AniCom · Animation CommunityYour privacy in AniCom for Android
Private beta for adults · Android supplement dated 30 October 2026
Controller and contact
The controller is Luca Rossetto. For privacy, access, correction, deletion, support and appeals against moderation decisions: luhou7777@gmail.com. Updated 24 October 2026, version 2026-10-24-v2. This beta is for people aged 18 or over. We ask for an adult declaration without collecting a birth date or identity documents. This copy includes the Android supplement dated 30 October 2026, version 2026-10-30-android-v3. The account service privacy notice version remains 2026-10-24-v2.
Library and photographs
You may use the library without an account: titles, categories, ratings, views, rewatches and notes remain on the phone. Camera use is optional and requires Android permission. You may type a title or select a photo using the system picker, which grants access to the selected image only. Google ML Kit Text Recognition processes text on the device using a model bundled with the app. Images are processed for recognition, not sent to AniCom servers or catalogues and not added to cloud backups. Catalogue searches use the extracted text when you use this feature. Style and language are preferences; language stays on the device.
Android and Google ML Kit
Recognition runs on the device; ML Kit does not send images or recognized text to Google. The SDK sends technical metrics to Google: device and app-version details, per-installation identifiers, performance, API configuration, data sizes, events and errors. Google uses them for diagnostics and API usage analysis under its terms and privacy notices. They are not push notifications or the titles and photographs in your library. AniCom adds no advertising SDKs or its own advertising tracking. The Google ML Kit and Google links below describe metric processing, separate from AniCom accounts and backups.
Android permissions and security
Internet is used for accounts, sync, social features, catalogues and posters. Camera permission is used for framing a title. The app does not request GPS location, contacts or general photo-library access. Android Keystore protects the session token. System automatic app backup is disabled. The local library is in private app storage. Export and import use the Android file picker: an exported file is under your control and may contain library data. Requested cloud account backups are separate from these local files.
Account and backup
An account requires a nickname, email, password hash, account identifier, verification status and privacy notice acknowledgement. The requested cloud backup includes titles, categories, ratings, view and rewatch counts, notes, import receipts, catalogue metadata and sources, style and selected avatar identifier. This Android version does not ask for first or last names. Passwords are not stored in plaintext. We do not collect Netflix, Prime Video or other platform passwords, cookies or sessions.
Optional social presence and compatibility
Social mode requires a declared adult age, community rules acceptance and a separate visibility confirmation. In the manually selected city, without GPS, town square members can see your account nickname and avatar even when the app is closed, only after a specific confirmation of persistent visibility. Your profile remains visible until you disable social mode or delete your account. We do not display online status or last-seen times. The green bond symbol indicates only an accepted bond. Previous confirmations limited to app use keep that restriction until a new explicit choice. Logging out revokes the session and online presence, without revoking the persistent social choice. Full rankings, titles, ratings, email and personal names are not published. Compatibility remains a separate optional choice: the server compares watched and rated titles, rank positions, categories and list sizes and shares only the compatibility level, without a shared-title count. No percentage is shown with fewer than five common titles. This compares recorded lists, not personalities, and does not make decisions with legal effects. You can disable social mode and compatibility from Profile without losing your library.
Connections, chat, blocking and notifications
Text and emoji chat requires the recipient to accept a connection. Messages are available to the participants and encrypted on the server. The operator can decrypt them; encryption is not end-to-end. Messages are not public. Muting stops notifications; removing a connection stops new messages. Blocking prevents new requests, messages and notifications between both people and hides them from each other in town squares. Unblocking does not automatically restore a connection. Android notifications are optional and use Google Firebase Cloud Messaging (FCM). Enable them in Bonds after enabling social mode; Android also asks for notification permission where required. FCM generates an installation identifier and device token and processes technical device and delivery information. AniCom stores the token encrypted on the server and bound to the session. We send Google only the event type and technical event, bond and recipient identifiers, never chat text, library titles, ratings, photographs or email. Visible alerts use generic text and open the bond only for the recipient account. You can disable notifications in the app or Android settings. Logout, revocation, deletion and account changes remove registration; if the device is offline, an unusable token is removed on a provider response or session expiry. AniCom rechecks the current account and local choice before displaying alerts. Delivery already in progress may arrive after revocation; blocking and muting are checked before sending. Android restrictions, battery saving and force-stop may delay or prevent delivery. Firebase Analytics and advertising are not used.
Reports and moderation
A limited automated check detects some explicit threats, hate expressions and illegal content before sending. It cannot detect every abuse. You may report a profile or an individual message, including from a removed connection. We store the reason, optional notes, necessary identifiers and, when selected, a copy of that message only, not the whole conversation. The operator reviews evidence using restricted administrative tools. We do not disclose the reporter’s identity to the reported user. Reports do not automatically cause suspension: human review is required, with an initial assessment within 24 hours. Messages may be hidden and social access suspended; account access, backup and account deletion remain available. You may appeal using the contact above.
Purposes and legal bases
Requested accounts, verification emails, password recovery, backup and communications perform the service you choose (GDPR Article 6(1)(b)). Optional social visibility and compatibility rely on consent (Article 6(1)(a)), which can be withdrawn in settings. Protection against unauthorized access, spam limits, blocking, reports and security rely on the legitimate interest in protecting users and the service (Article 6(1)(f)), with access and data limited to what is needed. Legally binding obligations or requests may rely on Article 6(1)(c). Acknowledging this notice is not blanket consent for other uses. We do not use data to advertise, sell profiles or track users for advertising.
Recipients, providers and transfers
The account service and database are hosted on Hetzner in Finland. Google/Gmail delivers verification and recovery emails and alerts the operator to new reports; those alerts do not include reported text. This Android beta may be distributed through Google Play or an APK and does not use Apple services for this device. Google supplies ML Kit; its technical metrics are described below. Wikipedia/Wikimedia, TVmaze and Trakt receive search text and connection information such as IP addresses, not photographs, ratings, email or AniCom profiles. Messages are shared with the recipient and, when reported, with the operator for review. Authorities or advisers may receive information only when necessary and lawful. The main server is in the EU. Google and catalogue services may process data outside the EEA under their own terms and privacy notices. GDPR-regulated transfers require the safeguards in Articles 44 onward, such as an applicable adequacy decision or other appropriate safeguards. Contact the controller for information about the safeguards actually applicable to the service used. Google Play may distribute the Android app; optional Android push uses Google FCM as described above.
Retention and deletion
The local library remains until you remove it or uninstall the app. Cloud accounts and backups remain until you delete the account in Profile. Unverified accounts are removed after seven days. Email links expire after 30 minutes and sessions after at most 30 days. Messages are deleted after 90 days. Reports, their evidence and moderation action logs are deleted within 90 days of creation, even if the original message is no longer available. Social preferences, blocks and rule acknowledgements remain while needed for the account or until account deletion. Existing reports may remain for the stated period to address abuse; account deletion removes direct account links in the report register. Encrypted technical backups may retain deleted data for up to seven additional days until rotation. Recovery requires reapplying deletions made after the snapshot. Rate limits use temporary technical data. Application logs do not record request bodies, passwords or tokens.
Your rights and optional choices
Where GDPR applies, you may request access and a copy, correction, erasure, restriction, portability and objection to legitimate-interest processing. Consent to social presence and compatibility can be withdrawn without affecting earlier lawful processing. You can revoke camera permission in Android app settings and continue typing titles manually. You can disable optional notifications in Bonds or in Android notification settings. The local library works without an account; without social you do not appear in town squares and cannot use online chat and connections. Account nickname and email corrections are handled by support after identity verification. Contact luhou7777@gmail.com to exercise your rights. We reply within one month, subject to permitted and explained GDPR extensions. You may complain to the Italian Garante (www.garanteprivacy.it) or your competent data protection authority. You do not need to waive that right to contact us.
Security and changes
Communications use HTTPS, with dedicated protections for password hashes, tokens and backups. These measures do not guarantee the absence of risk. This notice will be updated when features or processing change; relevant social changes require renewed confirmation where necessary. Any future commercial use requires a fresh review of provider terms, notices and declarations before new uses of personal data are introduced.
Italiano