BAFILM PRIVACY POLICY
1. Who is responsible
The Bafilm team is responsible for your personal information. Our privacy officer can be reached at support@bafilm.com.
2. What we collect
- Account: your email address and/or mobile number, and the name and profile details you choose to add.
- Purchases: what you bought, when and for how much. Card details are handled by Stripe or Google Play, never stored by us.
- Use of the Service: what you watched and how far, your list, ratings, comments and reports; the devices you signed in on (device name, platform, app version, IP address).
- Support: what you tell us when you contact us.
3. Why we use it
To provide the Service and your purchases, keep your account secure (including limiting simultaneous streams to your plan), remember where you stopped watching, recommend titles, answer support requests, prevent fraud, and meet legal and tax obligations. We do not sell your personal information. We send marketing messages only if you have agreed to receive them, and every message lets you unsubscribe.
4. Who we share it with
Service providers acting on our behalf, under contract: hosting in Canada (our hosting provider), payments (Stripe, Google Play), email and text-message delivery (our email provider, Twilio), and push notifications (Google Firebase). Some of them may process information outside Canada; they are bound to protect it. We disclose information to authorities only when the law requires it.
5. How long we keep it
Account information for as long as your account exists; purchase records for 7 years for tax purposes; watch history and device records for 24 months after last use. When you delete your account we delete or anonymise your personal information, except purchase records the law requires us to keep.
6. Your rights
You can access, correct and delete your information, withdraw consent, and ask how it is used, by writing to support@bafilm.com. You can delete your account in the app at any time. You may also complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
7. Cookies
The website uses only the cookies it needs to work: your session and your language choice. We do not use advertising or cross-site tracking cookies.
8. Security
Data is encrypted in transit; access is limited to staff who need it and is logged. If a breach creates a real risk of significant harm, we will notify you and the regulator.
9. Changes
We will tell you about material changes before they take effect.