Your information

ArashFlix Privacy Policy

Effective October 11, 2026. ArashFlix is a personal media client published by Vakil Ventures LLC.

Your servers and connected services

ArashFlix connects to the Plex, Jellyfin or Emby account or server you choose. Sign-in information, server addresses, searches, library requests, media identifiers, playback progress and changes you make are sent to the service needed to provide that feature. Those services receive network information such as your IP address, app/device identifier and user agent. Their operators control their own data handling and retention.

Data stored on your device

The app stores connection and sign-in information, profiles, preferences, playback state, downloaded media and cached artwork locally. Server access tokens stored in the app database use AES-GCM encryption, with the encryption key stored in the app’s preferences. This is not OS-backed Keychain or Keystore protection: someone with full access to both the preferences and database can recover those tokens.

TV home-screen integration can publish titles, progress and artwork to the operating system. Custom download folders and system backups may retain copies outside the app.

Optional features

If you connect a watch tracker, request service, artwork provider, external player, companion remote or custom watch-party relay, the app sends the information required for that feature to the provider you choose. Integrations include Trakt, Simkl, MyAnimeList, AniList, MDBList, Seerr and artwork hosts. External players can receive media URLs containing server credentials. Local discovery sends traffic on your local network. A custom watch-party relay receives room, participant, media and playback timing information; it is not a media streaming server.

Developer services and advertising

This release does not enable a Vakil Ventures crash-reporting, support-log-upload, managed OAuth relay, managed watch-party relay or Discord artwork-upload service. Automatic update checks and donation prompts are disabled. The app contains no advertising SDK, and Vakil Ventures does not sell personal data or use app data for targeted advertising. Optional connected providers have their own policies.

Permissions and security

The app may request access needed for local server discovery, notifications, media playback, downloads or choosing files and artwork. You can deny optional permissions in system settings. Connections to supported cloud providers use HTTPS. A server or relay you configure may use HTTP; use a trusted network and HTTPS when possible. The app cannot guarantee the security of a server, external player, shared download folder or backup provider you select.

Your choices and deletion

Disconnect servers and optional services, remove profiles, delete downloads, clear the artwork cache or delete app data to remove local information. ArashFlix does not create a separate Vakil Ventures account. Removing local data does not delete your Plex, Jellyfin, Emby or tracker account, or information held by those providers. Contact their operators to request account or server-side deletion. Downloads in custom folders, backups and system TV artwork may need separate removal.

Retention and contact

Local data remains until removed by you, cache maintenance or the operating system. Connected providers set their own retention periods. If you email us, we receive your email address and the information you choose to include so we can respond. Do not send passwords, access tokens, private server URLs, personal media or unredacted logs.

For support, privacy questions or a request concerning your support correspondence, email [email protected]. Changes to this policy will be posted here with an updated effective date.