Legal

Privacy Policy

Last updated: 27 June 2025

Summary: Kitsu Mobile Review does not collect, store, or transmit any personal data to the developer or any third party. The app communicates exclusively with your own Kitsu server. No analytics, advertising, or tracking of any kind is used.

1. Who We Are

Kitsu Mobile Review ("the App") is an independent iOS and iPadOS application developed and published by Pete Draper. For any privacy-related questions, please contact:

petedraper@me.com

The App is not affiliated with, endorsed by, or associated with CG Wire, the makers of Kitsu.

2. What Data the App Processes

The App processes the following information solely on your device:

Server connection details — the hostname, port, and protocol of your Kitsu server. Stored locally using iOS Secure Storage.
Authentication credentials — your Kitsu username and the session token returned by your Kitsu server after login. The token is stored in the iOS Keychain (Secure Enclave) and is never transmitted to anyone other than your own Kitsu server.
Biometric preference — whether you have enabled Face ID or Touch ID for app unlock. This preference is stored locally; biometric data itself is handled entirely by iOS and is never accessible to the App.
Production data — project, shot, asset, task, and comment data fetched from your Kitsu server. This data is cached locally on your device to support offline access and is only ever sent back to your own Kitsu server.
Media files — thumbnails, images, and video previews downloaded from your Kitsu server are cached in the device's local storage for offline viewing.

No personal data is ever transmitted to the developer, to any analytics service, or to any third party.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, the legal basis for processing the data described above is contract performance (Article 6(1)(b) GDPR) — the processing is necessary to provide the core functionality of the App that you have requested. All processing occurs on your own device and your own server infrastructure.

4. Data Sharing and Third Parties

The App does not share any personal data with third parties. Specifically:

No analytics or crash-reporting SDKs are included in the App.
No advertising networks are used.
No data brokers receive any information about you or your usage.
The only network requests the App makes are to the Kitsu server address you enter manually.

Apple, as the App Store platform provider, may collect certain device and transaction information in accordance with Apple's Privacy Policy. The developer has no access to this information beyond what Apple makes available through App Store Connect (download counts, sales reports, and crash logs that contain no personally identifiable information).

5. Data Retention

All data the App stores lives on your device. It is retained until you:

Log out of the App (clears your token and cached production data), or
Use the in-app sync controls to flush cached media, or
Uninstall the App (removes all locally stored data).

The developer holds no copy of your data and has no ability to delete it on your behalf beyond the controls provided within the App.

6. Security

Authentication tokens are stored in the iOS Keychain, which is hardware-backed on devices with a Secure Enclave. Cached media and production data are stored in the app's sandboxed container, which is inaccessible to other apps. All communication with your Kitsu server uses the protocol (HTTP or HTTPS) that you configure — HTTPS is strongly recommended for production deployments.

7. Children's Privacy

The App is intended for use by animation and VFX studio professionals. It is not directed at children under the age of 13 (or under 16 in the EEA), and we do not knowingly collect any information from children.

8. Your Rights (GDPR & UK GDPR)

If you are located in the EEA or United Kingdom, you have the following rights in relation to your personal data:

Right of access — you may request confirmation of whether we process your personal data and, if so, a copy of it.
Right to rectification — you may request correction of inaccurate data.
Right to erasure — you may request deletion of your personal data.
Right to restriction — you may request that we restrict processing of your data in certain circumstances.
Right to data portability — you may request a copy of data you have provided in a machine-readable format.
Right to object — you may object to processing based on legitimate interests.

Because all data is stored locally on your own device and your own Kitsu server, you can exercise most of these rights directly within the App (log out, flush cache, uninstall). For any other requests, contact petedraper@me.com. You also have the right to lodge a complaint with your local data protection authority.

9. California Privacy Rights (CCPA)

If you are a California resident, the CCPA may provide you with certain rights regarding your personal information. Because the App does not sell personal information and does not collect personal information beyond what is stored locally on your device, the CCPA's opt-out and deletion rights are satisfied by the App's design. For any enquiries, contact petedraper@me.com.

10. Changes to This Policy

If this policy is updated, the revised version will be posted at this URL with an updated "Last updated" date. For material changes, we will update the App Store listing description. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, please contact:

petedraper@me.com