Trust & safety.
DubCam is built for athletes, parents, and youth programs to trust. This page lays out how we protect your account, your data, your payments, and your community.
Account & data
Encryption everywhere
Data is encrypted in transit (TLS 1.2+) and at rest. Stream segments and replay assets live on AWS infrastructure with industry-standard encryption.
Identity & auth
Accounts are managed via AWS Cognito with secure password hashing and optional sign-in with Apple. Sessions auto-expire and revoke on password change.
Data you can delete
You can delete your account from inside the app or via the web. Personal data is purged within 30 days; financial records retain only what's required by tax law.
What we collect
Only what we need to run the product: account info, your content, basic device/usage data for security and reliability. Read the full Privacy Policy.
Payments & payouts
Subscription payments are processed by Stripe and Apple's in-app purchase system. We never see or store your card numbers. Creator payouts are handled through Stripe Connect — same infrastructure used by Shopify, Lyft, and DoorDash for marketplace payouts.
- Stripe handles compliance. PCI DSS, KYC, and tax form generation (1099-K) are managed by Stripe.
- Bank info is direct. When you link a bank account for payouts, it goes straight to Stripe — we never touch it.
- Refunds & disputes follow Stripe's standard process. Email info@dubcam.tv if a fan disputes a charge.
Content safety
Creator approval
Every creator is reviewed before they can go live. Most approvals take 24–48 hours; team and program accounts onboarded through concierge are typically same-day.
Moderation
Live streams and replays are monitored. Reports are triaged by a human moderation team. Severe violations (child safety, threats of violence) trigger immediate intervention.
Community Guidelines
The full rulebook lives at /community-guidelines/. It covers what's allowed, what isn't, special rules for youth athletes, and how appeals work.
Youth athlete protections
- Creator accounts associated with athletes under 18 have direct messaging disabled.
- Coaches and program directors verify parental consent for minors on team accounts.
- Streams featuring minors must focus on athletics — no private-residence settings.
- Personal information about minors (full name, school, home address) is not collected from fans or required for subscription.
Responsible disclosure
If you believe you've found a security vulnerability, please email info@dubcam.tv with details and proof-of-concept where possible.
- We acknowledge reports within 48 hours.
- We don't pursue legal action against good-faith researchers who follow standard responsible-disclosure practices (no data exfiltration, no service disruption, no exploitation beyond what's needed to demonstrate the issue).
- We credit reporters publicly on request.
Out of scope: rate-limit testing on production, denial-of-service, social-engineering of staff, physical attacks.
Compliance & regulators
DubCam is operated in the United States. We comply with applicable US laws including COPPA (for users under 13), CCPA (California residents), and standard tax-reporting obligations for creator payouts. International users: data may be processed in the United States.
Contact
Safety reports, security disclosures, and privacy / data rights: info@dubcam.tv.