Last updated: 12 July 2026
This policy explains what personal data the VIDI iOS app collects, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). VIDI is anonymous-first: you can track shows, movies, and games without giving us your name, email, or any registration details.
The controller responsible for your data under Art. 4(7) GDPR is:
German law (§5 DDG / TMG) requires a published app to name a real person and postal address in an Impressum. You must fill the highlighted fields before publishing — a P.O. box or a service address you are entitled to use is acceptable, but the fields cannot be left blank.
VIDI does not use any third-party advertising, tracking, or analytics SDKs, and the app never contacts third-party content services directly. We collect only what the app itself sends to our own backend.
| Category | Data | When |
|---|---|---|
| Account | A randomly generated anonymous session identifier tied to your device. If you choose to secure your account, the email address and password you enter. | First launch (anonymous); when you link credentials (optional) |
| Profile | Username (auto-generated at first, editable), optional display name, optional avatar image you upload. | Automatically, then when you edit |
| Activity | Your check-ins — episodes, movies and games marked watched, watch timestamps, scores (1–10), reactions, favorite character, and the "where did you watch" choice (a streaming service, or "Personal"/"Other"); your watchlist/status; your favorites. | When you log activity in the app |
| Social | Posts, comments, likes, follows, and optional comment images, animated GIFs, or short videos. This content is visible to other VIDI users and may be reported or removed under our moderation rules. | When you post or interact |
| Product analytics | First-party, in-app event counts (e.g. app opened, episode watched, check-in saved, post created, follow) tied to your account ID. No page-level tracking, no device fingerprinting, no cross-app identifiers. | During normal use |
| Bug reports | Only if you submit one: your message, an optional contact email you type, your app version and iOS version. | When you send a bug report |
| Supporter status | A yes/no flag on your profile when you buy the one-time supporter purchase, so your badge can be shown. Payment is processed entirely by Apple — we never receive your name, card, or billing details. | When you make the supporter purchase |
We do not collect your location, contacts, advertising identifier (IDFA), health data, or precise device fingerprints.
We do not sell your data and we do not share it for advertising. Uploaded comment images, GIFs, and videos are stored in a private Supabase Storage bucket and shown to permitted thread readers through short-lived signed URLs. We use one infrastructure processor:
Social content (posts, comments, likes, follows, your public profile and avatar) is visible to other VIDI users by design. Show, movie, and game metadata shown in the app is maintained in our own catalog and never sends your data to third parties.
Your data, including comment attachments, is stored on Supabase infrastructure and retained for as long as your account exists. When you delete your account, associated database rows and uploaded objects are removed through the account-deletion flow; interrupted-object cleanup is also run as an operational maintenance task (see section 7). Bug reports and aggregated, non-identifying usage counts may be kept longer where needed to fix issues or understand product trends.
Under the GDPR you have the right to: access your data (Art. 15), correct it (Art. 16), erase it (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object to processing based on legitimate interests (Art. 21), and withdraw any consent at any time. To exercise these rights, email [email protected]. You may also lodge a complaint with a supervisory authority — in Germany, your regional Data Protection Authority (see bfdi.bund.de for the list).
You can delete your account and its data at any time from inside the app (Profile tab → Delete account, at the bottom of the page), or by emailing us. Deletion cascades across your profile, watch history, favorites, posts, comments, comment attachments, likes, follows, analytics events, and bug reports. See the dedicated Account & Data Deletion page for the exact steps and timeline.
VIDI is not directed to children under 16. In line with §8 (2) TTDSG and Art. 8 GDPR (as implemented in Germany), we do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy as the app evolves. The "Last updated" date at the top reflects the current version; material changes will be surfaced in the app.
Questions about this policy or your data: [email protected].
This document is a good-faith template prepared for the VIDI app and is not legal advice. Because you are established in Germany/the EU, you should have it (and your Impressum) reviewed by a qualified lawyer before publishing, and confirm your Supabase data region and processing agreement.