Privacy Policy

Last updated: 19 May 2026

1. Who we are

moviemates.social (“we”, “us”) is a personal film-tracking app. The app is published by Kyrian Critics. Contact: kimalex.routley89@gmail.com.

2. What we collect

We collect only what’s needed to make the app work:

• Account info — username, email address, and (if you choose) a Google or phone identifier used solely to sign you back in.
• Profile content — your ratings, reviews, favourite/worst scenes, watchlists, friends, chat messages, and any photos you attach to a review.
• Device info — a Firebase Cloud Messaging token (for push notifications) and basic crash diagnostics (Firebase Crashlytics).
• Location — only when you tap the “Location” field on a review and grant permission. We use it to bias venue autocomplete to your area. We do not track location in the background.
• Letterboxd import — if you sync from Letterboxd we fetch your public film library from letterboxd.com. We never see your Letterboxd password.

3. How we use it

• To run the app: sign-in, syncing ratings between your devices, showing your friends’ activity, delivering push notifications.
• To improve the app: aggregated analytics (e.g. “X% of users sync from Letterboxd”) and crash reports.
• That’s it. We do not sell or rent your data to anyone, ever.

4. Who sees what

• Public to friends — your username, avatar, ratings, watchlist, and chat messages with that friend.
• Private to you — your email, phone number, and any review notes.
• Service providers — Google (Firebase Auth, Firestore, Crashlytics, Cloud Messaging) processes data on our behalf under their Cloud Data Processing Addendum.

5. Retention

Your data stays until you delete it. You can delete your account from the Account tab — this permanently removes your ratings, watchlist, friends list, chat participation, comments, and authentication record. Some Crashlytics logs may be retained by Google for up to 90 days as required by their service.

6. Children

The app is not directed at children under 13. We do not knowingly collect data from anyone under 13.

7. Your rights (GDPR / CCPA)

You can:

• Access your data — most of it is visible in the app; for the rest, email us.
• Correct your data — edit it directly in the app, or email us.
• Delete your data — use the in-app Delete Account flow.
• Export your data — email us and we’ll send you a JSON dump.
• Object to processing — email us.

We respond within 30 days. If you’re in the EEA or UK, you can also complain to your local data protection authority.

8. Changes to this policy

We’ll update this page if anything material changes and surface the update in-app so you see it before signing back in.