Privacy Policy

1. Introduction

Welcome to CozyLounge ("we," "our," or "us"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Android application and related services.

By using CozyLounge, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

• Email Address: Collected when you create an account or join our waitlist
• Account Credentials: Username and encrypted password for your CozyLounge account

2.2 Service Data

• Watch History: Records of content you've viewed (stored locally on Free plan, synced to cloud on Pro plan)
• RealDebrid API Tokens: Encrypted tokens for accessing your RealDebrid subscription
• IPTV Credentials: Encrypted credentials for your IPTV provider (Basic and Pro plans only)
• Favorites and Playlists: Your saved content and custom lists
• User Preferences: App settings, theme choices, and viewing preferences

2.3 Technical Information

• Device Information: Device type, Android version, screen resolution
• App Analytics: Usage patterns, feature usage, crash reports (anonymized)
• IP Address: Collected for security and authentication purposes

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve CozyLounge's core functionality
• Cloud Sync (Pro): To synchronize your watch history, favorites, and settings across devices
• Authentication: To verify your identity and manage your account
• Communication: To send service updates, security alerts, and respond to support requests
• App Improvement: To analyze usage patterns and fix bugs
• Legal Compliance: To comply with applicable laws and regulations

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored on secure servers hosted by Amazon Web Services (AWS) in the EU region. Local data (Free plan) is stored encrypted on your device. Cloud-synced data (Pro plan) is encrypted both in transit (TLS 1.3) and at rest (AES-256).

4.2 Security Measures

• All sensitive credentials (RealDebrid tokens, IPTV passwords) are encrypted using industry-standard encryption
• HTTPS/TLS encryption for all data transmitted between your device and our servers
• Regular security audits and vulnerability assessments
• Access controls and authentication for all administrative systems

5. Third-Party Services

CozyLounge integrates with the following third-party services:

• Google Play Services: For app distribution, payments, and account management. See Google's Privacy Policy
• TMDB (The Movie Database): For movie and TV show metadata, posters, and information. See TMDB Privacy Policy
• RealDebrid: For streaming content through your RealDebrid subscription. We only store encrypted API tokens. See RealDebrid Privacy Policy

Important: CozyLounge does not provide, host, or distribute any content. You must bring your own legal subscriptions (RealDebrid, IPTV providers). We are not responsible for content accessed through third-party services.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share your information
• Service Providers: With trusted partners who help us operate our services (e.g., AWS for hosting)
• Legal Requirements: When required by law, court order, or legal process
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• Security and Fraud Prevention: To protect our users and services from abuse

7. Cookies and Tracking

Our Android application does not use browser cookies. However, we use device identifiers and session tokens to maintain your authentication and preferences. Our website (cozylounge.tv) does not use tracking cookies or third-party analytics.

8. Your Rights (GDPR Compliance)

If you are located in the European Economic Area (EEA) or UK, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your account and data
• Right to Data Portability: Export your data in a machine-readable format
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, contact us at support@cozylounge.tv. We will respond within 30 days.

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Data permanently deleted within 30 days of account deletion
• Legal Requirements: Some data may be retained longer if required by law
• Backups: Backup copies deleted within 90 days

10. Children's Privacy

CozyLounge is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at support@cozylounge.tv.

11. International Data Transfers

Your data is primarily stored in the EU (AWS EU region). If you access CozyLounge from outside the EU, your data may be transferred to and processed in the EU. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app and on our website
• Updating the "Last updated" date at the top of this policy
• Sending an email notification for significant changes (if you have an account)

Your continued use of CozyLounge after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: