usage events and Device and app diagnostics to Measure performance, troubleshoot issues, and improve product quality.

Permissions align with runtime prompts: Camera; Microphone; Photos and videos (read; Android READ_MEDIA_IMAGES / READ_MEDIA_VIDEO or scoped access as applicable); Photos and videos (write / MediaStore) when saving or sharing images or clips from the app. The App uses registration, sign-in, and in-app purchases via Google Play. Users must be 18+; we do not implement an age-gate or technical age verification beyond the first-use age declaration presented at onboarding.

For California residents, remember you have the right to know whether we process personal information, including sharing with third parties, and sharing may be understood under the specific definition under California law, including cross-context behavioral advertising where relevant. For Virginia residents, use the VCDPA opt-out paths described above for targeted advertising, sale of personal data, and profiling where applicable. You may request correction of inaccurate or incomplete personal data or personal information through the channels listed. Legal bases under GDPR/UK GDPR may include performance of a contract, legitimate interests, legal obligation, and consent (which you may withdraw). International processing may use safeguards such as standard contractual clauses where required.