The short version
Who is responsible
| Role | Who | Controls |
|---|---|---|
| App publisher | Sweyam | Play listing, app binary, this policy, support email |
| Server operator | You or whoever runs the server | Accounts, media, watch history, PIN, paired devices |
For library and account data on a server, the server operator is typically the data controller. Sweyam does not receive that data through normal use of the app.
Company-wide policies for Kasho and Sweyam Auth: sweyam.com/privacy.
Data on the device
| Data | Purpose | Leaves the device? |
|---|---|---|
| Server address(es) | Connect to your instance | Only to those servers |
| Device sign-in token | Stay signed in | Only to those servers |
| Library id, theme, lock prefs | Preferences | Library id → your server; theme/lock stay local |
| Playback / image caches | Smooth playback | Not uploaded to Sweyam |
On a home network the app may use plain HTTP. Public deployments should use HTTPS. Certificates from a CA you installed on the device are trusted so private CAs work.
What Sweyam does not collect
- Server addresses, tokens, library contents, or watch history (unless you voluntarily email them to support)
- Advertising identifiers or cross-app tracking
- Marketing push or email from this client
- Browser cookies inside the native app (pairing may open an external browser)
Third parties
- Your ReelStash server — all library and account API traffic
- Google Play — distribution and optional Play App Signing
- Open-source fonts / libraries — shipped in the APK; they do not phone home
We do not sell personal data. There are no ad SDKs in this client.
Retention & deletion
- On device: until you remove the server in Settings or uninstall the app
- On your server: set by the server operator; revoke the device under web Settings → Devices
- Support email: kept only as long as needed to handle your request — email [email protected] to delete correspondence we hold
Security
- Tokens encrypted at rest with the Android Keystore
- Private app storage excluded from Android backup and device transfer
- If Sweyam learns of a breach of publisher-held data (e.g. a support mailbox), we will investigate and notify when the law requires. Breaches on your ReelStash server are the operator's responsibility.
Children
This is a general media client. Whether content on a given server is appropriate for children is the server operator's and Google Play's age-rating concern.
Contact
Sweyam
India
Privacy: [email protected]
General: [email protected]
Product: sweyam.com/products/reelstash
Related: Terms of use · Company privacy