Privacy Policy

Effective October 1, 2026

Cinepop (“Cinepop”, “we”, “us”) is a movie and TV tracker for iPhone. This policy explains what information Cinepop collects when you use the app and this website, how we use it, who we share it with, and the choices and rights you have. It applies to the Cinepop iOS app, the Cinepop servers the app talks to, and cinepop.app.

Contents

1. Information we collect
2. What we don’t collect
3. How we use information
4. Legal bases
5. Who we share it with
6. What other people can see
7. Data on your device and iCloud
8. How long we keep information
9. Security
10. Your choices and rights
11. Regional notices
12. Children
13. International transfers
14. This website
15. Links to other websites
16. Changes to this policy
17. Contact us

1. Information we collect

Account information

• Sign in with Apple. When you sign in, Apple gives us a stable identifier for your account. We don’t request or store your name or email address.
• Apple token. We store an encrypted token from Apple that lets us disconnect Cinepop from your Apple ID when you delete your account.
• Username. The username you choose. Usernames are permanent and visible to other Cinepop users who search for you.
• Time zone. Used to date your watches correctly.
• Privacy settings. Whether “Share my watches” and “Show what I’m watching” are on.

What you add to Cinepop

• Your library (Watching, Watchlist and Seen), watch history with dates, movie, show and episode ratings, and “Already seen” markers.
• Taste preferences such as favorite movies, likes and dislikes, used to personalize Discover and Remix.
• Remix activity: the filters you choose (such as length, languages, viewing country and streaming services) and your swipes on suggested movies.

Friends and safety

• Friend requests you send and receive, and your list of friends.
• People you block, and reports you make, including the reason you give.

Imports

• Letterboxd, Trakt and IMDb: you upload an export file. We read the watched titles, diary entries, watchlist and ratings in it, and store the records we match so you can review them before importing. We don’t import reviews, custom lists or social connections.
• Any-list imports (Cinepop Pro): you can upload a CSV, Excel, Word or plain-text file. We read the titles, dates and ratings we can find in it.
• We process uploaded files to extract these records and don’t keep the original file. We never write anything back to Letterboxd, Trakt or IMDb.

Purchases (Cinepop Pro)

• Payments are handled entirely by Apple. We never see your payment card or billing details.
• We use RevenueCat to manage subscriptions. RevenueCat receives your Cinepop account ID, your username (so we can find your purchases if you contact support) and your purchase history from Apple, such as which plan you bought and when it renews or expires.
• We keep a copy of your subscription status, and count free-plan usage such as Remixes and completed imports.

Notifications

• If you allow notifications, we store your device’s push token so we can notify you, for example when a Remix is ready.

Feedback and support

• If you send feedback in the app, we store your message with the app version and iOS version.
• If you email us, we receive your email address and whatever you include in your message.

Guest browsing

• You can browse the catalog as a guest without an account. Guest browsing time is counted on your device. Requests from guests aren’t linked to any account.

Technical information

• To prevent abuse, we use a one-way hash of your IP address to rate-limit sign-in, guest browsing and some other requests. These counters are deleted after a few minutes.
• Our hosting provider keeps limited server logs, such as request times and errors, for a short period to keep the service running and secure.
• Requests include the region your device is set to, so we can show release dates and streaming availability for your country.

2. What we don’t collect

• No advertising, analytics or tracking SDKs, and no advertising identifier (IDFA).
• No precise location, contacts, photos, microphone or camera access.
• No name or email address from Sign in with Apple.
• No tracking across other companies’ apps or websites, and no data brokers.

3. How we use information

We use your information only to:

• provide Cinepop: sync your library across your devices, record your watch history and ratings, show friend activity, run imports, and make Discover and Remix recommendations;
• manage Cinepop Pro and the free-plan limits;
• send notifications you’ve allowed;
• respond to feedback and support requests;
• keep Cinepop secure, prevent abuse and enforce our rules, including reviewing reports;
• comply with the law.

Recommendations are made automatically from your own activity, ratings and preferences. They only decide which movies you’re shown and have no legal or similarly significant effect on you. We don’t sell your personal information or use it for advertising, and we don’t use it to train third-party AI models.

4. Legal bases

If you’re in the European Economic Area, the UK or Switzerland, we rely on these legal bases:

5. Who we share it with

We share information only with service providers that help us run Cinepop, and only what they need:

• Cloudflare hosts Cinepop’s servers, database and this website.
• Apple provides Sign in with Apple, push notifications, in-app purchases, and iCloud for backups you turn on.
• RevenueCat manages subscriptions. It receives your account ID, username and purchase history.

Movie and TV information comes from TMDB, and streaming availability comes from JustWatch through TMDB. We request catalog data from TMDB on our servers and don’t send TMDB or JustWatch your personal information.

We may also disclose information if required by law or valid legal process, to protect the rights, safety or property of our users, the public or Cinepop, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

6. What other people can see

• Anyone on Cinepop can find you by your exact username and send you a friend request.
• If “Share my watches” is on, your friends can see your new watches and ratings in their activity feed and on your profile. If “Show what I’m watching” is on, they can see your Watching list. Both can be turned off in Settings.
• Watches brought in with an import are never shared as new activity.
• Blocking someone removes them as a friend, hides you from their searches, and stops them seeing your activity or sending you requests.

7. Data on your device and iCloud

• Cinepop keeps a copy of your library and ratings on your iPhone so the app is fast and works offline. Changes sync to our servers when you’re online. Your sign-in session is stored in the iOS Keychain.
• Automatic backups (Cinepop Pro): if you turn them on, Cinepop saves a copy of your data export to the Cinepop folder in your own iCloud Drive every week, keeping the latest five. These files are stored by Apple under your iCloud account and we can’t access them. You can delete them in the Files app at any time.

8. How long we keep information

• Account data is kept for as long as your account exists.
• Remix sessions are deleted automatically a week after they’re created.
• Sign-in sessions expire after 30 days without use. Push tokens are deleted when their session ends.
• IP-based rate-limit counters are deleted after a few minutes.
• When you delete your account, we delete your account data from our database right away. Copies may remain in our hosting provider’s backups for a limited time before they’re overwritten. Emails you’ve sent to support are kept as long as needed to resolve your request.

9. Security

All traffic between the app and our servers is encrypted in transit. Tokens from Apple are encrypted at rest, and sign-in session tokens are stored only as one-way hashes on our servers. No system is perfectly secure, but we work to protect your information and limit who can access it.

10. Your choices and rights

• Export your data: Settings → Export my data downloads a file with your library, watch history, ratings, preferences and friends.
• Delete your account: Settings → Delete account permanently deletes your account and everything in it, disconnects Cinepop from your Apple ID and removes you from RevenueCat. Deleting your account doesn’t cancel an Apple subscription, so cancel it first in Settings → Manage subscription.
• Sharing: turn “Share my watches” and “Show what I’m watching” on or off in Settings.
• Notifications: turn them off in the iPhone Settings app.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your information, to object to or restrict certain uses, and to withdraw consent. To make a request, email privacy@cinepop.app. We’ll respond within the time the law requires, and we may need to confirm the request comes from the account holder. We won’t treat you differently for exercising your rights.

11. Regional notices

European Economic Area, UK and Switzerland

Cinepop is the controller of your personal information. You can lodge a complaint with your local data protection authority, though we’d appreciate the chance to address your concern first.

California and other US states

In the past 12 months we’ve collected the categories described in section 1: identifiers (Apple identifier, username, push token), commercial information (subscription status), internet activity within Cinepop (library, ratings and Remix activity), and inferences about your movie taste. We collect them for the purposes in section 3 and share them only with the service providers in section 5. We don’t sell personal information or share it for cross-context behavioral advertising, and we don’t use sensitive personal information to infer characteristics about you.

12. Children

Cinepop isn’t directed at children under 13, or under the minimum age for consent to data processing in your country (16 in some EU countries), and we don’t knowingly collect their personal information. If you believe a child has given us personal information, contact us and we’ll delete it.

13. International transfers

Cinepop’s servers run on Cloudflare’s global network, and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

14. This website

cinepop.app is a static website. It doesn’t use cookies, analytics or tracking. Cloudflare, which hosts it, may process your IP address and request information to deliver the site and protect it from attacks.

15. Links to other websites

Some parts of Cinepop link to other websites. For example, “See all options and prices” under Where to watch opens that title’s page on TMDB, and the TMDB logo in Settings opens TMDB’s website. Those sites are run by other companies and have their own privacy policies, which apply once you leave Cinepop. We don’t send them your account information when you open a link.

16. Changes to this policy

We may update this policy as Cinepop changes. We’ll update the effective date above, and if the changes are significant we’ll let you know in the app before they take effect.

17. Contact us

Questions or requests about privacy: privacy@cinepop.app
Everything else: support@cinepop.app