This Privacy Policy describes how RealMaster Technology Inc., an Ontario, Canada corporation ("RealMaster", "we", "us", or "our"), collects, uses, discloses, and protects your personal information when you use the RealMaster Discover mobile application and related websites and services (collectively, the "Services").
For purposes of the EU/UK General Data Protection Regulation ("GDPR"), the data controller is RealMaster Technology Inc., with its principal place of business at 50 Acadia Avenue, Unit #130, Markham, Ontario L3R 0B3, Canada.
By using the Services, you acknowledge the practices described in this Policy. If you do not agree, please do not use the Services. This Policy should be read together with our Terms of Service, which governs your overall use of the Services.
| Category | Examples | Source |
|---|---|---|
| Account credentials | Email address, password (stored hashed with bcrypt), nickname | Registration |
| OAuth identifiers | Apple Sign In identifier (with email if shared), Google Sign In identifier and email | Apple / Google |
| Profile information | Display name, avatar image, optional bio | You |
| User-generated content | Video files, titles, descriptions, comments | You |
| Reports & feedback | Report content, recipient, your account ID; support tickets | You |
| Category | Examples |
|---|---|
| Device | Device type, OS version, app version, language & locale preferences |
| Usage | Videos viewed, watch time, search queries, interactions (likes, blocks, reports), session duration |
| Network | IP address, approximate region derived from IP (city-level at most; no precise GPS) |
| Diagnostics | Crash logs, performance metrics, error traces |
| Identifiers | Anonymous device identifier (used for fraud prevention and session continuity) |
We do not use third-party advertising SDKs or web tracking cookies that share identifiers with advertising networks. We do not engage in cross-site or cross-app tracking for advertising purposes.
We do not sell your personal information. We do not share your personal information with third parties for their own direct marketing purposes.
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing the Services you request (account, content delivery, support) | Performance of a contract (Art. 6(1)(b)) |
| Sending transactional emails, fraud prevention, security, analytics, service improvement | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations (e.g., responding to legal process) | Legal obligation (Art. 6(1)(c)) |
| Where we ask for your explicit consent (e.g., optional features) | Consent (Art. 6(1)(a)) |
We share information only as described below:
We retain personal information for as long as necessary to fulfill the purposes set out in this Policy. Specific retention practices:
| Category | Retention |
|---|---|
| Active account data (profile, videos, interactions) | For the duration of your account |
| Deleted account — primary records (profile, avatar, videos, likes, favorites, blocked list) | Permanently removed from active systems immediately upon account deletion |
| Deleted account — account snapshot (see Section 6.1 below) | Retained for as long as necessary and legally permissible for safety, accountability, abuse prevention, and legal compliance purposes |
| Encrypted backups and cached copies | May persist for a reasonable period until overwritten in the ordinary course of system operation |
| Crash and performance logs | Up to 180 days, then purged in the ordinary course |
| Server access logs (with IP) | Up to 90 days |
| Report records (when you report another user) | Retained indefinitely as immutable safety-audit records. Each report is evidence of a past moderation event and is retained to preserve moderator appeal history, support law-enforcement and child-safety inquiries, prevent abuse-of-deletion patterns, and otherwise fulfil the legal and public-safety grounds set out in GDPR Article 17(3)(e)(f) and equivalent provisions. Deleting your account does not remove reports you have filed; the reporter reference becomes a non-reversible identifier pointing to a deleted account. |
| Information subject to legal process, litigation hold, or specific legal retention obligations | For the period required by applicable law or until the legal matter is resolved |
When you delete your account through the App (Me → Edit Profile → Delete Account), we will permanently and immediately remove the following data from our active systems:
However, for the purposes of platform safety, abuse prevention, fraud detection, and compliance with legal obligations, we retain an account snapshot after deletion, for as long as necessary and legally permissible. This snapshot is stored in a separate, access-restricted system used only by our trust & safety, security, and legal teams. The snapshot includes:
We retain this snapshot to: (a) prevent the same individual from circumventing prior safety enforcement actions by creating a new account; (b) respond to law enforcement requests, subpoenas, or court orders relating to past activity; (c) defend against legal claims; and (d) maintain the integrity of our moderation and reporting records. The snapshot is not used for advertising, profiling, marketing, AI or machine-learning training, or any unrelated commercial purpose, and is not shared with third parties except as described in Section 5 (legal compliance) or Section 13 (international transfers).
If you have specific questions about the snapshot retained for your deleted account, or wish to exercise rights provided under applicable law (such as the right to erasure under GDPR), please contact us at rmd.support@realmaster.com. We will assess each request in accordance with applicable law, including whether continued retention is necessary for legal obligations, the establishment, exercise, or defense of legal claims, fraud and abuse prevention, platform safety, or other permitted grounds.
We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. These include encrypted transport (HTTPS/TLS), encryption of sensitive credentials at rest, role-based access controls, regular security reviews, and logging of administrative actions.
No system is perfectly secure. You are responsible for keeping your account credentials confidential and notifying us promptly at rmd.support@realmaster.com if you suspect unauthorized access. In the event of a personal data breach affecting your information, we will notify you and the relevant authorities as required by applicable law.
Subject to applicable law, you have the following rights regarding your personal information:
You can exercise most of these rights directly within the App:
To submit a formal request to access, correct, delete, or otherwise exercise rights over your personal information beyond what is available in-app, please email rmd.support@realmaster.com with the subject line "DSAR — [your request type]" and include:
We will respond to verifiable requests within the timeframe required by applicable law (typically 30 days under GDPR, extendable by 60 days for complex requests; 45 days under CCPA, extendable by 45 days). We will not charge a fee for the first request in a 12-month period unless the request is manifestly unfounded or excessive.
The Services are not directed to children under 13 years old, and we do not knowingly collect personal information from children under 13 within the meaning of the United States Children's Online Privacy Protection Act ("COPPA"). If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly.
If you are a parent or legal guardian and believe your child under 13 has provided us with personal information, please contact rmd.support@realmaster.com and we will take prompt action to investigate and delete the information.
For users between the ages of 13 and the age of majority in their jurisdiction (typically 18 or 19), use of the Services should be supervised by a parent or legal guardian.
If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act ("CCPA/CPRA"):
To exercise these rights, follow the DSAR procedure in Section 9. Authorized agents may submit requests on your behalf with written authorization that we may verify.
Categories collected in the past 12 months are described in Section 2. Purposes of collection are described in Section 3. Categories of recipients are described in Section 5.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, the legal bases for our processing are described in Section 4 and your rights are described in Section 8. You also have the right to lodge a complaint with your local supervisory authority (a list is available at edpb.europa.eu/about-edpb/board/members_en).
Where we transfer personal information outside the EEA / UK / Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms recognized under applicable law.
If you are located in Canada, our processing of your personal information is subject to the Personal Information Protection and Electronic Documents Act ("PIPEDA") and applicable provincial privacy laws. You have the right to access and correct your personal information and to withdraw consent (subject to legal or contractual restrictions) by contacting rmd.support@realmaster.com. Complaints may be filed with the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Your information may be stored and processed in countries outside your country of residence, including Canada and the United States. These countries may have data protection laws that differ from those of your country. By using the Services, you understand that your information will be transferred to and processed in these countries, subject to the safeguards described in this Policy.
We may update this Privacy Policy from time to time. For material changes we will use reasonable efforts to notify you in advance by in-app notice or email, ordinarily at least 30 days beforehand, except where a shorter notice period is necessary to address security, legal, regulatory, or operational concerns. The "Effective Date" at the top of this Policy indicates the latest revision. Continued use of the Services after the effective date constitutes acceptance.
For questions, requests, or concerns about this Privacy Policy or our data practices, please contact:
RealMaster Technology Inc.
Email: rmd.support@realmaster.com
Telephone: +1-647-931-3331
Mailing address: 50 Acadia Avenue, Unit #130, Markham, Ontario L3R 0B3, Canada