Your media stays yours.

Information we handle

• Player account and devices: Odyssey automatically creates a player account and management code so your setup can be restored on another supported device. We retain an account identifier, authentication and security records, profile configuration, management-code records, and connected-device identifiers. An email address is not required for a player account.
• Profile photos: If you choose a photo for a profile, Odyssey uploads a resized image to its service and links it to your account so it can appear on your connected devices. Account deletion removes associated profile photos.
• Programme notifications: If you enable out-of-app reminders, Odyssey stores an encrypted Apple push token bound to the admitted profile, device, and exact reminder set. It is used only to deliver your requested programme reminders, never for advertising or tracking, and is removed when you unregister, disconnect the device, change relevant profile or source access, delete the profile or account, or Apple rejects the token.
• Source configuration: provider names, addresses, usernames, access credentials, source availability, and profile access choices that you choose to save. Source secrets stored by Odyssey are encrypted at rest and are returned only to an authenticated device or account session.
• Viewing and library state: title and episode identifiers, limited title metadata, favourites, watchlist, watched or unwatched state, playback and resume positions, ratings, content feedback, source choices, and scheduled television actions. This state is separated by profile and used to reproduce the same viewing setup on devices connected with the same management code.
• Search and preferences: recent search terms, hidden categories, playback, audio, subtitle, guide and parental-control preferences, and other profile settings needed to restore the player experience. Odyssey stores a salted verifier for a configured PIN, not the readable PIN. A PIN may also be kept in the Apple TV Keychain after successful setup or verification so an authorised viewer can unlock while offline.
• Recommendation preferences: Odyssey uses ratings, watched activity, selections and feedback to create movie and series recommendations for that profile. If you connect Trakt, Odyssey stores encrypted Trakt authorization tokens and synchronises watched titles, ratings and supported playback progress until you disconnect it. Trakt ZIP, Letterboxd CSV, or generic history files you choose to import are processed into profile state; the uploaded archive itself is not retained. You can disconnect Trakt, reset recommendation learning, and control outside-library discovery in web management.
• Purchase status: verified App Store entitlement status, including subscription and introductory-trial expiry. Apple determines introductory-offer eligibility and processes payment details; Odyssey does not receive your full payment-card information. Build 1194 and later do not start or extend an Odyssey device-based trial. Minimal device-trial records from older builds may remain separately from account data to prevent legacy trials restarting after account changes or deletion.
• Odyssey diagnostics: In build 1175 and later, app, playback, performance and crash diagnostics remain on this device. Odyssey does not automatically upload these events. Provider passwords, tokens, full playlist URLs and stream credentials are filtered from local diagnostic messages.
• Chromecast SDK: The iPhone and iPad app includes Google Cast. Odyssey disables the SDK’s optional discovery analytics logging. Google documents other diagnostic and usage data associated with the SDK, including coarse location, performance data and interactions with Cast controls; device identifiers may be collected when SDK analytics logging is enabled. Google uses SDK data for analytics and app functionality. This SDK collection is separate from Odyssey’s local diagnostics. See Google Cast privacy information and Google’s privacy policy.

How information is used

We use information to operate the player account, restore and synchronise profiles and sources, maintain library and viewing state, personalise recommendations, verify access, protect profiles, process scheduled actions, diagnose failures when you provide a support report, prevent abuse, secure the service, and respond to support requests. We do not sell personal information or use customer playlists for advertising.

Your choices

Every installation receives a player account and management code, but an email address is optional. You choose whether to enter that code on another device or sign in to web management. Odyssey does not automatically upload app, playback or crash diagnostic events. Local diagnostics are available in Settings. Earlier builds offered optional remote diagnostics, including an installation identifier, device and app versions, screen actions, playback engine, performance and sanitised errors. Those earlier builds may continue sending these events when enabled. Updating to build 1175 or later disables Odyssey diagnostic uploads and removes unsent diagnostic events. Neither these diagnostics nor account activity is linked with third-party data for advertising or shared with data brokers. Account and data controls are available through web management using your management code.

Social safety and reports

Safety reports: If you report a user or invitation, Odyssey retains your account identifier, the reported account identifier and displayed name, the selected reason and any reported invitation title so support can investigate abuse. Reports exclude provider credentials, stream URLs and invitation tokens. Block lists are linked to your account to prevent further social contact. Open reports are retained until reviewed; resolved reports are removed after 90 days during subsequent social activity. Contact [email protected] about safety concerns.

Sharing and processors

Information may be processed by hosting, security, email, and infrastructure providers acting for Odyssey, or disclosed when legally required. Apple independently processes App Store purchases under Apple's privacy terms. Third-party media providers you connect operate under their own terms and privacy policies.

Storage, security, and retention

Odyssey uses access controls, encryption for saved source secrets, salted PIN verification, transport security on Odyssey services, profile separation, and data minimisation. A management code is a sensitive account credential and should be protected like a password; it can be rotated through web management if exposed. Account and synchronised player state are retained while the account is active. Dormant, unused automatically created accounts may be removed after the inactivity period stated in the service at that time. Optional diagnostic records are retained only as reasonably necessary to investigate reliability and security. Deletion removes the account and associated synchronised state, subject to limited records that must be retained by law or for fraud prevention and protected backup rotation.

Children

Child profiles are household viewing controls managed by an adult. Odyssey is not directed to children and does not knowingly invite children to create accounts. Profile restrictions, hidden categories, and lock status synchronise so a protected profile does not silently become less restricted on another device. Odyssey retains only a salted PIN verifier on its servers; a protected profile fails closed when a new device cannot verify the PIN. Recommendation preferences for a child profile are filtered and controlled by the account holder through web management.

International access and changes

Service providers may process information in countries other than your own, with appropriate safeguards where required. Material policy changes will be posted here with a revised effective date.