Legal

Privacy Policy

This policy explains what BlinkFlix collects, why, who we share it with, and the choices you have. It applies to the BlinkFlix app, blinkflix.tv, and every surface where this notice appears.

!Working draft — these terms are drafted but not yet final. The operating entity is pending registration and this text is under legal review; details may change before launch.
01

Overview

BlinkFlix is a vertical short-drama streaming service operated by [Operating Entity] ("BlinkFlix", "we", "us"). We aim to collect only what we need to run the service, keep it secure, and recommend stories you will love.

You can browse and preview much of BlinkFlix without an account. Signing in, and actions like saving, commenting, unlocking, or purchasing, link activity to your account.

One source of truth: this public page is the canonical version. The app links here in a web view rather than re-typesetting the text natively.
02

Information we collect

Information you provide

  • Account details — your email address (verified by a one-time code) or your Google / Apple sign-in.
  • Profile — a display name and avatar, if you add them.
  • Card checkout details — only when you choose the web credit / debit card route, the full name, US phone number, and email address you enter for that payment.
  • Content you post — reviews and comments (shown publicly under an anonymous handle), reports, and feedback.
  • Support messages you send us.

Information collected automatically

  • Usage — episodes watched, watch progress, unlocks, check-ins, likes, favorites, and shares.
  • Device — model, OS version, app version, language, and an app-instance identifier used to recognise your install.
  • Session — sign-in tokens that keep you logged in.
  • Approximate location — a country derived from your IP address, for regional content and pricing. We do not store your raw IP for this and we do not collect precise (GPS) location.
  • Referral & install source — an invite or redeem code you used, and campaign / install-source parameters that brought you to BlinkFlix.
  • Diagnostics — crash reports and performance logs that help us keep the app stable.
Purchases
Coin and VIP purchases are processed by the App Store, Google Play, or (on the web) our payment processor. For the web card route, we send the name, US phone number, and email you enter directly to that processor for this payment; BlinkFlix does not add them to your profile or store them with its order record. We receive a payment confirmation, order reference, and entitlement — never your full card number.
Except for the contact details you choose to enter for a web card payment, we do not otherwise collect a phone number. We do not collect advertising identifiers (IDFA / GAID), precise location, or health data, and we do not access your contacts, calendar, or photo library (beyond an avatar you choose to upload).
03

How we use information

  • Provide and maintain the service, including playback, unlocks, coins, and VIP.
  • Personalise recommendations and your "For you" feed, and remember where you left off.
  • Process payments, verify purchases, and prevent fraud and abuse.
  • Show rewarded ads and grant ad rewards, where you choose that path.
  • Improve the product — understand which stories land, keep the app stable, and fix problems.
  • Meet legal, tax, and accounting obligations and respond to lawful requests.
Legal bases
Contract (account, payments, playback); legitimate interests (product improvement, security, anti-fraud); consent where required by law (for example certain analytics or marketing choices); and legal obligation (financial, tax, and compliance records). Where GDPR or similar laws apply, we map processing to those bases.
04

Sharing & disclosure

We do not sell your personal information. We also do not "share" personal information for cross-context behavioural advertising. We disclose information only to service providers that process it for us under contract, to processors needed to run BlinkFlix, or where law requires it.

  • Payments — Apple (App Store), Google (Play Billing), and the web payment processor shown at checkout, to process and verify purchases. If you choose the web card route, that processor receives the full name, US phone number, and email you enter for the transaction.
  • Advertising — Google AdMob, for rewarded ads and to confirm ad rewards. Rewarded ad requests are configured as non-personalized where supported.
  • Diagnostics — crash and performance reporting providers (e.g. Sentry, Crashlytics).
  • Infrastructure — our cloud provider (Alibaba Cloud) for hosting, media storage, and content delivery.
  • Email — our email provider, to send verification codes and account notices.
  • Security & compliance — platform integrity services (e.g. Google Play Integrity, Apple App Attest) that return only a pass / fail verdict.
05

Your choices & privacy rights

We make access, correction, export, and deletion available to all users. Depending on where you live, you may have additional rights to restrict or opt out of certain processing. You can exercise these rights from within the app (Settings → Privacy & data) or on the web.

  • Access & export — get a copy of your data (identity, coins, favorites, orders) at any time.
  • Correct — update inaccurate profile details, or ask us to fix them.
  • Delete — remove your account and personal data; records we must keep by law (e.g. billing and tax) are retained but unlinked from you. See our Account & Data Deletion page.
  • Object & restrict — object to, or ask us to limit, processing where your law gives that right.
  • Withdraw consent — where we rely on consent (e.g. rewarded ads, some analytics), you can withdraw it any time in Settings → Privacy & data, without affecting prior processing.
  • Ads, profiling & marketing — opt out of sale/sharing, targeted advertising, and profiling where required; disable push notifications in your device or app settings. We do not run email marketing without opt-in consent.

To exercise a right, use the in-app controls (Settings → Privacy & data), the web privacy choices page, or email dsr@blinkflix.tv from your registered address. We respond free of charge within the timeframe your law requires. You may also have the right to complain to your local data protection authority.

U.S. state privacy rights: residents of California and other states may have rights to know/access, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, opt out of targeted advertising or profiling/automated decision-making, use an authorized agent, and be free from discrimination for exercising these rights. See our U.S. Privacy Rights page.

Use the U.S. Privacy Rights page for Do Not Sell or Share, GPC, authorized-agent, and state-law details.

Open U.S. Privacy Rights

Related pages: U.S. Privacy Rights, Account & Data Deletion, Cookie & Storage Policy, and Children’s Privacy.

06

Data retention

We keep information for as long as your account is active and as needed to provide the service, then for a limited period to meet legal, accounting, and security needs.

Transaction & payment records
Retained for the period required by tax and accounting law (typically 6–10 years by country), then removed. On account deletion these are unlinked from your identity but the financial record is preserved.
Account, profile & activity
Kept while your account is active; removed or anonymised when you delete your account.
Diagnostics & logs
Crash reports and operational logs are kept for a short period (typically 30–90 days) for stability and security.
How deletion works: rather than leaving gaps in records we are required to keep, we remove or irreversibly replace the personal details that identify you, so retained financial records can no longer be linked back to you.
07

Age & children

BlinkFlix is rated 16+ and is not intended for children. Some titles are gated to 18+ with an age check before playback. We do not knowingly collect data from users below the minimum age, and will delete such data if we learn of it. See our Children’s Privacy page for details and how parents can reach us.

08

International transfers

BlinkFlix currently prepares for a non-EU English-language launch (including the United States, Canada, Australia, and New Zealand) under one global rights and data-handling baseline. That baseline does not turn an ordinary privacy notice into an access gate: where law requires consent for optional processing, we ask for it separately, and declining optional processing does not prevent basic browsing or playback. Your information — and that of our service providers (see Sharing & disclosure) — may be processed in countries other than your own, including Cambodia. Local personal-information rules and cross-border transfer disclosures may apply to processing carried out there. Where GDPR, PIPEDA/Law 25, or similar laws apply, we use appropriate safeguards when required, such as contractual protections and transfer assessments. You can request a copy of applicable safeguards by contacting privacy@blinkflix.tv.

09

Contact us

Privacy enquiries
privacy@blinkflix.tv
Data requests (access / deletion)
dsr@blinkflix.tv
Postal address
[Operating Entity], Phnom Penh, Kingdom of Cambodia.