Castful Privacy Policy

Effective September 29, 2026

Castful connects talent with the scouts and agencies looking for them. This policy explains what we collect, what others can see, and how to take your data with you or delete it.

Castful ("we") is the controller of your personal data under Indonesia's Personal Data Protection Law (UU PDP). Questions go to castful@betheone.agency.

What we collect

Your account

Your full name and email address.
Your password, which we keep only as a salted hash. Nobody at Castful can see it.
If you sign in with Apple or Google, the ID that account gives us and the email it shares, which is an Apple relay address if you chose Hide My Email. For Apple, also a token we use only to unlink Castful from your Apple Account when you delete yours.

Your talent profile, if you make one

Your name, @username, birth date and gender.
Photos, with the details you add, like who took them, and two details read from the photo's file: when it was taken, and the editing app, if it names one. Your phone leaves the photo's location and other file details behind before it's sent.
Your appearance: height, measurements, hair and eye colour.
Your headline, bio, categories, experience, skills, languages, occupation, hobbies and interests.
Your rates, the social accounts you add, and your availability.
Your city, and a point on the map near you (see Your location).
When you last used the app, noted at most once an hour, without your location. We keep only the latest time, with your profile.
Your portfolio: the projects you add, with their photos and links, and the people you credit on them. A new or changed project waits for our moderators before others see it.
A selfie, if you ask for the blue check on Premium, with a picture from each move of the live check before it. The live check runs on your phone, and nothing it reads leaves it. Only our moderators see the pictures, to compare with your photos, and they're deleted once they've decided.

Your scout or agency profile, if you make one

Your own scout profile: your name, @username, photo, title, a few lines about you, languages, the kinds of talent you look for, and your city.
The agency's name, @username, type, logo, cover photo, city, a point on the map near its base (see Your location), website, specialties, clients and the year it was founded.
The agency's legal name, registration number and website, if it asks for the verified badge on Pro. Only our moderators see them.

What you do on Castful

The talent you show interest in, with any note, the casting calls you post or apply to, bookings, time you mark as away, and your trips: the city and the dates.
Your team: who's on it, their roles, invites and the email addresses they went to, and what each teammate did.
Your connections: who asked whom, how you know each other, the note sent with a request, and the answer. We never read your phone's contacts.
Your posts, with their photos and captions, and your replies to posts. Which posts you applaud, and which you see.
Chat messages, in chats between talent and agencies, between two people, and in groups. They are end-to-end encrypted on your phone before they're sent, so we store only text we can't read. We do see who wrote to whom, and when, each group's name and who's in it, and when each message reached the other phones and when it was read.
Which chats are open on your phone, while they are, so new messages and typing reach you at once. Others in the chat see that you're typing, never what, and we don't keep it.
A public key for each of your phones, so your chat key can be passed on, sealed, to your other phones and your agency's teammates. We can't read your chats with it.
The talent profiles your agency's team opens, and when, so talent can see how many agencies viewed them.
Who you block, and what you report. When you report a chat message, your phone sends us its words, so our moderators can read it; for a group, the messages you pick.
How much your account writes each day, as a count and a size, never what, so no one account can fill our servers.

From your phone

Your location, if you allow it, only while the app is open and never in the background. Your precise location stays on your phone (see below).
Purchases and subscriptions, through Apple: what you bought, when, and until when a plan runs. We never see your payment details.
Your phone's notification token, if you allow notifications, to tell you about messages, interest, applications, bookings, requests to connect and replies. Notifications go through Apple and can show on your lock screen. A chat notification says who wrote, and in a group which group. It can also show what the message says: the message reaches your phone still encrypted end to end and is opened on your phone, so neither Apple nor we can read it. You can turn this off in Settings, under Notifications, with Show message previews. Other notifications say who did what, and some carry a few words: a casting call's or a project's title, a group's name, a moderator's reason, your own post's caption, a reply to you, or the note on a request to connect.
Your network (IP) address, which comes with everything your phone sends us. We use it to slow down password guessing and to limit crash reports, and don't save it to your account.
The web address of each request your phone sends our server, which Cloudflare keeps in our server's logs for 3 days. It includes what you type in a search, and the area a search is centred on.
Crash and performance reports from iOS, when the app crashes or freezes. They describe the app and your phone's model and iOS version, never who you are, and we delete them after 30 days. To limit how many come from one place, we count them for 2 days under a code made from your network address and the day, never the address itself.

We don't use advertising trackers, and we don't sell or share your data for advertising.

Your location

Talent. Your phone picks a random point 2 to 10 km from where you are, in the same city. That point is what we store and what scouts see, never where you really are. While Show me on the map is on, the point follows your phone while the app is open, never in the background, and changes only when you move into a different area about 5.5 km across. While a trip is under way, scouts see a point in the trip's city instead. If location is off for Castful, the point stays where you last set it.
Scouts and agencies. The same goes for an agency's base, and for a casting call posted from where you are: your phone picks a random point 2 to 10 km away, in the same city, and that point is what we store and what talent see. A casting call posted in a city you choose shows that city.
Posts. A post shows a city, and is placed at one of the points above: the talent's, the scout's agency's, the casting call's, or the city of the trip it's about. Readers see the city and roughly how far away it is, never the point.
Searching nearby. To find the talent, casting calls, agencies, people or posts near you, the app sends the area you're in, to about 450 m, with each search. We use it to answer the search and don't save it to your account; it stays in our server's request logs for 3 days.
Rounding. Every point we store, for talent, agencies and casting calls, is rounded to about 450 m.
Hiding. Talent can turn off Show me on the map at any time. Scouts then find you only if their agency already has an interest, application or chat with you, and your posts show only your city. Anyone can still find you by name in People.

What others can see

Anyone signed in to Castful can see

Your name, @username, photo and city, how many connections you have in common with them, and up to 3 of them.
On a talent profile: your headline, categories and photos, your live portfolio projects with the credits people said yes to, and whether you're 18 or over, but not your age.
On a scout profile: everything on it, and the agency you're on, with your role there. An agency's profile shows as its team publishes it.
With Show both are you on, your talent and scout profiles show on each other's page. It's off until you turn it on.

Scouts and agencies

See your whole talent profile: also your measurements, rate, social accounts and your blurred point on the map. Your age, but not your birth date.
See when you were last active, like Active today or Active 3 weeks ago, on your card and profile.
Can see when you're busy or away, but never what the booking is or why you're away.
With Private details on, an agency on the free plan doesn't see your measurements, rate or booked days, unless you accepted its interest or have a chat with it. Agencies on Pro or Pro+ see them.

People you connect and chat with

Someone you ask to connect sees how you know each other, and your note.
Everyone in a group, and anyone invited to it, sees its name and who's in it.
In a chat, the others can see when you're typing, when their messages reach your phone and when you read them. In a group, that's who read each message, and when. Turn off Read receipts in Privacy and safety, and nobody sees when you've read their messages, and you don't see theirs; delivered still shows.

Posts and replies

Your posts reach your connections and, with Everyone, the other side too: scouts see a talent's post, and talent a scout's or an agency's. Talent don't see the posts of talent they aren't connected with, nor scouts those of other scouts.
Only you see how many people applauded or saw your post, never who.
A reply is seen by whoever can see its post, except that talent see another talent's reply only if they're connected, or one of them wrote the post.

Talent whose profile your agency views

See how many agencies viewed their profile this week. On Premium, they see which agencies did in the last 7 days. On Premium+, they see which did in the last 30 days, when and how often. Never which teammate.

Talent near your agency

See agencies on a map, each at the point 2 to 10 km from its base. Everyone sees where they are and their logos; on Premium, who they are.
On Premium+, while a teammate travels, that the agency is scouting in that city and until when, never which teammate. Below Premium+, only that an agency is visiting, not which.

An agency's team

Sees the agency's interests, chats, casting calls and applicants.
In the agency's chats with talent, each message shows which teammate wrote it, when the team has more than one person: to the team by first name, and to the talent by name and title.

Why we use it

We use your data to:

Run Castful: show your profile, match talent with scouts, deliver messages and invites, and keep your account signed in.
Suggest people you may know, from work you've done together, agencies you've worked with, connections you share and who's near you, and show your connections' posts first in your feed.
Keep Castful safe: stop spam, fraud and abuse, check new portfolio projects, and act on reports.
Meet our legal obligations.

We rely on our contract with you (these terms and running the service), your consent (location, camera, photos and notifications, which you can withdraw in your phone's Settings), and our legitimate interest in keeping Castful safe.

Who processes it for us

Cloudflare hosts our servers, database and photo storage, and keeps our server's request logs. Your data is stored in Cloudflare's Asia-Pacific region and may pass through Cloudflare's network in other countries. Cloudflare only processes it on our instructions.
Apple processes in-app purchases and subscriptions, delivers notifications to your phone, lets you sign in with Apple, and turns map points into place names on your phone.
Google tells us who you are, if you choose to sign in with Google.

We share data with authorities only when Indonesian law requires it.

How long we keep it

Your account and profiles, and what you add to Castful, like chats, connections, portfolio projects and trips: until you delete them or your account.
Photos: deleted from our servers when no profile, post or project of yours uses them, and at the latest within a day.
Posts: 30 days from posting, with their replies, applause and views, unless you delete them sooner. When a post goes, a record of when it was posted stays until 7 days after posting, or with your account if a moderator approved it.
A declined request to connect: 30 days. Until then it reads as waiting to whoever sent it, and they can't ask again.
Signed-in sessions: up to 90 days from last use.
Which chats your phone has open: until you close them, and 30 minutes at most.
Our server's request logs: 3 days.
Crash and performance reports: 30 days.
Daily counts of crash reports from each network address, and of what each account writes: 2 days.
Profile views: 90 days.
Blue check selfies: until a moderator decides, usually within a day. Whether a check passed is kept, so the badge comes back with the plan.
Notification tokens: until you log out on that phone or delete your account.
An @username you change from: held for you for 30 days, then free for someone else.
Reports: kept for our moderators, without your account once it's deleted.
Records of purchases and subscriptions: as long as tax and accounting law requires, without your account once it's deleted.
A deactivated account is kept until you come back or delete it (see below).
A deleted account is kept for 30 days in case you change your mind, then deleted for good (see below).

Deactivating or deleting your account

You can do both yourself, on your Profile page under Account.

Deactivating is for taking a break.

Your profiles are hidden from everyone straight away: nobody can find you, see your posts, replies or casting calls, or message you.
You're logged out on every device.
Nothing is deleted. Your profiles, photos, chats, bookings and @username stay just as they are. Posts still end 30 days after you posted them.
Log in any time and tap Reactivate to show up again. There's no time limit.
If you own an agency that has a team, the agency keeps working for them while you're away.

Deleting is for leaving Castful.

Everything is hidden and you're logged out everywhere straight away, as when deactivating.
For 30 days, your account is kept so you can change your mind. Log in before the date we show you and tap Keep my account, and everything comes back as you left it. You can still download your data during that time.
After 30 days, we delete your profiles, photos, portfolio, posts, replies, connections, chats, messages, bookings, casting calls and applications from our servers, and your @username becomes free for someone else.
- A chat between two people goes whole. In a group, the messages you sent go.
- If you own an agency, its team, invites, posts and activity go too.
- If you were on someone else's team, you leave it. Its activity log keeps the entries, and its chats the messages you wrote, without your name. Photos you added to the agency's profile stay with the agency.
- Reports you made, and reports about you, stay with our moderators, without your account.
- If you signed in with Apple, we unlink Castful from your Apple Account.
Our database's automatic backups keep a copy for up to 30 more days, then it's gone.
If an account has been suspended for breaking our Terms, we may keep what's needed to deal with the report, and with any claim, for as long as the law allows.

Your rights

Under UU PDP you can:

Ask what we hold about you, and get a copy.
Correct it.
Have it deleted, or stop us processing it.
Withdraw consent.
Take it to another service.

You can edit your profiles, download your data, and deactivate or delete your account yourself on your Profile page. For anything else, write to castful@betheone.agency and we'll answer within [3 x 24 hours / the period UU PDP requires].

If we ever have a data breach that affects you, we'll tell you and the authorities within 3 x 24 hours, as UU PDP requires.

Age

Castful is only for people 16 and over. We don't knowingly collect data from anyone younger, and we delete accounts we learn belong to someone under 16. If you're 16 or 17, your parent or guardian must have agreed to you using Castful; they can write to us to see, correct or delete your data.

Changes

If we change this policy, we'll update the date at the top. If the change is significant, we'll tell you in the app first.

Contact

Castful

Jakarta, Indonesia

castful@betheone.agency