PopCorn Box is provided by PopCorn Box Developer (the Service Provider). It combines movie and TV metadata with media files you choose to import. It does not provide or host streaming content, accounts, subscriptions, or cloud synchronization.

Imported media, playlists, playback activity, collections, preferences, reminders, quiz progress, and other app records are stored in the app's private local container. AI Chat consent is stored locally. For restart continuity, the app stores a chat_id only together with its matching visible transcript and never stores hidden server context by retaining chat_id alone.

PopCorn Box does not upload imported audio or video files to the AI Chat service. If you explicitly attach context, only the visible title and text metadata included in the request are sent.

AI Chat is optional and blocked until you explicitly agree to its data-sharing notice. Before consent, PopCorn Box does not call /api/chat/create or /api/chat/request.

After consent, AI Chat sends message text, the chat_idcreated for the chat session, and the fixed system_promptabout movies and TV sent when the session is created.

The recipient is OpenRouter Chat proxy, a third-party AI chat service hosted on Railway at freeopenrouterchat-production.up.railway.app. These fields are sent only to generate movie/TV chat responses and recommendations.

OpenRouter Chat proxy acts as a third-party processor/service provider for this feature. The Service Provider requires or expects it to protect submitted data under the same or equivalent confidentiality and security protections described in this policy and not use it for an unrelated purpose.

The AI chat service may retain conversation history server-side under chat_id for conversation continuity. PopCorn Box persists that identifier only with the matching visible transcript.

Reset Chat cancels an in-flight request and clears the localchat_id, visible transcript, draft, errors, and attached text context without revoking consent. Retry starts a fresh backend session after a failed request.

You can revoke AI Chat data sharing in Settings > Privacy & Security. Revocation cancels an in-flight request, clears the local chat_id and matching visible transcript, and blocks further AI requests until you explicitly consent again.

The Chat tools control only hides or shows local attachment actions and prompt suggestions to provide more transcript space. It does not send data or change consent.

TMDB supplies movie and TV metadata. Branch and Meta/Facebook SDKs support attribution, deep linking, and campaign or app event measurement subject to platform permission. These services may receive ordinary network and device information and process it under their own privacy practices. Apple's App Tracking Transparency prompt is shown before tracking that requires authorization.

Local data remains until you delete it in the app or uninstall the app. Network processors may retain request data for service delivery, continuity, security, legal, and operational needs. Use Reset Chat for a new session and Settings to revoke future AI Chat sharing.

PopCorn Box is not directed to children under 13 and does not knowingly solicit their personal information. Reasonable administrative, technical, and organizational safeguards are used, although no transmission or storage method can be guaranteed completely secure.

For privacy questions, deletion requests, or support, use the PopCorn Box feedback form.