Kiyoru Privacy Policy

1. Data Controller

The controller of your personal data is the Kiyoru team ([Company Name / Developer]).

For any question, concern or request about how your personal data is handled, you can contact us at any time at the dedicated address: [email protected].

2. Data We Collect and Purposes

We collect only the data strictly necessary to provide tracking, personal profile and community services:

• Account and Authentication Data: Username, email address, bio and profile picture. Authentication is handled by the secure Firebase Auth infrastructure; no password is ever stored in plain text on our servers.
• Tracking and Viewing Activity: Films, episodes and seasons marked as watched, timeline history, per-episode progress (bitmask), personal statistics and rewatches. This data is the heart of the Kiyoru experience and is saved to keep your library in sync.
• User-Generated Content (UGC): Reviews, comments in episode discussion threads, custom lists, tier lists, poll votes and virtual cinema tickets. All submitted text is processed as safe plain text to prevent security flaws (e.g. XSS attacks).
• Diagnostics and Anti-Abuse Data: Temporary server-side system logs (e.g. IP addresses) kept for a short time solely to guarantee the stability of the infrastructure, mitigate malicious attacks and enforce rate limiting on our APIs. Request integrity is protected by Firebase App Check to keep unauthorized bots out.

3. Artificial Intelligence and Voice Processing Features

Kiyoru integrates tools based on artificial intelligence and machine learning models (e.g. Workers AI or secure LLM APIs) to improve accessibility and interaction:

• Instant Translations (Catalogue and Threads): If you turn on translation for a synopsis, an entire discussion thread or another user’s comment, the original text is sent in memory to the language model (e.g. Workers AI or an LLM provider) solely to return the translated version in your chosen language. The translated text is neither linked to your profile nor reused to profile you.
• Voice Input and Ephemeral Transcription (Audio-to-Text): If you use the microphone to record a review, comment or viewing note:
  • The audio file or stream is processed solely to generate the text transcription.
  • Kiyoru does not save, retain or archive any voice recording on its servers. The audio data is destroyed instantly as soon as the transcription is complete.
• Assisted Generation of Reviews and Viewing Notes: The transcribed text or your instructions may be reworked by the AI to help you format your viewing diary, summarize or draft your comment.
• No Model Training: Your texts, voice input and private content are neither sold nor used to train public or third-party artificial intelligence models.

4. Selective Privacy with 4 Levels

Kiyoru gives you a unique, granular tool to decide who can access each section of your profile (Favourites, Rewatches, Statistics, Lists, Votes, Cinema Tickets):

A note on Community discussions: comments and reactions posted in the public threads dedicated to series or single episodes are visible to the other enabled community members. To protect everyone’s experience, the platform enforces server-side spoiler protection that unlocks discussions only for those who have actually logged the related content as watched.

5. Content Moderation and Image Handling

To keep the community safe, welcoming and free of unlawful content, we apply automated and procedural checks:

• Avatar Safety Scan: Uploaded profile pictures are checked with computer-vision tools (Google Cloud Vision SafeSearch) to automatically identify and reject adult, violent or inappropriate content. Images with an uncertain result are reviewed by human moderators.
• Technical Fingerprints (Hashes): To block repeated attempts to upload images that were already rejected, the system generates and stores a numeric fingerprint (SHA-256 and perceptual pHash). The hash tied to your profile is treated as personal data and is deleted when the account is deleted.
• GIFs and Stickers in Comments: GIFs and animations are integrated through the Klipy API. Kiyoru does not store third-party media files on its own servers; it only records the technical identifier of the selected media.

6. Where Data Lives and Security

Your data is protected with state-of-the-art cryptographic protocols, both in transit (TLS/HTTPS) and at rest:

• Cloud Infrastructure (Cloudflare): The production database (Cloudflare D1), the protected avatar storage (Cloudflare R2) and the backend logic (Cloudflare Workers) run on distributed architectures that meet the European Union’s personal-data protection standards.
• Local Database (IndexedDB): A local copy of your viewing data and library is stored directly on your device to allow instant navigation and offline support. This data stays entirely under your local control.
• Catalogue Metadata: Information sheets, posters and details of films, TV series and anime are provided through external APIs (TMDB, TheTVDB, anime catalogs). This is public metadata about the works, fully separate from your personal information.

7. Advertising, Business Model and Aggregate Statistics

• No Advertising: Kiyoru currently hosts no ad banners, includes no third-party advertising networks and neither reads nor tracks your device’s unique advertising identifiers (e.g. Apple IDFA or Google AAID).
• No Sale of Personal Data: We do not sell, transfer or share your personal data, your contacts or your individual history with intermediaries (data brokers) or advertisers.
• Aggregate Statistics and Trends: We may produce and process large-scale industry statistics based on aggregated, fully anonymized trends (for example: overall rewatch rates for a series, aggregate genre popularity, season completion trends). Such reports contain no account identifier, can in no way be traced back to you and are not considered personal data under the GDPR (Recital 26).

8. Data Retention

• Profile and Tracking Data: Your data is kept for as long as your account is active.
• Rejected or Appealed Avatar Files: Uploaded images that fail moderation or are awaiting an appeal are permanently deleted from R2 storage by automated procedures within a window of 7 to 30 days.
• External Import Files: If you use the history import feature from other platforms (e.g. TV Time), the file you provide is processed once and automatically deleted within 30 days.

9. Your Rights (GDPR) and Account Deletion

In accordance with Articles 15–22 of Regulation (EU) 2016/679 (GDPR), you have the full right to:

• Access and Port your data (Art. 20): You can request and export the complete history of your viewings and lists in an open, machine-readable format (JSON/CSV) at any time from the settings.
• Rectify your information: You can edit your username, bio, avatar and preferences directly in the app or ask us to update them.
• Full Deletion and Right to Be Forgotten (Art. 17): You can delete your account directly from the app. Deletion involves:
  • The immediate and permanent deletion of your personal library, private lists, credentials and personal hashes;
  • The definitive removal of your avatar files from our storage servers;
  • Anonymization of public comments: to preserve the coherence and usefulness of community discussions, the text of comments already posted in episode or film threads remains visible but is irreversibly detached from your identity (the author appears as an anonymous or deleted user).
• Exercising your Rights and Complaints: To exercise any of your rights, write to [email protected]. If you believe the processing of your data breaches applicable law, you always have the right to lodge a complaint with your national supervisory authority (in Italy: the Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

10. Age Requirements

Kiyoru is intended for people aged 14 or over (or the minimum age required by the law of your country of residence to consent to digital services). We do not knowingly collect data about minors below that threshold.

11. Changes to This Policy

Should we make substantial changes to this policy — for example when introducing new paid services, integrations with payment processors or promotional programs — we will clearly inform you with adequate notice through an in-app notification before the changes take effect.