Privacy policy

What we collect

We collect what the product needs to work, and not much else.

• Account data. Your email address and a password, stored only as a salted hash. If you sign in with Apple or Google we receive the identifier they give us and your email, which Apple lets you hide behind a relay address.
• Profile data. Your username, display name, bio, profile photo, and favourite films.
• Content you create. Watchlists, the films you add, notes, reviews, ratings, comments, posts, photos and videos you upload, movie nights you plan, who you follow, and the clips you attach.
• Viewing history. When you mark a film watched or rate it, the film and the date, so your diary and calendar work.
• Notification data. If you enable push notifications, a device push token, your notification preferences, and your device's UTC offset, so we don't send you anything at 3am.
• Links you scan. The video link you share and the films we identify from it.
• Letterboxd import. If you choose to import, the username you give us and the public data on that profile.
• Waitlist signups. Your email plus any name or note you choose to add.
• Analytics and diagnostics. Which screens you open and key actions you take, tied to your account id, plus crash reports. No note, review or caption text is sent.
• Usage logs. IP address and request metadata, used to serve requests, rate-limit, and prevent abuse.

We do not use third-party advertising or tracking networks, and we do not sell your data.

What is public

Your username, display name, photo, bio, public lists, reviews, ratings, posts and follower counts are visible to other users. Your email address, private lists, notification preferences, blocks and mutes, and scan history are not.

Content you add to a shared list is visible to the other members of that list. That's the point of a shared list. A movie night marked private is visible only to the people you invite, and anyone holding a night's share link can see and respond to it, because the link is the invitation.

How we use it

We use your information to run the product: to sign you in, show you your lists, sync them across your devices, deliver the notifications you asked for, and share what you choose with the people you invite. We do not use it to build advertising profiles.

Where UK or EU law applies, our legal bases are contract (providing the app you signed up for), legitimate interests (security, abuse prevention, and understanding which features are useful), and consent where you give it — push notifications, camera and photo access, and the Letterboxd import. You can withdraw consent at any time in Settings or your device settings.

The AI feature

When you share a clip for scanning, the video is fetched and analysed to identify the films in it. We send only what's needed to complete that match, we don't republish or store the video itself, and we don't use your clips to train third-party models. The films it finds, and the clip you attached, stay on your list under your account.

Third-party services

A small set of service providers help us run the product. They process data on our behalf under agreements that limit what they can do with it. We do not sell your personal information.

• Supabase. Our database and sign-in provider, hosted on AWS in the United States.
• Vercel. Hosting.
• Google Firebase. Delivers notifications to older versions of the app, and retained while we finish migrating away from it.
• Apple. Delivery of push notifications and Live Activities to iOS devices.
• Cloudflare R2. Storage for profile photos, list covers and post media, and for database backups.
• TMDB. Film and TV metadata, posters, and search.
• OMDb. Supplementary IMDb ratings.
• Apify. Fetches the video behind a link you scan, and the public Letterboxd profile you ask us to import.
• Google (Gemini). Analyses a scanned video to identify the films in it.
• Resend. Transactional email, such as password resets.
• PostHog. Product analytics.
• Sentry. Error and crash monitoring.
• Loops. Waitlist and launch email.

This product uses the TMDB API but is not endorsed or certified by TMDB.

Where it is stored

Your data is stored and processed in the United States. If you are in the UK, EEA or Switzerland, that means it is transferred outside your country, and those transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard in our providers' terms.

Keeping and deleting

We keep your information for as long as your account is active. You can permanently delete your account from Settings in the app. That removes your profile, lists, films, reviews, ratings, watches, posts, comments and follows. Deletion is immediate and cannot be undone.

Two exceptions worth stating plainly. Database backups are kept for 30 days and then permanently deleted, so deleted content can persist in a backup for up to that long before it is gone everywhere. Scan jobs and cached scan results expire on their own about 30 days after the scan.

If you unsubscribe from the waitlist, we remove your email from it. In rare cases we may need to keep a record for legal reasons, and then only for as long as the law requires.

Your rights

You can access, correct, export, or delete your information. Deletion and correction are built into Settings; for anything else, email us from the address on your account and we will respond within 30 days.

Depending on where you live you may have additional rights. California residents have the right to know, delete and correct their personal information, and not to be discriminated against for exercising it — we do not sell or share personal information for cross-context behavioural advertising. If you are in the UK or EEA and are unhappy with our response, you may complain to your local data protection authority.

Children

Cinechrony is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, write to us and we will delete it.

Contact

Questions about privacy, or a deletion request? Write to support@cinechrony.com and a real person will answer. We are the data controller for the personal data described here.