Privacy Policy

Last updated: July 26, 2026

1. Introduction

Bondcast is an Android app that streams video and audio from your phone's camera to a server of your choice: your own Bondcast Stream server, any other SRT server, or straight to Twitch. This policy is maintained by the app's developer (i30mb1).

2. The short version

Bondcast has no cloud of its own, and the developer does not collect data on any server they operate. Video and audio from your camera and microphone go directly to whatever destination you configured, bypassing the developer entirely. The app contains no ads, no analytics, and no trackers.

3. Permissions the app requests

• Camera, microphone — to capture the video and audio for your stream.
• Network state / change network state — to stream over Wi-Fi and mobile data at the same time (bonding) and keep going on whichever link is still up if one drops.
• Foreground service, notifications, wake lock — so the stream keeps running with the screen off or the app in the background.
• USB — optional, for connecting an external USB camera.

None of these permissions are used to collect data about you — they exist solely to keep the stream itself running.

4. Where your stream goes

You set the server address yourself — either by hand or by scanning a QR code from your own Bondcast Stream dashboard. Video and audio travel over SRT/SRTLA (or RTMP, when streaming straight to Twitch) directly to that address. There is no server operated by the developer that your stream passes through or is stored on.

5. Signing in with Twitch (optional)

The on-screen chat overlay, the chatter list, and one-tap stream-key fill-in only work if you choose to sign in with Twitch. Sign-in uses the Device Code Flow — the app never sees your Twitch password. The scopes it requests are:

• user:read:chat — read your channel's chat;
• moderator:read:chatters — see who's currently in chat;
• channel:read:stream_key — fill in your stream key with one tap for direct-to-Twitch streaming.

The access and refresh tokens are stored on your phone encrypted (AES/GCM, with the key held in the Android Keystore) and are never sent anywhere except to Twitch itself. Chat messages and the chatter list are fetched live from Twitch to display over your camera feed — the app does not store or forward them anywhere. You can revoke access at any time, either by signing out in the app's settings or from your Twitch account settings.

6. Local settings

App settings (server address, bitrate, which features are enabled, and so on) are stored locally on your phone and are never sent anywhere.

7. Third-party services

The app uses no ad networks, analytics, or crash-reporting services. The only third party it may exchange data with is Twitch, and only if you choose to sign in with Twitch. Twitch's privacy policy: twitch.tv/p/legal/privacy-notice.

8. Security

Your Twitch token is stored encrypted on your device. You can protect the connection to your streaming server with a password (SRT passphrase), so only someone who knows it can connect.

9. Children's privacy

The app is not intended for children under 13, and it does not knowingly collect information from them.

10. Changes to this policy

If this policy changes, the "Last updated" date at the top of the page will be updated accordingly.

11. Contact

For questions about this policy: fate.i30mb1@gmail.com, or via the GitHub repository: github.com/i30mb1/Bondcast.