Last updated:
This policy covers the GalaSpo Football Streamer iOS app. It's written to describe plainly what the app actually does, not as boilerplate — if anything here is unclear, reach out.
GalaSpo Football Streamer connects to your YouTube channel through Google's own sign-in so it can create, schedule, and manage the live broadcasts you start from the app, and read basic channel/broadcast info needed to do that. The app requests YouTube account access for this purpose only.
Your video stream goes directly to YouTube. GalaSpo does not operate a relay server that the broadcast passes through, and does not separately record or store a copy of your stream.
You can revoke this access at any time from your Google Account permissions page.
All communication between the app and Google's/YouTube's servers is made over HTTPS/TLS — nothing is sent in the clear.
Your OAuth access and refresh tokens — the credentials that let the
app act on your YouTube channel — are stored exclusively in Apple's
iOS Keychain, never in plain app storage, UserDefaults,
or unencrypted device backups. Keychain items are encrypted at rest
by the device's hardware, are scoped to this app only (no other app
on the device can read them), and are set to unlock only after the
device has been unlocked at least once since restart. GalaSpo does
not operate a server of its own that receives, stores, or has access
to these tokens, your channel data, or your stream content — the app
talks directly, device-to-Google, and nothing YouTube-related passes
through or is retained on infrastructure we control.
Because YouTube account access is a sensitive/restricted scope, GalaSpo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: this data is used only to provide the live-broadcast features described above, is never used for serving ads, and is never sold, shared, or transferred to third parties.
Deleting the app removes these Keychain-stored tokens along with everything else stored locally — see Data deletion below — and you can revoke access at any time from your Google Account, as noted above.
Match setup — team names, colors, logos, schedule details, and your streaming preferences (resolution, frame rate) — is stored locally on your device and, where it's part of a scheduled broadcast, in your own YouTube account's broadcast data. GalaSpo does not run its own backend database of your matches, teams, or viewers.
GalaSpo Football Streamer is commonly used to broadcast youth sports. The app itself is used by the adult operating it (a parent, coach, or volunteer) — it is not directed at or used by children. Because the resulting broadcast may include footage of minors, whoever operates the stream is responsible for that broadcast's visibility settings (Public, Unlisted, or Private) on YouTube and for following their league's or organization's own policies around filming and publishing video of youth participants.
YouTube also has its own rules around live streams involving minors, which can vary by country based on local law — covered in our Terms of Service and, in full, on YouTube's child safety policy page. In practice, an adult-operated broadcast of a game (wide shots of a sporting event, not close/personal shots of individual children) is treated very differently than a minor's personal stream — but it's still worth avoiding narration or close-ups that reveal a child's full name, school, or routine, and moderating live chat during the broadcast.
Uninstalling the app removes everything stored locally on your device. Revoking access from your Google Account (link above) removes GalaSpo's access to your YouTube account. To request removal of anything else, contact us.
If this policy changes in a meaningful way, the "last updated" date above will change along with it.
Questions about this policy: see the Support page.