Privacy policy
Last updated 29 October 2026
Cineflow is operated by Pocket Production Sdn Bhd ("we", "us"). This policy explains what personal data we collect when you use the Cineflow app and website, why we collect it, and the choices you have. We handle your data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
What we collect
- Phone number. You sign in with your mobile number, and we send a one-time code to it by SMS.
- Profile details. The name you give us, and a profile photo if you choose to add one.
- Sign-in with Apple or Google. If you use one of these options, we receive the name and email address that Apple or Google share with us.
- Email address. Only when you buy a membership on our website, so the payment provider can send your receipt.
- Viewing activity. The episodes you watch and where you stopped, dramas saved to your list, and the comments and likes you post.
- Membership and payments. The plan you bought, the amount, the payment method type (for example FPX or card) and whether the payment succeeded. We never see or store your card number or online banking login.
- Technical data. Your IP address, device and app version, and error logs, collected automatically when the app talks to our servers.
How we use it
- To create and secure your account and sign you in.
- To stream episodes, remember your progress and show your list across your phones.
- To check your membership and process payments.
- To show your name and photo next to the comments you post.
- To keep the service working, prevent abuse and fix problems.
- To answer you when you contact us.
We don't sell your personal data, and we don't use advertising trackers.
Who we share it with
We share only what each service provider needs to do its job for us:
- SMS123 sends your sign-in codes, so it receives your phone number.
- CHIP processes website payments, so it receives your email, phone number, name and payment details.
- Apple and Google process purchases made through the App Store or Google Play, under their own privacy policies.
- Bunny.net delivers the video streams, so it sees your IP address when you play an episode.
- Our hosting providers store our servers and databases.
Some of these providers may process data outside Malaysia. We may also disclose data when the law requires it.
Other people can see
Comments you post, along with your name and profile photo, are visible to other Cineflow viewers. Your phone number and email are never shown to anyone else.
How long we keep it
We keep your data while your account is open. You can delete your account at any time in the app under Settings → Delete account. This permanently removes your profile, viewing history, list, comments and our payment records for your account. CHIP, Apple and Google keep their own transaction records as their policies and the law require. Server logs are kept for a limited period and then deleted.
Your rights
Under the PDPA you can ask to see the personal data we hold about you, ask us to correct it, or withdraw your consent to us processing it. Withdrawing consent means we can no longer provide the service, so we'll close your account. Email [email protected] from the account's details and we'll reply within 21 days.
Security
Data travels between your phone and our servers over encrypted connections. Sign-in codes expire after five minutes, and access to our systems is limited to staff who need it. No system is completely secure, so please keep your phone and SIM safe.
Children
Cineflow is meant for viewers aged 18 and over. Younger viewers may use it only with a parent or guardian's permission and supervision.
Changes to this policy
If we change this policy, we'll update the date at the top of this page. When a change significantly affects how we use your data, we'll also tell you in the app.
Contact us
Pocket Production Sdn Bhd
Email: [email protected]