Privacy Policy

1. Scope and responsible organization

This Privacy Policy explains how Star Billion Engineering Limited, which publishes AsAce on Google Play under the developer name THRIVING HK ("AsAce," "we," "us," or "our"), accesses, collects, uses, discloses, retains, and deletes personal information.

It applies to the AsAce Android application, the policy pages hosted at riyete.app/asace, customer support, account administration, safety review, and related operations. Star Billion Engineering Limited is the controller where applicable law uses that term. Independent services are governed by their own notices.

2. Adult access and age information

AsAce is intended only for people aged 18 or older. We may handle an age declaration, birth-date or eligibility response, account history, and limited verification signals to apply the age restriction, investigate suspected minor access, and comply with law or platform requirements. A minor must not create or use an AsAce account.

An age gate reduces risk but cannot guarantee that every person states their age accurately. When we reasonably suspect minor access, we may limit features, request reasonable verification, preserve safety records, and close the account.

3. Information we handle

Account and profile

Depending on the available login method and the choices you make, this can include a user or profile ID, email address or phone number, authentication data, display name, age declaration, gender, language, region, profile image, biography, interests, preferences, settings, and account-recovery information.

Messages, media, and calls

We process information you create or exchange through AsAce, including profile material, text, selected photos or videos, voice messages, support correspondence, and reports. Content you direct to another user is made available to that user.

For a user-initiated one-to-one audio or video session, live media is technically processed so the participants can communicate. We may also process participant identifiers, connection times, duration, network quality, call events, and diagnostic signals. Recipients may preserve communications with tools outside AsAce, so users should make careful sharing choices.

Device, network, and activity

We and providers acting for us may process an IP address, app or device identifiers, device model, operating system, app version, language, time zone, network type, connection quality, access times, feature interactions, screens viewed, reports, blocks, crash details, diagnostics, security events, and approximate location derived from an IP address.

Advertising and purchase records

Where advertising is enabled and legally permitted, limited device data, the Android Advertising ID, approximate location, and ad interactions may be used to deliver, limit, secure, and measure contextual or personalized advertising. Available consent and opt-out controls depend on region and device settings.

Google Play processes payment credentials. We do not receive a complete card number or your Google account password. We may receive a product identifier, order or transaction ID, purchase time, country, currency, price, entitlement, refund status, and purchase status so we can deliver and administer a digital item.

Support, reports, and safety review

When you contact support, report a user, block an account, or appeal a decision, we process the request and relevant context. That context can include account, content, message, call-metadata, device, network, and enforcement information reasonably needed to assess fraud, harassment, impersonation, non-consensual content, child sexual abuse and exploitation, or another violation.

4. Android permissions and user choices

AsAce requests optional Android permissions in context. You may deny or revoke them through Android settings, although the related feature may then be unavailable.

We do not use camera or microphone content to select advertising. These sensors are not intentionally activated unless you are using a call, voice-message, or capture feature that requires them.

5. Why we use information

• create, authenticate, recover, maintain, and protect an account;
• provide profiles, discovery, messaging, media sharing, voice messages, and one-to-one audio or video communication;
• deliver digital items or paid access and maintain account-bound entitlements;
• operate advertising, analytics, language, and recommendation features where permitted;
• diagnose failures, measure performance, improve reliability, and understand feature use;
• detect spam, fake accounts, scams, harassment, fraud, exploitation, illegal content, and security threats;
• review reports and appeals and enforce the Terms of Use and Child Safety Policy;
• send service, security, support, transaction, and policy communications; and
• comply with applicable law, valid legal process, reporting duties, and legal claims.

Where a legal basis is required, the basis may include performance of our contract, consent, legitimate interests in operating and securing AsAce, compliance with legal duties, and protection of vital interests in an emergency. The basis depends on the activity and applicable law. Withdrawal of consent applies prospectively and does not invalidate earlier lawful processing.

6. When information is disclosed

We may disclose relevant information:

• to another user when you choose to share a profile, message, media item, or call with that person;
• to providers supporting hosting, authentication, messaging, real-time communication, content delivery, moderation, analytics, support, security, fraud prevention, and service communications;
• to Google Play and payment partners for app distribution, purchases, entitlements, refunds, and fraud prevention;
• to advertising and measurement partners where advertising is enabled, subject to applicable consent and opt-out requirements;
• to authorities or qualified safety organizations when required by law or reasonably necessary to address valid legal process, illegal content, or an imminent risk of serious harm; and
• as part of a financing, merger, restructuring, acquisition, or transfer, subject to appropriate confidentiality and legal safeguards.

We do not sell personal information for monetary payment. Some privacy laws may classify particular advertising disclosures as a sale, sharing, or targeted advertising. Eligible users may use available controls or contact us to exercise an applicable opt-out right.

7. International processing

AsAce and its service providers may process information in more than one country. Privacy protections can differ from those in your country. Where required, we use contractual or other legally recognized transfer safeguards and apply protections appropriate to the information and risk.

8. Retention and account deletion

We retain information only for as long as reasonably needed for the purpose for which it was collected, considering account status, safety, disputes, legal duties, and controlled backup cycles. Account and profile data generally remain while an account is active. User content and communications are retained as needed to provide the selected feature and respond to deletion choices.

Transaction, tax, accounting, refund, and chargeback records may be retained for the period required by applicable law, which can be up to seven years in some jurisdictions. Safety, fraud-prevention, report, enforcement, and security records may remain for as long as reasonably needed to protect users, prevent repeat abuse, resolve disputes, and comply with law. Isolated backups are overwritten on a controlled cycle. De-identified information may be retained when it no longer reasonably identifies a person.

AsAce offers an in-app deletion path and an external email method. The AsAce Account Deletion page explains the steps, verification, processing time, deletion scope, and limited retention exceptions. Suspending or disabling an account is not treated as deleting it.

9. Security

We use administrative, technical, and organizational measures designed to protect information, including access restrictions, encryption in transit, logging, monitoring, provider review, and incident-response procedures. No online service can promise complete security. Keep account credentials confidential, secure your device, and notify us if you suspect unauthorized access.

10. Controls and privacy rights

You can edit available profile and communication settings, revoke Android permissions, reset or delete the Advertising ID through device settings, report or block users, and request account deletion.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, an advertising opt-out, or review of a denied request. We may take proportionate steps to verify identity and may limit a request where applicable law permits, including to protect another person's rights or preserve safety evidence. You may also complain to an applicable privacy authority.

11. Children and child safety

AsAce is not directed to children and does not permit a person under 18 to create or use an account. If we learn of minor access, we may restrict or close the account and delete associated information, subject to child-safety, mandatory reporting, evidence-preservation, and other legal duties.

Our public Child Safety Policy explains prohibited child sexual abuse and exploitation, in-app reporting and blocking, review, enforcement, cooperation with authorities, and the designated contact.

12. Policy updates

We may revise this Policy when AsAce, our providers, our safety practices, or applicable law changes. The current page will show its effective date. Material changes will receive additional notice where required.

13. Contact

For privacy questions or requests, contact: