Privacy Policy

1. What We Collect

When you create an account we collect your email address and a display name. During sessions we record your swipe choices, match results, and genre preferences so the app can generate personalised recommendations.

2. How We Use Your Data

• To authenticate you and maintain your session.
• To generate AI-powered movie and TV show recommendations tailored to your group.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (magic links, password resets).

3. Third-Party Services

We integrate with the following services, each governed by their own privacy policies:

• Stripe — payment processing. We never store your card details.
• TMDB & Trakt — movie and TV metadata and imagery.
• OpenAI and Anthropic — recommendation generation. Your group preferences (genres, favourites) are sent to generate suggestions; no personal identifiers are shared.

4. Data Storage & Security

Your data is stored in a PostgreSQL database on secured servers. All traffic is encrypted via HTTPS/TLS. Passwords are hashed with bcrypt. Session tokens expire after 7 days.

5. Data Retention & Deletion

You can delete your account in the app or request deletion by contacting us. Deletion removes your account and private profile data. Shared movie-night results may remain with your identity removed so other participants keep their history.

We retain limited billing records separately to reconcile payments, credits and disputes and meet applicable accounting requirements. These records contain transaction identifiers, amounts and dates, without your profile name or email. Unresolved credits remain with our payment provider while they are reviewed. During the beta, these records are held for restricted financial review and are not automatically deleted. Contact us for details or to exercise your data rights.

6. Cookies

We use essential cookies for authentication and to remember your privacy choice. Optional first-party measurement begins only when you choose “Allow measurement”. Its random browser identifier and your choice last 30 days. We record a small list of journey milestones, such as a landing visit, sample demo use, starting a night, trial checkout, preferences saved, partner joining and first completed session. If you sign in after opting in, we link those milestones to your account for this consented journey; we do not link browsers that have not consented. Event payloads contain no email, birth date, favourite titles, payment details, invitation codes or browsing URLs.

Measurement details are retained for 90 days, then replaced with anonymous daily totals. Verified trial and paid-status totals come from our payment records, independently of optional browser tracking. A minimal non-reversible subscription identifier hash prevents duplicate counting. No advertising SDKs, fingerprinting or session replay are used. Open “Privacy choices” on any page to decline or withdraw. Withdrawal deletes this browser’s linked measurement details and identifier; anonymous totals and necessary subscription records remain.

7. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the email below.

8. Contact

For privacy-related enquiries, email privacy@flickitpickit.com.