Privacy Policy

This policy describes what the Red Panda mobile app and its backend service collect, why, who it is shared with, how long it is kept, and how you can remove it. It covers the Red Panda Android app and this website.

You can browse the catalogue and watch episodes in Red Panda without an account. Most of what is described below only applies once you sign in.

Red Panda creates an account for you when you sign in. What that account holds depends on how you signed in:

• Sign in with Google — we receive and store the account identifier Google issues for you. We also store your email address, but only when Google tells us that address has been verified; if it has not, no email address is stored for your account.
• Sign in with WhatsApp — we store your phone number in international format. The one-time code itself is never stored: we keep only a keyed cryptographic hash of it, and that record is deleted once the code has been used or has expired.
• Email and password — where used, we store your email address and a hashed form of your password. Your password itself is never stored.
• A display name, if you set one. This is optional and you choose it.
• The date your account was created.

Red Panda V1 has no payment, subscription or purchase of any kind, so no payment or billing information is ever collected.

When you are signed in, the following is stored against your account so that it follows you between devices:

• The videos you like and the ones you save.
• Your watch progress — which series, which episode number, and the position you stopped at.
• Your rewards activity: your coin balance, the full record of coins earned and spent, your daily check-ins, your progress towards watch missions, and any ad perks you have redeemed.
• Which social missions you have claimed, for Instagram, TikTok and YouTube.
• A limited set of app usage events, listed under "Technical and device information" below.

A social mission records that Red Panda gave you a link to one of its profiles and that you came back and confirmed you had followed it. Red Panda cannot and does not check whether you actually followed the account — no social platform offers a way to verify that. The reward is paid on your confirmation, not on any check with the platform, and Red Panda receives nothing at all from your Instagram, TikTok or YouTube account.

Red Panda V1 is free and is supported by advertising. Ads are served by Google AdMob, and the only ad format the app shows is a full-screen interstitial between episodes.

• The app collects the Android Advertising ID, which Google AdMob uses to select and measure ads. This is a device identifier you can reset or opt out of in your Android settings.
• Where your region requires consent, Red Panda shows Google’s consent form before any ad is requested. If that consent is not given or the form cannot be shown, the app requests no ad at all.
• An "Ad Privacy Options" control appears in your Red Panda profile in the regions where Google indicates it is required, so you can change your choice later.
• What Google itself collects and does through AdMob is governed by Google’s own privacy policy, not by this one.

Red Panda does not use any other advertising network, and does not share your account information, watch history, likes or saves with advertisers.

To run the service and keep accounts safe, the backend records:

• Sign-in and session records, including when a session was created, last used, and ended.
• A keyed cryptographic hash of the IP address a request came from, used to apply rate limits and to investigate suspicious sign-in activity. The IP address itself is not stored.
• A shortened, sanitised form of the device or browser identification string sent with a request.
• Security events such as a successful or failed sign-in, an account lockout, a password change, and an account deletion.

The app also sends a small, fixed set of usage events to Red Panda’s own servers — no third-party analytics service is involved. The events are: opening the home feed, starting playback of a video, liking a video, saving a video, moving to another episode, encountering a locked episode, and an app crash report. Each event carries only the video, series or episode it refers to, the platform, and a timestamp. The server discards any other property before storing the event.

Red Panda does not collect your location, contacts, calendar, photos, files, SMS messages, camera or microphone. The app does not request permission for any of those, and it sends no push notifications.

Some information is kept on your phone rather than sent to us:

• Your sign-in tokens are held in the Android system’s secure storage, which is backed by the Android Keystore. They are stored in encrypted form rather than as plain text.
• A local copy of your likes, saves and watch progress, so the app works while your connection is poor and can sync later.
• Your chosen app language, and the app’s own record of when it last showed an ad.

This data is kept in the app’s private storage area. Android automatic backup is switched off for Red Panda, so none of it is copied to Google Drive. Uninstalling the app removes it from your device — but that does not delete your account, which is a separate action described below.

No software can promise that data on a device is safe from every threat, and this policy does not make that claim. In particular, the local copy of your likes, saves and watch progress is stored in the app’s private area but is not itself encrypted.

• To sign you in and keep you signed in.
• To play episodes and to resume them where you stopped.
• To keep your likes, saves and watchlist in step across your devices.
• To run the rewards programme and to pay out coins correctly.
• To serve ads and to pace how often they appear.
• To protect accounts — rate limiting, lockouts after repeated failed sign-ins, and investigating suspicious activity.
• To understand which parts of the app are used and to find crashes, using the limited event set described above.

Red Panda does not sell your personal information, and does not use it for advertising profiles of its own.

Red Panda shares information with the service providers it needs to operate, and for no other purpose:

• Google — verifies your identity when you use Sign in with Google, and serves ads through AdMob.
• Meta — delivers your WhatsApp one-time code through the WhatsApp Business Platform, when you sign in with WhatsApp.
• Cloudflare — stores and delivers video and image files, and serves the adaptive streaming that plays them.
• The hosting and database providers that run the Red Panda service.

Beyond that, information is disclosed only where the law requires it, or where it is necessary to investigate abuse or protect the service and the people using it.

Your account information and your activity — likes, saves, watch progress and rewards — are kept for as long as your account exists, and are removed when you delete it. Other records are kept for a fixed period and then deleted:

• Sign-in session records, once expired or ended: 90 days.
• Password reset records, once used or expired: 90 days.
• App usage and crash events: 180 days.
• Watch progress, if it is never updated again: 2 years.
• Security and sign-in audit records: 2 years.
• A WhatsApp one-time code record: removed shortly after the code is used or expires.

• Export your data — in the app, open Profile, then Data & Privacy, then Export My Data. You get a copy of your profile, your sign-in methods, your likes and saves, your watch progress and your app usage events. It is shown on your device only.
• Change your ad choices — where the option applies to your region, use Ad Privacy Options in your profile.
• Reset or opt out of the advertising identifier — in your Android system settings.
• Sign out — this ends the session on that device.
• Delete your account — see below.

Deleting your Red Panda account is immediate and permanent. There is no grace period and it cannot be undone.

Deleting your account removes your account record, your sign-in methods, every session, your likes and saves, your watch progress, and your entire rewards balance and history.

Two kinds of record are kept afterwards, and both are stripped of any link to you at the moment of deletion. App usage events survive with the account reference removed. Security audit records survive with the account reference, the IP hash, the device identification string and all other detail removed — leaving only which type of security event occurred and when. These are kept to detect and investigate abuse, and they age out on the schedules listed above.

Full instructions, including what to do if you signed in with Google or WhatsApp, are on the Delete Account page.

Red Panda is a general-audience drama streaming service and is not directed at children. It is not intended for use by anyone under 13, and Red Panda does not knowingly collect personal information from a child under 13. If you believe a child has given us their information, contact us and we will delete the account and its data.

• All traffic between the app and the Red Panda service uses HTTPS.
• Passwords are stored only as a salted hash, never in a form that can be read back.
• Sign-in tokens are stored on the server only as a keyed hash, and on your device in the Android system’s secure storage.
• One-time codes are stored only as a keyed hash, are single-use, expire quickly, and allow a limited number of attempts.
• Video files are held in private storage and are served through short-lived links that expire.
• Repeated failed sign-ins lock an account temporarily, and sensitive actions such as account deletion are rate limited.

These measures reduce risk; they do not eliminate it. No online service can guarantee absolute security, and Red Panda does not claim to. Red Panda holds no security or privacy certification, and none is implied by anything in this policy.

This policy will change as Red Panda changes. When it does, the date at the top of this page is updated. For a change that materially affects how your information is handled, we will give notice in the app before it takes effect.

For any question about this policy, about the information held for your account, or to request deletion, use the contact details on the Support page.