Privacy Policy

1. Who this applies to

This policy applies to viewers, creators, and platform administrators who interact with Kittaak through any of our surfaces. By creating a Kittaak account or using the Service, you agree to the practices described here.

2. Information we collect

We collect the following categories of information:

• Account information. Email address, display name, and a securely hashed password (only if you sign up with email and password). If you sign in with Google or Apple, we receive a stable identifier from that provider plus your email and (on first sign-in only) your name. Apple may issue you a private relay email address; we store it as-is and respect Apple’s deliverability rules.
• Authentication tokens. Short-lived access tokens and long-lived refresh tokens used to keep you signed in. On mobile these are stored in the device’s secure keychain. On the web, refresh tokens are stored in an httpOnly cookie.
• Activity on the Service. Titles you watch, watch progress, watchlist entries, search queries, and ratings you submit. This data is tied to your account and used to power continue-watching, recommendations, and analytics for the creators whose content you watch.
• Payment information. If you purchase or donate, payment details (card number, billing address) are collected and processed by Stripe. Kittaak never sees or stores your full card number; we only store the transaction reference, amount, currency, and last four digits.
• Device and usage information. IP address, device model, OS version, app version, and timestamps of requests, collected automatically through server logs. We use this for security, debugging, and aggregate analytics.
• Push notification tokens. If you grant notification permission on mobile, we store a Firebase Cloud Messaging (FCM) or Apple Push Notification service (APNs) token so we can send you transactional notifications (release alerts, billing, account changes).

3. How we use your information

• To create and maintain your account and keep you signed in.
• To deliver the content and features you request (playback, watchlist, search).
• To process payments and remit earnings to creators.
• To send transactional emails (signup confirmation, password reset, receipts).
• To improve the Service: recommendations, content discovery, performance, and reliability.
• To detect, prevent, and investigate abuse, fraud, and security incidents.
• To comply with legal obligations under applicable law.

We do not sell your personal information. We do not use your viewing history to serve advertising.

4. Third-party services

We rely on the following service providers to operate Kittaak. Each receives only the data necessary to provide their service and is contractually bound to protect it.

• Amazon Web Services (AWS) — hosting, storage (S3), video transcoding (MediaConvert), content delivery (CloudFront).
• Stripe — payment processing for subscriptions, transactional purchases, and creator donations.
• Google — Sign in with Google authentication.
• Apple — Sign in with Apple authentication and Apple Push Notifications.
• Firebase (Google) — push notification delivery (FCM) on Android and iOS.
• Brevo — transactional email delivery.
• JW Player — video player and playback analytics.

Some event organizers use the Meta Pixel to measure their ads. When you buy tickets online for those events, Kittaak loads Meta’s pixel, which shares the purchase (amount, currency, number of tickets and the event) with Meta Platforms, Inc. under Meta’s own privacy policy. You can limit this through your browser’s tracking settings or your Meta ad preferences.

If you arrive from a Meta ad, we store the ad’s click identifier in a first-party cookie (_fbc) for up to 90 days so organizers’ Meta Pixel can attribute ticket purchases to that ad.

5. Data retention

We retain account and activity data for as long as your account is active. If you delete your account, we remove your personal information within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention reasons (for example, transaction records under applicable tax law). Refresh tokens automatically expire after 30 days of inactivity. Anonymised aggregate analytics may be retained indefinitely.

6. Your rights and choices

• Access and correct. Update your name, email, and preferences from the Account screen in the app or website.
• Delete your account. You can permanently delete your account from the Account screen, or by emailing privacy@kittaak.com. Deletion is irreversible and removes your watch history, watchlist, and authentication credentials. Per Apple’s requirements, account deletion is available directly within the iOS app.
• Export your data. You can request a copy of the personal data we hold about you by emailing privacy@kittaak.com. We’ll respond within 30 days.
• Withdraw consent. You can revoke push notification permission and disconnect linked sign-in providers at any time from your device’s settings and the Account screen.

7. Children

Kittaak is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us their information, please contact us and we will delete the account.

8. Security

We use industry-standard safeguards including TLS for data in transit, encryption at rest for stored video assets, Argon2 password hashing, short-lived JWT access tokens, and isolated production infrastructure. No system is perfectly secure, but we work to keep yours safe and to notify you promptly of any incident that affects your account.

9. International data transfers

Kittaak’s servers are hosted in AWS data centres. Some of our service providers (Google, Apple, Stripe, AWS, Brevo) may process your data outside the United States. We rely on their published safeguards and standard contractual protections for those transfers.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact us

Questions, requests, or complaints can be sent to privacy@kittaak.com. For postal correspondence, write to Kittaakbudteevi Films Inc, 4290 El Nido Ranch Rd, Orinda, CA 94563, USA.