Privacy Policy

1. Introduction

OverseerGo is a mobile client application for self-hosted Overseerr and Jellyseerr servers. This privacy policy explains our commitment to protecting your privacy.

By using OverseerGo, you agree to the terms outlined in this privacy policy.

2. Information We Do NOT Collect

OverseerGo is designed with privacy as a core principle. We do not collect, store, process, or transmit any of the following:

• Personal information (name, email, phone number, address)
• Usage analytics or app behavior tracking
• Crash reports or diagnostic data
• Location data
• Contact information or address book access
• Device identifiers or advertising IDs (beyond the APNs device token used for push)
• Browsing history or search queries
• Photos, videos, or media files
• Any other personal or sensitive data

3. Data Storage

All data used by OverseerGo is stored in one of three places:

3.1 Local Device Storage

The following data is stored locally on your device using secure storage:

• Backend Server URL: The URL you provide to connect to your self-hosted server
• Authentication Tokens: Session tokens to maintain your logged-in state
• Personal Watchlist: Media items you save to your watchlist
• App Preferences: Your notification and display settings
• Cache Data: Temporary storage of images and data for performance
• Relay Device ID & HMAC Key: Credentials for authenticating with the push notification relay

Important: This data is stored only on your device and is never transmitted to the app developer.

3.2 Your Self-Hosted Server

All other data (requests, user profile, server settings) is stored on your self-hosted Overseerr or Jellyseerr server. The app developer has no access to this server or its data.

3.3 Push Notification Relay Server

If you enable push notifications, the OverseerGo notification relay server stores only:

• APNs Device Token: A random identifier generated by Apple, used exclusively to deliver notifications to your device
• SHA-256 Hash of Your Overseerr URL: Used to route incoming webhooks to the correct device

No personal data, no Overseerr credentials, and no media content is stored on the relay server. You can revoke push notifications at any time from the app's settings screen, which will delete your device token from the relay server.

4. Network Communication

OverseerGo communicates with the following services:

4.1 Your Self-Hosted Server

The app connects to your Overseerr or Jellyseerr server using the URL you provide. All communication is direct between your device and your server.

• Protocol: HTTP or HTTPS (based on your configuration)
• Purpose: Browse media, submit requests, manage your account
• Data Transmitted: Only data necessary for app functionality

4.2 The Movie Database (TMDB)

Movie and TV show metadata (titles, images, descriptions, ratings) is accessed through your server's connection to TMDB's API. Your device communicates directly with TMDB public URLs to retrieve some images.

4.3 Push Notification Services (Optional)

If you enable push notifications:

• Your device registers with Apple Push Notification Service (APNs)
• Your APNs device token is sent to the OverseerGo notification relay server
• When your Overseerr server sends a webhook event, the relay matches the event to your device token and fires a push notification via APNs
• The relay stores only your device token and a hash of your server URL — no other data
• You can revoke push notifications at any time, which deletes your token from the relay

5. Third-Party Services

OverseerGo may integrate with the following third-party services:

5.1 Plex OAuth (Optional)

If you choose to sign in with Plex:

• You are redirected to Plex's authentication page
• Plex provides an authentication token to the app
• This token is sent to your server for verification
• The app developer does not receive your Plex credentials

Plex's privacy policy: https://www.plex.tv/about/privacy-legal/

5.2 Jellyfin Authentication (Optional)

If you choose to sign in with Jellyfin, authentication is handled directly by your self-hosted Jellyfin server.

5.3 Apple Push Notification Service (APNs)

If you enable push notifications, your device registers with Apple's Push Notification Service. Apple's privacy policy applies to the handling of your device token by APNs: https://www.apple.com/legal/privacy/

6. App Permissions

OverseerGo requests the following permissions:

6.1 Internet Access

Purpose: Required to connect to your self-hosted server

Usage: Network requests to your configured server URL only

6.2 Push Notifications (Optional)

Purpose: Receive real-time notifications about request status updates via APNs relay

Usage: You can enable or disable this at any time in settings

Data: Your APNs device token plus a hash of your server URL is sent to the OverseerGo notification relay. Revoke anytime to delete your token from the relay.

No other permissions are requested. OverseerGo does not access your camera, photos, contacts, location, or microphone.

7. Data Security

We take the security of your data seriously:

• Local Storage: Authentication tokens and relay credentials are stored using secure encrypted storage on your device
• Network Security: We recommend using HTTPS for your server connection
• No Cloud Storage: No app data is stored in cloud services controlled by the developer
• No Tracking: No analytics, tracking pixels, or third-party advertising SDKs
• Relay Security: Communication with the relay server uses HTTPS. Relay requests are authenticated via HMAC-signed tokens.

8. Children's Privacy

OverseerGo does not knowingly collect data from users of any age, including children under 13. Since no data is collected by the app developer, there are no special considerations for children's privacy beyond the general privacy protections described in this policy.

Parents and guardians should supervise children's use of the app, as content availability depends on what is configured on their self-hosted server.

9. Your Rights and Data Control

Since OverseerGo does not collect any personal data beyond what is necessary for push notification delivery:

• No Data to Delete: There is no data collected by us that needs to be deleted. If you have enabled push, your device token can be removed at any time via the app settings.
• No Data to Export: There is no data collected by us that can be exported
• No Data to Access: There is no data collected by us that can be accessed
• Full Control: All data is under your control on your device and your server

9.1 Deleting Local Data

To delete all locally stored data:

1. Uninstall the OverseerGo app from your device
2. All local cache, tokens, and preferences will be permanently deleted

9.2 Revoking Push Notifications

To disable push notifications and delete your device token from the relay server:

1. Open OverseerGo
2. Go to Profile → Notifications
3. Tap "Revoke Push Notifications"
4. Your device token is immediately deleted from the relay server

9.3 Server Data

Data stored on your self-hosted server is managed by you. To delete this data, access your server's administration panel or delete your user account.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will also be announced in app updates.

Your continued use of OverseerGo after changes are posted constitutes acceptance of the updated privacy policy.

11. Legal Compliance

OverseerGo complies with:

• GDPR (General Data Protection Regulation): EU data protection law
• CCPA (California Consumer Privacy Act): California privacy law
• COPPA (Children's Online Privacy Protection Act): US children's privacy law
• Apple App Store Guidelines: iOS privacy requirements

Since we do not collect any personal data, compliance is straightforward: there is no data to process, store, or protect beyond what is stored locally on your device.

12. Third-Party Links and Content

OverseerGo may display content and links from third-party services (TMDB, IMDb, etc.). We are not responsible for the privacy practices of these external services. Please review their respective privacy policies:

• TMDB: https://www.themoviedb.org/privacy-policy
• IMDb: https://www.imdb.com/privacy
• Plex: https://www.plex.tv/about/privacy-legal/
• Apple: https://www.apple.com/legal/privacy/

13. International Users

OverseerGo is available worldwide. Since all data processing occurs locally on your device or on your self-hosted server, there are no international data transfer concerns related to the app developer.

Your server's data storage location is determined by where you choose to host your Overseerr or Jellyseerr instance.

14. Open Source and Transparency

OverseerGo is committed to transparency:

• The app is built with open-source technologies
• No hidden tracking or data collection code
• All network requests are limited to your configured server and the push notification relay (if enabled)

This app is an independent client for the open-source Overseerr and Jellyseerr projects and is not officially affiliated with them.

15. Contact Us

16. Acknowledgments

OverseerGo uses data from The Movie Database (TMDB) but is not endorsed or certified by TMDB.

OverseerGo is an independent client application for Overseerr and Jellyseerr and is not officially affiliated with or endorsed by these projects.