Privacy Policy - Castle

Every Indian user’s privacy and security is paramount to us at Castle and we align our data practices with the Information Technology Act 2000, Consumer Protection Act 2019, Digital Personal Data Protection (DPDP) Rules 2026 in the country. We are transparent with how we collect, use, store and protect your information while using Castle’s streaming service including our cross-device experience across PC and Android to ensure that you understand your rights according to India’s citizen data sensitivity framework tailored specifically for local streamer preferences.

1. Data Collection: Minimal & Non-Sensitive Only

In order to ensure a better user experience on all supported devices, Castle collects only the minimal amount of non-sensitive data it needs and no extra personal data. In order to provide custom recommendations, this data includes usage details (content categories that you watch, search terms for Bollywood content like “shahrukh khan movies”, “Hollywood movies”, “katrina kaif videos”, streaming time, selection of offline playback rights), along with device information (including country, device model and make). We also capture basic device-level data (like model, OS version, network type, storage availability) to better optimize UX for popular devices - Android smartphones and PCs in India -- ensuring an uninterrupted experience even in the hinterland, where low-bandwidth semi-urban conditions make high-quality HD / 4K streaming difficult for those with erratic satellite links.

2. No Registration Required & Data Usage Principles

Perhaps most important, Castle doesn’t require you to register or sign up for a subscription, so we never see your name, address, phone number or payment details. Your data is only used for three reasons: to comply with Indian data laws, to maintain and improve services (including improving offline download content, optimizing streaming for rocky 3G cellular connections), and for refining content recommendations. We make use of temporary, non-intrusive cookies to remember your preferences (subtitle languages, video quality settings, playlist options) and these follow DPDP’s consent guidelines — meaning they do not track your behaviour outside of Castle. You can turn them off in your device settings without disrupting core services.

3. Data Security, Localisation & Disclosure

In compliance with DPDP data localisation requirements, the information collected is protected via industry standard protocols and stored on secure servers in India. We uphold our safety commitments with end-to-end encryption, regular security audits, and strict access limits. We also retain data logs for the shortest time allowed by law. If a data breach occurs, we will promptly notify affected users and the Indian Data Protection Board within 72 hours. We do not rent, sell or share your Personal Information with third parties (other than to keep our Services operational) except as permitted by Indian law and regulatory guidelines.

4. Policy Updates & India-Based Support

This policy may be modified to reflect platform enhancements (e.g. support for new devices) or DPDP regulatory changes. Notifications of material revisions will be announced via in-app pop-ups and the updated policy will be posted in “Settings > Legal” with a clear revision date. Your continued use of Castle for 30 days following an update constitutes acceptance of the revised terms. If you have privacy questions, get in touch with our India-based support team via the in-app portal — they will address your concerns within the timelines prescribed by the DPDP Rules 2026.