Privacy Policy

This Privacy Policy explains how Cuvee, LLC ("Cuvee", "we", "us") handles information when you use the Cuvee apps for Android, Android TV, Fire TV, Windows, macOS and Linux, and — once released — for iOS, iPadOS and tvOS (the "App"), our websites cuvee.io and dl.cuvee.io, and the online services the App relies on (together, the "Service").

1. Information that stays on your device

To work, the App stores the following on your device: the sources you add (server and share addresses, user names, passwords and sign-in tokens), your library index, artwork and metadata caches, playback positions and preferences, any videos you download for offline viewing, and diagnostic logs. This information is not sent to us. You can remove it by deleting a source in the App or by uninstalling the App.

When you play from a media server such as Emby or Jellyfin, the App reports playback progress to that server, as media-server apps normally do, so that your place is remembered across devices.

2. Information we receive

2.1 Recognising titles

When the App needs to work out what a video file from a local folder, network share or cloud drive is, it sends the names of the file and of the folders in its path to our metadata service at api.cuvee.io. We use them to identify the film or episode and send back details such as its title, year, synopsis and artwork links. We do not receive the file itself. File names sometimes contain personal information; if that concerns you, rename the files or folders before adding them to Cuvee.

2.2 Licences and trials

When you activate a licence or start a trial, the App sends the licence code, the platform (for example "android" or "windows"), the App version and a device identifier. The device identifier is a one-way hash of an identifier provided by your operating system; the original identifier is not sent and the hash does not contain your name. While a licence is in use, the App checks it with our licence service about once a day, sending the licence token, the device identifier and the App version.

For each licence we keep the licence code, the email address used to buy it, the plan, its validity dates, and the devices it has been activated on with the times they were first and last seen. We use this to provide the features you paid for, to apply the number of devices your plan includes, to prevent misuse of trials, and to help you when you contact us.

2.3 Intro and credit timings

To offer "skip intro" and "skip credits", the App asks our service for the timings of the title you are playing, identified by catalogue IDs (such as TMDB, IMDb or MyAnimeList IDs), season and episode number. If we have no timings, the App may ask the third-party databases listed in section 3 directly, and send any timings it finds back to our service so that they are ready for the next viewer. These requests contain identifiers of the title, not of you.

2.4 Purchases

Payments are handled by our payment processor (Stripe) or, for purchases made in the App Store, by Apple. We receive confirmation of the purchase — your email address, what you bought, the amount, the currency, your country and a transaction reference — but never your full card number.

2.5 Support

If you email us, we receive your email address and whatever you choose to send, such as a description of a problem or log files you attach.

2.6 Our websites and downloads

cuvee.io does not use cookies, analytics or advertising tags. It is delivered by Cloudflare, which processes your IP address and request details to deliver and protect the site. The site loads its fonts from Google Fonts, so your browser also contacts Google, which receives your IP address. When you download the App from dl.cuvee.io, our server records your IP address, the time, the file requested and your browser's user agent, which we use for security and to count downloads.

2.7 Server logs

Like most online services, our servers receive your IP address and technical details of each request. We use these logs for security, to prevent abuse (for example rate limiting) and to fix problems, and keep them only as long as needed for those purposes.

3. Services the App connects to directly

• Your own sources. Media servers, network shares, cloud drives and IPTV providers you add are chosen by you. The App connects to them directly, and their operators' own policies apply.
• Google Drive. If you connect a Google account, you sign in with Google in your browser and the access token is stored on your device. The App lists and plays your files directly from Google. Data from Google Drive is not sent to our servers, except that the names of video files and their folders are sent to our metadata service as described in 2.1 to identify them. We do not use Google user data for advertising, we do not sell it, and no person at Cuvee reads it unless you ask us to, it is needed for security, or the law requires it. Cuvee's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• TMDB. Posters and other artwork are loaded from The Movie Database (image.tmdb.org), which receives your IP address and the image requested.
• Intro and credit databases. SkipDB, TheIntroDB and AniSkip may receive requests as described in 2.3, together with your IP address.
• Your local network. Finding shares and servers on your network, and casting to other devices, happen on your local network and are not sent to us.

4. How we use information, and our legal bases

We use the information above to provide and support the Service, to issue and check licences, to process purchases and refunds, to keep the Service secure and prevent abuse, to fix problems, and to meet legal obligations such as tax and accounting. Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (licences, purchases, support); our legitimate interests in providing the features you use, such as recognising titles and intro timings, and in securing and improving the Service; compliance with legal obligations; and your consent where the law requires it.

5. Who we share information with

• Service providers who host and run the Service for us: Cloudflare (website delivery and network security), Google (email), Stripe and Apple (payments), and the providers that host our servers. They may use the information only to provide their services to us.
• The third parties in section 3, in the way described there.
• Authorities, when the law requires it, or to protect the rights, property or safety of our users, the public or Cuvee.
• A successor, if Cuvee is involved in a merger, acquisition or sale of assets, subject to this Policy.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

6. How long we keep information

We keep licence and purchase records for as long as the licence is valid and afterwards for as long as tax, accounting and other legal obligations require. Support emails are kept as long as needed to resolve your request and follow up. Server and download logs are kept for a limited period and then deleted or anonymised.

7. International transfers

Cuvee, LLC is based in the United States, and our service providers may process information in other countries. Where data protection law requires it, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for transfers out of the European Economic Area, the United Kingdom or Switzerland.

8. Security

We protect information with measures appropriate to its sensitivity, including encrypted connections to our services and signed licence tokens. No system is perfectly secure, but we work to protect your information and will tell you about a breach where the law requires.

9. Your choices and rights

You can use much of Cuvee without giving us anything that identifies you. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of California and other US states have rights to know, delete and correct personal information, and not to be discriminated against for using them; we do not sell or share personal information as those laws define it.

To make a request, email support@cuvee.io. We may need to confirm that the request comes from you, for example from the email address used for a purchase. Deleting licence records deactivates the licence. If you are in the EEA or the UK, you may also complain to your local data protection authority.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy as the Service changes. We will change the date at the top and, for significant changes, give notice on this site or in the App before they take effect.

12. Contact

Cuvee, LLC — support@cuvee.io