Privacy
Kinara privacy policy
Last updated October 21, 2026
Kinara is made by Macroboom LLC. Your movies, shows and watch history live on your own Kinara server, not with us. This page explains the little we do handle, and why.
In short: no ads, no analytics, no tracking, and we never sell data. At home, the apps talk only to your own server. We only hold data if you make a Kinara account, which is for remote play and signing in across devices, and you can delete it at any time.
The Kinara apps
This covers the apps for Android TV, Android phones and tablets, Roku, and the web app.
- What stays on your device: your server's address, your sign-in, your profile choice and your settings.
- What goes to your server: your sign-in, what you watch and how far you got, and the name and model of your device, so the server's owner can see which devices are signed in. This goes to the Kinara server you connect to, not to us.
- Camera: the phone app can scan a pairing code with your camera. The picture is read on your phone, and isn't saved or sent anywhere.
- Your local network: the apps look for Kinara servers on your network, and the phone app looks for Chromecast and Google TV devices so you can cast. When you cast, the Cast device plays straight from your server.
- No analytics or crash reporting. The apps contain no advertising, analytics or crash-reporting libraries.
The Kinara server
The server runs on your own computer or NAS, and your media, library, accounts and watch history stay there. Macroboom has no access to them.
- Posters and descriptions: the server looks up your titles on The Movie Database (TMDB) and downloads their artwork. TMDB sees the names and years of the titles it's asked about, and your server's internet address. Its own privacy policy applies.
- Someone else's server: if you use a server run by a friend or family member, its owner controls the data on it, including what you watch. Ask them about it; we can't see it.
Kinara accounts
An account is optional. You need one only for remote play away from home and for signing in to your servers from anywhere. If you make one, we keep:
- Your email address and password. The password is stored only as a one-way hash, never as itself. We use your email to sign you in and to send password reset emails, and never for marketing.
- Your sign-ins: which devices are signed in to your account. They end when you sign out, or after a period without use.
- Your linked servers: each server's name, its software version, and how to reach it: its addresses on your home network and on the internet, the port your router opened for it, and its remote-access connection details. A linked server updates these about once a minute, so your apps can find it.
- Security certificates: we get certificates from Let's Encrypt for your server's Kinara addresses, so apps can reach it securely. Those addresses use a random server ID, not your name or email. Like all certificates, they're listed in public Certificate Transparency logs.
Remote play through our relays
When your device can't reach your server directly, the connection goes through Kinara's relays. The tunnel used by the Android apps is end-to-end encrypted, so the relay passes it on without being able to read it. The web relay, used by browsers and Roku, decrypts and re-encrypts traffic as it passes through our servers. In both cases the video passes straight through: we don't record, store or look at what you watch.
Service logs
Our servers keep short-lived logs of requests, including internet addresses and times, to keep the service running and to stop abuse such as password guessing. We keep them for no more than 30 days.
This website
kinara.media uses no cookies, analytics or tracking. It loads its fonts from Google Fonts, so Google sees your internet address when you visit.
Who helps us run it
We use a few providers to run the account service. They handle data only on our behalf, to provide their service to us:
- Amazon Web Services: the servers that run the account service and the relays.
- MongoDB Atlas: the database that stores accounts and linked servers.
- Resend: sends password reset emails.
- Cloudflare: domain names (DNS) and this website.
- Let's Encrypt: security certificates, as described above.
These providers may process data in the United States. We don't sell or rent personal data, share it for advertising, or give it to anyone else unless the law requires it.
Deleting your account
To delete your Kinara account, email [email protected] from the address on your account, with the subject Delete my Kinara account. We'll confirm, then delete your account, its sign-ins and its linked servers within 30 days. Service logs age out on their own within 30 days.
Deleting your account doesn't touch your Kinara server or anything on it. Your library and watch history stay on your server until you remove them yourself.
Your choices and rights
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it, by emailing [email protected]. Depending on where you live, laws such as the GDPR or the California Consumer Privacy Act give you these rights, and we honor them for everyone. You can also use Kinara entirely without an account.
Security
Connections between the apps, your server and our service are encrypted wherever possible. At home, a server you haven't linked to an account is reached over your own network, which may be unencrypted. Passwords are hashed, and access to our systems is limited. No system is perfectly secure, but we work to protect what we hold.
Children
Kinara accounts aren't meant for children under 13, and we don't knowingly collect personal data from them. If you believe a child has made an account, email us and we'll delete it.
Changes
If we change this policy, we'll update this page and the date at the top. If a change matters, such as collecting something new, we'll say so in the apps or by email before it takes effect.
Contact
Macroboom LLC, Nebraska, United States
[email protected]