You can purchase a movie or season within the app, yes. But it is recommend that you do it in the browser and then open AS after that, only to download your purchase. If you should ever buy something in the browser, then you might need to go back or press F5 in order for AS to detect the unlocked content.
It's logging into the account through the app that raises the concern - my main browser is logged in and authenticated but I appreciate that it may not be able to use the credentials. However, as soon as I'm putting my credentials into a third party I wonder where it is going, or what they have to do behind the scenes to make it work. Does it require them to cache the login details? If so, how are they secured? Locally on my computer or remotely on theirs? I'm a little surprised that they don't address the questions up front.
Actually AnyStream is like a browser with a big plug-in that redirect some streams of the browser into mp4 file, so I think the passwords and other things are stored locally like any other browser.
The fact that there is no such policy suggests the company either hasn't thought of it (worrying), don't care about it (even more worrying), or is actually acting badly (worst of all). Security doesn't happen by accident and ill-will isn't necessary for portentially valuable personal data to be exposed. As to due diligence, the fact that, when I ask, no-one on the forum seems to have thought about it, or wondered what happens, is also indicative that security is not a priority. The company's domain name is registered in Algeria, the company seems to be based in Belize, apparently to avoid legal oversight, and so I think I will not pursue the application any further.
If you would do a little research you would actually find all the reasons for everything you just stated. The assumption you are the first person asking such things or investigating them is very incorrect. Feel free to think what you wish and by all means, exercise your right not to buy something but you are doing so based on a lack of information and unanswered questions not actual knowledge.
What is Two-Step Verification?
Two-Step Verification is a feature that adds an extra layer of security to your account log-in.
When you try to log in, Two-Step Verification sends you a unique security code. When you sign up for Two-Step Verification, you can choose to receive the security code by text message or authenticator app.
You need to enter both the code and your password to log in.
To enable Two-Step Verification:
In Your Account, select Login & security.
Select Edit beside Two-Step Verification (2SV) Settings.
Select Get Started.
Follow the on-screen instructions
Computer\HKEY_CURRENT_USER\Software\RedFox\AnyStream\Media\prime