Reelora Privacy Policy

This Privacy Policy explains how CREST TECH MEDIA LIMITED ("Reelora", "we", "us" or "our") collects, uses, discloses and protects information when you use the Reelora mobile application, website and related services.

1. Information we collect

• Account and contact information: email address, user ID, nickname, authentication information, and any optional phone number or profile photo you choose to provide. OAuth providers may return identifiers needed to sign you in.
• Purchase information: product, price, currency, transaction status and store transaction identifiers. Google Play and Apple process payment credentials; Reelora does not receive your full card number from those stores.
• App activity: dramas and episodes viewed, playback progress, favorites, searches, comments, ratings, rewards, paywall and checkout interactions.
• Device and diagnostic information: app instance and device identifiers, operating system, app version, approximate location derived from masked IP, crash or error information, startup time, buffering and playback quality diagnostics.
• Optional rewarded video ads: where rewarded video is offered in your region, our ad provider Liftoff (including Vungle) or, depending on your device and region, Pangle may receive the data described in Section 3A as soon as the offer is shown, because the ad SDK can be initialized and an ad prepared in advance. If you tap to watch, we also create a short-lived, opaque reward reservation token to confirm that you completed the ad and to unlock the episodes offered. See Section 3A.
• Information you choose to provide: feedback, support messages and optional images attached to feedback.

2. How we use information

We use information to create and secure accounts, provide and personalize content, remember viewing progress, process and verify purchases, restore entitlements, provide rewards, answer support requests, prevent fraud, measure service and advertising performance, diagnose playback issues, comply with law and improve Reelora.

3. Service providers and disclosures

We may disclose limited information to service providers that help operate Reelora, including cloud hosting, content delivery, customer support, analytics, fraud prevention, app stores and payment verification. Firebase and Google Analytics may process app instance IDs, device information, approximate location and app activity. Google Play and Apple process store transactions. Where enabled, advertising measurement providers such as Google Ads or Meta may receive limited event and attribution data, including hashed account identifiers, IP address and user agent, attribution identifiers, and purchase event value and currency. We do not sell personal information in exchange for money. Rewarded video ad providers are described separately below.

3A. Optional rewarded video ads (Liftoff / Vungle / Pangle)

Reelora may offer an optional rewarded video ad that unlocks a limited number of locked episodes. Watching is always your choice, and VIP members do not see these offers. Showing the offer can by itself start the ad SDK and prepare an ad, so the ad provider may receive the device and network data listed below even if you do not tap to watch. Rewarded ads are not currently offered in the European Economic Area, the United Kingdom or Switzerland.

• Who: ads are served by the Liftoff Monetize SDK (Liftoff Mobile, Inc. and Vungle, Inc., together "Liftoff"), which acts as an advertising service provider and also processes data under its own privacy policy.
• What Liftoff may receive (from when the offer is shown): your IP address and the approximate (coarse) location derived from it; device and app information such as operating system, device model, language and app version; the advertising identifier (Google Advertising ID on Android, IDFA on iOS) only where your operating system settings and, on iOS, your App Tracking Transparency choice allow it; and ad interaction and performance information such as whether an ad was loaded, shown, completed or clicked. We do not send Liftoff your name, email address, account ID or payment information.
• Who (Pangle): depending on your device and region, the ad may instead be served by the Pangle SDK (Pangle Ads, a TikTok for Business / ByteDance advertising network), which acts as an advertising service provider and also processes data under its own privacy policy. The Pangle end-user privacy policy and the company responsible for your data depend on your region.
• What Pangle may receive (from when the offer is shown): your IP address and the approximate (city-level) location derived from it; device and app information; the advertising identifier (Google Advertising ID on Android, IDFA on iOS) only where your operating system settings and, on iOS, your App Tracking Transparency choice allow it (Pangle states that it does not collect non-resettable hardware identifiers); ad interaction and performance information; and diagnostic and crash information about the Pangle SDK. We do not send Pangle your name, email address, account ID or payment information.
• Reward reservation token (only if you tap to watch): when you tap, we generate a random, single-purpose token and pass it to the SDK as the user ID for that ad. Liftoff returns it in a signed server-to-server message when the ad is completed, so we can verify the reward and unlock the episodes. The token is not your account ID, name or email. We link it to your account on our own servers and keep reward records (ticket status, episodes unlocked and timestamps) to prevent duplicate or fraudulent rewards and to enforce daily limits.
• Ad reference and reward reservation with Pangle: for Pangle ads, when an ad is prepared (which can happen before you tap to watch) the app generates a random, single-purpose ad reference and passes it to the SDK as custom reward data instead of a user ID. It is not your account ID, name or email. Only if you tap to watch do we create the server-side reward reservation and link that reference to it on our servers; Pangle returns the reference in a signed server-to-server message when the ad is completed, so we can verify the reward and unlock the episodes. We handle reward records as described above.
• Why: to load and show the ad, verify completion and grant the reward, measure ad delivery and performance, prevent fraud and abuse, and for the ad provider's own purposes described in its privacy policy (Liftoff or Pangle). The SDK may be initialized and an ad prepared in advance, before you tap to watch; the reward token is created only when you tap.
• Liftoff privacy policy and ad information: Liftoff Privacy Policy and Ad Information. Liftoff's opt-out for interest-based advertising is at liftoff.io/opt-out.
• Pangle end-user privacy information: Pangle privacy policies by region, which lists the policy and responsible company that apply to you.

Your controls: Personalized rewarded ads is off by default (Profile → Settings → Personalized rewarded ads). While it is off, we tell Liftoff that you have opted out of the sale or sharing of personal information for rewarded ads (the U.S. state privacy signal). For Pangle we can only tell it that you do not consent to personalized ads; we cannot send Pangle a separate sale or sharing opt-out signal, and turning the setting off does not by itself stop the ad SDK from receiving the data listed above when an offer is shown. You can turn it on or off at any time and the change applies to the next ad. You can also use your device settings: reset or limit your advertising identifier on Android, or decline or change App Tracking Transparency on iOS. You may skip rewarded ads entirely and keep using Reelora. To ask us to access or delete data we hold about you, including reward records, use the contact details below or the account deletion page; for data held by Liftoff or Pangle, contact that provider using the information in its privacy policy.

Country lookup attribution: we determine your country from your IP address, without storing a precise location, using the IP to Country Lite database by DB-IP ("IP Geolocation by DB-IP"), licensed under CC BY 4.0.

4. Data security

Reelora uses encrypted network connections for supported production services and applies access, logging and operational controls intended to protect information. No system is completely secure, and we cannot guarantee absolute security.

5. Retention

We retain account and activity information while your account is active and only as long as reasonably necessary for the purposes described above. Eligible deletion requests are completed within 30 days. Transaction, tax, fraud-prevention, security and legal records may be retained longer when required by law or necessary to protect users and the service.

6. Your choices and rights

You may update certain profile information in the app, manage device advertising choices in your operating system, change the Personalized rewarded ads setting in the app (Section 3A), and request access, correction or deletion where applicable. To delete your account in Reelora, go to Profile → Settings → Delete Account, or follow the instructions on our account deletion page.

7. Children

Reelora is not directed to children under 13, or a higher minimum age where required by local law. If you believe a child has provided personal information, contact us so we can review and take appropriate action.

8. International processing

Reelora is operated for an international audience. Information may be processed in countries other than your own, subject to appropriate safeguards required by applicable law.

9. Changes to this policy

We may update this policy as Reelora changes. We will post the updated policy with a new effective date and provide additional notice where required.

10. Contact us

CREST TECH MEDIA LIMITED, Hong Kong
Email: media@reelora.vip