PopReel Privacy Policy
Last updated: August 6, 2026
MET DAAN LIMITED, an Irish company with company number 569157 and registered office at 15 Princes Street, Tralee, Kerry, V92 YY15, Ireland, operates PopReel. In this Privacy Policy, "MET DAAN", "PopReel", "we", "us" and "our" refer to MET DAAN LIMITED.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you use the PopReel website at https://popreel.io, the PopReel mobile applications, a PopReel experience made available inside a third-party platform (including a TikTok Mini App), and related streaming, account, subscription, purchase, advertising, rewards, support and reporting features (together, the "Service").
It also explains your privacy choices and rights. Please read it together with the PopReel Terms of Service. If you use PopReel through Apple, Google, TikTok or another platform, that platform may separately process personal data under its own privacy policy.
Key information at a glance
| Item | Details |
|---|---|
| Data controller | MET DAAN LIMITED |
| Company number | 569157 |
| Registered office | 15 Princes Street, Tralee, Kerry, V92 YY15, Ireland |
| Privacy contact | admin@popreel.io |
| Services covered | PopReel website, iOS and Android apps, TikTok Mini App and related services |
| Main data categories | Account and contact data; viewing and usage activity; device and network data; purchases and subscriptions; advertising and analytics data; support and report data |
| TikTok Mini App data | A TikTok OpenID and authentication tokens for silent login; optional nickname and avatar if you expressly authorise access; purchase, subscription, ad and report events needed to operate the mini app |
| Age | The Service is not directed to children under 13. A higher local minimum age or parental authorisation requirement may apply. |
1. Scope and our role
This Policy applies to personal data processed by MET DAAN in connection with the Service. MET DAAN is generally the data controller for the processing described here, meaning that we decide why and how personal data is used.
Apple, Google, TikTok, payment platforms, advertising platforms and other third parties may act as separate controllers for processing they perform for their own purposes. They may also act as service providers or processors for particular functions. Their own privacy notices apply to their platform-level processing.
Different versions of PopReel may provide different features. The data collected depends on the platform, device, region, account status, permissions, privacy choices and features you use. We do not collect every category described below from every user.
2. Personal data we collect
We collect personal data from you, automatically from your device and use of the Service, and from platform providers and other partners. The table below describes the main categories.
| Category | Examples | How we obtain it |
|---|---|---|
| Account and contact data | Name, email address, account ID, login status, account settings, language, country or region, age confirmation, marketing choices. | From you; from a platform provider when you choose a platform login or expressly authorise profile access. |
| Viewing and interaction data | Series and episodes viewed, viewing progress, watch time, search history, favourites, likes, ratings, recommendations shown, clicks, reward activity, session history and feature use. | Automatically when you use the Service. |
| Device, network and technical data | Device model, operating system, app version, browser type, IP address, approximate region derived from IP, language, time zone, network type, device and advertising identifiers where permitted, cookie or SDK identifiers, log files and security events. | Automatically from your device, browser, app, platform and technical service providers. |
| Purchase, subscription and entitlement data | Products or episodes purchased, subscription tier and status, order and transaction references, purchase history, currency, amount, refund or chargeback status, reward entitlements and access rights. | From Apple, Google, TikTok, payment or platform providers and our own systems. We generally do not receive your full payment card or bank account details when a platform processes the payment. |
| Diagnostics and performance data | Crash reports, error logs, loading times, playback failures, device performance, app responsiveness and troubleshooting information. | Automatically from the Service and diagnostics providers. |
| Advertising and measurement data | Ad impressions, ad placement, clicks, rewarded-ad completion, interstitial-ad status, conversion or attribution data, consent status and advertising identifiers where permitted. | From the Service, TikTok and other advertising, attribution or measurement partners. |
| Support, reports and communications | Support requests, complaint and appeal details, report category, content or transaction references, correspondence, attachments and records of how a matter was handled. | From you, TikTok or another platform, and our support systems. |
| User-submitted or public content | Ratings, reviews, comments, profile content, feedback, reports or other material you choose to submit where these features are available. | From you. Some information may be visible to other users if the feature is public. |
2.1 TikTok Mini App data
When you open PopReel as a TikTok Mini App, the mini app may use TikTok silent login. TikTok provides a temporary authorisation code that our backend exchanges for an access token and an app-specific OpenID. We use the OpenID as a unique identifier for your PopReel session or account inside TikTok and may retain the OpenID and token information needed to keep you signed in, operate purchases and subscriptions, prevent fraud and support your account.
Silent login does not by itself provide us with your TikTok nickname or avatar. If a feature needs basic TikTok profile information, PopReel may request the user.info.basic permission. TikTok will show an authorisation screen, and we receive the permitted profile information only if you approve it. You can decline optional profile access, although the relevant optional feature may not work.
For TikTok Beans purchases or subscriptions, we may receive and store OpenID, internal and TikTok order references, product or episode information, amount or tier, subscription status, entitlement status, expiration, renewal, cancellation, refund and webhook event data. We use this information to grant and maintain access to paid content and to reconcile transactions. We do not receive your full card details from TikTok.
If PopReel uses TikTok rewarded or interstitial ads, we may process ad placement, display, completion, closure, error and reward-delivery events. TikTok may separately process information for ad delivery, security, fraud prevention, measurement and its own platform purposes under its privacy policy.
If you submit or appeal a report through TikTok, TikTok may send us information needed to investigate and respond. TikTok may also make our contact email available to you for an appeal or follow-up.
2.2 Information we do not intentionally request
The Service is not designed to collect precise GPS location, government identity documents, biometric identifiers, health information, financial account credentials, political opinions, religious beliefs or other special-category data from ordinary users. Please do not send such information through support or public features unless we specifically request it for a lawful purpose and provide an appropriate notice.
We may infer a general country or region from your IP address, device or platform settings to apply availability, pricing, language, legal or content restrictions. This is not the same as collecting precise location.
3. How we use personal data
We use personal data for the following purposes:
- Provide, operate and secure the Service, create and authenticate accounts, maintain sessions and deliver requested episodes and features.
- Remember viewing progress, favourites, settings and entitlements across sessions and supported devices.
- Process purchases, subscriptions, rewards, refunds, chargebacks and access to paid content.
- Personalise the catalogue, ranking, recommendations, notifications and user experience.
- Display, measure and manage advertising, including rewarded and interstitial ads, where enabled and permitted.
- Send service communications such as security alerts, purchase confirmations, subscription notices, policy changes and support responses.
- Send marketing communications where permitted, subject to your choices and applicable law.
- Analyse usage, performance and audience trends; diagnose crashes and playback problems; test and improve products and features.
- Prevent fraud, abuse, account sharing, artificial engagement, unauthorised access, security incidents and violations of our Terms.
- Respond to support requests, copyright claims, content reports, payment disputes and appeals.
- Comply with legal, tax, accounting, regulatory, platform and contractual obligations and protect the rights, safety and property of users, MET DAAN and others.
- Establish, exercise or defend legal claims and manage corporate transactions, audits and compliance reviews.
4. Legal bases for processing
Where the GDPR, UK GDPR or a similar law applies, we rely on one or more of the legal bases below. The applicable basis depends on the purpose, context and data involved.
| Purpose | Typical legal basis |
|---|---|
| Account creation, streaming, viewing progress, purchases, subscriptions, rewards and support | Performance of a contract or steps requested before entering a contract. |
| Security, fraud prevention, service integrity, product improvement and basic analytics that do not require consent | Our legitimate interests in operating a secure, reliable and commercially sustainable service, balanced against your rights. |
| Non-essential cookies, SDK tracking, cross-app advertising, targeted advertising and certain analytics | Consent where required by law. You may withdraw consent at any time. |
| Optional TikTok basic profile data | Your explicit platform authorisation and, where applicable, consent. |
| Direct marketing | Consent, or legitimate interests where local law permits and appropriate safeguards and opt-outs are provided. |
| Tax, accounting, consumer protection, sanctions, regulatory requests and legally required records | Compliance with a legal obligation. |
| Legal claims, serious abuse and protection of rights or safety | Legitimate interests, legal obligation or another lawful basis depending on the circumstances. |
Where we rely on legitimate interests, you may request information about the balancing assessment and may have the right to object. Where we rely on consent, withdrawing consent does not affect processing that was lawful before withdrawal.
Some data is necessary to provide the Service or complete a purchase. If you do not provide required account, authentication or transaction information, we may be unable to create an account, stream content, process a purchase or provide the requested feature.
5. Cookies, SDKs and similar technologies
PopReel and our partners may use cookies, local storage, pixels, software development kits, mobile advertising identifiers and similar technologies to keep you signed in, remember settings, secure the Service, measure performance, analyse usage, attribute installs or purchases and provide or measure advertising.
Strictly necessary technologies may operate without consent where permitted because they are required to deliver a feature you request, maintain security or transmit communications. Where law requires consent for analytics, advertising, conversion tracking or access to information on your device, those technologies should not be activated until you make a valid choice.
You can manage choices through the cookie banner, in-app privacy controls, device settings, platform settings or other controls made available to you. It should be as easy to withdraw consent as to give it. Browser or device controls may not remove server-side records already lawfully created.
A separate Cookie Policy or cookie settings interface may provide more detailed information about the technologies currently deployed on the Site. Because technology providers can change, we review the relevant inventory and update disclosures when necessary.
6. Advertising, analytics and tracking
PopReel may be supported by advertising and may use analytics and attribution tools. Depending on your region, age, platform and choices, advertising may be contextual or personalised.
Advertising and measurement partners may receive or generate identifiers, IP address, device and app information, ad interactions, consent signals, diagnostics and limited account or transaction signals. Where permitted and appropriately protected, contact information such as an email address may be transformed or hashed before being used for audience matching, attribution or campaign measurement.
Our current App Store privacy disclosures indicate that contact information, identifiers and diagnostics may be used for tracking across apps or websites, and that purchases, contact information, identifiers and diagnostics may be used for app functionality, analytics, personalisation, advertising or marketing. This Policy is intended to explain those categories in more detail; the store labels and this Policy must be kept consistent with the actual app and SDK configuration.
We do not sell personal data for money. However, some disclosures to advertising or measurement partners may be treated as a "sale", "sharing" or targeted advertising under certain U.S. state laws. Where such laws apply, we provide the required right to opt out through available privacy controls or by contacting us.
7. Personalisation, profiling and automated systems
We may use viewing history, searches, interactions, purchases, language, region, device information and similar signals to rank titles, recommend series, remember progress and tailor the Service. These activities may involve profiling or automated processing.
Our recommendation systems are intended to improve entertainment discovery. They are not designed to make decisions that produce legal or similarly significant effects about you. You can reduce personalisation by clearing or limiting history where the feature is available, changing privacy choices, declining optional permissions or contacting us.
8. How we share personal data
We do not disclose personal data indiscriminately. We may share it with the following categories of recipients when necessary and subject to appropriate safeguards:
- Platform providers, including TikTok, Apple and Google, to provide authentication, app distribution, purchases, subscriptions, advertising, reports and platform compliance.
- Media hosting, content delivery and playback providers, including BytePlus or another provider used for approved mini-drama hosting and playback.
- Cloud hosting, database, content delivery, cybersecurity, fraud prevention, customer support, email, analytics, crash reporting, attribution and advertising service providers.
- MET DAAN affiliates and authorised personnel who need access for product, engineering, finance, compliance, legal, support or business operations.
- Professional advisers, auditors, insurers, banks and payment or reconciliation service providers.
- Authorities, courts, regulators, law-enforcement bodies or other parties where disclosure is required by law or reasonably necessary to protect rights, safety and security.
- A buyer, investor, lender, successor or adviser in connection with a merger, financing, reorganisation, sale of assets or similar corporate transaction, subject to confidentiality and legal requirements.
- Other parties where you direct us to share data or give valid consent.
Service providers may use personal data only for the contracted services and under appropriate confidentiality, security and data-protection obligations, unless they separately act as controllers for their own processing.
9. Payments, subscriptions and platform providers
Purchases may be processed by Apple, Google, TikTok or another authorised platform. The platform normally collects and controls your payment credentials. PopReel generally receives transaction and entitlement information, such as a product, order reference, amount, status, subscription tier, renewal, cancellation, refund or chargeback, but not your full payment card number.
When you use TikTok Beans or TikTok subscriptions, TikTok processes the payment and sends order or subscription events needed for us to deliver the purchased episode, series access or membership benefits. We associate these events with your app-specific OpenID and our internal order records.
The relevant platform's privacy policy and purchase terms apply to its own processing. You may need to use that platform's account settings or support process to manage or cancel a subscription, update payment information or request a refund.
10. International data transfers
MET DAAN is established in Ireland, but PopReel and its service providers may operate globally. Personal data may therefore be accessed, hosted or processed outside your country, including outside the European Economic Area, the United Kingdom or Switzerland.
Where required, we use recognised safeguards such as adequacy decisions, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, contractual and technical controls, access restrictions, encryption and transfer-risk assessments.
The exact hosting, support and service-provider locations used for a TikTok U.S. or E.U. launch may also be subject to TikTok approval and data-security requirements. We aim to minimise regional data access and use data only for the approved business purpose.
11. Data retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security, resolving disputes and meeting legal, tax, accounting and platform obligations. Retention may be extended for an active investigation, legal claim, regulatory request, chargeback or security incident.
Unless a different period is required or justified, we generally apply the following criteria and target periods:
| Data | Typical retention approach |
|---|---|
| Account and contact data | While the account is active and generally up to 24 months after closure or last activity, unless deletion is completed sooner or longer retention is required. |
| Viewing history, progress, preferences and personalisation data | While needed to provide and personalise the Service, generally no longer than 24 months after last activity or account closure, after which data may be deleted or de-identified. |
| TikTok OpenID and authentication records | While the TikTok-linked PopReel account or integration is active and for a limited period afterwards for security, reconciliation and account recovery; tokens are deleted, refreshed or allowed to expire when no longer needed. |
| Purchases, subscriptions, invoices, refunds and tax records | For the legally required accounting and tax period, generally at least six years for relevant Irish business records, and longer where a dispute or law requires. |
| Support, reports, copyright complaints and appeals | Generally three years after closure, or longer if needed for repeated abuse, legal claims or platform requirements. |
| Security, fraud and technical logs | Generally up to 12 months, unless a longer period is necessary to investigate an incident or prevent abuse. |
| Marketing preferences and suppression records | Until you withdraw consent or object, plus a limited suppression record to ensure we respect your choice. |
| Consent and compliance records | For as long as needed to demonstrate compliance and respond to complaints or claims. |
Backups may retain data for a limited additional period before secure deletion. When possible and appropriate, we aggregate or de-identify data so it is no longer personal data and may be retained for analytics and planning.
12. Security
We use administrative, technical and organisational measures designed to protect personal data, including access controls, authentication, encryption in transit where appropriate, logging, backups, vulnerability management, staff and contractor controls, and incident-response procedures.
No internet or storage system is completely secure. You are responsible for protecting your account and device and should notify us if you suspect unauthorised access. We may request information reasonably necessary to verify your identity before disclosing or changing account data.
13. Your privacy choices
- Account and profile: update available account information through the Service or contact us.
- Viewing and recommendations: use available history, preference or personalisation controls, or request assistance.
- TikTok permissions: decline optional profile permission or revoke PopReel access through TikTok settings. Revocation may sign you out or limit linked features.
- Advertising and tracking: use the cookie banner, in-app privacy controls, platform consent settings, device advertising settings or applicable opt-out controls.
- Marketing emails: use the unsubscribe link or contact us. You may still receive necessary service messages.
- Push notifications: manage them through your device or app settings.
- Cookies: use our cookie settings interface and browser controls. Deleting cookies may sign you out or reset preferences.
- Account deletion: use the deletion function made available in the Service or contact admin@popreel.io.
14. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of certain data, withdraw consent, opt out of targeted advertising or certain disclosures, and complain to a data-protection authority. These rights may be subject to lawful exceptions.
To exercise a right, contact admin@popreel.io and describe your request. We may ask for information needed to verify identity and protect the account. We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right.
14.1 EEA, United Kingdom and Switzerland
You may have the rights of access, rectification, erasure, restriction, portability and objection, including an unconditional right to object to direct marketing. You may withdraw consent at any time and may complain to your local supervisory authority.
MET DAAN's lead supervisory authority in Ireland is the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland. You may also complain to the authority where you live or work or where an alleged infringement occurred.
14.2 California and other U.S. states
Applicable state laws may give residents rights to know, access, correct, delete or obtain a copy of personal information, and to opt out of sale, sharing, targeted advertising or certain profiling. We do not sell personal information for money. Some advertising or measurement disclosures may be treated as sale, sharing or targeted advertising under state law, and you may request an opt-out through available controls or by contacting us.
You may use an authorised agent where permitted. We may verify your identity and the agent's authority. We do not knowingly sell or share personal information of children under 16 for cross-context behavioural advertising.
14.3 Brazil
Under the Brazilian General Data Protection Law (LGPD), you may have rights to confirm processing, access, correct, anonymise, block or delete certain data, obtain portability information, receive information about sharing, withdraw consent and review certain automated decisions. Contact us to submit a request.
14.4 Other regions
Additional local rights may apply in countries where PopReel is available. We will honour applicable rights and provide region-specific notices or controls where required.
15. Children and minors
The Service is not directed to children under 13, and we do not knowingly permit a child under 13 to create an account. If local law requires a higher minimum age, that higher age applies.
In Ireland, where we rely on consent to process personal data in connection with an online service, parental or guardian authorisation may be required for a user under 16. Other countries may set different ages. We may apply age gates, content ratings, parental controls or feature restrictions and may request reasonable age confirmation.
If you believe a child has provided personal data contrary to this section, contact admin@popreel.io. We will investigate and delete or restrict the data where required. Parents and guardians may exercise rights for a child where legally authorised and where it is in the child's best interests.
16. Public and user-submitted information
If the Service allows you to submit a public review, comment, rating, profile or other content, information you choose to publish may be visible to other users and may be copied or shared by them. Do not post personal data that you do not want to make public or personal data about another person without authority.
We may moderate, remove, restrict or retain user-submitted content and related records to enforce our Terms, comply with law, handle reports and protect users. A report or appeal is not normally public, but information may be shared with the affected parties or a platform where necessary to investigate and respond.
17. Account deletion, deauthorisation and data deletion
You may request deletion through the account-deletion function made available in PopReel or by emailing admin@popreel.io. Deleting an app or removing it from your device does not itself delete your account or cancel a subscription.
If you use PopReel through TikTok, you may also revoke PopReel's TikTok authorisation in TikTok settings. Revoking access may prevent us from refreshing tokens or using optional profile information, but we may retain transaction, security, legal and suppression records as required.
After a verified deletion request, we delete or de-identify data that is no longer necessary, subject to legal, tax, security, fraud, dispute and backup exceptions. Platform providers may retain data they control under their own policies, and you may need to contact them separately.
18. Changes to this Privacy Policy
We may update this Policy to reflect changes in the Service, technology, data practices, platform requirements or law. The "Last updated" date shows the latest revision.
For a material change, we will provide reasonable notice through the Service, by email or another appropriate method before the change takes effect where required. If consent is needed for a new use, we will request it.
19. Contact us and complaints
For privacy questions, requests or complaints, contact:
MET DAAN LIMITED · 15 Princes Street · Tralee, Kerry, V92 YY15 · Ireland · Email: admin@popreel.io
For an issue involving a payment, platform account or platform-level data, you may also need to contact Apple, Google, TikTok or the relevant platform provider. If you are not satisfied with our response, you may complain to the Data Protection Commission in Ireland or another competent supervisory authority.