Privacy Policy

Last Updated: April 15, 2026

1. 1. What Information We Collect

   Information You Provide

   • Account information: Email address, display name, and profile picture when you create an account or sign in with Google or Apple
   • Support requests: Contact details and message content when you reach out to customer support
   • User content: Watchlists, favorites, ratings, and preferences you set within the app

   Information from Third Parties

   • Google Sign-In: Name, email address, and profile picture
   • Apple Sign-In: Name and email address (you may choose to hide your email)

   Information Collected Automatically

   • Device information: Device type and model, operating system version, unique device identifiers, hardware specifications, carrier information, and language settings
   • Viewing activity: Episodes watched, watch duration, series browsed, search queries, and content interactions
   • Usage data: App features used, session duration, navigation patterns, screens visited, and crash logs
   • Network information: IP address, approximate location (country/region level), time zone, and connection type
   • Advertising identifiers: IDFA (iOS), AAID (Android) for ad personalization. You can reset or disable these in your device settings
   • Transaction data: Purchase date, amount, subscription status, and payment method type. We never store full credit card numbers
   • Cookies and tracking technologies: We use cookies, web beacons, and similar technologies on our website for analytics and advertising

2. 2. How We Use Your Information

   Service Delivery

   Create and manage your account, deliver personalized content recommendations, process subscriptions and in-app purchases, and provide a seamless viewing experience across devices.

   Content Personalization

   Analyze your viewing history and preferences to recommend series, episodes, and genres tailored to your interests using automated decision-making. You can manage personalized recommendations in app settings.

   Communication

   Send push notifications about new episodes, series updates, and promotions via Firebase Cloud Messaging and Expo Notifications. You can opt out through your device notification settings.

   Advertising and Tracking

   Display personalized advertisements through Google AdMob and measure ad/marketing performance through Meta (Facebook) SDK and TikTok Events based on your activity and interests. These partners may receive your device advertising identifier (IDFA on iOS, AAID on Android) and link it across apps and websites for advertising and attribution purposes.

   App Tracking Transparency (iOS): On first launch, Shortify will ask for your permission to track your activity across other companies' apps and websites, as required by Apple. If you deny this prompt, advertising identifiers will not be used for cross-app/website tracking. You can change this choice anytime in:

   • iOS: Settings > Privacy & Security > Tracking > Shortify
   • Android: Settings > Google > Ads > Opt out of Ads Personalization

   Analytics and Improvement

   Understand usage patterns to improve the app, fix bugs, and develop new features using Firebase Analytics, Meta (Facebook) SDK, and TikTok Events.

   Payments and Subscriptions

   Manage subscriptions through RevenueCat. All payments are processed securely through the Apple App Store or Google Play Store. See RevenueCat's Privacy Policy.

   Security and Fraud Prevention

   Detect and prevent fraudulent activity, enforce our Terms of Service, protect user accounts, and ensure platform integrity.

   Legal Compliance

   Comply with applicable laws, regulations, legal processes, or governmental requests.

3. 3. How We Share Your Information

   We do not sell your personal information for monetary consideration. We may share your data in the following circumstances:

   • Service providers: Cloud hosting (Firebase, Google Cloud), subscription management (RevenueCat), authentication services, and customer support tools that process data on our behalf
   • Advertising partners: Google AdMob receives device identifiers and usage data to serve relevant ads. This may qualify as "sharing" under certain state privacy laws
   • Analytics partners: Firebase Analytics and TikTok Events receive anonymized usage data for app improvement and marketing measurement
   • Legal requirements: When required by law, court order, or governmental authority, or to protect the rights, safety, or property of Shortify and its users
   • Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred to the successor entity
   • With your consent: When you explicitly authorize us to share your information for a specific purpose

4. 4. Third-Party SDKs and Services

   Our application integrates the following third-party SDKs. Each operates under its own privacy policy:

   SDK / Service	Purpose	Data Collected
   Google AdMob	Advertising & tracking	Device ID (IDFA/AAID), ad interactions, usage data
   Meta (Facebook) SDK	Ad attribution, marketing, social login	Device ID (IDFA/AAID), app events, advertising data
   Firebase Analytics	Analytics	Usage events, device info, crash data
   Firebase Cloud Messaging	Push notifications	Push token, device info
   Firebase Authentication	User sign-in	Email, name, auth tokens
   RevenueCat	Subscription management	Purchase history, subscription status
   Google Sign-In	Authentication	Name, email, profile picture
   Apple Sign-In	Authentication	Name, email
   TikTok Events	Marketing attribution & tracking	App events, device info, advertising ID
   OneSignal	Push notifications	Push token, device info, user tags
   Expo Notifications	Push notifications	Push token

   Your use of these third-party services is subject to their respective terms and privacy policies. We encourage you to review them.

5. 5. How We Store and Protect Your Information

   We implement industry-standard security measures to protect your personal data:

   • Encryption: Data is encrypted during transmission using TLS/SSL protocols
   • Secure storage: Personal data is stored on secure cloud servers with restricted access controls
   • Access controls: Only authorized personnel have access to personal data, on a need-to-know basis
   • Regular audits: We conduct periodic security reviews to identify and address vulnerabilities
   • Incident response: We maintain procedures to detect, report, and respond to data breaches

   While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. 6. Your Rights and Choices

   Depending on your location, you may have the following rights:

   • Access: Request a copy of the personal data we hold about you
   • Correction: Request correction of inaccurate or incomplete data
   • Deletion: Request deletion of your personal data and account
   • Data portability: Receive your data in a structured, machine-readable format
   • Withdraw consent: Withdraw previously given consent at any time
   • Restrict processing: Request limitation of how we process your data
   • Object: Object to processing based on legitimate interests
   • Opt out of targeted advertising: Opt out of personalized ads through device settings

   To exercise your rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).

7. 7. In-App Privacy Controls

   You can manage your privacy directly within the Shortify app:

   • Profile information: View and edit your name, email, and profile picture via Profile settings
   • Watch history: View and clear your viewing history
   • Notification preferences: Manage push notification settings
   • Delete account: Permanently delete your account and all associated data via Settings > Account > Delete Account
   • Ad preferences: Control ad personalization through your device's privacy settings

8. 8. Children's Privacy

   Shortify is rated 16+ and is not intended for children under the age of 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children under this age.

   If you are a parent or guardian and believe your child has provided personal data to us, please contact us at [email protected]. We will promptly delete such information from our systems.

9. 9. International Data Transfers

   Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

   When we transfer data internationally, we implement appropriate safeguards including:

   • Standard Contractual Clauses approved by the European Commission
   • Adequacy decisions where applicable
   • Your explicit consent where required

   By using Shortify, you acknowledge and consent to the transfer of your information as described in this policy.

10. 10. Data Retention

    We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specifically:

    • Account data: Retained until you delete your account, plus up to 30 days for complete deletion from backups
    • Usage and analytics data: Retained in anonymized form for up to 24 months
    • Transaction data: Retained for up to 5 years as required for tax and legal compliance
    • Support communications: Retained for up to 12 months after resolution

    When data is no longer needed, we securely delete or anonymize it.

11. 11. California Residents (CCPA/CPRA)

    If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

    Categories of personal information collected

    Category	Examples	Purpose
    Identifiers	Email, name, device IDs, IP address	Account management, advertising, analytics
    Commercial information	Purchase and subscription history	Payment processing, analytics
    Internet activity	Browsing and viewing history, app interactions	Personalization, analytics, advertising
    Geolocation	IP-based country/region	Content localization, analytics
    Inferences	Content preferences, viewing patterns	Recommendations, ad targeting

    Your California rights

    • Right to know: Request disclosure of personal information collected, used, and shared
    • Right to delete: Request deletion of your personal information
    • Right to correct: Request correction of inaccurate information
    • Right to opt out: Opt out of the "sale" or "sharing" of personal information for targeted advertising
    • Right to limit: Limit use of sensitive personal information
    • Non-discrimination: We will not discriminate against you for exercising your rights

    Sale and sharing of data

    We do not sell personal information for monetary consideration. However, our use of advertising identifiers with ad partners (Google AdMob) may constitute "sharing" under the CCPA/CPRA. You can opt out by disabling ad personalization on your device.

    How to submit a request

    Submit a verifiable consumer request by emailing [email protected]. You may make up to two requests per 12-month period. We will verify your identity before processing and respond within 45 days (extendable to 90 days with notice).

12. 12. EEA, UK, and Switzerland (GDPR)

    If you are located in the European Economic Area, United Kingdom, or Switzerland, the following additional provisions apply.

    Data controller

    Shortify is the data controller responsible for your personal data.

    Lawful bases for processing

    Purpose	Legal Basis
    Providing the Service and account management	Contract performance
    Processing payments and subscriptions	Contract performance
    Customer support	Legitimate interest
    Push notifications and service updates	Legitimate interest
    Analytics and app improvement	Legitimate interest
    Personalized advertising	Consent
    Marketing communications	Consent
    Security and fraud prevention	Legitimate interest
    Legal compliance	Legal obligation

    Your GDPR rights

    • Access: Obtain confirmation of processing and a copy of your data
    • Rectification: Correct inaccurate or incomplete data
    • Erasure: Request deletion ("right to be forgotten")
    • Restriction: Request limitation of processing
    • Portability: Receive your data in a structured, machine-readable format
    • Object: Object to processing based on legitimate interests or for direct marketing
    • Withdraw consent: Withdraw consent at any time without affecting prior processing
    • Complaint: Lodge a complaint with your local supervisory authority

    International transfers

    When transferring data outside the EEA/UK, we rely on Standard Contractual Clauses, adequacy decisions, or other approved transfer mechanisms to ensure appropriate protection.

13. 13. Policy Changes

    We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by updating the "Last Updated" date at the top of this page.

    We encourage you to review this policy periodically. Your continued use of Shortify after any changes constitutes your acceptance of the revised policy. Where required by applicable law, we will obtain your consent before implementing material changes.

14. 14. Contact Us

    If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

© 2026 Shortify. All rights reserved.