Your library stays your library.

Zuno is built around a simple idea: the app should talk to your server, and nothing should sit in between. This page is the long form of that promise.

What we never collect

• A history of what you watch, or anything that links a title you watched to you, your account or your device.
• Your library contents, metadata, posters, or playback history.
• Your Plex, Jellyfin, or Emby account credentials. Sign-in is handled directly with the respective service.
• Analytics tied to your identity.

What stays on your device

App preferences, server connection details, subtitle styles, and other settings are stored locally on your device. If you enable iCloud sync, these settings are synced through your private Apple iCloud account — we never see them.

Optional accounts

Zuno works fully without an account. You can optionally sign in with Apple, for example, to join the TestFlight beta, or, in future, to share your subscription with people you choose. Only then do we create an account for you.

Sign-in uses Sign in with Apple, so we never receive your Apple password, and you can hide your email address (Apple relays it). We use a third-party authentication service to manage sign-in and store a stable identifier for your account, and a subscription-management service to link your App Store purchase to that identifier so your access follows you across your devices. We never see your payment details or your library.

You can delete your account at any time from within the app. Deleting it removes your account identifier and revokes Sign in with Apple. Deleting your account does not cancel an active subscription, manage that in your Apple ID settings.

Direct connection

When you play a video, browse your library, or fetch artwork, your device communicates directly with your Plex, Jellyfin, or Emby server. None of that traffic is routed through Zuno's servers.

Some features, like skipping intros or showing details about a title, look up public information by the title's public id. These lookups aren't stored against you.

Anonymous viewing counts

To show what's popular among Zuno users, the app can share anonymous counts of what's watched: for example, that a film was started or finished, or a show was added to a watchlist. Each count includes the title, the day, your country, the type of device, and whether it came from a kids profile.

These counts are designed so they can't be traced back to you. They carry no account, device identifier or IP address. Each one includes a code that changes for every title and every day, so counts can't be linked together into a viewing history, even by us. They're sent in batches a few hours later, never while you watch.

They're covered by the same setting as product analytics, so you can turn them off at any time in Settings > Support Center > Privacy.

Third parties

Authentication redirects use Plex's, Jellyfin's, or Emby's own authentication flows. Once you finish signing in, the access token is stored on your device. We don't see it, and we don't store it.

PostHog is used to provide feature flags, which allow us to safely enable, disable, and roll out features within Zuno. This functionality may operate regardless of your analytics preference. Unless you turn product analytics off, PostHog is also used to process anonymised usage information, such as when the app is opened and which features are used. Product analytics are not collected if you turn them off.

Sentry is used to help us identify crashes and technical errors so that we can improve the stability of Zuno. Diagnostic information may be sent when an error occurs, but we do not intentionally include information about your library or viewing activity in these reports.

Zuno is free to use, and Zuno Pro is an optional upgrade. RevenueCat is used to manage subscriptions and verify purchases. RevenueCat receives information necessary to determine your purchase and subscription status. Payment details are handled by Apple and are never provided to us.

The App Store handles purchases and payments through Apple. We never receive your payment card or other payment details.

Analytics & diagnostics

Zuno collects anonymised product analytics unless you turn them off. This may include information such as when the app is opened and which features are used, tied only to a random, anonymous identifier. This data is never linked to your name, and we never see what is in your library. You can turn analytics off at any time in Settings > Support Center > Privacy.

If the app crashes or hits an error, anonymised diagnostics (stack traces and device model) are sent through Sentry so we can fix it. These contain no personal data, no library content, and no viewing history.

Changes to this policy

If this policy ever changes meaningfully, we'll update the date at the top and note what changed. Material changes will be announced in the app itself before they take effect.

November 4th, 2026: we now describe the anonymous viewing counts used for popular rows, and that analytics are on by default and can be turned off.

Contact

Questions? Reach out at [email protected].