OwnstreamPrivacy Policy
Last updated: November 6, 2026
Ownstream does not collect personal data. The developer runs no servers, there's no app account or sign-up, and the app uses no advertising, analytics or tracking tools.
Information stored on your device
• NAS addresses, accounts, saved login labels, and last-used dates: this device’s app settings (UserDefaults)
• Login passwords and two-factor trusted-device tokens: only in this device’s Keychain. They do not sync through iCloud or restore from backups onto another device. They are sent only to your NAS when signing in. OTP codes are never stored.
• TMDB API key (if provided): this device’s Keychain. Unless sync is set to This Device Only, it is shared with your other devices through your own iCloud, including deletion
• Lock passcode: only a hash, never the original digits, in this device’s Keychain
• App settings, playback positions, and downloads: this device’s app storage
This information is never sent to the developer. Signing out keeps saved logins. Deleting an entry or choosing Delete All Saved Logins in Settings › Account also removes its address, account, password, and tokens. Removing the app deletes app settings and downloads.
Information stored on your NAS and in iCloud
Watch history and resume positions are stored in Video Station or, in File Mode, per DSM account at <share>/.jnology/<account>/progress.json in the NAS shared folder, shared with other devices using the same account. Library lists are stored at the location chosen in Settings: your NAS home folder, a NAS video folder, or your own iCloud when iCloud or Auto is selected. Hidden libraries may be stored in your NAS home folder or your own iCloud, never a NAS video folder. Lock settings and passcode hashes sync only through the signed-in user’s NAS home folder (/home/.jnology). Without the home folder, locks stay on this device. App-generated posters may also be stored on your NAS. None of this is sent to the developer.
Certificate trust and shared folders
When you approve a self-signed NAS certificate, its SHA-256 fingerprint is pinned in this device’s Keychain only. It does not sync through iCloud or restore onto another device. A changed certificate stops the connection; you can remove its trust in Settings › Account. HTTP is used only when you explicitly choose to connect without encryption. File-mode watch history files in a shared folder can also be read by other DSM users who can read that shared folder.
Network connections
The app connects only to:
• Your Synology NAS: sign-in, libraries, playback, and downloads
• Apple TV: while AirPlaying with subtitles on, the iPhone serves subtitle text and a stream ticket for that one video over home Wi-Fi without encryption. The NAS login session is never sent.
• Your own iCloud: library lists and hidden libraries when iCloud or Auto is selected; TMDB keys and their deletion unless sync is set to This Device Only
• Synology QuickConnect: only when using a QuickConnect ID, to find your NAS and connect through a Synology relay if needed
• TMDB (themoviedb.org): only when you provide your own API key, to find posters and plots by video title
QuickConnect and TMDB requests go directly to your chosen services under their privacy policies. Online subtitle searches are performed by your NAS (Video Station subtitle plug-ins), not the app.
Permissions
• Local Network: to connect to a NAS on the same Wi-Fi and share AirPlay subtitles with Apple TV
• Face ID: only when opening locked libraries. Face data is processed by Apple on the device and is never received by the app.
Tracking, ads & analytics
Ownstream does not track users or include advertising, analytics, or crash-reporting tools. Keep Troubleshooting Log records playback, sign-in, and sync steps on the device, masking passwords, tokens, NAS addresses, and accounts. On iOS, logs are exported by mail or sharing only when you tap Send Log. On tvOS, Send Log saves the log in your own NAS home folder; it is not sent to the developer.
Children
Ownstream collects no personal data from anyone, so it collects none from children either.
Changes to this policy
If this policy changes, both the in-app text and the web page will be updated together, along with the date above.