Privacy Policy

This Privacy Policy explains how Athon Studio ("we", "us", "our") handles information when you use our short-drama streaming app for Android published by Athon Studio on Google Play (package com.athon.shortreel) (the "App").

The App lets you watch short vertical drama series for free. The App has no user accounts. We do not ask for your name, email address, phone number or any login.

1. Who is responsible

Data controller: Athon Studio.
Contact for privacy questions and requests: linhcyvn@gmail.com.

2. Information that stays on your device

The App keeps the following data only on your device. We do not send it to our servers or to third parties:

• Watch history: which series and episodes you watched, and where you stopped, so the App can resume playback and show "continue watching". This list stays on your device. Separately, the App sends viewing events to our analytics provider (see Section 3): when you start an episode and when you have watched most of it, with the series and episode identifiers. These events are linked to the analytics app-instance identifier, not to your name or contact details. When you play a video, our content delivery network receives the request for that video file together with your IP address (see Section 5).
• Likes and saved series that you mark in the App.
• Your subtitle and audio choices in the player. (The App interface language you select is also sent to our analytics provider; see Section 3.)
• Cached images and catalog data (series posters and the list of series) used to make browsing faster.

Search in the App runs on your device against the catalog the App has downloaded. Your search terms are not sent to us.

This data is excluded from Android cloud backup. You can delete it at any time:

• Delete individual entries in the Library (History tab, edit mode).
• Uninstall the App, or use Android Settings → Apps → (the App) → Storage → Clear data, to remove everything.

Sharing. When you tap Share, the App opens Android's share menu with a short message and a Google Play link to the App. You choose the app and the people you share with; we do not receive the message or the list of recipients. A link shared from an episode contains a short code for that series and episode. If someone installs the App from that link, Google Play passes the code to the App as install-source information, which our analytics and attribution providers may receive (see Section 3).

3. Information collected automatically by third-party services

The App includes third-party software development kits (SDKs) that collect some information automatically when the App runs. These providers process the information under their own privacy policies. Some act on our behalf; others act as independent controllers.

3.1 Categories of information

• Device and online identifiers:
  • the Google Advertising ID (AAID), or the Android Privacy Sandbox advertising identifiers where available;
  • Firebase installation and app instance identifiers;
  • attribution identifiers such as the AppsFlyer ID.
• Approximate location: inferred from your IP address by the SDK providers' servers. The App does not request GPS or precise location permission.
• App usage events:
  • screens and features opened, app opens and the first-launch steps (language selection, onboarding);
  • viewing events: which series and episode you start and finish watching (series and episode identifiers, the share of the episode watched, how long you watched, and where you started it — feed, player, continue watching or search);
  • use of picture-in-picture mode;
  • session information.
• App performance information: how long the App takes to start and to show the first video frame, the video format and codec used, and playback error codes (including which content server was used and how many times playback was retried). These measurements do not include which series or episode you watched.
• App settings: the App interface language you select on first launch, sent to Firebase Analytics as a user setting.
• Device and technical information: device model, operating system version, language, country setting, screen size, network type, app version, mobile carrier, the date you first opened the App and the App version you first installed.
• Crash logs and diagnostics: stack traces and device state when the App crashes or misbehaves.
• Install attribution: how you found and installed the App, for example the Google Play install referrer (including the share code described in Section 2, if you installed from a shared link).

We do not collect your name, email address, phone number, contacts, photos, files, messages, precise location, payment information or the list of apps installed on your device.

3.2 Why this information is used

• Analytics: to understand how the App is used and improve it.
• App functionality and stability: to diagnose crashes and configure the App remotely (Firebase Remote Config).
• Install attribution and fraud prevention: to understand how people find the App and to detect abuse.
• Advertising: the current version of the App does not show ads. Advertising SDKs are nevertheless included in the App (Section 4) and may receive the device identifiers described above when the App starts. If we enable ads in a future version, ads will help keep the App free, and we will update this policy before that version is released.

We do not sell your personal information for money (see Section 7 for how some laws define "sale" and "sharing").

3.3 Legal bases (EEA, UK)

Where the GDPR or UK GDPR applies, we process the information described in this policy on the basis of our legitimate interests in operating, securing and improving the App (analytics, crash reporting, remote configuration, install attribution and fraud prevention), and on your consent where the law requires it. You can object to this processing or withdraw consent at any time by contacting us (Section 13).

4. Third-party SDKs used in the App

5. Video content delivery

Videos, posters and the catalog are downloaded from a content delivery network (CDN) operated for us by a service provider. As with any internet request, the CDN receives your IP address, the requested file and basic technical headers (such as user agent). The address of a video file identifies the series and episode it belongs to. The CDN processes this information to deliver the content and to keep the service secure. We do not keep individual CDN request logs; we only use aggregated traffic statistics provided by the CDN provider.

6. Your choices

• Advertising ID: you can reset or delete your Advertising ID, or opt out of personalised ads, in Android Settings → Privacy → Ads (the wording varies by device).
• Notifications: the App may ask for permission to send notifications. You can refuse, or change it later in Android settings. The App works without it.
• Deleting data: see Section 2 for data on your device. For data held by the SDK providers listed in Section 4, you can reset or delete your Advertising ID, so that new data is no longer linked to the old identifier. You can also contact us at linhcyvn@gmail.com (see Section 7).

7. Your rights

Depending on where you live, you may have the right to:

• access, correct or delete personal data;
• object to or restrict processing;
• withdraw consent;
• ask for data portability;
• lodge a complaint with your local data protection authority.

These rights come from laws such as the GDPR (EU), UK GDPR, LGPD (Brazil), CCPA/CPRA (California), DPDP Act (India), PDP Law (Indonesia), Decree 13/2023 (Vietnam), PIPA (Korea), POPIA (South Africa) and PIPEDA (Canada).

How to make a request. Email linhcyvn@gmail.com. Because the App has no accounts, we can only find data that is linked to an identifier you give us. Please include your Advertising ID (shown in Android Settings → Privacy → Ads, or Settings → Google → Ads on some devices) and the approximate date you used the App. We use it to submit access or deletion requests to our attribution provider (AppsFlyer). Our analytics data (Firebase) is not linked to any identifier shown in the App, so we usually cannot look it up; it is deleted automatically after the period in Section 8. We will respond within 30 days.

If we cannot link some third-party data to you, we will tell you which provider to contact directly.

We do not sell personal information for money. Some laws define "sale" or "sharing" broadly, and that definition can cover sharing advertising identifiers with third parties. California residents can limit this by resetting or deleting the Advertising ID and turning off ad personalisation in Android settings.

8. Data retention

• Data on your device stays until you delete it or uninstall the App (Section 2).
• Firebase Analytics (Google Analytics) event data: kept for 2 months, then deleted automatically. Aggregated, non-identifying reports may be kept longer.
• Firebase Crashlytics crash reports and associated identifiers: kept for 90 days, then deleted.
• Firebase installation identifiers: kept until they are deleted or reset.
• Other SDK providers keep data according to their own policies (Section 4).
• CDN logs: see Section 5.

9. Security

The released App is configured to block unencrypted (cleartext) network connections, and our CDN is served over HTTPS. The catalog data is additionally encrypted. The third-party SDKs listed in Section 4 manage their own network connections and state that they protect data in transit. No method of transmission or storage is completely secure, but we take reasonable measures to protect information.

10. International transfers

Our service providers may process information in countries other than yours, including the United States, Singapore, China and countries in the European Union. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

11. Children

The App is intended for adults (18+) and is not directed to children. Some of the third-party SDKs in the App are not certified for apps directed to children, and we tell them that our users are not children. We do not knowingly collect personal information from children under 13 (or the minimum age in your country). If you believe a child has used the App, contact us at linhcyvn@gmail.com and we will help delete related data.

12. Changes to this policy

We may update this policy, for example when we add or remove an SDK or enable ads. We will post the new version at this URL and update the "Last updated" date. For significant changes we will also notify you in the App or in the Google Play listing.

13. Contact