Privacy Policy

Last updated: January 2025

Overview

Scheming Penguins ("we", "our", "us") builds apps that respect your privacy. Our apps are designed to work with your own infrastructure and services—we don't operate servers that collect or store your personal data.

Data We Collect

We do not collect any personal data. Our apps do not have analytics, tracking, or any backend servers operated by Scheming Penguins.

All data generated by our apps is stored locally on your device and is never transmitted to us.

Data Stored on Your Device

Our apps store the following information locally on your device:

  • Server connection details — URLs and authentication tokens for media servers you configure
  • App preferences — Your settings and configuration choices
  • Cached content metadata — Information about your media library for offline access and performance

Authentication tokens are encrypted using AES-256 encryption with keys stored in the Android Keystore. This data remains on your device and is never transmitted to Scheming Penguins.

Third-Party Services

Our apps connect to the following third-party services. Your use of these services is governed by their respective privacy policies:

Media Servers (User-Specified)

Rundown connects to Plex or Jellyfin servers that you specify. These servers may be self-hosted on your own hardware, running on your local network, or operated by a third party. We have no access to these servers or the data on them. The privacy practices for your media server depend on who operates it and how it's configured.

Plex Authentication

When you connect a Plex server, authentication is handled through Plex's servers (plex.tv) using their PIN-based authentication flow. We never see or store your Plex password. Only an authentication token is stored locally on your device.

Plex Privacy Policy →

Jellyfin

Jellyfin authentication is handled directly with your Jellyfin server—no third-party services are involved. Your credentials are sent only to the server you specify, and the resulting token is stored locally on your device.

The Movie Database (TMDB)

Rundown uses TMDB's API to fetch supplemental metadata (images, descriptions, etc.) for content in your library. When fetching metadata, content identifiers and titles are sent to TMDB's servers. TMDB may log requests including your IP address according to their privacy policy.

TMDB Privacy Policy →

Google Play Services

Our apps are distributed through Google Play and may use Google Play Services for app updates and, in the future, in-app purchases. Google may collect data according to their privacy policy.

Google Privacy Policy →

Watch History & Progress

Rundown can optionally sync your watch progress back to your Plex server. This feature is disabled by default and can be enabled in settings. When enabled, watch progress is sent directly to your Plex server—not to Scheming Penguins. This feature is not available for Jellyfin servers.

Data Retention & Deletion

Since all data is stored locally on your device, you have full control over it. You can clear app data through your device's settings or uninstall the app to remove all stored data. We have no data to delete because we never receive it.

Children's Privacy

Our apps are not directed at children under 13. We do not knowingly collect any personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: privacy@schemingpenguins.com