Authoritative legal version: English · DE · TR · ES · FR · PT-BR · PT-PT · IT · PL · RU · ZH · ZH-TW · JA · KO
Last updated: 6 August 2026
This policy explains what personal data VIDI collects, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). It covers the iOS app, the Android app, and the web app alike; where a platform differs, this policy says so. On iOS VIDI is anonymous-first: you can track shows, movies, and games without giving VIDI your name, email, or any registration details. On Android and the web an account is required, so an email address or a sign-in provider is involved from the start. Apple or Google processes data only if you choose its sign-in option, opt into notifications, or make an Apple purchase.
The controller responsible for your data under Art. 4(7) GDPR is:
VIDI does not use advertising SDKs, the advertising identifier (IDFA), or cross-app tracking. The app never contacts third-party movie, TV, or game catalog services directly. On iOS it includes Apple system frameworks and the Google Sign-In SDK for the optional sign-in and purchase features described below. The Android app is a wrapper around the same web app, bundled into the app itself; it uses Google Play services to receive push notifications and opens sign-in pages in your system browser rather than inside the app.
| Category | Data | When |
|---|---|---|
| Account | On iOS, a randomly generated anonymous account identifier. On every platform, the email address and password you enter, or the provider user ID and profile details returned when you choose Sign in with Apple or Google. | iOS: first launch (anonymous), then when you link credentials. Android and web: at sign-up |
| Profile | Username (auto-generated at first, editable), optional display name, optional avatar image you upload. | Automatically, then when you edit |
| Activity | Your check-ins — episodes, movies and games marked watched, watch timestamps, scores (1–10), reactions, favorite character, and the "where did you watch" choice (a streaming service, or "Personal"/"Other"); your watchlist/status; your favorites. | When you log activity in the app |
| Social | Posts, comments, likes, follows, and optional comment images, animated GIFs, or short videos. This content is visible to other VIDI users and may be reported or removed under our moderation rules. | When you post or interact |
| Product analytics | First-party, in-app event counts (e.g. app opened, episode watched, check-in saved, post created, follow) tied to your account ID. No page-level tracking, no device fingerprinting, no cross-app identifiers. | During normal use |
| Notifications | If you opt in, a push token for this app and your current timezone, linked to your VIDI account: an Apple Push Notification service (APNs) token on iOS, a Firebase Cloud Messaging (FCM) token on Android, and a Web Push subscription in the browser. The token is used only to deliver tracked-episode and social alerts; it is not used for advertising or tracking. | When you enable notifications (optional) |
| Bug reports | Only if you submit one: your message, an optional contact email you type, your app version and operating-system version. | When you send a bug report |
| Supporter status | A yes/no flag on your profile so your badge can be shown. On iOS it is set by the one-time supporter purchase, processed entirely by Apple; it can also be set by hand after a voluntary donation on our website. The Android app has no in-app purchases. We never receive your name, card, or billing details. | When you make the supporter purchase, or when a donation badge is applied |
VIDI itself does not request your location or contacts and does not access the advertising identifier (IDFA), health data, or precise device fingerprints. Google’s sign-in SDK declares that it may process coarse location, device identifiers, and usage or other data for app functionality and analytics when its service is used. These disclosures are included in VIDI’s App Store privacy information and its Google Play Data safety declaration.
We do not sell your data and we do not share it for advertising. Uploaded comment images, GIFs, and videos are stored in a private storage bucket on our own server and shown to permitted thread readers through short-lived signed URLs. We use the following infrastructure and optional identity/payment providers:
Social content (posts, comments, likes, and follows), your username, and your avatar are visible to other VIDI users by design. You choose whether profile details such as stats, favorites, and collections are visible to everyone, people you follow, mutual follows, or only you. Show, movie, and game metadata shown in the app is sourced from third parties — TMDB, AniList, Fribb’s anime-lists, IGDB, RAWG, OMDb, and Wikidata — and seeded into our own catalog server-side; the app talks only to our backend for it, and none of your data is sent to those sources.
Your VIDI data, including comment attachments, is stored on our self-hosted server in Nuremberg, Germany (netcup GmbH) and retained for as long as your account exists. When you delete your account, associated database rows and uploaded objects are removed through the account-deletion flow; interrupted-object cleanup is also run as an operational maintenance task (see section 7). Bug reports and aggregated, non-identifying usage counts may be kept longer where needed to fix issues or understand product trends. Apple and Google retain data they process under their own published retention policies.
Under the GDPR you have the right to: access your data (Art. 15), correct it (Art. 16), erase it (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object to processing based on legitimate interests (Art. 21), and withdraw any consent at any time. To exercise these rights, email [email protected]. You may also lodge a complaint with a supervisory authority — in Germany, your regional Data Protection Authority (see bfdi.bund.de for the list).
You can delete your account and its data yourself at any time, without contacting us: on iPhone and iPad in Profile → settings gear → Delete account, and on Android and the web in Profile → Delete account (also under Account settings). Each asks you to confirm, then erase the account immediately. Email us only if you have lost access to the account and cannot reach the button. Deletion cascades across your profile, watch history, favorites, posts, comments, comment attachments, likes, follows, notification tokens and preferences, analytics events, and bug reports. See the dedicated Account & Data Deletion page for the exact steps and timeline.
VIDI is not directed to children under 16. In line with §8 (2) TTDSG and Art. 8 GDPR (as implemented in Germany), we do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy as the app evolves. The "Last updated" date at the top reflects the current version; material changes will be surfaced in the app.
Questions about this policy or your data: [email protected].
This document is a good-faith template prepared for the VIDI app and is not legal advice. Because you are established in Germany/the EU, you should have it (and your Impressum) reviewed by a qualified lawyer before publishing, and confirm your hosting provider’s processing agreement.