Privacy Policy

Last updated October 12, 2026

Serafin collects nothing about you. It has no servers or accounts of its own, and no analytics, advertising or crash-reporting code. Nothing you do in the app reaches its developer.

What Serafin sends to your server

Serafin talks only to the Jellyfin servers you add. Like any Jellyfin app, it sends your server:

• Your username and password when you sign in with them, once, to get a sign-in token. Serafin never stores your password.
• Requests for your library, and what you change in it, such as marking something watched or a favorite.
• What you play and how far you get, so your server can keep your place and your watch history.
• Changes to your audio and subtitle languages, which your server keeps in your account.
• The app's name and version, an ID made for this install, and your device's model, such as "iPhone". Serafin doesn't send the name you've given your device.

Your server's administrator can see this activity, as with any Jellyfin app. Connections use HTTPS. Serafin allows unencrypted connections only to addresses on your own network or your Tailscale network, and only after you've accepted a warning.

What stays on your device

• Sign-in tokens, the install's ID and any certificates you've trusted are kept in the iOS Keychain on this device only. They aren't synced to iCloud or included in backups.
• Your servers: their addresses and names, and who signs in to each.
• Artwork and a copy of Home, so screens open quickly and Home still shows when your server can't be reached.
• Your last ten searches for each account, so the Search tab can offer them again.
• Your settings, such as the accent color, subtitle size and streaming quality.

What Serafin shares with iOS

So you can find your movies and shows from Spotlight, Siri and Shortcuts, Serafin hands their titles and posters to iOS on your device, where Apple's privacy policy applies. While Serafin's lock is on, Spotlight holds nothing from your library and Siri can't look in it. What's playing shows on the Lock Screen, and AirPlay sends it to the device you choose.

When you add a server, Serafin can look for Jellyfin servers on your local network if you allow it. That search stays on your network. If you turn on Serafin's lock, iOS checks your Face ID, Touch ID or passcode; Serafin never sees them.

If you've chosen in iOS Settings to share analytics with app developers, Apple may send the developer crash reports from Serafin. Apple's privacy policy covers those.

Removing your information

• Sign Out deletes that account's sign-in token, asks your server to end the session, and removes the account's searches, its copy of Home and its titles in Spotlight.
• Remove Server signs out every account on that server and forgets the server.
• Clear Cache, in Settings, removes saved artwork and copies of Home.
• Deleting the app removes everything except the iOS Keychain items, which iOS keeps. Sign out before deleting the app to end your sessions, or remove this device in your server's dashboard.

Information on your server, such as your watch history, is kept by your server. Its administrator can tell you what it holds and remove it.

Children

Serafin collects nothing from anyone, children included.

Changes

If this policy changes, the new version will be posted on this page with its date.

Contact

Questions about privacy go to support@getserafin.app.