Privacy Policy

Your device and saved sign-ins

Saved sign-in tokens and connection credentials are kept in the Apple Keychain. Zorofin saves account and server details, app preferences and account-scoped caches on your device. Your password is used to authenticate with the server you enter; Zorofin does not keep that password as a saved sign-in credential.

Removing a saved account removes its saved credentials from this app. Storage & app settings let you clear cached artwork and library responses. Removing local data does not delete the account, watch history or other records held by your server.

Connecting, browsing and watching

The server you select receives connection and account information needed to sign in, plus requests for library items, searches, artwork and playback. Jellyfin session reporting sends playback progress, pause/stop state, the app/client version and a generated client device identifier. Favorites, watched status, playlists and other changes are sent when you use those features.

Your server and its hosting/network providers can see your network address and may retain access logs and account activity. Its operator controls that processing and retention. Use a server you trust and contact its operator about server-side records. HTTPS is preferred; allowing local HTTP sends traffic without transport encryption on that local connection.

Optional requests and notifications

Servers that advertise compatible request features can receive your account identifier, searches, requested titles and selected seasons, and retain request and availability records. Request artwork may load from The Movie Database image service; that service receives the image request and your network address. Zorofin does not send your Jellyfin token to that image service.

If you enable a server's email or push alerts, the address or delivery settings you enter are sent to that server. Its operator and configured delivery providers handle those alerts. Notification history and read state may also be saved on your device and, where supported, on the server. Basic Jellyfin browsing and playback do not require these optional services.

Support reports and AI assistance

Sending a server support report shares the issue type, your description, any affected title you enter and your signed-in account context with that server's administrators and support service. That service may use an external AI provider to investigate or draft replies, and may consult relevant server or playback diagnostics. Review the notice in the report form before agreeing to send a report. Do not include passwords, payment details or other sensitive information.

The server operator determines its support providers and retention practices. Ask the operator for provider-specific information before sending anything you do not want processed that way. You can use the app support email instead of server support. Emailing us sends the information you choose to include to Vitality Labs LLC and our email provider; Apple handles feedback submitted through TestFlight under its own policies.

Profile photos, settings and administration

If you choose a profile photo, the image you select is resized and uploaded to your signed-in server. The photo picker grants access to the selected image, not your entire photo library. Account, subtitle, alert and playback preferences are sent to your server when those settings are server-managed.

For administrators, embedded dashboard and metadata pages connect to the selected server's web application. That server and any integrations it loads handle the web page's data and storage. Zorofin uses a separate nonpersistent web data store for the administrative session rather than a shared persistent browser profile.

Advertising, tracking and diagnostics

Zorofin does not include advertising, cross-app tracking, a data-broker integration, or a third-party analytics SDK. We do not sell app data or use it for targeted advertising. We do not receive a central copy of every connected server's library or activity just because you installed the client.

Apple may provide crash or beta diagnostics according to your Apple settings and choices. Zorofin does not automatically upload a separate diagnostic bundle to Vitality Labs LLC. Information you include in a support report or email is handled as described above.

Visiting our public website

Our public information pages are hosted on Cloudflare. Cloudflare processes basic connection and request information, such as your network address, to deliver the pages and protect the service. These pages do not include advertising, analytics scripts or a sign-in form. Contacting app support by email is a separate action you choose to take.

Retention, deletion and your choices

Local caches are bounded and may be cleared or replaced as you use the app. You can remove saved accounts, clear caches and change preferences in the app. Server operators control the retention and deletion of accounts, watch history, requests, photos and server support records; local sign-out does not erase those records.

For support correspondence held by Vitality Labs LLC, contact us to request access, correction or deletion. We retain correspondence as needed to investigate and resolve issues, maintain necessary support records, and meet legal obligations. We do not promise to delete records controlled by an independent server operator or Apple.

Contact and changes

For questions about the Zorofin client or this policy, contact Vitality Labs LLC at zorazhaseeb1@gmail.com. For a server account or its content and records, contact that server's operator. This policy may change as app features or processing practices change; the updated date identifies this version.