Privacy Policy

Last updated: May 21, 2026

Our approach to privacy

Cinaura is a privacy-first personal media library app for Android TV. It is built so that your library belongs entirely to you. There are no user accounts, no ads, no algorithmic tracking, and we never sell your data.

Your media library, your viewing history, your user profiles, and the credentials for the storage and debrid sources you connect are stored locally on your device. Cinaura does not operate a content server and does not receive a copy of your library or what you watch.

This policy explains the limited data that the Cinaura Android app and the Cinaura website (cinaura.tv) do process, why, and the choices you have. It applies to both the app and the website.

Who is responsible for your data

Cinaura is the data controller for the limited personal data described in this policy. If you have any questions or want to exercise your privacy rights, contact us at privacy@cinaura.tv.

Information the Android TV app processes

No account required. You do not create an account or provide your name, email, or phone number to use the app.

Source credentials and tokens. When you connect a source (such as Dropbox, Google Drive, a debrid service, or a network share), the associated access tokens, API keys, or login details are stored locally on your device and used only to access the content you have chosen. They are not transmitted to or stored on Cinaura's own servers, except for the brief, transient pairing handoff described in the website section below.

Diagnostics and analytics. The app uses Google Firebase Crashlytics and Firebase Analytics to keep the app stable and understand how features are used in aggregate. This may include crash reports and stack traces, a device model and operating-system version, a randomly generated app instance identifier, and anonymous interaction events. This data is not used to identify you personally and is not linked to your media library.

Metadata lookups. To enrich your library with posters, descriptions, and similar information, the app sends titles and related identifiers to The Movie Database (TMDb). To support the skip-intro feature it may send a show identifier (IMDb ID) to introDB. If you choose to enable Trakt integration, watch activity you generate is sent to Trakt at your request.

Device permissions. The app requests network access and, where you use local storage as a source, access to media files on the device. These permissions are used solely to scan and play the content you point the app at.

Information the website processes

The website at cinaura.tv acts as a pairing bridge so that the TV app can complete sign-in flows for the sources you connect.

Pairing and tokens. When you authenticate a source on the website, the resulting tokens or keys are held only temporarily in server memory, are tied to a short-lived pairing session that expires after about 10 minutes, and are deleted as soon as the TV app retrieves them. We do not use these tokens to access your content ourselves.

Contact form. If you message us through the contact form, we receive the email address and message you provide so we can reply.

How we use information

  • To provide and operate the app and the pairing service.
  • To keep the app stable, fix crashes, and improve features.
  • To understand, in aggregate, how the product is used.
  • To respond to your support requests and messages.

We do not use your data for advertising, we do not sell or rent personal information, and we do not build advertising profiles.

Who we share information with

We do not sell your personal information. We share limited data only with the service providers that make the product work:

  • Google Firebase (Crashlytics and Analytics) — crash and usage diagnostics for the app.
  • Vercel — hosting for the website.
  • The Movie Database (TMDb) and introDB — media metadata and intro timestamps.
  • The sources you connect (e.g. Dropbox, Google Drive, Real-Debrid, TorBox, AllDebrid, Premiumize) and Trakt, if you enable it — used only at your direction to access content or sync activity.

Each of these providers handles data under their own privacy policies. We may also disclose information if required by law.

Data retention

Pairing tokens on the website are deleted after the TV app retrieves them, or when the pairing session expires (about 10 minutes). Diagnostic and analytics data is retained by our providers for their standard retention periods. Data stored on your device — your library, profiles, and source credentials — remains until you delete it, disconnect the source, or uninstall the app.

Data security

We use reasonable technical measures to protect data, including encrypted transport (HTTPS) for network communication and short-lived, in-memory handling of pairing tokens. No method of transmission or storage is completely secure, but we work to minimise the data we hold in the first place.

Children's privacy

Cinaura is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

Your rights

Depending on where you live, you may have rights over your personal data. We honour these rights regardless of your location.

If you are in the EU, EEA, or UK (GDPR): you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. Our legal basis for the limited processing described here is our legitimate interest in operating and improving the product and, for the contact form, taking steps at your request.

If you are in California (CCPA/CPRA): you have the right to know what personal information we collect, to request its deletion, and to non-discrimination for exercising your rights. We do not sell or share your personal information as those terms are defined under California law.

To exercise any of these rights, email us at privacy@cinaura.tv. You may also uninstall the app at any time, which removes the data stored on your device.

International data transfers

Our service providers may process data in countries other than your own, including the United States and the European Union. Where required, these transfers rely on appropriate safeguards such as standard contractual clauses.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected on this page.

Contact us

For any privacy question or request, email privacy@cinaura.tv or use our contact form.