Back to home

Privacy Policy

Last updated 4 September 2026

This covers the Cinefliq app. The website you are reading asks you for nothing: it has no form and no account. It runs no analytics today, though we expect to add some, and this page will say so before we do. The app is not published on either store yet, but it is real and a small number of people are already signed in to it.

What the website collects

Nothing from you. There is no form on this website, no account to create and nothing to submit. A waitlist form used to sit on the home page and it was removed; no addresses were ever collected through it, and there is no stored list of any kind.

Two other parties still see your IP address simply because they serve you the page and its images, which no website can avoid: our host and TMDB. Both are described under Who else is involved.

Analytics, cookies and advertising on the website

As it stands today: no analytics product, no advertising, and no advertising pixels. The site sets no cookies and stores nothing in your browser. We do not build a profile of you, and we cannot see what you do on other websites. It loads no web fonts either, so no font service sees your visit.

One thing does belong in this section, because it is a script and it is on every page. Cloudflare, who serve this site, add their own bot detection code to the pages they send you. It looks at browser characteristics to tell a person apart from an automated crawler. We do not choose its contents, receive nothing from it, and cannot switch it off on our plan; our own security policy blocks it from running in your browser, which is where that currently ends. It is Cloudflare's, described under Who else is involved, and it is not something we use to learn anything about you.

This is likely to change, and saying so now is the point of this paragraph. We expect to add analytics to this website so we can see which pages are worth keeping, and we may carry advertising here in future. If either happens we will update this page before it goes live rather than after, we will prefer measurement that does not follow you between websites, and where the law requires your consent we will ask for it rather than assume it. A policy that describes what a site used to do is worse than no policy, so treat the date at the top as the date this was last true.

None of the above describes the app, which is a separate question and has its own section below. The app does not track you across other apps or websites, and if that ever changed it could only happen by asking your permission through the prompt your phone provides.

The site makes one request to our database, and it only reads: the swipe demo on the home page fetches a handful of popular films so it shows real artwork rather than placeholders. It sends nothing about you, and there is no longer anything on this website that can write to our database at all.

What the app collects

The app requires an account, because your watchlist and everything you loved have to follow you to a new phone. Creating one gives us:

• Your email address. Every way of signing in uses one.
• Your password, if you chose that route. It is stored only as a cryptographic hash by our authentication provider. It cannot be read back, by us or by anyone else, and we never see what you typed.
• What Google or Apple sends, if you chose one of those. That is your email address and basic profile details. If you use Sign in with Apple and choose to hide your address, we only ever receive Apple's private relay address, never your real one.

Then, as you use it:

• Your swipes. Which title, which of the four decisions you gave it, and when. If you also gave it a star rating, that too. It is what makes your watchlist a watchlist.
• What you choose to put in your profile. A display name, a handle, a short bio and a picture, if you upload one. The favourite genres you pick when you first open the app, and the titles you tap there, which are saved as swipes so your watchlist does not start empty. None of this is required beyond a handle, and a handle is what makes you findable.
• Which country you are in. Only the country, never anything finer. Streaming rights are sold country by country, so this is what decides whether a film is listed as being on Netflix or on nothing at all. The app asks our own server which country your connection is coming from; that server reads the country our hosting provider has already worked out from your connection, returns those two letters, and does not store your IP address or keep any record of the request. The two letters are saved against your account so that email about something on your watchlist starting to stream is about the right country, and nobody else can see it. You can change it or override it at any time under Settings, then Streaming.

A few things stay on your phone and are never sent to us: whether you have seen the introduction, which theme you chose, the country the app last worked out, and a country you pinned yourself if you did. Your signed in session stays there too, held in the iOS Keychain or the Android Keystore rather than in ordinary app storage.

What other people can see

The app has social features now, so some of what you put into it is meant to leave your own account. This section is the whole of it.

Your profile. Your display name, your handle, your bio and your picture are what other people see of you. They are shown to anyone in a Decide together room with you, anyone in a shared list with you, anyone you follow, and anyone who follows you. Your name, your handle and your picture also appear in search, so somebody who types part of either can find you and follow you without knowing you. Your bio is not in search results. If you never choose a handle you are not in search at all. Your email address is not in your profile and has never been in it, so it cannot be searched for or shown to anyone.

Your votes in a Decide together room. Everyone in the room can see how you voted on every title in the shared deck, not only the ones the room agreed on. That is the feature working: the point of the room is knowing what the room thinks. It is a separate thing from the four swipe decisions you make on your own, which stay yours.

A shared list. Everyone in a collaborative list can see its name, every title in it, who added each title, and the name and picture of every other member. Anyone holding the six character code can let themselves in, so the code is worth treating like the address of a room rather than a password. The owner can remove members and delete the list. Anyone in it can add titles and remove the ones they added.

Following someone is visible to them. They are told when you follow them, and you appear on their followers list with your name, your handle and your picture. Following needs nobody's approval and they cannot prevent it, but they can remove you again. You can see who you follow and who follows you; you cannot see the follows of anybody else, and neither can anyone else see yours.

Anything you send on purpose. Sharing a title, a list, your Wrapped or your Taste DNA puts it in that person's notifications along with your name and whatever note you typed. You can only send to somebody you follow or who follows you, so being findable in search does not mean a stranger can put things in front of you.

Your picture is stored in the open. Avatars are uploaded to Supabase storage, in a bucket that anyone holding the link can read. It has to be readable by people who are not signed in as you, because otherwise your picture could not be drawn next to your name in somebody else's room. Nobody can list the bucket to discover other people's, so a picture is reachable only by its own link. Treat it as a public photograph rather than something we hold privately for you. If you remove it the app stops showing it, and the file itself is deleted from storage when you delete your account.

Blocking and reporting. If you block somebody we store the fact that you did, so we can keep them away from you. They are never told and cannot see it. If you report somebody we store what you chose, anything you typed, who you reported and that it was you, because a report nobody can trace is a report nobody can act on. Reports are read by a person and are not shown to the person reported.

Nothing else crosses between accounts. Your swipes, your ratings, your watchlist, the country your availability is worked out for and your email address are yours, and no part of the app shows them to another person. There is no feed of what the people you follow are watching. A notification only ever reaches you because of something aimed at you or at a list you are in.

What the app does not collect

No analytics, no advertising identifiers and no third party tracking of any kind. It does not track you across other apps or websites, and doing so would require your permission through the prompt your phone shows for exactly that.

Crash reporting is the one honest asterisk here. The app now contains a crash reporter, and it is currently switched off: it needs a key that has not been issued, so nothing has ever been sent from it and nothing can be until that changes. We do intend to turn it on, because nobody has yet run this app on an iPhone and the alternative way to learn about an iPhone crash is a one star review. When it is on it will send a stack trace, the app and system version and the device model. It is deliberately configured to send no account identifier, to record nothing of what you do on screen, and to discard the log lines and network requests that would otherwise reveal which film or list you were looking at. This page will say so on the day it is enabled.

Otherwise: the app never asks your phone where you are. It requests no location permission and contains no code that could read GPS or anything like it. The country described above is worked out from your connection, is only ever a country, and is something you can override yourself. It does not ask for your contacts or your calendar, and contains no code that could read either. It asks to open your photos only at the moment you tap to change your picture, and only so you can choose one: it reads the single image you pick and never looks at the rest of your library. It asks for the camera only when you choose to scan a QR code to join a list, and only to read that code: nothing is photographed, nothing is recorded, and nothing is uploaded. The six characters the code contains are the only thing that ever leaves the viewfinder. It is not connected to any streaming service, so it cannot see what you actually watch.

Deleting your account

Open the Account tab and choose Delete account. You will be asked to type the word DELETE, so it cannot happen by accident. Nothing else is required: no email to us, no waiting, and no explanation.

It takes effect immediately and removes your account, the Google or Apple connection if you used one, every signed in session, every swipe and rating you ever made, your profile and your picture, who you follow and who follows you, your notifications, and your votes in any Decide together room. Any list you own goes with it, including titles other members added, so hand a shared list to somebody else first if it matters to them. Lists you were only a member of survive, without you. It cannot be undone, and there is no grace period during which we quietly keep it.

One honest caveat: our database provider takes routine encrypted backups on a rolling schedule, so a copy may survive there for a short time until those backups rotate out. They are never read except to recover the service from a failure.

If you would rather not do it yourself, email hello@cinefliq.com from the address on the account and we will do it for you.

Why we hold it

Your account exists so that your watchlist and everything you loved follow you to a new phone. Your swipes exist to give you back your own shelves and to order what you are shown next. They are not sold, not shared, and not used to advertise to you.

We will not add you to a newsletter, send you marketing about other products, or pass your address to anyone else for their own use.

Where it is stored

Everything described above is stored in one Supabase database hosted in the ap-northeast-2 region, Seoul, South Korea. If you are reading this from India or the EU, that means your information is processed outside your own country. It is held by Supabase on our behalf under their terms, and it is not sold or handed to anyone else.

Access is restricted at the database itself rather than by the app being polite about it. The website can only read the public film catalogue and can write nothing at all. In the app, every row carries the account it belongs to and the database refuses to return anyone else's, which was checked by having one test account try to read another's and fail.

Who else is involved

These services act on our behalf and receive only what is technically necessary:

• Supabase stores the film catalogue, and app accounts, swipes, profiles, lists and everything social described above. It stores uploaded profile pictures. It also runs the sign in itself, including the password hashing.
• Cloudflare hosts and serves this website. Like any web host, it processes your IP address and browser details in order to deliver the page. It also adds its own bot detection script to every page, described above, which we do not control and receive nothing from. It is not involved in the app.
• Google and Apple, only if you choose to sign in with one of them. They tell us who you are; we tell them nothing about what you do afterwards.

Film information on both surfaces comes from TMDB and is stored in the Supabase database described above. Poster images load directly from TMDB's image servers, so TMDB receives your IP address when a poster loads, on this site and in the app alike. No cookie is set by those requests, and TMDB is not told which account is looking.

How long we keep it

App accounts, swipes, profiles and everything social: for as long as the account exists. Delete the account and they go with it, immediately.

Decide together rooms: a room stops working twenty four hours after it is made, but the votes cast in it stay on your account until you delete it, because they are the record of what you decided rather than something the room owns.

Your choices

In the app, Settings lets you delete everything yourself, as described above. Settings is reached from the Profile tab.

For anything else, email hello@cinefliq.com from the address you signed up with and we will, without asking you why:

• tell you exactly what we hold about you,
• correct anything that is wrong,
• send you a copy of it,
• delete your account.

Depending on where you live you may have further rights under local data protection law, including the right to complain to a supervisory authority. Write to us first and we will try to resolve it.

Children

Neither the site nor the app is aimed at children under 13, and we do not knowingly hold their information. If you believe a child has created an account, email us and we will remove it.

Security

Data is sent over an encrypted connection and stored by Supabase with access controls that prevent public reads and keep one account out of another's data. Passwords are hashed, not stored. Your signed in session is kept in the phone's own secure hardware store rather than in ordinary app storage, so a stolen backup does not hand over your account.

No system is perfectly secure, and we will not pretend otherwise. If you find a vulnerability, the Contact page explains how to report it.

Changes

If this policy changes in a way that affects how we use your information, we will update the date at the top of this page. If the change is significant and you have an account, we will email you.

Contact

Cinefliq is operated by an individual based in India. For anything relating to your data, write to hello@cinefliq.com.