Privacy Policy

What we collect

• Account info: your email address, your handle, and anything optional you add — display name, bio, avatar.
• Your activity: what you mark as watched, your ratings, tags, and comments, who you follow, and the genres you pick when you set up the app.
• A push token — only if you turn on notifications. You can turn this off at any time in Settings.
• Crash reports — when the app hits an error, we receive a diagnostic report: the device model, the OS and app version, and an anonymous installation identifier. It doesn't include your email, your account, or anything you've watched.
• Imported viewing history — only if you import a file from another service (for example Netflix's viewing history download). The file is read on your phone and never uploaded. The titles and dates in it are sent to our server only to find them in our catalog; title names are looked up with TMDB, without anything that identifies you. Nothing from the file is kept except the history you choose to import, which is stored like anything you mark as watched, and you can undo an import in Settings.

We don't collect anything beyond what's needed to run the app and fix it when it breaks. There's no advertising, no ad tracking, and nothing here is used to profile you across other apps or websites.

Why we collect it

To run Lipsealed: tracking what you watch, keeping comments spoiler-safe against your own progress, and sending the notifications you've opted into.

Who we share it with

• Supabase — hosts our database, authentication, and backend. They process data on our behalf; they don't use it for their own purposes.
• TMDB (The Movie Database) — supplies show/movie metadata and artwork. We send search queries to look up titles; we don't send your personal data to them. This product uses the TMDB API but is not endorsed or certified by TMDB.
• Apple / Google — only if you choose "Continue with Apple" or "Continue with Google" to sign in.
• Push notification services (Apple/Google/Expo) — only if you enable notifications, so we can deliver them.
• Sentry — receives the crash reports described above so faults can be diagnosed. It's configured not to send personal information. As part of how the service works, Sentry derives an approximate location (city and country) from the connecting IP address.

We do not sell your data, and we do not share it with anyone else.

Your rights

• Delete your account: any time, in-app, from Settings → Account → Delete account. This permanently and immediately deletes your account and everything tied to it — watch history, ratings, comments, follows. It cannot be undone. Without the app, you can request deletion by email — see Delete your Lipsealed account.
• Access your data: email support@lipsealed.app and we'll get you a copy. There's no self-serve export yet, so this is handled by hand for now — we'll respond promptly.

How long we keep it

For as long as your account is active. If you delete your account, your data is deleted immediately along with it — nothing lingers.

Children

Lipsealed isn't directed at children under 13, and we don't knowingly collect data from anyone under that age.

Changes to this policy

We may update this policy as the app changes. Material changes will be noted in-app or by email.