1. Scope and legal grounds
This policy describes the personal information involved in the Kit Short mobile service and its website. The service operator is ORBITA CULTURE HOLDINGS PTE. LTD. Privacy questions and requests can be sent to contact@kitshort.com.
The account, payment, advertising, and other provisions apply to the functions available in your app version and region. The information involved also depends on the options you choose.
We handle personal information under applicable privacy law. Depending on where you live, this may include the General Data Protection Regulation (GDPR), the California Consumer Privacy Act, as amended (CCPA), and local requirements. Where a legal basis is needed, we rely on performing the service contract, legitimate interests such as security and service improvement, compliance with legal duties, or consent where required.
2. Information involved
The following categories may be processed when the corresponding functions are used:
- Account details, such as an app or guest identifier, linked sign-in details, and an email address, display name, or profile image you supply.
- Technical details, such as an IP address, device model and identifiers, operating system, app version, language, connection information, and crash or error reports.
- Activity records, such as watched and unlocked episodes, playback position, searches, saved titles, preferences, coin activity, check-ins, and rewards.
- Purchase records, such as store receipts, transaction identifiers, subscription state, and information needed to check or restore entitlements. The store handles payment. Full card details are not needed for app-store purchase validation.
- Advertising details, where enabled and permitted, such as advertising identifiers, impressions, ad interactions, install attribution, and related device information.
- Messages and attachments you send for support, feedback, privacy requests, or copyright reports, together with the contact details you provide.
Keep passwords, authentication codes, full card details, and unnecessary identity documents out of support messages.
Google Sign-In
When you choose Google Sign-In, the app obtains a Google-issued identity token and sends it to the Kit Short authentication service for identity verification and account sign-in or creation. Google identity information associated with that sign-in identifies the linked account.
Google-related account information is used to authenticate and manage your Kit Short account. The service-provider disclosures, retention criteria, security measures, and privacy rights below also apply to that information. The Google account connections section explains how disconnecting Google differs from deleting Kit Short data.
3. Sources of information
You provide information when you create or link an account, send a message, or make a request. The app can record device and activity information as you browse, watch, and use account functions. Sign-in providers and app stores can return information needed for the sign-in or purchase you select.
The website page code contains no registration form, analytics script, advertising pixel, or social embed. The page code does not set browser cookies or local storage. Hosting, network, and email services can process delivery logs and messages. Any additional service offered by the hosting platform has its own privacy practices.
4. Purposes of processing
We use relevant information to operate Kit Short, recognize your account, make content available, keep playback progress and preferences, check purchases, and answer requests. Other purposes include recommendations, understanding usage, troubleshooting, preventing fraud or misuse, protecting the service, and meeting legal obligations.
Where advertising is available, related information can support ad delivery and measurement, install attribution, frequency limits, and validation of rewarded-ad activity. Optional processing that requires consent uses the applicable consent controls. Marketing messages depend on your choices and the rules that apply to you.
5. Recipients and disclosures
Providers that perform hosting, technical support, security, diagnostics, customer support, or purchase checks can receive information needed for those tasks. A sign-in provider or app store can also process information to complete a function you request. Each recipient acts under the obligations and arrangements that apply to its role.
If advertising is enabled, ad partners may process device and advertising identifiers, IP addresses, approximate location inferred from an IP address, and ad interactions. These activities depend on applicable law and the choices described in Advertising and tracking choices.
Relevant information may also be disclosed to meet a valid legal demand, investigate fraud or a security incident, protect rights, or carry out a merger, acquisition, or similar business transfer. Disclosures are limited to the information needed for the relevant purpose.
6. Retention and transfers abroad
We keep information for the period needed for its purpose, including providing the service, handling requests, resolving disputes, maintaining security, and satisfying legal or accounting duties. The category of information and the reason for keeping it determine that period.
Account deletion removes or de-identifies associated personal information except for records that must lawfully remain. This includes linked sign-in records subject to the same exceptions. Backup copies can persist until the normal replacement cycle overwrites them. See Deletion and retained records.
Information may be processed outside your home country, including where service providers operate. Local protections can differ. Where required, transfers use recognized safeguards, such as contractual protections or another lawful transfer mechanism. Ask contact@kitshort.com about safeguards relevant to your information.
7. Protecting information
We use reasonable organizational and technical measures to address the risks of unauthorized access, loss, misuse, change, or disclosure. No online transmission or storage system can provide complete security.
Protect your device and login credentials. Contact the support channel if you suspect unauthorized use of your account or information.
8. Privacy rights and requests
Applicable law may give you rights to access or receive a copy of information, correct errors, request erasure, restrict or object to processing, receive portable data, or withdraw consent. Withdrawal does not invalidate processing that lawfully occurred before it. You may also be able to complain to a data protection authority.
Explain your request to contact@kitshort.com. We may ask for information proportionate to verifying your identity or a representative's authority. We respond within the time required by applicable law and explain any exception or applicable appeal route. Account-specific instructions are on the Delete Account page.
9. App storage and browser technologies
App identifiers and app or SDK storage can maintain sessions, remember preferences, preserve playback position, and support the functions described here. These mechanisms differ from browser cookies. Device permissions and privacy settings can limit optional identifiers.
The website page code uses neither browser cookies nor local storage. A store, email provider, or other external service you choose to visit applies its own privacy practices. Hosting additions and request logs are addressed in Sources of information.
10. Advertising and tracking choices
Where rewarded ads are offered, you may choose to watch an ad for the benefit displayed in the app. Ad partners can use device information and identifiers for personalized or non-personalized ads and measurement. When cross-company tracking requires operating-system permission or legal consent, that permission or consent is requested.
Your device privacy and advertising settings provide controls over advertising identifiers and tracking. The controls differ by operating system and version. Limiting personalization does not necessarily remove advertising.
California residents may have rights to know, correct, or delete personal information and to opt out of a sale or sharing as defined by the CCPA. If ad processing falls within those definitions, request an opt-out at contact@kitshort.com using the subject "CCPA Opt-Out". You may also request limits on sensitive information uses where that right applies. Exercising a protected privacy right does not result in unlawful discrimination.
11. Minimum age and children
Kit Short is intended for people aged 16 and older and is not directed to children under 16. We do not knowingly collect personal information from children under that age. If you believe a child has supplied information, contact us so that we can investigate and arrange appropriate deletion.
The age requirement and guardian authorization for users below the local age of adulthood also appear in the Terms of Service.
12. Contact and policy revisions
Contact ORBITA CULTURE HOLDINGS PTE. LTD. at contact@kitshort.com for privacy questions or requests. Mention Kit Short and describe the issue so the request can be directed to the right team.
This policy may change as the service and legal requirements change. The published version identifies its update date. Where the law requires it, material revisions receive additional notice.