Privacy Policy

1Who we are

TWISTD (“TWISTD”, “we”, “us”, “our”) is a tracker and directory for vertical short dramas. It lets you browse titles that appear across third-party vertical drama platforms, build a watchlist, log and rate what you have watched, and receive alerts about new episodes and releases.

TWISTD is operated by www.twistd.app, who is the controller responsible for your personal information. You can reach us at support@twistd.app.

TWISTD is not a streaming service. We do not host, stream or sell the dramas themselves, and we are not affiliated with, endorsed by, or partnered with any other platform we index unless we say so explicitly.

2What this policy covers

This policy applies to the TWISTD mobile app for iOS and Android, our website at twistd.app and any successor domain, our waitlist and email updates, and our customer support channels. Together we call these the “Services”.

It does not apply to the third-party apps, stores or websites you reach through TWISTD. Those are governed by their own privacy policies.

3Information we collect

Information you give us

Information we collect automatically

Information from others

• Sign-in providers. If you sign in with Apple or Google, we receive your name and email address (or Apple’s private relay address) and a stable user identifier. We do not receive your password.
• App stores. Apple and Google confirm to us that a purchase, trial, renewal, cancellation or refund occurred, and give us a subscription identifier. They do not give us your payment card details.
• Public catalogue data. Information about dramas — titles, synopses, cast, artwork, episode counts, where a title is available — which is about content rather than about you.

4How we use your information

• To create and maintain your account and sync your library across your devices.
• To provide the core features: search and browse the catalogue, track progress, log and rate titles, and build watchlists.
• To send drop alerts and other notifications you have turned on.
• To manage free trials, subscriptions, renewals and cancellations, and to prevent trial and subscription abuse.
• To recommend titles and personalise what you see in the app.
• To respond to your support requests and feedback.
• To fix crashes, monitor performance, debug problems and improve the Services.
• To understand aggregate usage patterns and measure which features are worth building.
• To send service messages (for example, security notices, billing notices, changes to these terms) and, where you have opted in, product news and launch announcements.
• To detect, investigate and prevent fraud, abuse, scraping and violations of our Terms and Conditions.
• To comply with legal obligations and to establish, exercise or defend legal claims.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

5Legal bases (EEA and UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract — to give you an account, deliver the features you signed up for, and manage your subscription.
• Legitimate interests — to keep the Services secure, prevent abuse, fix faults, understand aggregate usage and improve the product. We balance these interests against your rights.
• Consent — for push notifications, marketing email, and any optional analytics or cookies that require consent. You can withdraw consent at any time.
• Legal obligation — to meet tax, accounting, consumer protection and law enforcement requirements.

6Drop alerts and notifications

If you enable notifications, we store a push token for your device together with the alert settings you choose, so we can tell you when a title you follow has new episodes or becomes available. You can turn notifications off inside TWISTD or in your device settings at any time, and we will stop sending them.

Alerts depend on information we gather about third-party platforms, and those platforms do not notify us of their schedules. Timing and accuracy are not guaranteed.

If you are in Canada, we send commercial electronic messages in line with Canada’s anti-spam legislation (CASL). Every marketing email includes an unsubscribe link. We will still send you essential service and billing messages while you have an account.

7Subscriptions and payments

TWISTD subscriptions are sold through the Apple App Store and Google Play. Your payment is processed by Apple or Google under their own terms and privacy policies. We never see or store your card number, bank details or billing address.

We receive from the stores, or from our subscription management provider, a purchase receipt or subscription identifier, the product you bought, the currency and amount, the country of the store account, and the status of the subscription — trialling, active, cancelled, expired or refunded. We use this to unlock paid features and to keep our records for tax and accounting.

8When we share information

• Service providers. Companies that host, secure, analyse or support the Services on our behalf, under contract and only for the purposes we specify. See section 9.
• Other users. If you post a public review, rating or list, or use a public profile, that content and the display name attached to it are visible to others. Anything you make public may be copied or cached by third parties, so please do not include personal details you would not want shared.
• At your direction. When you share a title, list or review to another app or to social media.
• Legal reasons. Where we reasonably believe disclosure is required by law, court order, subpoena or a valid request from a public authority, or is necessary to investigate fraud or protect the rights, property or safety of TWISTD, our users or the public.
• Business transfers. If TWISTD is involved in a merger, acquisition, financing, or sale of all or part of its assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.
• Aggregated or de-identified data. We may publish or share statistics that cannot reasonably be used to identify you.

9Service providers we use

We rely on the following categories of provider. This list is accurate as of the date at the top of this page and may change as the product develops.

10Third-party apps and links

TWISTD links out to third-party apps, stores and websites so you can watch a drama where it is available. When you follow one of those links, you leave TWISTD. The operator of that app or site collects your information under its own privacy policy, and we have no control over and take no responsibility for what it does. We recommend reading the policy of any service you use.

We do not have data-sharing agreements with the platforms we index, and we do not send them your TWISTD account details.

11Cookies and analytics

Our website uses a small number of cookies and similar technologies: strictly necessary ones that make the site work and keep it secure, and, where permitted, analytics cookies that tell us how many people visit and which pages they read. You can block or delete cookies in your browser settings; the site will still work, though some features may not.

The mobile app does not use browser cookies. It uses local storage and device identifiers for the equivalent purposes, described in section 3.

On iOS we do not track you across other companies’ apps and websites, so we do not ask for App Tracking Transparency permission. If that ever changes, we will ask for your permission first and update this policy.

12International transfers

We are based in Canada and our providers operate globally, including in the United States and the European Union. This means your personal information may be processed in, and transferred to, countries whose data protection laws differ from those of your own country, and it may be accessible to courts, law enforcement and national security authorities in those countries.

Where we transfer personal information out of the EEA or the UK, we rely on an adequacy decision (Canada holds a partial adequacy decision for commercial organisations) or on the European Commission’s Standard Contractual Clauses, together with the UK Addendum where applicable. You can ask us for a copy of the safeguards we use.

13How long we keep data

• Account and library data — for as long as your account is open. If you delete your account, we delete or anonymise this data within 30 days, except where we must keep it longer by law.
• Purchase and billing records — up to 7 years, to meet Canadian tax and accounting requirements.
• Waitlist emails — until you unsubscribe or ask us to remove you, and in any case no longer than [24 months] after our last contact with you.
• Diagnostics and crash logs — usually 90 days.
• Support correspondence — up to 24 months after the matter is closed.
• Backups — deleted data may persist in encrypted backups for up to [35] days before being overwritten.

We may retain information for longer where needed to resolve a dispute, enforce our agreements, or comply with a legal obligation.

14Security

We use encryption in transit (HTTPS/TLS) and at rest, access controls that limit who on our side can see personal information, hashed password storage, and managed infrastructure that receives security patches from its provider. We review our security practices as the product grows.

No system is perfectly secure, and we cannot guarantee absolute security. Please use a strong, unique password and keep your device locked. If we become aware of a breach that creates a real risk of significant harm to you, we will notify you and the relevant regulators as the law requires.

15Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct information that is inaccurate or incomplete;
• delete your account and the information associated with it;
• receive your data in a portable, machine-readable format, or have it sent to another service;
• object to or restrict certain processing, including profiling;
• withdraw consent at any time, without affecting processing already carried out;
• opt out of marketing email and push notifications;
• be free from discrimination for exercising any of these rights.

You can delete your account from inside the app under Settings → Account → Delete account, or by emailing us. Email support@twistd.app to exercise any other right. We will respond within 30 days, and will ask you to verify your identity — usually by replying from the email address on your account — before we act on a request.

16Region-specific rights

Canada

We handle personal information in accordance with PIPEDA and applicable provincial privacy legislation, including Quebec’s Law 25. You may ask about our handling of your information, request access or correction, and withdraw consent subject to legal and contractual restrictions. Our privacy contact is named in section 19. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada, or to your provincial regulator.

European Economic Area and United Kingdom

In addition to the rights in section 15, you have the right to lodge a complaint with your local supervisory authority or, in the UK, the Information Commissioner’s Office. We do not carry out automated decision-making that produces legal or similarly significant effects on you.

California and other US states

In the last 12 months we collected the categories of information described in section 3, for the purposes in section 4, from the sources in section 3, and disclosed them to the service providers in section 9. We have not sold or shared personal information for cross-context behavioural advertising, and we do not knowingly sell the personal information of anyone under 16. You may exercise your rights to know, delete, correct and limit by contacting us; you may use an authorised agent, and we will not discriminate against you for exercising a right.

17Children

TWISTD is not directed to children. You must be at least [13] years old to create an account, and older where your country sets a higher digital age of consent — for example 16 in some EU member states. Some dramas listed in TWISTD carry mature themes, and our app store age rating reflects this.

We do not knowingly collect personal information from children below the applicable age. If you believe a child has given us personal information, contact us and we will delete the account and the data promptly.

18Changes to this policy

We may update this policy as TWISTD changes or as the law requires. We will update the “last updated” date at the top and, where the change is material, notify you in the app or by email before it takes effect. Continuing to use the Services after a change means you accept the updated policy.

19Contact us

Privacy questions, requests and complaints:

• Email — support@twistd.app