Privacy Policy
Last updated: August 6, 2026 · Effective: August 6, 2026
The short version
- You can use Pickflix without giving us your name, email, or anything else. First launch creates an anonymous guest profile.
- We collect what the app needs to work: your swipes, your region, which streaming services you picked, your lists, and your sessions.
- We do not sell or share your personal information, and we don't run ads or ad trackers.
- We never see your payment card. Apple handles all billing.
- One-off session data is deleted 24 hours after the session ends, and you can delete your entire account from inside the app.
- If you join the pre-launch waitlist, we use your email for exactly one message — telling you Pickflix is live.
This summary is not a substitute for the full policy below.
1. Who we are
Pickflix is an iPhone app that helps people agree on a film to watch. The controller of your personal information is [YOUR FULL LEGAL NAME], an individual doing business as "Pickflix", reachable at cameron@shiftsline.com.
This policy covers the Pickflix app and the pickflix.us website. It does not cover the streaming services we link out to — once you tap through, you're in their app under their policy.
2. Information we collect
2.1 Information you give us
| What | When | Why |
|---|---|---|
| Streaming services you subscribe to | Onboarding, and any time you change them | To show only films you can actually watch |
| Region / country | Defaults from your device, editable in Settings | Streaming availability differs by country |
| Display name | Optional; defaults to "Guest" | So people in your session know who's who |
| Email address and password | Only if you choose to create a permanent account | To sign you in on another device and recover your history |
| Apple ID name and email | Only if you use Sign in with Apple | To identify your account. If you choose Apple's Hide My Email, we only ever see the relay address. |
| List and group names | When you create them | To store and display your lists and groups |
| Support correspondence | When you email us | To answer you |
2.2 Information created by using the app
- An anonymous account identifier. On first launch we create a guest profile with a random ID. It is not derived from your device's advertising identifier, phone number, or email.
- Your swipes. Which film, which direction, when, and which session it belonged to.
- A taste profile. Weightings over genres, keywords and similar attributes, computed from your swipes, used to rank your deck.
- Lists and saved films.
- Sessions. Session codes, who hosted, who joined, when, and which films matched.
- Subscription status. Whether you hold Pickflix Plus and when it expires.
2.3 Analytics and diagnostics
We use PostHog to understand how the app is used in aggregate — how many people finish onboarding, which paywall moments convert, where people get stuck. Events include things like onboarding steps completed, a swipe occurring, a session created or joined, a match created, a list item added, a paywall viewed or dismissed, and a purchase started, completed or failed. Alongside these, the PostHog SDK records screen views, app lifecycle events (installed, opened, updated), and standard device context: device model, operating system version, app version, locale and timezone.
Analytics events are tied to your Pickflix account identifier so we can count people rather than events. They do not include your email address, your display name, or the contents of your lists. You can turn this off at any time in the app under Profile → Settings → Privacy → Share usage data. Switching it off stops analytics and crash reporting on that device; everything else in Pickflix keeps working exactly as before. We do not use session replay, screen recording, heatmaps, or third-party advertising SDKs.
2.4 Technical information
Like any internet service, our servers process your IP address and basic request metadata to route traffic, apply rate limits, and detect abuse. IP addresses are used transiently for those purposes and are not used to build a profile of you.
Requests for film catalog and availability data are made by our servers, not by your phone, so your IP address is not exposed to our catalog data provider.
2.5 The pre-launch waitlist
If you enter your email address into the waitlist form on pickflix.us, we store that address, the date you signed up, which form on the page you used, and the referring website if your browser sent one. That's the whole record.
We use it for exactly one thing: emailing you when Pickflix launches. We will not add you to a newsletter, send you marketing, use the address for advertising or lookalike audiences, or give it to anyone else. The list is stored in our own database (Supabase) and is not loaded into any email marketing platform.
The waitlist is separate from any Pickflix account. Signing up does not create an account, and joining the waitlist with an address you later use in the app does not link the two records.
To be removed, email cameron@shiftsline.com from the address you signed up with, and we'll delete the row. Every launch email will also carry an unsubscribe link. The legal basis in the EEA/UK is your consent, which you can withdraw at any time.
3. What we don't collect
- No payment details. Purchases go through Apple. We receive only the fact that a subscription is active and when it expires.
- No precise location. We use a two-letter country code that you can change in Settings. We never request GPS.
- No contacts, photos, microphone, or camera. The app never asks for them.
- No advertising identifiers. We do not use the IDFA, do not present App Tracking Transparency prompts, and do not track you across other companies' apps or websites.
- No data brokers. We do not buy or enrich data about you from third parties.
4. How we use information
- To run the core product: build your deck, run sessions, detect matches, store your lists.
- To personalize recommendations from your own swipe history.
- To show accurate streaming availability for your region and services.
- To operate Pickflix Plus, including verifying entitlements and enforcing plan limits.
- To keep the service secure — abuse detection, rate limiting, debugging.
- To measure and improve the product in aggregate.
- To respond to your support requests.
- To comply with legal obligations.
We do not use your data to train machine learning models sold or licensed to third parties, and we do not make automated decisions about you that produce legal or similarly significant effects. Deck ranking is a recommendation, not a decision about you.
5. Legal bases for processing (EEA/UK)
| Purpose | Legal basis |
|---|---|
| Providing the app, sessions, lists and recommendations | Performance of a contract (Art. 6(1)(b)) |
| Managing subscriptions and entitlements | Performance of a contract (Art. 6(1)(b)) |
| Security, abuse prevention, and debugging | Legitimate interests (Art. 6(1)(f)) |
| Product analytics | Consent where required, otherwise legitimate interests in improving the service (Art. 6(1)(a)/(f)) |
| Responding to legal requests | Legal obligation (Art. 6(1)(c)) |
6. Who we share it with
We share personal information only with the service providers below, only as needed to run Pickflix. Each is bound by contract to protect it and to use it only on our instructions.
| Provider | Role | What it receives |
|---|---|---|
| Supabase | Database, authentication and backend hosting | Your account record, swipes, taste profile, lists, sessions, and email if you created an account |
| PostHog | Product analytics | Analytics events, your account identifier, and device context |
| Apple | App distribution and all payment processing | Purchase and subscription data, under Apple's privacy policy |
| RevenueCat | Subscription status management | Your account identifier and subscription events (purchase, renewal, cancellation, expiry) |
| TMDB | Film catalog and streaming availability data | Nothing about you. Requests are made by our servers, so no personal data or IP address is passed to TMDB. |
We may also disclose information if legally required — in response to a valid subpoena, court order, or lawful government request — or to establish or defend legal claims, or to protect the rights and safety of our users. If Pickflix is ever acquired, your information may transfer as part of that transaction; you'll be notified in the app or by email beforehand.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done so.
7. What other people can see
Inside a session, other participants can see:
- Your display name and that you have joined;
- Your swipe progress (how far through the deck you are);
- Any film you and they both swiped right on.
They cannot see the films you swiped left on, your taste profile, your email address, your other lists, or your other sessions.
If you make a list public, anyone with its link can see the list name and the films on it.
8. How long we keep it
| Data | Retention |
|---|---|
| One-off ("ephemeral") session data — its swipes and matches | Deleted automatically 24 hours after the session ends |
| Inactive sessions | Closed automatically after 24 hours, then deleted as above |
| Saved groups (Pickflix Plus) | Kept until you delete the group or your account — remembering past matches is the feature |
| Your profile, swipe history, taste profile and lists | Kept until you delete your account |
| Waitlist email addresses | Deleted within 90 days of launch, once the launch email has gone out — or immediately on request |
| Analytics events | Retained by PostHog on a rolling basis, then deleted |
| Purchase records | Retained as long as needed for tax, accounting and audit obligations |
| Backups | Overwritten on a rolling cycle, typically within 30 days |
9. Your choices and rights
- Use the app anonymously. Adding an email is always optional.
- Change your region and services at any time in Settings.
- Notifications. Pickflix only asks for notification permission after your first match, and you can revoke it in iOS Settings.
- Access and portability. Email cameron@shiftsline.com for a copy of your data in a machine-readable format.
- Correction. Edit your display name and region in Settings, or ask us.
- Deletion. See below.
We respond to rights requests within 30 days (or 45 days where US state law allows an extension, with notice). We will not discriminate against you for exercising any of these rights.
10. Deleting your data
Open Profile → Settings → Delete Account in the app and confirm. This permanently deletes your account, your swipes, your taste profile, your lists, your groups, and your session history. Sessions you were hosting are closed first so the other people in them aren't cut off mid-swipe. The action cannot be undone.
If you can't reach the app, email cameron@shiftsline.com from the address on the account, or with your account identifier, and we'll do it for you.
Note that deleting your Pickflix account does not cancel a subscription billed through Apple — cancel that in the iOS Settings app under your name → Subscriptions.
11. US state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana or another state with a comprehensive privacy law, you have the right to know what personal information we collect and why, to access and obtain a copy of it, to correct inaccuracies, to delete it, and to appeal a refusal.
Under the California Consumer Privacy Act, in the past 12 months we have collected the categories described in Section 2 — identifiers, internet and app activity, commercial information (purchases), and inferences drawn from your swipes — for the business purposes in Section 4, from the sources in Section 2, and disclosed them to the service providers in Section 6.
We have not sold personal information, and have not shared it for cross-context behavioral advertising, in the preceding 12 months — including the personal information of minors under 16. We therefore do not offer a "Do Not Sell or Share My Personal Information" link, and we honor Global Privacy Control signals by default because we don't engage in the practices they opt out of.
We do not collect sensitive personal information for the purpose of inferring characteristics about you. To exercise any right, or to appeal, email cameron@shiftsline.com. An authorized agent may submit a request on your behalf with proof of authorization.
12. EEA, UK and Swiss rights
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting processing already carried out.
Exercise these by emailing cameron@shiftsline.com. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to address your concern first.
13. International transfers
Pickflix is operated from the United States, and our service providers may process data in the United States and other countries. Where personal data is transferred out of the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) with our processors, together with appropriate technical and organizational safeguards.
14. Security
All traffic between the app and our servers is encrypted in transit with TLS, and data is encrypted at rest by our hosting provider. Access to your data is enforced at the database level by row-level security policies, so one account cannot read another's swipes, lists or sessions — this is enforced on the server, not merely hidden in the app. Sign-in tokens are stored in the iOS Keychain. Administrative access is limited to what is necessary to operate the service.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any required regulator without undue delay, consistent with applicable law.
15. Children
Pickflix is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided us information, email cameron@shiftsline.com and we will delete it promptly.
16. Changes to this policy
We'll update this policy as the app changes. The "Last updated" date at the top always reflects the current version. If we make a material change — for instance, collecting a new category of data or adding a new processor — we'll notify you in the app or by email before it takes effect, and where the law requires it, ask for your consent.
17. Contact us
[YOUR FULL LEGAL NAME], d/b/a Pickflix
[YOUR MAILING ADDRESS]
Privacy and data requests:
cameron@shiftsline.com
General support:
cameron@shiftsline.com
We aim to answer every privacy email within a few days, and always within 30 days.