Privacy Policy

Last updated: 30 October 2026

This page is available in Arabic and English (العربية). In case of any inconsistency, the Arabic text prevails.

This policy explains how flmm ("flmm", "we", "us") handles your data when you use the app on iPhone, iPad, Apple TV, Mac, Android and Android TV, and when you visit our website flmm.app. flmm is a media center: you connect your own sources (your personal media server, your files, or a playlist from a service you subscribe to) and the app displays and plays what you connect. It is designed to work with no account and no collection of personal data; your data stays on your device and your own server.

1. Who we are

The operator of flmm is responsible for the limited data described below. Contact us at info@flmm.xyz.

2. What we do not collect

• No accounts, no sign-in and no email address are needed to use the app.
• We do not collect your name, precise location, contacts, photos or any personal identifier.
• No advertising identifiers, no ads, no tracking networks, no third-party analytics SDKs inside the app, and no selling or renting of data to anyone.
• We never receive or store your library, your files, what you watch or search for, or the credentials of your servers and services, except what you choose to send in a problem report (section 9).

3. What is stored on your device only

• Your list, watch history, resume positions and preferences (language, subtitles, audio, profiles, layout) are saved locally on the device.
• Credentials for services you connect (media servers, playlists, your Trakt token) are kept in the operating system's secure storage on your device and never reach our servers. On Apple devices, if you turn on server login sync, they are synced between your devices through iCloud Keychain, which is end-to-end encrypted.
• Content you download for offline viewing is stored on your device only.
• On Apple devices, if you enable sync, your profiles and preferences are synced between your devices through your own iCloud (iCloud Key-Value Storage). That data stays in your iCloud account under Apple's privacy policy, and we cannot access it.

4. Essential network requests

• Title information: the app fetches titles, synopses, artwork, ratings and air dates from public databases such as TMDB, either through our servers or directly from those databases' public image and data services. These requests carry no personal identifier, but like any internet request they reveal your device's IP address to the party receiving them.
• Subtitles: when you request a subtitle file, details of the title you are watching (its name, episode number and release name, never your identity) are sent to public subtitle providers to fetch a matching file.
• Configuration file: on every launch the app fetches a public configuration file from our servers (the block-list for inappropriate content and the minimum supported version). See "Aggregate statistics" below.

5. Optional services

The following work only if you enable them, and you can turn them off or disconnect them at any time in Settings:

• Media servers and playlists: when you connect your own server (Plex, Emby or Jellyfin) or a playlist from an internet television service, the credentials are stored on your device, and browsing, playback and progress reports go directly to that server or service without passing through us, under its own policy.
• Trakt: if you link a Trakt account to sync watch history, the access token is stored on your device only. Linking and renewing the link pass through our server, which adds flmm's app key and keeps nothing from it, and your watch history is sent directly to Trakt under the Trakt privacy policy.
• AI features (part of flmm Pro): when you use subtitle translation, smart search or Arabic descriptions, only the requested text (the subtitle file contents, the search phrase or the title's public details) is sent through our servers to our AI model providers, Anthropic (Claude) and Google (Gemini), for processing, with no personal identifier. We keep the results on our servers (translations for 90 days, search answers for 7 days, descriptions for 180 days) so they can be served again; they are not linked to you or your device. Processing at the providers is subject to their policies, and these features run only when you ask for them.
• Notifications: if you enable new-episode notifications, they are scheduled locally on your device with no notification server on our side.

flmm is independent and is not affiliated with, endorsed by or connected to any of these services. All names and trademarks belong to their owners.

6. Aggregate statistics

The app contains no third-party analytics tool and no tracking SDK. What we measure is the configuration request that already happens on every launch, from which we derive aggregate numbers only: platform, version number, interface language, the kinds of sources connected (their kind only, never their name or address), an install-age bracket, approximate country, whether Pro is active, and counts of playback starts and failures (never what was played).

• There is no persistent device identifier. Unique counts use rotating fingerprints that expire daily, weekly and monthly and are derived from a random value that never leaves your device. We cannot link a device across two days or build a timeline of anyone.
• Statistics never include IP addresses or any derivative of them. To prevent abuse, some requests, such as problem reports and AI features, keep a short-lived counter tied to the IP address for up to 2 hours, and our hosting provider keeps brief technical request logs.
• We do not log the identity of any source: no server name, no address, no fingerprint.
• What you watch and what you search for are never recorded.

7. How we use this information

• To do what you asked for: browsing, searching and playing from the sources you chose.
• To keep your preferences on your device.
• To understand usage volume, handle failures and improve stability.
• To protect the app and its users from abuse.
• To meet our legal obligations.

8. Purchases

flmm Pro is purchased entirely through Apple's App Store or through Google Play. We never receive or store any payment data; the store processes payment under its own privacy policy, and we never receive your name, card or billing address. The app verifies purchase status through the store's interfaces on your device only.

9. Support and correspondence

If you email our support address, we keep your message and email address to reply and follow up, and delete them when they are no longer needed for that. If you enter your email in the "keep me updated" form on flmm.app, we store only your email address to contact you about the app's availability; we use it for nothing else, share it with no one, and delete it on request at any time.

If you send a report from "Report a Problem" in the app, we receive what you wrote and the kind of problem, the app version, device model, operating system and interface language, the title that was playing if you sent it from the player, and your email if you entered one for a reply. We receive the playback log only if you leave the option to attach it on, with server addresses and passwords removed first. We keep a report for 30 days, then delete it, and use it only to fix the problem.

10. Sharing

We do not sell, rent or trade your data, and we do not share it with anyone for their marketing. We may disclose the limited information we hold only:

• to the infrastructure providers hosting our servers and website (currently Cloudflare and Vercel), to the extent needed to run them, who are bound to protect what passes through them;
• to comply with a law, regulation, court order or enforceable request from a competent authority;
• to protect the rights of flmm or its users or the safety of others, or to enforce the Terms of Use;
• as part of a merger, acquisition or asset transfer, in which case the successor is bound by this policy.

11. Retention and deletion

Because credentials, preferences and your library stay on your device and your server, you control them. You can delete them at any time by disconnecting a source in Settings, through the data-erase option in the app's settings where available, or by deleting the app, which removes its locally stored data (you delete iCloud data from your Apple settings). Aggregate statistics contain nothing that identifies you and are kept in aggregate form only for as long as needed for the purposes above. Support messages and sign-up emails are deleted when no longer needed or on your request, and reports sent from the app are deleted after 30 days.

12. Security

flmm keeps sensitive credentials in the operating system's secure storage (Keychain on iOS, macOS and tvOS, encrypted storage on Android), connects to our servers over HTTPS, and connects to your server with whatever protection that server supports; if your server runs without encryption, the connection to it is unencrypted, and securing it is your responsibility. No method of electronic storage or transmission is fully secure, and we cannot guarantee absolute security.

13. Children

flmm is intended for adults and is not directed at children under 13, and we do not knowingly collect personal data from children. The app offers profiles with a PIN for each profile that families can use. If you believe a child has provided us with personal data, contact us so we can address it and delete it.

14. Your rights

You may have rights under the laws that apply where you live, such as local data-protection laws or the EU General Data Protection Regulation (GDPR) for residents there. These include the right to: access your data, correct it, delete it, restrict or object to its processing, port it, withdraw consent, not be discriminated against for exercising these rights, and lodge a complaint with the data-protection authority in your country. Because your data stays on your device and your server, you can exercise most of these rights directly inside the app. For any other request, email info@flmm.xyz.

15. International processing

flmm is available in more than one market, and the limited data we handle may be processed in the country where we operate or where our service providers operate. By using the app you understand that your information may be processed outside your country.

16. The flmm.app website

Our website flmm.app uses aggregate visit statistics with no tracking cookies and no personal identifier (Vercel Web Analytics). The site sets no tracking cookies and contains no advertising tool.

17. Changes

We may update this policy from time to time. For any material change we will update the "last updated" date above and may notify you inside the app; continuing to use the app afterwards means you accept the updated version.

18. Contact

For any privacy question or to exercise your rights, email info@flmm.xyz.