Privacy Policy

ArFlix is a mobile client for media management and streaming servers that you operate. The app itself does not host, scan, or store any media library; it presents an interface to the servers and metadata sources you choose to configure. • No central media account: ArFlix has no user accounts on BitKreativ infrastructure. Everything is configured device-side. • Direct device-to-server communication: Requests flow from your device to your servers. BitKreativ does not proxy, intercept, or relay them.

To provide its features, ArFlix accesses or stores the following on your device or through limited backend services we operate: • Server Configuration: Connection details you enter (server URLs, API keys, profile names) are stored locally on your device. • Biometric Data: ArFlix uses your device’s biometric authentication (fingerprint or face) to lock the app. This data never leaves your device and is handled entirely by your operating system. • Local Preferences: Your in-app settings (theme, color palette, default profile, default services) are stored locally on your device. • Local Cache: Metadata, artwork, and small assets fetched from your servers and from public metadata sources may be cached on your device to improve performance. • Anonymous Usage Analytics: We collect anonymous usage events (screens viewed, feature interactions), app version, device model, OS version, and crash reports to improve app stability and performance.

Your data is used solely to operate the ArFlix app: • Server Connectivity: Connection details are used to communicate with the servers you choose to configure. • Biometric Lock: Biometric authentication is used exclusively to unlock the app on your device. • Personalization: Local preferences shape how the app looks and behaves on your device. • Quality & Performance: Anonymous usage analytics help us identify crashes, prioritize fixes, and improve features.

ArFlix is a client for servers you control. When you add a server profile, the app sends requests directly from your device to the URL you provided. • You Operate, You Decide: You are responsible for the configuration, security, lawful operation, and content of any server you connect ArFlix to. • Network Visibility: Anything your servers expose is visible to whoever can reach those servers. ArFlix does not alter that exposure. • HTTPS Recommended: We strongly recommend connecting only to servers reachable over HTTPS. ArFlix honors the URL scheme you configure; if you enter an HTTP URL, credentials and metadata will travel in plain text over your network. • Credentials Stay Local: Server credentials (API keys, basic auth) are stored on your device and are sent only to the matching server.

ArFlix enriches your library with metadata fetched from public sources: • The Movie Database (TMDB): Movie and TV show metadata, poster art, ratings, and release dates are fetched from TMDB’s public API. ArFlix uses TMDB but is not endorsed or certified by TMDB. • Caching: Metadata responses may be cached on your device to reduce repeated network requests. • No Personal Data Shared: We do not send your name, email, server URLs, API keys, or any personally identifiable information to these metadata providers.

We use Google Analytics to understand how the app is used and to identify problems. • What we collect: Screen views, feature interaction events, app version, device model, OS version, country (derived from IP), and crash reports. • What we do not collect: Server URLs, API keys, server contents, file names, library titles, or any data that identifies the contents of your media library. • Anonymous identifier: Google Analytics uses an installation-scoped identifier. There is no linkage to a personal account because ArFlix has no user-account system. • Opt-Out: You can disable analytics at any time from the app’s privacy settings; analytics data already collected is retained per the standard Google Analytics retention period.

ArFlix is a mobile application and does not use browser cookies. The app uses on-device storage to keep your configuration, preferences, and cache. Clearing the app’s data from your device removes this storage; uninstalling the app removes it entirely.

ArFlix requests the following Android permissions: • INTERNET: Required to reach the servers you configure and to fetch metadata. • USE_BIOMETRIC: Required only if you enable the app-lock feature. • POST_NOTIFICATIONS: Optional. Required only if you enable in-app notifications (e.g., download completion). • FOREGROUND_SERVICE: Required for the in-app media player to keep playback alive while the app is in the background.

We do not sell your personal data. ArFlix shares data only with: • Servers You Configure: Direct communication initiated by your actions in the app. • TMDB: Public metadata requests as described above. • Google Analytics: Anonymous app usage and crash data as described above.

You maintain full control over your data: • Review: Server profiles and preferences are visible inside the app at any time. • Modify or Delete: Remove a server profile to delete its credentials from your device. Use system settings to revoke any granted permission. • Local Deletion: Uninstalling the app, or clearing its data from system settings, removes all locally stored ArFlix data from your device.

We implement industry-standard security measures within the app: • Secure Local Storage: Sensitive configuration is stored using the platform’s secure storage facilities. • Biometric App Lock: Optional biometric lock prevents unauthorized access to the app on your device. • HTTPS Recommended: We recommend HTTPS-only servers; the app honors the URL scheme you configure.

ArFlix is not intended for children under 13. We do not knowingly collect personal information from children.

We may update this policy as ArFlix evolves. Material changes will be communicated through the app or our website. Continued use of the app implies acceptance of the updated policy.

This Privacy Policy is governed by and construed in accordance with the laws of Kerala, India, without regard to its conflict of law provisions.

For any privacy concerns regarding ArFlix, please contact us: • Email: privacy@bitkreativ.dev • Developer: BitKreativ • Registered Location: Kerala, India