Privacy Policy

2.1 Authentication Information: When you create an account, we collect authentication information through our third-party authentication provider (Logto), including:

• Email address
• Password (stored securely and hashed)
• Social authentication data (if you choose to sign in with a social provider)

2.2 Server Information: When you connect your Jellyfin server, we collect:

• Server ID (UUID)
• API key hash (for secure authentication with your server)
• Server registration timestamp
• Last seen timestamp

2.3 User Information: For each user on your Jellyfin server, we collect:

• User ID (UUID, scoped to your server)
• Username (from your Jellyfin server, optional)
• Account creation timestamp
• Last active timestamp

2.4 Viewing Data (Engagement): We collect aggregated viewing information to provide recommendations:

• Total watch seconds per media item
• Play count per media item
• Completion ratio (0.0-1.0)
• Last played timestamp

Note: We never transmit raw playback events from your Jellyfin server. The sidecar container aggregates engagement signals locally before sending them to our service.

2.5 Preferences: We collect your explicit preferences:

• Ratings (1-5 stars) for media items you've watched
• Interest flags (items marked as interested or not interested)
• Rating timestamps

2.6 Library Information: We collect information about content in your Jellyfin library:

• Media items present in your library
• First seen and last seen timestamps for library items

This information is used to exclude owned content from recommendations and detect library changes.

2.7 Generated Data: Our service generates the following data:

• Personalized recommendations with scores and rankings
• Recommendation explanations (genre preferences, similar content, signal weights)
• User taste profiles (vector embeddings representing your preferences)
• Profile source data (which items contributed to your taste profile)

We use the information we collect solely for the purpose of providing and improving our recommendation service:

• To generate personalized content recommendations
• To build and maintain your taste profile
• To provide explanations for recommendations
• To improve our recommendation algorithms
• To authenticate and secure your account
• To communicate with you about your account and service updates
• To provide customer support
• To detect and prevent fraud or abuse

We do not use your data for advertising, marketing to third parties, or any purpose other than providing the recommendation service.

4.1 We Do Not Sell Your Data: We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is used exclusively to provide the recommendation service.

4.2 Third-Party Service Providers: We may share your information with trusted third-party service providers who assist us in operating our service, including:

• Logto: For user authentication and account management. Logto's privacy practices are governed by their own privacy policy.
• Payment Processors: For processing subscription payments. Payment information is handled by our payment processor and is not stored by us.
• Hosting Providers: For hosting our infrastructure and databases.

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements: We may disclose your information if required by law or in response to valid legal requests, such as court orders or subpoenas.

4.4 Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.

5.1 Retention Period: We retain your information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements.

5.2 Deletion: When you delete your account, we will delete or anonymize your personal information in accordance with our data deletion procedures. This includes:

• All user data (user IDs, usernames)
• All engagement data (watch history, play counts)
• All preference data (ratings, interests)
• All user profiles and taste embeddings
• All recommendations and explanations
• All library association data

5.3 Server Deletion: When a server is deleted, all associated user data, engagement, preferences, and library data is removed. Canonical media item metadata (not specific to your server) remains intact in our catalog.

6.1 Data Deletion: You have the right to delete your account and all associated data at any time. You can do this through your account settings or by contacting support. When you delete your account:

• All your personal data is permanently deleted
• All engagement data is removed
• All preferences (ratings, interests) are deleted
• Your user profile and taste embeddings are destroyed
• All recommendations associated with your account are removed

Deletion is irreversible. Once your data is deleted, it cannot be recovered.

6.2 Data Export: You can export your recommendations, ratings, and watch history data from your account settings. This allows you to take your data with you if you choose to stop using the service.

6.3 Access and Correction: You can access and update your account information at any time through your account settings. You can also request a copy of your personal data by contacting support.

6.4 Opt-Out: You can stop using the service and delete your account at any time. You can also disconnect your Jellyfin server to stop data collection while keeping your account active.

7.1 Security Measures: We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Secure storage of authentication credentials (hashed passwords, API keys)
• Access controls and authentication requirements
• Regular security assessments and updates
• Privacy-first architecture that minimizes data collection

7.2 Data Aggregation: Our sidecar container aggregates viewing data locally on your server before transmitting it to our service. We never receive raw playback events, only aggregated engagement signals.

7.3 No Guarantee: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8.1 Logto: We use Logto for user authentication and account management. When you create an account, Logto processes your authentication information. Logto's collection and use of your information is governed by their privacy policy. We recommend reviewing Logto's privacy policy to understand their practices.

8.2 Links to Other Services: Our service integrates with your Jellyfin server. We are not responsible for the privacy practices of Jellyfin or any other third-party services you may use in connection with our service.