01 Who we are
TrueReels is an iOS app published by FTP Travel LLC ("TrueReels", "we", "us"). This policy explains, in plain English, what the TrueReels app collects, why, where it is kept, and what you can ask us to do with it.
- Legal entity: FTP Travel LLC
- App: TrueReels for iPhone, bundle identifier com.truereels.app
- Privacy contact: privacy@truereels.app
- Postal address available on request from legal@truereels.app
02 What we collect
2.1 Information you give us
| Data | Why we have it |
|---|---|
| Email address | You create a TrueReels account with an email address and a password. The email address identifies your account, lets you sign in on another device, and lets us send account and service messages such as a password reset. |
| Password | Stored only as a salted cryptographic hash by our authentication provider. We cannot read your password and we never see it in plain text. |
| Account identifier (user id) | An internal identifier for your account. It links your watch progress, saved list and subscription record to you, and is the identifier we pass to our subscription provider. |
| Support correspondence | If you email us, we keep the message so we can answer it. |
2.2 Information created by using the app
| Data | Why we have it |
|---|---|
| Watch progress | So "Continue watching" and "Resume" put you back where you stopped, and so an episode is marked watched. |
| Saved items ("My List") | So your saved series appear on your list across sessions and devices. |
| Watch events | Episode started and completed, and minutes watched — to power the counters on the You screen (episodes, minutes, day streak) and to understand, in aggregate, which episodes people finish. |
| Subscription status | To decide whether an episode is unlocked. Received from Apple through our subscription provider — see section 4. |
2.3 Technical and diagnostic information
| Data | Why we have it |
|---|---|
| Crash reports | To find and fix bugs. If you have Apple's "Share With App Developers" setting turned on, Apple sends us crash logs and performance data. Apple aggregates this and we do not tie it to your identity. You can turn it off at any time in iOS Settings → Privacy & Security → Analytics & Improvements. |
| Server logs | IP address, request time and device/OS version, kept briefly by our backend and video providers for security, abuse prevention and troubleshooting. |
03 What we do not collect
To be explicit, because this is the part most apps are vague about:
- No advertising. The app contains no ads and no ad SDKs.
- No advertising identifiers. We do not request or use the IDFA, and we do not present the App Tracking Transparency prompt, because we do not track you.
- No third-party analytics or attribution SDKs. There is no analytics SDK in the app building a profile of you.
- No tracking across other companies' apps or websites, in the sense Apple defines "tracking".
- No sale or rental of personal data, ever. We do not share your data with data brokers.
- No microphone, camera, contacts, photos, health or precise location access. The app does not ask for these permissions.
- No card numbers, bank details or billing addresses. Apple handles that — see section 4.
04 Payments and subscriptions
Subscriptions to TrueReels are sold only through Apple's In-App Purchase system.
- Apple collects and processes your payment. We never see your card number, security code, billing address or bank details.
- We receive a signal that a subscription for your account is active, in trial, cancelled or expired, along with the renewal date and the product identifier, and we store it so the app knows which episodes to unlock. Access to the full catalog is granted by a single entitlement, all_access.
- Our subscription provider, RevenueCat, links your Apple purchase to your TrueReels account. The identifier it uses for you is your TrueReels account identifier — no separate advertising or device-tracking identifier is involved.
- Apple's own handling of your purchase is governed by Apple's privacy policy, not this one.
- Refunds and billing disputes are handled by Apple. See our Terms for how to request one.
05 Where your data is stored, and who processes it
Your account data lives in our Supabase backend (managed PostgreSQL with its built-in authentication service). Row-level security is enabled so that a signed-in account can read and write only its own rows — one user cannot read another user's progress, saved list or subscription record.
| Provider | Handles | Sees personal data? |
|---|---|---|
| Apple | Payment processing, App Store delivery, opt-in crash analytics | Yes — under Apple's own policy |
| Supabase | Database and authentication hosting for your account, progress, saved list and subscription record | Yes — as our processor |
| RevenueCat | Maps your Apple subscription to your TrueReels account so entitlements work | Yes — account identifier and subscription state only |
| Mux | Delivers the video stream to your device | Playback requests and standard connection data; no account profile |
| Cloudflare R2 | Stores our master video files and artwork | No user data |
Data may be stored and processed in the United States and other countries where our providers operate. Where required, transfers rely on standard contractual clauses or equivalent safeguards.
06 How long we keep it
| Data | Retention |
|---|---|
| Account record, watch progress, saved list | For as long as your account exists |
| Watch events | 24 months, then deleted or aggregated so they can no longer identify you |
| Subscription records | The life of the account, plus up to 7 years where needed for tax and accounting records |
| Crash and diagnostic data | Retained per Apple's schedule; we keep no separate copy tied to your identity |
| Server logs | Typically 30–90 days, per our providers' standard retention |
| Support correspondence | 24 months from the last message in the thread |
When you delete your account, we delete or irreversibly anonymise the data above within 30 days, except records we are legally required to keep, such as transaction records for tax purposes.
07 Your rights and choices
Wherever you live, you can:
- Access — ask for a copy of the personal data we hold about you.
- Correct — ask us to fix data that is wrong.
- Delete — delete your account from inside the app, or email us and we will do it.
- Object or restrict — ask us to stop a particular use of your data.
- Portability — receive your data in a machine-readable format.
- Withdraw consent — where we relied on consent, withdraw it at any time.
If you are in the EEA or UK, the legal bases we rely on are performance of a contract (running your account and subscription), legitimate interests (keeping the service secure, fixing bugs, understanding aggregate usage) and legal obligation (tax and accounting records).
If you are in California, we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we will not discriminate against you for exercising your rights.
To make any request, email privacy@truereels.app. We respond within 30 days. We may ask you to confirm control of the account's email address before we act, so that nobody else can request your data.
08 Children's privacy
TrueReels is not directed to children under 13, is not submitted to the App Store Kids Category, and we do not knowingly collect personal information from children under 13. The app covers historical, criminal and disaster subject matter intended for teenage and adult viewers.
If you believe a child under 13 has provided us personal information, email privacy@truereels.app and we will delete the account and its data promptly. Parents and guardians can use Apple's Screen Time and Ask to Buy controls to manage downloads and purchases. We comply with the US Children's Online Privacy Protection Act (COPPA) on this basis.
09 Security
- Traffic between the app and our backend is encrypted in transit (TLS/HTTPS).
- Data at rest in our backend is encrypted by the hosting provider.
- Passwords are stored only as salted hashes and are never recoverable in plain text.
- Row-level security confines every read and write to the signed-in account's own rows.
- Access to production data is restricted to authorised personnel and service accounts.
- Video playback uses short-lived signed URLs, so a stream link cannot be shared or reused indefinitely.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant regulator where the law requires it.
10 Changes to this policy
If we change this policy we will update the "Last updated" date at the top and publish the new version at the same URL. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect. Continuing to use TrueReels after a change takes effect means you accept the updated policy.
Any new category of data will appear in this policy, and in the App Store privacy label, before it is collected.
11 Contact
FTP Travel LLC — publisher of TrueReels (com.truereels.app)
- Privacy and data requests: privacy@truereels.app
- General support: support@truereels.app — see the support page
- Legal and rights enquiries: legal@truereels.app