Privacy Policy

FUHH.IO is operated by Tiercast Pte Ltd, a company incorporated in Singapore (“FUHH.IO”, “we”, “us”). This policy explains what personal data we collect when you visit fuhh.io or use our services, how we use it, who we share it with, and the choices you have. We handle personal data in line with Singapore's Personal Data Protection Act 2012 (“PDPA”).

We do not sell your personal data, and we do not use it for third-party advertising.

Account information. Your email address, username, password (stored only as a one-way hash), and, if you add them, your phone number, display name, bio, profile photo and banner image.

If you sign in with another service. When you choose Google, Apple, Facebook or TikTok, that service shares a few details with us with your permission:

• Google: your account ID, name and email address, and whether the email is verified.
• Apple: your account ID, email address (which may be an Apple private relay address if you choose “Hide My Email”) and, the first time only, your name.
• Facebook: your account ID, name and email address (the public_profile and email permissions). We do not access your friends, posts or photos.
• TikTok: your account ID and display name. TikTok does not share an email address, so we ask you for one.

We use these details only to sign you in, link the sign-in to your FUHH.IO account and suggest a username. We do not post to these services on your behalf.

Content you create. Posts (photos and videos, captions and the covers you design for them), comments, likes, follows, gifts you send or receive, and messages you send in livestream chats.

Verified Creator information. If you apply to become a Verified Creator, we collect the identity document you choose (national ID or passport), images of its front and back, and a selfie holding it, so we can confirm who you are. To pay out your earnings we collect your bank details: account holder name, address, country, citizenship, phone number, bank name and address, account number, branch or bank code and SWIFT code.

Payments. Coin purchases are processed by Stripe. Your full card number is entered directly into Stripe's secure form and never reaches our servers. Stripe sends us payment records, such as the amount, the card brand and last four digits, and a receipt link.

Livestreams and Promo Streams. When you go live, your camera and microphone are streamed through our streaming provider, and we keep snapshot images of the stream as thumbnails. If you run a Promo Stream to another platform, we keep the stream URL you enter; the stream key is used only to start the broadcast and is not stored in our database.

Technical information. Like most websites, our servers record your IP address, browser type and the requests you make, for security, rate-limiting and troubleshooting. We also record when you last signed in and were active.

Messages with us. If you email us, we keep the correspondence so we can help you.

• To create and run your account, sign you in and keep you signed in.
• To show your posts, profile and livestreams, and to make features like likes, comments, follows, gifts and reveals work.
• To verify Verified Creators, process coin purchases, and pay out earnings.
• To send you service emails, such as verification codes, security notices and withdrawal confirmations.
• To keep FUHH.IO safe: preventing fraud, spam and abuse, enforcing our Terms, and responding to reports.
• To fix problems and improve the service.
• To meet legal obligations, such as keeping financial records and responding to lawful requests.

FUHH.IO is a public platform. Anyone, including people who are not signed in, can see your username, display name, profile photo, banner, bio, published posts (as covered until they are unveiled), comments, like counts and your livestreams and their chat. Drafts are visible only to you.

Your email address, phone number, identity documents, bank details and payment records are never shown publicly.

We share personal data only with service providers that help us run FUHH.IO, and only what they need to do their job:

• Amazon Web Services (hosting, database and file storage).
• Stripe (payment processing).
• BytePlus (livestream broadcasting and playback).
• Our email provider (sending service emails).
• Our AI providers, only when a creator uses AI Unveil (see below).
• Snap (Camera Kit), which provides the camera lenses a Verified Creator can apply to their own stream.
• Google, Apple, Facebook and TikTok, only when you choose to sign in with them.

When you run a Promo Stream, the stream is sent to the platform you choose (for example Instagram, TikTok, YouTube or Facebook) and is then covered by that platform's terms.

We may also disclose information if the law requires it, to protect the rights, safety or property of our users or others, or as part of a merger, acquisition or sale of our business, in which case this policy will continue to apply to your data.

Some features of the Site, such as AI Unveil, use artificial intelligence (“AI”) services provided by third parties. When a creator uses AI Unveil, FUHH.IO sends the following to our AI service providers so they can suggest and generate covers:

• a reduced-size copy of the photo the creator is editing (about 1024 pixels on its longest side, never the original file);
• the creator's chat messages in AI Unveil and the cover settings being discussed; and
• text descriptions the creator asks to turn into a shape or artwork.

This content is sent only while a creator is working on a draft in AI Unveil. Content from viewers is not sent. Shapes and artwork the AI generates are stored on FUHH.IO's own servers.

Our AI provider is currently OpenRouter (openrouter.ai), which routes these requests to Google's Gemini models. The providers process this content under their own terms and privacy policies, and may be located outside your country. We may change providers; this section will name the providers in use.

Using AI Unveil is optional. Creators who prefer that their photos are not processed by AI providers can create covers with the standard upload flow, which does not send photos to any AI provider.

We use cookies to keep you signed in: a short-lived access cookie (about 30 minutes) and a refresh cookie (up to 30 days). They cannot be read by scripts on the page. While you're signed in we also set fuhh_signed_in, which only says that you are signed in, so fuhh.io can open Explore for you instead of the welcome page. It holds no account details, can't sign anyone in, lasts up to 30 days and is removed when you sign out. We also set one first-party cookie, fuhh_vid, holding a random visitor ID for up to a year. We use it to count visits to Posts and Creator Pages so creators can see their stats, and visits to fuhh's welcome page so we can improve it. It is never shared with third parties or used for advertising. We do not use third-party analytics or advertising cookies.

Your browser's local storage also keeps a random device identifier and a few display preferences (such as your theme and whether you have dismissed a tip), so the site works as you left it. Your browser also remembers, for up to 7 days, which shared link, Creator Page or fuhh.io button brought you here, so that if you sign up we can credit whoever referred you. You can clear these at any time in your browser settings.

Our servers and databases are hosted by Amazon Web Services in Singapore. Some of our providers (such as Stripe, our AI providers and the sign-in services) may process data in other countries. When data leaves Singapore, we take steps to make sure it receives protection comparable to the PDPA, for example through the provider's contractual commitments.

• Account information and content: for as long as your account is open, and until we delete it after you ask us to.
• Livestream chat messages: they are not saved permanently and are cleared about an hour after the stream goes quiet.
• Server logs: about 14 days.
• Identity verification and bank details: for as long as you are a Verified Creator, and afterwards only as long as we need them to meet legal, tax and anti-fraud obligations.
• Payment and payout records: as long as the law requires us to keep financial records.

You can view and update most of your account information in your profile settings. You may also ask us to:

• tell you what personal data we hold about you and how it has been used or disclosed in the past year;
• correct personal data that is wrong or incomplete;
• withdraw your consent to our use of your data (some features, or your account, may then stop working); or
• delete your account and personal data.

Email dpo@fuhh.io from the address on your account. We will reply within 30 days. If you signed in with Google, Apple, Facebook or TikTok, you can also remove FUHH.IO's access in that service's settings.

To delete your account and personal data, including data we received through Facebook or another sign-in service, follow the steps on our data deletion page. We close the account and delete your personal data within 30 days, except records we must keep by law (such as payment records).

We protect your data with encrypted connections (HTTPS), hashed passwords, sign-in cookies that scripts cannot read, and private storage for identity documents and original uploads. No service can be perfectly secure, so please use a strong, unique password and tell us at info@fuhh.io if you notice anything suspicious.

FUHH.IO is only for people who are at least 18 years old, or the age of majority where they live if that is higher. We do not knowingly collect personal data from anyone younger. If you believe someone under 18 has an account, contact us and we will remove it.

We may update this policy as FUHH.IO changes. We will change the effective date above and, for significant changes, tell you by email or on the site before they take effect.

For any question or request about your personal data, contact our Data Protection Officer at dpo@fuhh.io.

Tiercast Pte Ltd, Singapore.