Quven is a self-hosted media server: it runs on hardware you control. The information that matters most — what is in your library, what you watch and when — never leaves your server and is never sent to us. This policy covers the limited personal data processed by the optional cloud services that support Quven.

1. Who is responsible for your data

The data controller for the Quven cloud services is the independent operator of Quven, based in Italy. For any privacy request or question, contact [email protected].

2. Information that stays on your server

The following never reaches us — it is stored only on your own server and devices:

your media files, libraries and folder layout;
metadata, posters and artwork your server fetches and caches for your content;
your watch history, resume positions, ratings, reviews, watchlists, collections and playlists;
your local user profiles and server settings.

We do not collect, receive or have access to this information. To fetch metadata, subtitles and streaming-availability information, your server contacts third-party services directly (see section 8); those requests originate from your network, not from us.

3. Quven Account information

If you create a free Quven Account to use cloud features, we process the limited data needed to operate that account:

your email address and a securely hashed password (or a passkey credential, if you use one);
your subscription and entitlement status (tier, Founders status, validity);
technical identifiers of the servers you link to your account, used only to issue and verify their licence entitlement;
basic security and operational logs (such as timestamps and request metadata) needed to keep the service safe.

We use this data to authenticate you, to deliver your licence entitlement, to authorise relay connections and — when paid plans launch — to manage billing. The legal bases are performance of our agreement with you and our legitimate interest in operating and securing the service. We do not sell your personal data or use it for advertising.

4. Diagnostics and crash reporting (opt-in)

The Quven apps can send anonymous diagnostics to help us fix crashes and performance problems. This is opt-in and off by default; nothing is sent unless you turn it on. When enabled, diagnostics are processed through Sentry (EU region) and are scrubbed to remove personal information and authentication tokens before they leave your device. Typical contents are error and performance traces, the app version and basic device / operating-system information — not your media or your library. You can turn diagnostics off again at any time in the app settings.

5. Remote access relay

If you enable the managed relay to reach your server from outside your network, connection-setup metadata transits our signaling service and a third-party TURN relay (Cloudflare) so your devices can establish a connection. The relay carries the traffic between your own devices and your own server; we do not store your media or the contents of your sessions. Reaching your server by your own means instead (port forwarding, reverse proxy, VPN) does not involve our relay at all.

6. AI subtitle translation (opt-in)

When you explicitly request AI subtitle translation, the subtitle text to be translated is sent through our cloud service to a third-party large-language-model provider, which returns the translation. This feature is off by default and runs only on your request. We use providers on terms intended to prevent your content from being used to train their models. The translated result is cached on your own server as a subtitle asset. Because this sends part of your media to a third party, it is always an explicit, opt-in action.

7. The quven.tv website

This website is a static marketing site. It sets no advertising or cross-site tracking cookies. Our network provider (Cloudflare) may set strictly necessary cookies and process limited connection metadata (such as IP address) to deliver and protect the site. If you send a support request from the site, the details you enter are transmitted to our cloud service so we can reply.

8. Email

We send only transactional email related to your account — for example email verification, password resets and, in future, billing notices. These are delivered through our email provider (Cloudflare). We do not send marketing email unless you have separately asked to receive it.

9. Third-party services and where data goes

Depending on the features you use, data is processed by the following categories of providers, each under its own privacy terms:

TMDb and OMDb — contacted by your server to fetch movie and TV metadata.
OpenSubtitles — contacted by your server to search and fetch subtitles.
JustWatch (via TMDb) — source of streaming availability shown in the app.
Sentry — opt-in diagnostics and crash reporting (EU region).
Cloudflare — content delivery and protection, the managed TURN relay, and transactional email.
A large-language-model provider — opt-in AI subtitle translation.
Stripe — payment processing, only once paid plans launch.

10. Where your data is processed

Our cloud services run on infrastructure located in the European Union. Some third-party providers may process data outside the EU; where they do, appropriate safeguards (such as the European Commission's Standard Contractual Clauses) apply.

11. Data retention

We keep account data for as long as your Quven Account exists, and for a limited period afterwards where needed to meet legal, accounting or security obligations. Diagnostics data is retained for a limited period in line with our diagnostics provider's defaults. When you delete your account, we delete or anonymise the associated personal data, except where retention is legally required.

12. Your rights

Under the EU General Data Protection Regulation and applicable law, you have the right to access, rectify, erase, restrict and port your personal data, and to object to certain processing. You may exercise these rights, or withdraw a consent you previously gave, by contacting [email protected]. You also have the right to lodge a complaint with your local data-protection authority (in Italy, the Garante per la protezione dei dati personali).

13. Children's privacy

Quven is not directed to children, and a Quven Account is not intended for use by children below the age of digital consent in their country. We do not knowingly collect personal data from such children.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and reflect the changes on this page.

15. Contact

For any privacy question or request, contact [email protected] or use the Support page. See also our Terms & Conditions.

The short version: your library and your viewing stay on your own server. Account, licensing, relay and AI translation are the only services that process data on our side, they are limited to what each feature needs, and the privacy-sensitive ones are opt-in.