سياسة الخصوصية

Privacy Policy

Version 2026-09-13.1 · Updated 2026-09-13

1. Scope and controller

This policy explains processing of personal data across Astknan applications, its website and service dashboards. The service identifies its operator as Astknan, Ltd, Mosul, Iraq. Privacy enquiries: support@astknan.live. This policy applies to services actually available to you; describing an optional feature does not mean it is enabled for every account.

2. Data and sources

We process information you provide, such as display name, email, date of birth, profile, images, messages, support requests and reports. Sign-in providers supply an account identifier and authorised profile fields, not your password with that provider. Technical data includes IP address, device, operating system, app version, language, crash/security logs and notification tokens. Transaction data includes order identifiers, receipts, balances, and coin, gift and entitlement activity. Participants in host or agency earnings programmes also provide eligibility, settlement, beneficiary, bank and payment-evidence information as necessary. Do not send passwords, verification codes or full payment-card details to support.

3. Audio, content and visibility

Voice rooms require processing and transmitting speakers’ audio to participants, together with session and participation data needed for operation and safety. Content published on public profiles, rooms or posts is visible according to that space’s settings; messages are directed to conversation participants. Recipients may retain copies beyond our control. Processing live audio does not inherently mean creating a permanent recording. Any audio recording, storage or analysis function beyond the disclosed service requires specific notice and any required consent before use. We do not represent the service as end-to-end encrypted without technical verification.

4. Purposes and legal grounds

We use data to create accounts, provide communication, rooms and content, fulfil purchases and earnings programmes, offer support, prevent fraud, protect users and improve reliability. Where a legal basis is required, the relevant basis is performance of the agreement, legal obligation, legitimate interests balanced against your rights, or consent for processing that requires it. Accepting the terms is not blanket consent to tracking or marketing.

5. Providers and sharing

We use infrastructure, hosting, communications, notification, diagnostics, sign-in, billing and moderation providers according to enabled features. Project integrations include Apple, Google and Meta for sign-in or platform services, RevenueCat for purchase verification, Firebase for diagnostics, OneSignal for notifications, LiveKit for voice communications and Google Mobile Ads when advertising is enabled. Shared data depends on the provider’s function; disclosures must remain current when integrations change. Authorised reviewers receive only information needed for a report, support request or investigation. Disclosure may occur to authorities under legal obligations or in a business transfer with appropriate safeguards and notice. We do not sell your personal data.

6. Advertising and permissions

Microphone, camera, photo and notification permissions are requested as needed for a feature. You can manage permissions on your device; declining may disable the associated function. Microphone permission is not consent to tracking. Personalised advertising and tracking across companies’ services are subject to applicable consent, platform and legal requirements; choices can be changed through available privacy controls and device settings. The cookies policy follows applicable choices, with additional protection for minors.

7. Retention and deletion

Account data and content are retained as needed for the service; security and diagnostic records for defined protection and investigation needs; and transaction/settlement records for accounting, fraud prevention and disputes. This does not justify keeping all data indefinitely. Necessity is reviewed and data is deleted or de-identified when no longer needed. Account deletion stops access and initiates associated-data removal, subject to limited legal, dispute or safety exceptions. Backups may remain until their erasure cycle and are not used for new operational purposes. On request we explain retained categories, reasons and retention criteria. See the account deletion policy.

8. Rights, minors, transfers and security

The service is for people aged 15 or older, without an upper limit, subject to higher local restrictions and required permissions for minors. We address suspected underage accounts and requests to remove their data. Depending on law, you may request access, correction, deletion, portability, restriction or objection, withdraw consent and complain to the competent authority. We verify identity proportionately and respond within applicable legal deadlines without demanding unnecessary information. Data may be processed abroad where providers operate, using required safeguards. We use appropriate protection and access controls, cannot guarantee absolute security, and report breaches when required. We publish version dates, notify material changes and obtain renewed consent where necessary.