Lunafin

Privacy Policy

Last updated: November 7, 2026

Lunafin is an app for your own Jellyfin media server, available for iPhone, iPad, Android phones and tablets, and Android TV. It is made by Abdulazeim Alarbash. This policy explains what the app does with your information.

Your servers and accounts

Lunafin connects only to the servers you set up: your Jellyfin server and, if you add one, your request server. Lunafin has no accounts of its own. You sign in with an account on your own server, and that account is managed by whoever runs the server.

Your server addresses, user name, sign-in tokens and any server access keys are stored on your device (secrets in the iOS Keychain or the Android Keystore) and are sent only to those servers. The developer never receives them.

Titles you download are saved inside the app on your device, from your own server, for offline viewing. Deleting the app deletes them.

Phones and TVs on your network

If you pair a phone or tablet with Lunafin on a TV, the two devices talk directly over your local network. Pairing keys stay on the two devices. When you set up a TV from your phone, your server sign-in is sent from the phone to the TV over an encrypted connection on your network, and nowhere else.

Anonymous analytics and error reports

To find bugs and improve the app, Lunafin sends anonymous usage and error reports to PostHog, a product analytics service hosted in the United States. You can turn this off at any time in Settings › Diagnostics › Share Analytics & Error Reports.

What is sent:

• which screens are used, and events such as playing, downloading, favoriting or requesting a title (identified by catalog number, not by name)
• crash reports and error descriptions, with server addresses and other personal details removed
• device model, operating system version, app version, screen size and language
• a random identifier created for this installation (not your device's advertising identifier)
• your IP address, which PostHog uses to estimate your approximate region (country or city level)

What is never sent: your name, your account or user name, passwords, server addresses, what you search for, or the titles of what you watch.

This data is not linked to your identity, is not used to track you across other apps or websites, and is not sold or shared with data brokers.

Reports you share

Settings › Diagnostics lets you share a problem report. The report is created on your device and goes only where you send it, using your device's share options. It has passwords, tokens and server addresses removed.

Children

Lunafin includes Kids Mode, which lets a parent limit what children can see. Kids Mode settings stay on the device and on your own server. The app doesn't knowingly collect personal information from children.

Deleting your data

See Delete Your Data for how to remove data from your device and how to ask for analytics data to be deleted.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions about this policy: privacy@abdulazeim.dev