GRYPH App Privacy Policy
Last updated: 14 October 2026.
Gryphen Ltd is the controller responsible for personal information processed by the GRYPH mobile application for iOS and Android. Please use the linked privacy request form to contact us about data protection matters. This notice is separate from the corporate website privacy notice.
Information we process
We process account identity and email, authentication and session details, country or region, selected TV and streaming services, declared age range, viewing interests, saved and seen titles, recommendation preferences and feedback, and feature interactions, including searches, recommendations shown, selections and feedback where recorded. We also process limited device, app-version and diagnostic information for security and reliability. If enabled, reminders and notifications involve reminder details and device push tokens.
Sources of information
Most information comes from your account details and use of the app. At onboarding, you may declare that you are 18 or older, under 18, or prefer not to say. We do not collect a date of birth for this purpose; the selection is self-declared, not independently verified. Authentication, device and delivery information may come from service providers and mobile operating systems. Programme availability and descriptions come from catalogue and scheduling suppliers.
Why we use information
We use account and preference information to provide sign-in, relevant viewing recommendations, availability and features you request. Limited security and diagnostics help protect and maintain the service. We do not routinely share identifiable viewing histories with programme metadata suppliers.
Legal bases and choices
Information needed to provide requested account and app features is generally processed to perform our contract with you. Security and reliability processing may rely on legitimate interests where justified. We seek separate consent where required for optional analytics, advertising technologies and marketing. Notification permission does not itself constitute marketing consent. You can withdraw consent through the applicable controls or contact us; withdrawal does not invalidate earlier lawful processing.
Advertising and consent
GRYPH Free includes advertising for eligible adults. Eligible adult users of the free tier may see a clearly labelled Google AdMob banner in the Home footer, separate from recommendations. The paid subscription tier is intended to be free of conventional advertising. No advertising will be served to users declaring under 18, choosing not to disclose their age, or whose adult eligibility is unknown. The declared age category helps determine advertising eligibility separately from subscription status and advertising consent. Google and its advertising partners may process device and app information, advertising identifiers, IP addresses and ad interactions and may store or access information on your device, subject to your choices and applicable law. The app provides advertising consent choices where required, including refusal and the ability to revisit and withdraw consent. You can review advertising privacy choices in the app. Your device settings may also provide advertising identifier controls. Advertising choices do not change GRYPH's organic recommendations.
Service providers
Our cloud service provider supports authentication, data storage and application services. Apple, Google and Expo may support app distribution and notifications. Programme and availability suppliers provide content information without routinely receiving identifiable user viewing profiles. Google AdMob is our advertising provider. The consent interface identifies participating advertising partners and their purposes where required. For information about Google's use of data in advertising, see Google's partner information.
Retention and deletion
Account and personalisation data are generally retained while needed to provide your account and requested features. Current technical retention periods include 90 days for raw optional product analytics, 30 days for performance telemetry, and up to 365 days for purpose-specific recommendation-delivery and security or audit evidence. Legal obligations, deletion verification, security needs and backup expiry may justify limited exceptions. Age declarations are linked to your account and normally retained until account deletion. Contact us to request correction. Account deletion can be requested through the app's account controls. You can also contact us through the privacy request form to request account deletion.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability of personal data, object to certain processing and withdraw consent. We may verify your identity before responding to a rights request. We normally respond within one month, subject to lawful extensions. You can complain to the UK Information Commissioner's Office. Use the Gryphen Ltd privacy request form on our corporate website for requests and questions.
International processing and children
Our service providers may process information outside the UK. Where UK law requires a transfer mechanism for personal data sent outside the UK, appropriate safeguards must apply. Contact us using the privacy request form below to ask about the safeguards for your data. GRYPH is intended to be accessible to people of all ages. We do not serve advertisements to under-18s or users whose adult eligibility is unknown. Advertising is permitted only for eligible adult Free users after the applicable consent and privacy checks. We apply age-appropriate privacy protections, including parental authorisation where legally required. Contact us if you have a question about a younger user's information.
Updates
We will update this notice when the app's functionality, advertising processing, providers or legal requirements change. Material changes will be communicated where required.
Contact Gryphen Ltd through our privacy request form.