Legal
Privacy Policy
Vyn has no account, no sign-up and no server of its own. There is nowhere for your viewing to be sent, because nothing was built to receive it.
01 The short version
App Privacy label
Data Not Collected. The developer of Vyn does not collect any data from this app.
Vyn is a player for media you already have. It does not ask you to create an account, it does not have a server that your device reports to, and it contains no analytics, advertising or tracking software of any kind.
Everything Vyn knows about you — what you have watched, where you stopped, which servers you have connected, what you put on your list — is written on your own device. If you switch on iCloud sync, some of it is also written to your private iCloud database, which Apple encrypts and which the developer of Vyn cannot read.
Vyn does make network requests, and it is worth being precise about them: it fetches film and television metadata from TMDB, it talks to the media servers, trackers and IPTV providers you connect, and nothing else. Section 7 lists every one of them and says what each receives.
02 Who is responsible
Vyn is developed and published by an individual developer, not a company. For the purposes of the UK GDPR and the EU GDPR that developer is the data controller for the limited processing described below, and can be reached at hello@vyn.app.
In practice the controller holds almost nothing: there is no user database, no mailing list and no server-side record of who uses Vyn. The only personal data the developer ever sees is what you choose to put in an email.
03 What Vyn collects
Nothing is collected by the developer. Vyn transmits no personal data to the developer, and there is no infrastructure that could receive it. There is no account, no device identifier sent anywhere, no usage telemetry, no crash reporting service and no advertising identifier.
Vyn does process data on your device in order to work — that is what the next two sections are about — and it sends requests to third-party services that you configure or that supply catalogue metadata. Those services have their own privacy policies and receive whatever a request necessarily reveals, which for any internet request includes your IP address.
04 What is stored on your device
All of the following lives in Vyn's own container on your device, under the protection of the operating system, and is removed when you delete the app.
Viewing activity
Resume positions, watched marks, measured viewing sessions, and dismissals of Continue Watching rows. This is what powers Continue Watching and the Insights page.
Your lists
Watchlist and library entries, plus any likes or dislikes you record against a title.
Household profiles
The names of the profiles you create, so each person gets their own home screen and history.
Settings
Playback preferences, home-screen layout, appearance, subtitle and metadata options.
Caches
Artwork, TMDB metadata, ratings, an index of your connected media server's library, IPTV catalogue and guide data, and identifier mappings between TMDB, IMDb and TVDB. All of it is re-fetchable and none of it leaves the device.
Credentials
In the system Keychain — see section 6.
A diagnostic log
A short local log of what the app did, for troubleshooting. It is written to be free of credentials and authenticated addresses. It is never transmitted; you would have to send it deliberately.
On iPhone and iPad, Vyn also writes the Continue Watching shelf into a shared app group so the Home Screen and Lock Screen widgets can draw it without opening the database. On Apple TV it writes the same shelf into a shared group for the Top Shelf. Both stay on the device.
05 iCloud sync
Vyn can keep the things you created — viewing activity, lists, profiles, reactions — in step across your Apple devices using CloudKit. When it does, that data is stored in your own private iCloud database, under your Apple Account. It is governed by Apple's Privacy Policy. The developer of Vyn has no access to it and no way to request it.
Caches are deliberately excluded. Artwork, metadata, ratings, the media-server index and the pending queue of tracker updates are stored locally only — they are free to rebuild, they describe one machine on one network, and syncing them would spend your iCloud storage on nothing.
You can remove synced Vyn data at any time from Settings on your device, under your Apple Account › iCloud › Manage Account Storage.
06 Credentials and how they travel
Usernames, passwords, API keys and access tokens for the services you connect are held in the system Keychain, not in Vyn's settings file and not in its database. On Mac, Vyn uses the data-protection Keychain.
They are used for one thing: authenticating the requests you asked Vyn to make. They are never sent to the developer, never sent to a service other than the one they belong to, and never written to the diagnostic log or shown in an error message.
Signing out of a service in Vyn's settings removes its credentials from the Keychain on that device. Deleting the app removes all of them.
07 Services Vyn talks to
Every request below is made directly from your device to that service. None of it is proxied through the developer, and there is no step at which the developer could observe it. Each service is bound by its own privacy policy, linked below.
Always used
TMDB
Supplies the film and television metadata, artwork and browsing catalogue. Receives the searches and titles you look at, and your IP address. Vyn sends no account information, because it has none. Privacy policy
Only if you connect them
Your media servers
Jellyfin, Emby, Plex or an SMB share. These are your machines. They receive your credentials, your library requests and the stream you play; Vyn also reports playback progress to Jellyfin and Emby so their own records stay current. Where they are hosted and what they log is up to you.
Plex account
Used to sign in and list the servers you own or have been shared. Privacy policy
Trakt and Simkl
Tracking services. If connected, Vyn sends them what you watch, your watchlist changes and scrobbles, and reads your history back. Both may be connected at once, and each is separate — disconnecting one does not touch the other. Trakt · Simkl
Your IPTV provider
An Xtream account or an M3U playlist that you supply. It receives your credentials and the channels and titles you request, and it can see when you watch. Vyn has no relationship with your provider and no visibility into what it records.
XMLTV guide sources
The electronic programme guide addresses published by your playlist, or one you enter yourself. They receive a request for a guide document and your IP address.
MDBList
Additional ratings for a title. Receives the identifier of the title being looked at. mdblist.com
IntroDB
Intro and credit skip timings. Receives the identifier of the episode being played.
Vyn does not share your data with any third party for that party's own purposes. It does not sell personal information, and it does not disclose personal information for cross-context behavioural advertising, as those terms are used in the California Consumer Privacy Act.
08 Trailers and YouTube
Trailers are YouTube videos. On iPhone and iPad, a trailer plays in YouTube's own official embedded player inside the app. Playing one is a visit to YouTube: Google receives your IP address, information about your device, and the fact that this video was played, and may set cookies or similar storage in that player, all under Google's Privacy Policy.
Nothing is sent to Google until you actually start a trailer. On Apple TV, Vyn hands the trailer to the YouTube app instead and does not embed a player at all.
09 Diagnostics and crash data
Vyn contains no crash-reporting or analytics SDK. It does not use Firebase, Sentry, Crashlytics, or any equivalent.
If you have switched on Share With App Developers in iOS, iPadOS, tvOS or macOS Settings, Apple may send the developer aggregated crash and energy reports through App Store Connect. Those come from Apple, are governed by Apple's privacy policy, and identify a device model and an operating system version — not you.
10 Advertising and tracking
There is none. Vyn shows no advertising, contains no advertising SDK, does not use the Advertising Identifier, does not fingerprint your device, and does not track you across apps or websites. It therefore never presents an App Tracking Transparency prompt, because it has nothing to ask permission for.
11 Retention, deletion and consent
Retention. Data kept on your device is kept until you delete it or delete the app. Caches are pruned as they age or when a source is replaced. The developer retains nothing, because the developer receives nothing — except email you send, which is kept only as long as it takes to answer you and is deleted within twelve months.
How to delete your data
- Everything on a device — delete Vyn. Its container, its caches and its Keychain entries go with it.
- Synced data — Settings › your Apple Account › iCloud › Manage Account Storage, then remove Vyn's data. This removes it from every device signed in to that Apple Account.
- A single connection — disconnect it in Vyn's settings. Its credentials leave the Keychain, and its cached library or catalogue data is discarded.
- Household profiles — delete a profile in Vyn's settings and its history and layout go with it.
How to withdraw consent
Every connection in Vyn is one you made deliberately, and every one can be undone in the same place. Disconnecting a tracker stops Vyn sending anything further to it and discards its token. Because a token can also be revoked at the service's own end, and because that is the only way to be certain, we recommend you also revoke Vyn's access in your Trakt, Simkl or Plex account settings.
Vyn has no account of its own to delete. Apple requires apps that offer account creation to offer account deletion in the app; Vyn creates no account, so there is nothing to delete beyond the steps above.
12 Your rights
Under the UK and EU GDPR you have rights of access, rectification, erasure, restriction, portability and objection. Under the CCPA and similar US state laws you have rights to know, delete, correct and opt out of sale or sharing.
These rights are unusually easy to exercise here and unusually hard to route through the developer, for the same reason: the data is on your device, in your possession, and the developer holds no copy. Deleting the app is a complete erasure. If you believe the developer nonetheless holds personal data about you — most likely an email exchange — write to hello@vyn.app and it will be provided or deleted within one month.
If you are in the UK or the EEA and are unhappy with the response, you may complain to your national supervisory authority.
International transfers. The developer transfers nothing. When you use a third-party service through Vyn, your request goes to wherever that service is hosted, which for TMDB and the trackers is generally the United States. That is a transfer you make directly, on that service's own terms.
13 Children
Vyn is not directed to children and is not in the Kids category. It collects no data from anyone, so it collects none from children. Vyn does not verify the age of the person using it, and it does not control what your own servers or IPTV subscription contain — if a young person uses your library, curating it is your responsibility. Vyn's household profiles keep viewing histories separate but are not a parental control.
14 This website
vyn.app is a static site. It sets no cookies, runs no analytics, embeds nothing from a third party, loads no external fonts, and has no forms. Nothing on this page can identify you.
The site is hosted by Netlify, which — like any web host — processes the request logs needed to serve and protect it, including IP addresses, for a limited period. See Netlify's privacy notice.
15 Changes
If this policy changes, the date at the top of the page changes with it, and the current version always lives at this address. A change that materially widens what Vyn does with your data will be announced in the app's release notes as well, rather than made quietly.
16 Contact
Questions about privacy, requests about your data, or anything else about Vyn:
Vyn — privacy and support
hello@vyn.appOne person answers this address. Expect a reply within a few days.
See also the Terms of Use, the Copyright & Content Policy, and the Support page.