Last updated 28 August 2026
The short version
Crix collects nothing. There is no Crix account, no sign-up, no analytics, no advertising and no third-party tracking libraries in the app. Your video, your audio and your settings stay on your phone or go directly to the streaming service you chose. We never receive them and could not read them if we wanted to.
Crix is a tool for publishing to your accounts on other people's services. When you stream to YouTube or Facebook, what happens to that broadcast is governed by their privacy policies, not this one.
What the app does with your data
| Data | Where it goes |
|---|---|
| Camera and microphone | Encoded on the phone and sent directly to the streaming destination you selected — YouTube, Facebook, or an RTMP server whose address you typed in. It is never sent to us and never stored by the app. Capture only runs while you have the viewfinder open, and publishing only starts when you press GO LIVE. |
| Your overlay link | Stored on your phone. The app loads that page directly from whoever hosts it — your scoring provider — exactly as a web browser would. That provider will see the request, including your IP address, on their own terms. We are not involved in that connection. |
| YouTube and Facebook sign-in | Access tokens are stored in the app's private storage on your phone, which other apps cannot read. They are used only to create and end your broadcasts. They are never transmitted to us. |
| Your settings and club badge | Overlay preferences, corner-bug choice, stream quality and any image you upload as a badge are stored only on the phone. Uninstalling removes them. |
| RTMP server and stream key | If you use a custom destination, the server and key you type are stored in the app's private storage and used only to publish your stream. |
YouTube API Services
Crix uses YouTube API Services to create and manage the live broadcasts you start on your own YouTube channel. By using that part of the app you are also agreeing to the YouTube Terms of Service, and Google's handling of any information it receives is described in the Google Privacy Policy.
What Crix accesses. With your permission, and only for the account you sign in with, Crix reads your channel's name so it can show you where the stream is going, and creates, starts, ends and deletes the live broadcasts you ask it to. It never reads, searches or displays any other YouTube data, and never touches a channel other than your own.
What Crix stores. The access token Google issues is kept in the app's private storage on your phone, which other apps cannot read, along with the id of the single reusable ingest stream so a new one is not created for every match. None of it is sent to us — we operate no server that receives YouTube data.
Revoking access. Signing out on the Go live screen deletes the stored token immediately, and uninstalling Crix removes it with everything else. You can also revoke Crix's access to your Google account at any time at security.google.com/settings/security/permissions.
The Facebook sign-in helper
Facebook's sign-in requires an application secret to complete, and a secret
cannot safely live inside a mobile app — it can be extracted from the installed
package. Crix therefore uses a small server of ours (a Cloudflare Worker at
crix-auth.aftab-php.workers.dev) to finish that one step.
- It is contacted only at the moment you link a Facebook account, and never again.
- It receives a temporary authorisation code from Facebook, exchanges it for your access token, and hands that token straight back to your phone.
- It has no database and no storage attached. It writes nothing down. Your token exists in its memory for the duration of a single request.
- It never sees video, audio, scores, your overlay link, or anything about your matches.
- As with any internet server, our hosting provider (Cloudflare) processes connection metadata such as IP addresses transiently for security and abuse-prevention purposes. We do not access, retain or analyse it.
Signing in to YouTube needs no such helper and contacts only Google.
Subscriptions and payment
We never see your payment details. Crix Pro is sold through Google Play, and Google handles the entire transaction — card details, billing address and taxes never reach us and are never stored by the app.
To know whether to unlock broadcasting, the app asks Google Play whether this device has an active subscription. That answer is used in memory and is never written to disk, so it cannot go stale or be tampered with. We receive no report of who has subscribed.
What we do not do
- No analytics or usage measurement of any kind.
- No advertising, and no advertising identifiers.
- No crash or diagnostic reporting to us.
- No third-party SDKs. Crix does not include the Meta SDK, the Google Sign-In SDK, or any analytics library.
- No selling or sharing of personal information. There is none to sell.
- No profiles, no cross-app tracking, no location collection.
Permissions, and why
| Permission | Why Crix asks |
|---|---|
| Camera | To film the match. Required. |
| Microphone | To carry ground sound and commentary. Required; you can mute it in the app. |
| Internet | To publish the stream and load your overlay page. |
| Notifications | To show an ongoing "Crix is live" notice while broadcasting. Optional. |
| Foreground service (camera, microphone) | So Android does not shut the app down part-way through a match. Crix never captures while the viewfinder is closed. |
| Photos (when you choose one) | Only when you pick a club badge. Crix reads the single image you select and copies it into its own storage. |
Children
Crix is not directed at children and is not intended for use by anyone under 13. We do not knowingly collect information from children — we do not knowingly collect information from anyone.
Removing your data
- In the app: sign out of YouTube or Facebook on the Go live screen to delete the stored tokens; "Forget this destination" clears a saved RTMP server and key.
- Uninstalling Crix removes everything it stored, since it is all on the device.
- Revoking access at the source is always available: Google at myaccount.google.com/permissions, Facebook under Settings → Apps and Websites.
- There is no server-side data of yours for us to delete, because we hold none. If you would like that confirmed in writing, email us.
Changes
If this policy changes we will update this page and the date at the top. A change that meaningfully affects what the app does with your data will also be described in the app's release notes.
Contact
Questions about privacy: privacy@aftrix.com. Anything else: support@aftrix.com.