Privacy Policy

Last updated: 24 May 2026

This policy explains what data Episody (the “Service”) collects and how we use it. Episody is the data controller. We operate from Bulgaria (EU); the GDPR applies.

1. Data we collect

• Account: email address, username, and a securely hashed password.
• Your content: watchlists, watched episodes, ratings, favourites, and badges.
• Push tokens: a device push token (issued by Apple) so we can send notifications.
• Subscriptions: your plan status, processed and billed by Apple.
• Technical data: IP address, device and app version, and similar request information.
• Advertising data: identifiers and information used to serve ads (see §4).

2. How we use it

To operate and improve the Service, maintain your account, send notifications, display advertising, prevent abuse, and comply with legal obligations. Our lawful bases include performing our contract with you, your consent (for ads/tracking where required), and our legitimate interests.

3. Anonymized and aggregated data

We may convert data into irreversibly anonymized or aggregated form, with your name, email, and other identifiers removed. Such data is no longer personal data, and we may retain, analyze, share, and use it for any purpose, indefinitely.

4. Advertising

The Service displays advertising through Google AdMob. Google may collect and use device identifiers and related data to deliver and measure ads, as described in Google’s policies. On iOS, any tracking is subject to your choice in Apple’s App Tracking Transparency prompt. We may add analytics providers in the future.

5. Who we share data with

We share data with service providers that operate the Service on our behalf, and with advertising partners:

• Apple — payments, subscriptions, and push delivery.
• Google AdMob — advertising.
• Service providers for hosting and database, email delivery, content storage/CDN, and error monitoring.

We do not sell your name or email address.

6. International transfers

Some providers may process data outside your country, including outside the EU. Where required, such transfers rely on appropriate safeguards.

7. Retention & deletion

You can delete your account in the app (Settings → Delete Account). When you request deletion, you are signed out and your account is scheduled for permanent deletion. You can cancel within 30 days simply by logging back in. After 30 days, your account and personal data are permanently deleted and cannot be recovered; residual copies in encrypted backups are purged within 90 days. We may retain data we have irreversibly anonymized (see §3) for any purpose, and limited data where required by law.

8. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or a copy of your personal data, and may object to or restrict certain processing. You can exercise account deletion in the app. You also have the right to lodge a complaint with your supervisory authority (in Bulgaria, the Commission for Personal Data Protection).

9. Children

The Service is not directed to children and is intended for users aged 16 and over. We do not knowingly collect data from children under this age.

10. Changes

We may update this policy at any time. Material changes take effect when posted, and the “last updated” date above will change.

11. Contact

For any question or privacy request, contact us at contact@episody.app. You can delete your account at any time in the app (Settings → Delete Account).