Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how the Kaset mobile application ("Kaset", "the Application", "we", "us", or "our") handles information in connection with your use of the Application. Kaset is a personal media tracker for movies, television shows, and anime, available for iOS and Android. This Policy applies to information processed through the Application. Please read it carefully. By downloading, accessing, or using Kaset, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Application.

2. Information We Collect

Kaset is designed to function without requiring you to provide personal information to us. We do not operate accounts and we do not maintain servers that receive or store your content. Information you create in the Application is stored locally on your device and is not transmitted to us. Such information includes:

This information is stored in a private database on your device and remains under your control. We do not receive a copy of it. It may be included in your device's own backups only if you have enabled operating-system backups (for example, iCloud Backup or Google backup), which are governed by Apple's or Google's respective privacy policies rather than this Policy.

When the Application communicates with the third-party services described in Sections 6, 7, and 8, those services necessarily receive limited technical information required to fulfill the request, such as your device's Internet Protocol (IP) address and standard request headers. This is inherent to how internet communication works and is not used by us to identify or track you.

3. Information We Do Not Collect

Kaset is built to know as little about you as possible. Specifically, the Application does not:

• require you to create an account, sign in, or provide an email address, name, telephone number, or password;
• collect or store your real-world identity, contacts, photographs, calendar, precise or approximate location, or health information;
• use advertising identifiers (such as Apple's Identifier for Advertisers or the Android Advertising ID), and it does not request App Tracking Transparency permission;
• include third-party analytics, advertising, marketing, or social-media tracking software development kits (SDKs); or
• maintain servers that receive, store, or process a copy of your library or personal content.

4. How We Use Information

Because your content is stored locally, it is used solely to provide the Application's features on your device — for example, to display your library, calculate your on-device viewing statistics, and organize your lists. The limited technical information described in Section 2 is used only to complete the requests you initiate (retrieving title information, downloading updates, and syncing with a tracker account you have chosen to connect). We do not use any information to build a profile of you, to advertise to you, or to make automated decisions about you.

5. How Information Is Shared and Disclosed

We do not sell, rent, trade, or share your personal information with third parties for their own purposes, and we do not "sell" or "share" personal information as those terms are defined under applicable privacy laws, including the Saudi Personal Data Protection Law (PDPL) and United States state privacy laws. Because your content remains on your device, there is nothing for us to sell or disclose. The only third parties that receive any information are the service providers described in Sections 6, 7, 8, and 11: the catalog and update services receive only the limited technical information inherent to making those requests, and a tracker service receives your watch activity only if you choose to connect an account with it, as described in Section 7, and a cloud storage provider receives your library data only if you choose to turn on cloud sync, as described in Section 8. We may disclose information only where we are legally required to do so; in practice, however, we hold no personal information that could be disclosed.

6. Third-Party Services

To display information, artwork, and search results for movies, television shows, and anime, the Application retrieves data from a public media catalog service:

• The Movie Database (TMDB) — privacy policy.

Requests to this service contain only what is necessary to locate and display a title — for example, the search text you enter, a title identifier, or your selected language so that results are returned in that language. They do not include your identity, your library, your notes, or any personal profile, because the Application maintains none to send. All such requests are transmitted over encrypted HTTPS connections. We do not control the independent data practices of this provider; please review its privacy policy, linked above. This product uses the TMDB API but is not endorsed or certified by TMDB.

The Application also relies on a software update delivery service to provide the updates described in Section 11, and it can optionally sync with the third-party tracker services described in Section 7 and the cloud storage providers described in Section 8. Links to third-party sites and services are provided for convenience, and we are not responsible for their content or privacy practices.

7. Optional Tracker Sync (Opt-In)

Kaset can keep your library in step with independent third-party watch-tracking services ("trackers"). The tracker currently supported is Simkl (privacy policy). We may add support for other trackers, such as Trakt, in the future; everything in this section applies equally to any tracker we support. This feature is entirely opt-in and off by default: nothing is ever sent to a tracker unless you explicitly connect your account with that tracker from Settings → Tracker Accounts. If you never connect an account, no data of any kind is shared with any tracker, and this section does not apply to you.

Connecting your account

You sign in on the tracker's own website using the industry-standard OAuth authorization flow. Your username and password are entered on the tracker's site and are never visible to Kaset. Kaset receives an access token, which is stored in your device's secure storage (Keychain on iOS, Keystore on Android) and is used only to communicate with that tracker on your behalf.

What is sent to the tracker

While your account is connected, Kaset syncs your watch activity with the tracker. Depending on the sync mode you choose, this includes:

• the movies, shows, and anime in your library, identified by their catalog identifiers;
• their watch status (for example, watching, completed, or plan to watch);
• the episodes and movies you have watched, including watch dates;
• the ratings you assign; and
• removals, so that titles you delete in Kaset can also be removed from your tracker account.

Your notes, reviews, tags, lists and collections, viewing statistics, and any images you create in the Application are not sent to the tracker and remain on your device. In two-way sync mode, Kaset also retrieves your watch activity from the tracker and adds it to your local library.

Your data on the tracker

Once synced, this information is stored in your account on the tracker's servers and is governed by that tracker's own privacy policy (linked above), not this Policy. Trackers are independent services, and we do not control their data practices. Depending on your account settings with the tracker, your profile and watch activity there may be visible to other users of that service.

Disconnecting

You can disconnect at any time from the same settings screen. Disconnecting deletes the access token from your device and stops all syncing; your Kaset library is unaffected. Data already synced to your tracker account remains there and can be managed or deleted through that tracker directly.

8. Optional Cloud Sync (iCloud and Google Drive)

Kaset can keep your library in step across your own devices by storing its sync data in a cloud storage account that belongs to you. Two providers are supported: Apple iCloud and Google Drive. In both cases the data is written to your own account with that provider. Kaset operates no server that receives this data, we never obtain a copy of it, and the developer of Kaset cannot access it. You choose whether to use cloud sync, which provider to use, and you can turn it off at any time from Settings → Sync.

What is stored in your cloud account is the content described in Section 2: your library, your watch history and dates, your ratings, your notes, your lists, and your Application preferences. It is written as an operational log of the changes you make, which is what allows two of your own devices to merge their changes without one overwriting the other. Nothing is shared with any other person, and cloud sync does not make anything public.

Apple iCloud

On iOS, Kaset stores its sync data in a private, application-specific container inside your own iCloud account. Your use of iCloud is governed by Apple's Privacy Policy, not by this Policy. Syncing works only while you are signed in to iCloud on the device; if you are not signed in, Kaset reports that sync is unavailable and continues to work entirely offline. You can turn iCloud sync off from Settings → Sync within the Application, and you can review or remove the data Kaset has stored from your device's own iCloud storage settings.

Google Drive

Google Drive sync is strictly opt-in and off by default. Nothing is ever sent to Google Drive unless you connect your Google Account yourself from Settings → Sync. If you never connect an account, nothing in this subsection applies to you.

The access Kaset requests. Kaset requests exactly one Google OAuth scope, and no other:

This scope grants access only to a hidden, application-specific folder that Kaset creates in your Google Drive. Kaset cannot see, read, list, modify, or delete any other file in your Google Drive, and it cannot browse your Drive at all. It has no access to your documents, photos, or any other content you keep there.

Signing in. You sign in on Google's own pages using the standard OAuth authorization flow. Your Google password is never entered into Kaset and is never visible to it. Kaset receives an access token and a refresh token, which are stored in your device's secure storage (Keychain on iOS, Keystore on Android) and are used only to read and write inside that one application folder.

What is stored in that folder. Your own library data: the movies, shows, and anime you track, your watch history and dates, your ratings, and your notes, written as the operational log described above and used only to merge changes between your own devices. The folder lives in your own Google Drive account, where Google encrypts stored data at rest under its own practices. Kaset does not apply its own additional encryption to this data, and you should not treat it as end-to-end encrypted.

How Kaset uses it. Google user data obtained through this scope is used for one purpose only: providing the cloud sync feature you turned on. Kaset does not use it for advertising, does not sell it, does not transfer it to third parties, does not use it to develop, improve, or train generalized artificial-intelligence or machine-learning models, and does not use it for any purpose other than the sync feature you enabled. No human at Kaset reads it, because no copy of it ever reaches us.

Disconnecting, revoking, and deleting. You remain in control at all times:

• Disconnect in the Application from Settings → Sync. This deletes the stored tokens from your device and stops all syncing; your local Kaset library is unaffected.
• Revoke Kaset's access to your Google Account at any time at myaccount.google.com/permissions.
• Delete the stored data by removing Kaset's hidden application data folder from Google Drive's own settings (in Google Drive, open Settings → Manage apps and delete the hidden app data).

Limited Use. Kaset's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Importing Your Data

Kaset allows you to import your existing watch history from other services, such as TV Time and Sofa. You begin an import by selecting an export file that you already have on your device. The file you select is read and processed entirely on your device. Its contents are not uploaded to us or to any third party. The imported records are stored locally alongside the rest of your library and are treated in the same manner as data you enter yourself. The Application accesses only the specific file you select; it does not scan or read other files on your device.

10. Permissions

The Application requests only the minimum access necessary, and only at the time it is needed:

• File and Document Access — used solely so that you can select an import file, as described in Section 9. The system file picker allows you to choose a single file, and the Application receives only that file.
• Network Access — used to retrieve title information from the catalog service, as described in Section 6, to sync with a tracker account you have connected, as described in Section 7, to sync with a cloud storage account you have connected, as described in Section 8, and to download application updates, as described in Section 11.

The Application does not request access to your location, camera, microphone, contacts, photographs, calendar, reminders, or health data.

11. Software Updates

Kaset uses over-the-air updates so that we can deliver fixes and improvements without always requiring a full application-store release. When the Application checks for and downloads an update, standard technical request information — such as your device's IP address, platform, and the Application's current version — is processed by the update delivery service so that it can serve the correct files. This information is used only to deliver software updates and is not used to build a profile of you or to track your activity.

12. Analytics, Advertising, and Tracking

The Application contains no analytics SDKs, no advertising, no third-party trackers, and no crash- or usage-reporting that transmits your data off the device. We do not build advertising or behavioral profiles, we do not use cookies or similar cross-application identifiers, and we do not track you across other applications or websites. Any statistics shown within the Application (for example, viewing counts or "insights") are calculated on your device from your own local data and are never transmitted.

13. Data Retention and Deletion

Your data is retained on your device for as long as you keep the Application installed and choose to keep the data. You remain in full control:

• You may permanently erase everything you have tracked at any time from Settings → Delete All Data within the Application. This removes your library, watch history, notes, ratings, tags, and collections.
• Uninstalling the Application removes its local database and preferences from your device.

Because we hold no copy of your data on any server, these actions are complete and irreversible, and there is nothing further for us to delete on your behalf. If you have used the optional tracker sync described in Section 7, a copy of your synced watch activity exists in your account with that tracker; deleting it there is done through the tracker directly and is governed by its own privacy policy. If you have used the optional cloud sync described in Section 8, a copy of your library data exists in your own iCloud or Google Drive account; you delete it from that account directly, as described in that section.

14. Data Security

Your data is stored within the Application's private, sandboxed storage on your device, which is isolated from other applications by the operating system and protected by your device's own security features (such as your passcode, Face ID, Touch ID, or Android biometric lock). All network requests the Application makes are transmitted over encrypted HTTPS (TLS) connections. No method of electronic storage or transmission is completely secure; however, keeping your data on your device and avoiding accounts and servers meaningfully reduces the ways in which it could be exposed.

15. Children's Privacy

Kaset is a general-audience application and is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction, such as 16 in parts of the European Economic Area). We do not knowingly collect personal information from children. Because the Application requires no account and collects no personal information, no such information is gathered from users of any age. If you believe that a child has provided us with personal information, please contact us; as noted, however, the Application is designed so that no personal information is transmitted to us.

16. Your Privacy Rights

Depending on where you reside, you may have rights regarding your personal information, including the rights to access, correct, delete, port, or restrict the processing of your information, and the right not to be discriminated against for exercising these rights. Kaset is designed to honor these principles by its very architecture:

• Access and Portability — your data resides on your device, where you may view it directly at any time.
• Correction — you may edit or update any entry within the Application.
• Deletion — you may erase all data from within the Application or by uninstalling it, as described in Section 13.
• Objection and Restriction — the Application performs no profiling, automated decision-making, or targeted advertising to which you might object.

For residents of the European Economic Area and the United Kingdom: to the limited extent that the technical information described in Sections 2 and 11 constitutes personal data, the lawful basis for processing it is our legitimate interest in providing the core functionality you have requested (displaying title information and delivering updates); for the optional tracker sync described in Section 7 and the optional cloud sync described in Section 8, the lawful basis is your consent, which you may withdraw at any time by disconnecting your account. For residents of California and other United States states with applicable privacy laws: we do not sell or share personal information, and we do not process sensitive personal information for any purpose that would require an opt-out. For residents of the Kingdom of Saudi Arabia: to the extent the Personal Data Protection Law (PDPL) applies, you retain your rights to access, correct, delete, and port your personal data; because your data remains on your device and we hold no copy on any server, the Application is designed to honor these rights directly. Because we do not maintain your data on our servers, most requests can be satisfied by you directly within the Application. If you have questions or wish to exercise a right, please contact us using the details in Section 19.

17. International Users and Data Transfers

Kaset may be used worldwide. Your personal data remains on your device in your country. The requests to the service providers described in Sections 6, 7, 8, and 11 may be processed on servers located in other countries, including the United States, and operated by those independent providers under their own privacy policies. By using the Application, you understand that these network requests may be handled internationally.

18. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes to the Application or for legal, technical, or operational reasons. When we do, we will revise the "Last Updated" date at the top of this page and post the revised version at this same address. Material changes will be reflected within the Application. Your continued use of Kaset after a revised Policy takes effect constitutes your acceptance of the changes.

19. Contact Us

If you have any questions, requests, or concerns regarding this Policy or how Kaset handles information, please contact us at:

Email: radwan.albahrani@gmail.com

You may also reach us directly from the Application via Settings → Contact & Support. We aim to respond to privacy inquiries within a reasonable period of time.