Privacy Policy
Last updated: 1 August 2026
Who this policy covers
What data we collect
- Account data: the email address and password you sign up with, handled by our backend provider (Supabase Auth). We do not see or store your raw password; Supabase stores it hashed.
- Profile data: a public username, which you only need if you want to publish written reviews, and an optional private nickname the app uses to greet you. Nobody else sees the nickname.
- Ratings: your per-category film scores (1–10), and any comment you attach to one. Only you can see the comment.
- Imported ratings: if you import your ratings from IMDb, you pick the CSV file IMDb gave you and the app reads it on your device. We never upload that file. We send each film's IMDb ID to TMDB so we can identify the film, and we save the score you gave it as a rating marked "imported".
- Reviews: any written review you publish, and the reviews you like.
- Rating history: when you change a score on a film you have already rated, we keep a snapshot of the old scores so you can see how your view of the film moved. Only you can see this.
- Moderation data: the users you block, and any report you file about a review, meaning the reason you pick and an optional note. We can see who filed a report so that we can act on it; the author of the reported review cannot.
- Notification data: if you turn on watchlist alerts, a push token that identifies your installation of the app so we can send it a notification. It is not an advertising identifier, and we do not use it to track you across other apps or websites. We also keep a record of which films we have already alerted you about, so we do not send you the same alert twice.
- Purchase data: whether your account has the Pro unlock. Apple and Google handle the payment itself and tell us only whether it succeeded, so we never see your card details.
- Watchlist: films you've marked as "want to see."
- Settings: your chosen app language, theme, age-rating region, streaming region, and subscribed streaming services. Language and theme stay on your device only; the rest sync to your account so they follow you across devices.
- Support call data: EU law requires dbConsult AS to publish a phone number on our App Store listing in the EU. Nobody answers that line live. If you call and leave a message, we keep your caller ID and the recording, and we get an email with your number and a link to the audio so someone hears it. Calls shorter than three seconds send no email, because a recording that short is nearly always a hang-up.
- Connection data: whenever the app contacts our backend, our hosting provider logs the connection. That covers your device's IP address, the rough location its network infers from that address (city level at best), which account was signed in, and technical details like when the request came in and whether it worked. We do not use any of it; it is a byproduct of running a server. These logs never contain what you typed, including your searches, and our provider deletes them automatically after a few days.
- Usage data we do not collect: we do not run analytics or crash-reporting SDKs, and we do not track you across other apps or websites.
How your data is used
- To operate your account (sign-in, storing and displaying your ratings and watchlist).
- To compute aggregate, anonymous-at-the-number-level statistics shown to all users (e.g. a film's average ScreenMetric rating). See "What's public" below for what this means for your own ratings.
- To fetch film metadata (titles, posters, cast, streaming availability) from our data provider, TMDB, on your behalf.
- To send you a password-reset code by email, if you request one.
- To send a notification to your device when a film on your watchlist reaches a streaming service you subscribe to, if you turn that on.
- To act on reports about written reviews, and to keep users you have blocked out of what you see.
- To listen to a message you leave on the support phone number published on our App Store listing, and to reply to it.
- To unlock Pro features on your account after a purchase.
We do not sell your data, and we do not use it to train AI/ML models.
What's public vs. private
- Public: your username, any written review you publish, the overall score shown next to it, and how many likes that review has. Nothing you write becomes public until you post it.
- Private: your individual per-category scores and any comment attached to them, your rating history, your nickname, your watchlist, the reviews you have liked, your subscribed streaming services, your age-rating and streaming regions, your push token, your Pro status, the users you block, and the reports you file. Other users never see your email address, and they never see how you scored a film category by category. We calculate a film's average from everyone's ratings, but we never attribute those numbers to individual users. Other users can see how many likes a review has, but not who gave them. We do not tell the person you block.
Who else processes your data (sub-processors)
| Who | What they see | Why |
|---|---|---|
| Supabase (hosted in Frankfurt, Germany / EU) | Everything above, since it's our database, authentication, and backend host | Running the app's backend |
| TMDB | The title/language of films you search for or open, and the IMDb IDs in a ratings file you import | Supplying film metadata (posters, cast, ratings) |
| Mailgun | Your email address when you request a password reset. Separately, when someone reports a review, the report's reason, note and the reporter's account ID (not their email) are emailed to us, and when someone leaves a message on our support phone line, that caller's number and a link to the recording are emailed to us | Delivering the password-reset code, alerting us to moderation reports, and telling us a voicemail is waiting |
| Twilio | Your phone number and the message you leave, if you call the support number published on our EU App Store listing | Running that phone line |
| Expo | Your push token and the text of any notification we send you | Delivering push notifications to your device |
| Apple / Google | Your device's App Store / Play account, if and when a paid feature is purchased | Processing in-app purchases (not yet active; added here in advance since this policy should stay accurate as the app evolves) |
| RevenueCat | Your account ID and what you have purchased | Recording which accounts have the Pro unlock (not yet active, same as the row above) |
We do not have separate data-processing agreements of our own with these providers beyond what's built into their standard terms; each publishes its own privacy policy at the links above.
Legal basis for processing (EU/EEA users, GDPR)
- Performance of a contract: account creation, storing your ratings, reviews and watchlist, and displaying them back to you requires processing this data; there's no functional alternative.
- Legitimate interest: showing aggregate ratings (yours alongside other users') is core to how a rating app works, similar to any public review platform. The same basis covers keeping the app usable: acting on reports, honouring blocks, and filtering profanity out of published reviews. It also covers the support phone line, since we cannot answer a message without keeping the number it came from.
- Legitimate interest (rating integrity): we run automated checks on how fast ratings arrive. A rating that trips one of them can be held back from a film's public average until we have looked at it. A hold does not delete the rating or change your scores, and it does not restrict what you can do in the app. If you think a hold is wrong, email us and we will review it by hand.
- Legitimate interest (security and reliability): our hosting provider logs the connection data described above on every request. Any service needs that much to stay online and to deal with abuse. We do not read those logs to learn anything about you.
- Consent: we email you a password-reset code only when you ask for one, and we send push notifications only if you turn them on. You can withdraw either at any time, by not requesting a reset and by turning notifications off in Settings.
Data retention & deletion
You can delete your account at any time from Settings → Delete Account. This immediately and permanently deletes your account and cascades to delete your profile (username and nickname), ratings, rating history, reviews, likes, watchlist, settings, blocks, reports, push tokens, the record of which films we alerted you about, and your Pro status. There is no recovery period, and no manual cleanup is needed since deletion happens at the database level.
If you have uninstalled the app or cannot sign in, email support [at] screenmetric.app from the address your account is registered to and ask us to delete it. Writing from that address is how we confirm the request is yours. We run the same deletion by hand and reply once it is done, within 30 days.
Deleting your account does not clear the connection logs, since those sit with our hosting provider instead of in our database. They expire on their own within a few days.
Your rights
Depending on your location, you may have the right to access, correct, or delete your personal data, object to certain processing, or request a copy of your data in a portable format. Account deletion is self-service in the app, or by email if you can no longer sign in (see above); for any other request, contact support [at] screenmetric.app.
International data transfer
Our database is hosted in the EU (Frankfurt). TMDB, Mailgun, Twilio, Expo, RevenueCat and Apple/Google may process data outside the EU/EEA depending on where you are and where they operate. Each relies on its own legal transfer mechanism (e.g. Standard Contractual Clauses), described in the privacy policies linked above.
Children's privacy
ScreenMetric is not directed at children, and we do not knowingly collect data from children under 16.
Changes to this policy
If this policy changes materially, we'll update the "Last updated" date above. Continued use of the app after a change constitutes acceptance of the updated policy.