Privacy Policy

Effective October 18, 2026

Who we are

Weave ("the app") is an Android media player published by TruSentry LLC ("we"). Questions about this policy can be sent to trusentryllc@gmail.com.

Information stored on your device

To work, the app stores the following only on your device. It is never sent to us.

• Server details you enter: address, share name, port, username, and optionally a password. Passwords and API keys are encrypted with AES-256-GCM using a key held in the Android Keystore, which cannot be exported from the device.
• Library index: the names, sizes and dates of video files in the folders you choose, used to build your Movies and TV Shows lists.
• Watch history: resume positions and watched marks.
• Artwork cache: thumbnails created from your own video files and, if you enable it, posters downloaded from TMDB.
• Preferences such as theme and playback settings.

App data is excluded from Android cloud backups and device-to-device transfer, so your credentials are not copied off the device.

Network connections the app makes

• Your servers. The app connects directly to the storage devices you add, using the SMB protocol, to list folders and stream or download files. These connections go only to addresses you provide or select.
• Local network discovery. During setup, the app checks devices on your current Wi-Fi network (and common router addresses) for file sharing on port 445 so it can suggest your storage. This happens on your local network only and nothing is sent to us.
• The Movie Database (optional). If you turn on "Posters & descriptions", the app sends cleaned-up titles and release years (for example "Serenity", 2005), along with an API key, to TMDB's servers (api.themoviedb.org) and loads images from image.tmdb.org. No file paths, server addresses, credentials or viewing history are sent. TMDB's handling of these requests is governed by the TMDB privacy policy. This feature is off unless you enable it.

We do not operate any server that receives data from the app.

Permissions

• Internet and network state: to connect to your servers and, optionally, TMDB, and to tell whether you're on Wi-Fi or mobile data.
• Local network access (Android 17 and later): to reach storage devices on your home network.
• Storage (Android 9 and earlier only): to save files you choose to download.

Third-party services

The app contains no advertising, analytics or tracking SDKs. Remote access features rely on VPN software you install and configure separately, such as Tailscale, which is governed by its own privacy policy. Weave does not communicate with such services.

Purchases and the free trial

Weave offers an optional one-time purchase, Weave Pro, sold through Google Play. Payment is handled entirely by Google; we never see your name, email, card or billing address. The app asks Google Play only whether your Google account owns Weave Pro, and stores that yes/no answer on your device. The 7-day free trial is tracked by a start date stored only on your device. Google's handling of purchase information is described in the Google Privacy Policy.

Children

The app is not directed at children under 13 and does not knowingly collect information from anyone.

Your choices and deleting your data

You can remove a server (and its saved credentials) in Settings → Manage servers, clear watch history and the artwork cache in Settings, or remove all app data by clearing the app's storage or uninstalling it. Because we hold no data about you, there is nothing for us to delete on our side.

Security

Credentials are encrypted at rest with a hardware-backed key. SMB traffic on your own network is handled by your server's settings; you can require SMB 3 encryption per server in the app. For remote access we recommend a VPN rather than exposing file sharing to the internet.

Changes

If this policy changes, we will update this page and the effective date above. Significant changes will also be noted in the app's release notes.