Privacy Policy

Last updated 29 October 2026

Flexarr is a media server you run yourself, with apps for iPhone, iPad, Apple TV, Android and the web. This policy covers those apps, Flexarr Server for Mac and this website.

The apps collect no personal data

The Flexarr apps don't collect, sell or share any personal data. They contain no analytics, advertising or tracking, and they don't contact the developer unless the server's owner turns on error reports (below).

The apps talk to the Flexarr server you connect them to. That server belongs to you or to whoever invited you, not to the Flexarr project. What you watch, your progress and your profiles are kept on that server, under its owner's control. So is its log: the apps send the server their warnings and errors, and their recent log when you tap Send diagnostics, so its owner can see what went wrong. Keys and passwords are taken out first, and the log never leaves that server.

What stays on your device

• The address of your server and the profile you chose, in the app's settings.
• Your sign-in key, in the device's Keychain (on Android, its Keystore).
• Anything you download for offline, and what you played while offline until it's sent to your server.

If you turn on notifications on iPhone or Android, your server sends each one through a small relay at flexarr.io, which passes it to Apple, or on Android to Google's Firebase Cloud Messaging, to deliver. It's encrypted on your server and only your phone can read it, so the relay never sees what it says, and it keeps nothing. The one exception is the Lock Screen's "playing on TV" panel on iPhone: Apple reads its updates directly, so they can't be encrypted, and they carry only whether the TV is paused, how far in it is, how long it is and its speed, never the title or picture. Apple and Google handle delivery under their own privacy policies. On Android, Firebase is only started when you turn notifications on: it gives the phone an id for delivering them, which Google sees. Podcast searches and episodes go through your server, so podcast hosts see your server rather than each listener. When you speak to Siri, Apple handles the speech under its own privacy policy. When the iPhone app asks for a rating, the stars and any review go to Apple, not to Flexarr.

Deleting the app removes them. The apps ask for local network access only to find and reach your server at home.

Flexarr Server for Mac

Flexarr Server, the Mac app, is the server itself, so your library, profiles, viewing history and its log are kept on your Mac, in the app's own folder. It can only see the folders you choose for it in the Mac's folder window, and you can remove a folder in Flexarr at any time. It goes online only for what Flexarr does: artwork and details for your media, podcasts, checking for a new version, notifications through the relay above, and the services you connect it to. Deleting the app and its folder removes everything.

Optional error reports

A Flexarr server's owner can choose to send error reports to the developer, to help fix bugs. It's off unless they turn it on (Settings › Server › Logs), and turning it off stops it at once on the server and every app connected to it. Reports go to Sentry, which stores them in the EU.

A report is about a crash, a freeze or an error. It says what went wrong and where in Flexarr's code, the Flexarr version, the operating system and device model, and a random id for the server that isn't linked to anyone. Titles, file names and paths, what anyone watches, profile and device names, addresses (IP, server, network), keys and passwords are removed on the server or device before anything is sent. Logs and viewing history are never sent. Reports are used only to fix Flexarr, never for tracking or advertising, and Sentry deletes them after at most 90 days.

That's why the App Store lists crash data, performance data and other diagnostic data for Flexarr, and Google Play lists crash logs and diagnostics. None of it is linked to you, and none of it is used for tracking.

This website

flexarr.io sets no cookies and runs no analytics. It is hosted by Vercel and loads fonts from Google Fonts, which see your IP address as part of serving the page, as any web host does.

Children

Flexarr collects no personal data from anyone, including children.

Changes and contact

If this policy changes, this page will show the new date. Questions are welcome on GitHub.