Effective November 7, 2026
helps a household and the friends they invite browse the streaming services they already pay for, keep lists, and suggest titles to each other. It is free, shows no ads, and does not sell, rent or share your information for advertising or any other purpose.
Your profiles, chosen services, lists, watched titles, episode progress and ratings are saved only on your device (in the app, or in your browser's local storage on the website). We don't receive them.
When you sign in, we store:
| What | Why |
|---|---|
| Your email address | To send your sign-in code. We don't email you for anything else. |
| The display name you choose | So people in your household, your friends and your groups know who you are. |
| Your profiles: names, colours, poster pictures, chosen streaming services and display settings | To keep your profiles the same on every device. |
| My List, watched titles, episode progress and star ratings | To sync them across your devices, and to show them to the people you chose to share them with. |
| Suggestions you send or receive, with any note you write, and your reactions to them | So the person you suggested a title to can see it. |
| Your household, friends and groups | To decide who can see what. |
| Linked TVs, and an optional 4-digit TV PIN | So a TV can show your household's profiles without anyone typing a password on it. We store only scrambled (hashed) forms of TV tokens and PINs, never the originals. |
Titles are stored as movie or show numbers from The Movie Database, not as anything that identifies you. We don't collect your location, contacts, photos, payment details or device advertising identifiers.
Access rules are enforced by the database itself, not only by the app.
We use a small number of providers to run the app. They process data only to provide their service to us:
| Provider | What it does |
|---|---|
| Supabase (United States) | Stores account data and handles sign-in. |
| Netlify (United States) | Hosts the website and the app's server functions. Like any web host it briefly logs requests, including IP addresses, for security and operations. |
| Brevo | Delivers sign-in code emails. |
| The Movie Database (TMDB) | Movie and show information. Our server asks TMDB on your behalf; poster images load directly from TMDB's image servers, so TMDB sees your IP address when they load. |
| Movie of the Night (Streaming Availability API) | Finds the link that opens a title in its streaming app. Our server asks using only the title's number. |
| Wikidata | Some title links. Your device asks Wikidata directly, using only the title's number. |
| Apple (TestFlight, App Store) | Delivers the iPhone app. Apple's own privacy policy applies to that. |
We keep account data while your account exists. When you remove a title, profile or connection, it is deleted from your synced data. When you delete your account, your sign-in, profiles, lists, ratings, progress, suggestions, TV links and PIN are deleted. Households or groups you own that still have other members are handed to the longest-standing member; ones with no other members are deleted. Providers' short-lived operational logs expire on their own schedules.
All connections are encrypted (HTTPS). Every table in the database has access rules so each person reaches only their own and shared data. Server keys stay on the server and never ship inside the apps.
is not directed at children under 13, and we don't knowingly collect information from them.
If this policy changes, we'll update the date at the top and, for meaningful changes, tell signed-in users in the app.
Questions or requests: see the Support page.