Privacy Policy
Last updated: 26 July 2026
FilmFeed ("the app", "we", "us") is a movie-discovery and social app. This policy explains what personal data the app collects, why, how it is stored, and the choices you have. We collect only what the app needs to function. We do not use your data for advertising or cross-app tracking, and we do not sell your data.
Who we are
FilmFeed is operated by FilmFeed. For any privacy question or request, contact us at [email protected].
Data we collect
We collect the following, all linked to your account and used solely to provide the app's features:
| Data | When | Why |
|---|---|---|
| Email address | At sign-up (required) | Email-and-password sign-in; used to identify your account. |
| Google account identity | Optional | Google sign-in, or account recovery if you link it to an existing account. We receive only your Google account identifier and email. |
| Apple account identity | Optional (iOS) | Sign in with Apple. We receive only your Apple account identifier and the email you choose to share — including Apple's private relay address if you hide your real one. |
| Username / display name | At sign-up | Shown on your public profile and on your reviews, comments and lists. |
| Profile photo (avatar) | Optional | Shown on your profile, if you upload one. |
| Your content | As you use the app | Ratings, reviews (public by default), comments, Original Pieces (long-form posts), watch lists, custom lists, favourites, reactions, the contributors you follow, and friend connections you create. |
| Account identifier | Automatically | A unique ID that ties your data to your account. |
| Push token | If you allow notifications | A device notification token from Apple (APNs) or Google (FCM), used only to deliver the push notifications you've opted into. |
Notifications
With your permission, the app sends notifications — local reminders (e.g. to rate a film you recently watched) and push notifications about activity that involves you (such as a friend's review or a comment on your review). To deliver push notifications, your device's push token (Apple APNs / Google FCM) is processed solely to send you those notifications; it is discarded when you turn notifications off or delete your account. You can disable notifications in your device settings at any time.
What we do not do
- We do not use any third-party advertising or analytics SDKs.
- We do not track you across other apps or websites.
- We do not sell or rent your personal data.
- Movie data is fetched from The Movie Database (TMDB) and OMDb. We send only what those services need to answer a query — the film or person you searched for, film identifiers, and your device's country code (so “where to watch” results match your region). We never send your name, email, account identifier or any of your content. As with any web request, those services receive your device's IP address.
How your data is stored and protected
Your account and content are stored on Supabase (PostgreSQL and file storage). Data is encrypted in transit using TLS. Access is enforced by row-level security so that you (and, where you choose to share, your friends) can access your data, while others cannot. Public information — such as your username, avatar, reviews and public lists — is visible to other signed-in users by design.
User content, reporting and moderation
FilmFeed lets you post public content (reviews, comments) and interact with other users. You can report objectionable content or users, and block any user so that neither of you sees the other's content. Reports are stored so we can review them and remove content or accounts that break our Community Guidelines. See our Terms of Use for the rules that apply to content you post.
How your data is shared
Within the app, content is shared with other users only according to its visibility: your profile, public reviews/comments and public lists are visible to other signed-in users; your watch list is visible to you and your accepted friends (on your profile); private lists are visible only to you (and to specific friends when you explicitly share a list). We do not share your data with third parties for their own purposes.
Deleting your account and data
You can permanently delete your account at any time from Account → Account Management → Delete account inside the app. This immediately and permanently deletes your account and all associated data — your profile, profile photo, email on file, linked sign-in identities, ratings, reviews, comments, Original Pieces, watch list, lists, favourites, reactions, follows, friend connections, notifications and push tokens. This cannot be undone.
Without the app: email [email protected] from the address on your account and we will verify and delete it within 30 days (usually much sooner). Full details are on our account deletion page.
What we retain after deletion. Safety reports filed about your content are kept for up to 12 months so we can act on repeat abuse, with the link to your user record removed. Ordinary server logs kept by our hosting provider (including IP addresses in request logs) rotate out automatically, typically within 30 days. We keep anything else only where the law requires it, for only as long as required.
Children
FilmFeed is not directed to children and we do not knowingly collect data from them. You must be at least 13 years old — or older where your jurisdiction requires it for consent to data processing — to create an account. If you believe a child has created an account, email [email protected] and we will remove it.
Your rights
Depending on where you live (e.g. under GDPR or CCPA), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the app; for anything else, contact [email protected].
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, surfaced in the app.
Contact
Questions or requests: [email protected].