Privacy Policy

Last updated: October 20, 2026

Kultur is operated by DEVS ("we", "us", "our"). Kultur is a personal media tracking and social app for movies, series, games, and books. This policy explains what data we collect, why, and how we handle it.

1. Data We Collect

Account information

• Email and password — used to create and authenticate your account. Passwords are hashed; we never store them in plain text.
• Display name and avatar — set by you in your profile.

Content you create

• Library entries — movies, series, games, and books you mark as watched, playing, reading, or want-to-watch.
• Reviews and ratings — your written reviews and star ratings.
• Playlists — lists you create, including their titles, descriptions, pictures, items, and privacy level (public, friends-only, or private).
• Chat messages — messages sent in playlist chat rooms.
• Reports and blocks — when you report content or block a user.

Automatically collected data

• Push notification token — if you enable notifications, we store your device's push token to deliver them.
• Error and crash reports — we collect crash data and performance traces to improve app stability. These may include device model, OS version, stack traces and, if you are signed in, your account ID. They do not include your personal content. When a request to our servers fails, we record the request (which can include a search you typed), its network address, the app and system version that sent it and, if you are signed in, your account ID, and send this to our error-monitoring provider.
• Approximate location (optional) — if you grant the location permission during onboarding, we collect coarse-precision coordinates (~3 km accuracy at the lowest precision setting) and the resolved city, region, and country derived from them, used to default your streaming-region preference. This is requested once during signup; you can decline. The data is stored with your account and visible only to administrators.
• Install record — the first time Kultur opens, the app creates a random install identifier. With it we record how far the install gets through setup (for example, that the welcome screen was shown or an account was created), the phone's region setting as a country (never your location), whether the install came from an invite link or a printed flyer and which one, the platform and the app version. When you create an account, the install record is linked to it.
• Usage data — while you are signed in, we record your app sessions (when the app is opened, for how long, and when you were last active) and what you do in the app: the screens you open (for example, that a title's page was opened), the searches you make and the results you open, what you log, rate or save, the invites you share, the pictures you share from the app, which of our notifications you open, and when you are shown the Kultur Pro offer or a notification prompt and what you answer. Each session also records your device model, operating system version, the phone's language and region settings, and the app version.
• Install attribution — an install-attribution provider receives your device's vendor identifier (an identifier Apple gives each app maker; not the advertising identifier, which Kultur never asks for), an install identifier of its own, Apple's install-attribution token, your network address, your device model, operating system version, language, region and time-zone settings, the app version, how often the app is opened, and one event the first time the app shows you where a title streams. It is used to measure which ad campaigns lead to people installing Kultur. It does not receive your account, your email or anything you log.

Purchase information

• Subscription status — whether your subscription is active, expired, or cancelled, and which plan you are on (monthly or yearly).
• Transaction identifiers — transaction IDs from Apple, linked to your account, used to verify and manage your subscription.
• Renewal and expiration dates — used to determine when your subscription renews or ends.
• We do not store your payment card details, billing address, or platform account credentials. All payment processing is handled directly by Apple.

2. Data We Do Not Collect

We do not collect health data, advertising identifiers, or browsing history. We do not sell, rent, or share your personal data with advertisers or data brokers.

If you choose to use "Find friends from contacts," the app uses your device contacts to find friends already on Kultur. Your contacts' actual email addresses are never sent to our servers — only encoded fingerprints that cannot be reversed back into the original addresses, even by us. Raw contact data is never transmitted or stored. This is a one-time scan that only runs when you explicitly grant permission.

3. How We Use Your Data

• Provide the service — authenticate you, store your library, show your reviews, deliver chat messages, send push notifications.
• Social features — show your public or friends-only activity to people who follow you, and show you theirs.
• Recommendations — suggest content based on your library and ratings. If you allow Ask AI, its answers are written by Anthropic's AI (see section 4).
• Improve stability — use crash reports to find and fix bugs.
• Understand how Kultur is used — use install and usage data to see which features people use, where they get stuck, and how many installs become accounts.
• Measure how people find Kultur — use install attribution to see which ad campaigns lead to installs.

4. Third-Party Services

We use third-party service providers for hosting, authentication, error monitoring, push notification delivery, subscription management, and install attribution. These providers process data on our behalf and are contractually obligated to protect it. Specifically, RevenueCat processes your account ID and subscription lifecycle events (purchases, renewals, cancellations) to keep your subscription status up to date, and an install-attribution provider receives the install-attribution data described in section 1 to measure which ad campaigns lead to installs. Apple handles all payment processing directly — we never receive or store your payment details. We do not share your personal data with advertisers or data brokers.

Trailers. Kultur uses the YouTube API Services: when you press Trailer on a film, series or game, the trailer plays in YouTube's own player inside the app. Nothing is sent to YouTube before you press Trailer. While the player is open, YouTube (Google) receives your device's network address and information about your device and the video, and may store, access and read cookies and similar technologies on your device; Kultur discards them when you close the player. Ads may play before a trailer, as the channel that uploaded it decides. Google's handling of this data is described in the Google Privacy Policy: https://policies.google.com/privacy

Ask AI. If you allow it, Ask AI shares what you have logged and rated with Anthropic, whose AI writes the answer. Anthropic does not train its AI on it. You can turn it off in Profile → Privacy & data. Anthropic's Privacy Policy: https://www.anthropic.com/legal/privacy

5. Data Storage and Security

Your data is stored on secure, managed infrastructure. All communication between the app and our servers is encrypted in transit. Passwords are never stored in plain text. We implement access controls to ensure your data is only accessible to you and those you choose to share it with.

6. Your Rights

• Access — your library, reviews, playlists, and profile are visible to you in the app at all times.
• Correction — you can edit your profile, reviews, and playlists directly in the app.
• Deletion — you can delete your account from within the app (Profile → Account → Delete Account). This permanently removes your account and the data linked to it, with the exceptions listed in section 8.
• Data portability — you can export your data as a Kultur JSON file from Profile → Privacy & data → Export Data. The export includes your library, reviews, playlists, profile fields, follow/block lists, and notification preferences.

7. Children's Privacy

Kultur is not directed at children. At signup, every account holder must self-attest to being at least 13 years old; we do not knowingly collect data from anyone below this age. In the EU, the minimum age for valid consent under GDPR Article 8 varies by member state — generally 16, with national floors as low as 13 (e.g., Denmark, Sweden) and 14 (e.g., Spain, Italy). Where a higher local threshold applies, the user must meet it to use the service. If you believe a child below the applicable threshold has provided us with personal data, please contact us and we will delete it.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, your personal data is permanently removed, except for the following, which are kept without your name or any link to your account: messages you sent in chats, recommendations you sent, items you added to someone else's list, reports you filed, and the install record described in section 1 (its install identifier, the setup steps it reached, how it was installed, its country, platform, app version and dates). Reports other people filed about you or your content, and the moderation records about them, are kept for moderation. Your purchase history stays with Apple and our subscription provider. Crash reports may be retained for up to 90 days after account deletion.

9. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you through the app. The "Last updated" date at the top reflects the most recent revision.

10. Contact

If you have questions about this privacy policy or your data, contact us at:

Email: haraldluckow@gmail.com