SETTEE · POLICY DRAFT

Privacy Policy

Working draft for review. Based on the supplied 24 October 2026 policy draft. Settee is the working operator name; contact hello@getsettee.com. Legal operator identification, postal contact if needed, payment arrangements, metadata disclosures, retention details and copyright-agent registration remain to be confirmed. Some statements describe planned features. This draft is not the final published policy.

Settee is run by Settee in British Columbia, Canada. This policy explains what we collect, why, and the choices you have. The short version: your provider details, what you watch and your lists are encrypted. The database alone cannot decrypt them. We don't read, sell or share those details.

Encrypted account data

The following data is encrypted before it syncs. A server-held copy of the account key is locked with a master key kept outside the database. Signed-in devices receive the key to open your account data; the database alone cannot decrypt it:

Video streams go straight from your provider to your device and never pass through our servers.

What we collect

WhatWhyKept for
Email address and a password hash (not your readable password)To sign you in and contact you about your accountUntil you delete your account
Profile names and kids-profile age settingsTo show the right profiles and filters on each deviceUntil you delete them or your account
Device names, models and sign-in tokensTo let you see and sign out your devicesUntil the device is signed out
Subscription status and plan (never card details)To unlock paid featuresSeven years, for tax records
Ask the Usher questionsTo answer themNot stored after the answer, except a daily count for usage limits
Bug reports you send, and automatic error reportsTo fix problems12 months after the issue is closed; photos 90 days
Country, worked out from your IP addressTo pick the right age-rating system and pricesNot stored with your IP address
Website visits, counted without cookies that track youTo understand how the site is usedAggregated only

Bug and error reports are scrubbed on your device before they're sent, to remove provider links, logins, channel names and titles.

Who we share it with

We don't sell your personal information or use it for advertising. We share it only with the services that help us run Settee, and only for that purpose:

ServiceWhat it does
CloudflareHosting, the account database and the AI behind Ask the Usher
Payment processing (not active)No checkout is enabled. Payment-provider details will be confirmed before paid plans launch.
Apple, Google, Samsung, AmazonSign-in and in-app purchases, if you use them
GitHubStores bug reports privately
Cloudflare EmailSends account and support emails
The Movie Database (TMDB)Your device fetches titles, artwork and ratings from TMDB directly, so TMDB sees your device's IP address

We may also disclose information when the law requires it. Encryption protects stored data, but is not a promise that Settee is technically unable to access it or respond to a lawful request.

Some of these services store data outside Canada, mainly in the United States, where it may be accessible to authorities under local law.

Children

Accounts are for adults only. A kids profile holds only a nickname and an age setting chosen by an adult. We don't knowingly collect personal information from children, and Ask the Usher questions from kids profiles are not stored.

Your choices and rights

Security

We use encryption in transit and at rest, keep access to our systems to a minimum, and protect the account-key copy with a master key outside the database. No system is perfectly secure. If a breach puts you at real risk of significant harm, we'll tell you and the Privacy Commissioner as the law requires.

Changes and contact

We'll post changes here and tell you by email before significant changes take effect.

Privacy officer: Settee, hello@getsettee.com.