Who we are
FLX+ is a streaming service for Indian dramas and films (“FLX+”, “we”, “us”). This policy covers the FLX+ apps for Android, iPhone and iPad, the FLX+ TV apps, and the websites at flx.plus and ott.flx.plus.
We process personal data under India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules. We are the Data Fiduciary for the data described here.
What we collect
- Account details: your mobile number or email address (used to sign you in with a one-time code), and the name and profile settings you choose.
- Purchases: your subscription, rentals and purchases, order and payment status, and receipts. Card, UPI and bank details are entered on our payment partner’s page; we never see or store full card numbers.
- Viewing activity: what you watch and how far, your list, searches, language, audio and subtitle choices, and ratings or reports you send.
- Device information: device model, operating system and app version, a random install identifier, a device identifier used to manage how many devices and streams an account uses, and, if you allow notifications, a push token.
- Diagnostics: crash reports (the error, the app screen, recent in-app steps such as screens opened and which API was called, but never message bodies, passwords or payment details) and playback quality (start time, buffering, errors).
- Approximate location: the country your connection comes from, worked out from your IP address, because some titles may only be shown in certain countries. We do not collect precise (GPS) location.
- Support: messages you send us and reports about content.
We do not collect your contacts, photos, files, microphone, camera or precise location.
How we use it
- To create and secure your account and sign you in.
- To provide what you paid for, keep your place in a title, and remember your preferences.
- To recommend titles inside FLX+ based on what you watch.
- To keep the service working: fixing crashes, measuring playback quality, preventing fraud and account sharing beyond your plan.
- To send service messages (for example a receipt or a change to your plan) and, only if you opt in, offers and recommendations. You can turn these off at any time in Account › Notifications.
- To meet legal duties, such as tax records and responding to lawful requests.
We do not sell your personal data. FLX+ shows no third-party advertising and uses no third-party analytics, advertising or tracking SDKs in its apps.
Who we share it with
Only with service providers who process data for us under contract, and only what they need:
- Cloud hosting and video delivery providers that run our servers and stream video.
- Our payment partner (Razorpay) to take payments, and the app stores (Apple, Google) when you buy through them.
- SMS and email providers that deliver sign-in codes and receipts.
- Apple and Google to deliver push notifications, if you allow them.
We may also disclose data when the law requires it, to protect users or the service from fraud or harm, or as part of a merger or sale of the business, in which case this policy continues to apply.
How long we keep it
- Account, viewing and preference data: while your account is open.
- Crash reports: 90 days, then deleted automatically.
- Payment, invoice and tax records: as long as Indian law requires, even after you close your account.
- Support messages: as long as needed to resolve your request and keep a record of it.
When you delete your account, we erase or anonymise your personal data within 30 days, except records we must keep by law.
Your rights and choices
You can, at any time:
- Get a copy of your data: in the app, Account › Privacy & account › Request data export.
- Correct your details: Account › Privacy & account › Correct account information.
- Delete your account and data: Account › Privacy & account › Delete account, or see flx.plus/delete-account.
- Withdraw consent to marketing: turn off Account › Notifications › Offers and recommendations. Essential account and security messages still come.
- Nominate someone to exercise these rights on your behalf if you die or become unable to, by writing to us.
- Contact us (below) if you have a complaint about how we handle your data; if it is not resolved, you can approach the Data Protection Board of India.
Children
FLX+ accounts are for adults aged 18 and over. Children can watch through Kids mode on a parent’s account, which shows only titles rated for children and is protected by a parent PIN. We do not knowingly collect personal data from children, do not track them, and do not show them targeted content or ads. If you believe a child has created an account, contact us and we will delete it.
Security
All traffic between the apps and our servers is encrypted (HTTPS). Sign-in tokens are kept in the device’s secure storage. Access to personal data inside FLX+ is limited to staff who need it, protected by multi-factor sign-in, and logged. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
Where data is processed
Your data is processed for FLX+ in India. Some service providers may process limited data outside India, only as permitted by Indian law.
Changes to this policy
If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect. The date at the top shows the latest version.
Contact
Questions, requests or complaints about your data: email [email protected]. We reply as soon as we can and within 30 days at most.