Privacy Policy

Last updated: 10 October 2026

Who this policy covers

What data we collect

• Account data: the email address and password you sign up with, handled by our backend provider (Supabase Auth). We do not see or store your raw password; Supabase stores it hashed.
• Profile data: a public username, which you only need if you want to publish written reviews, and an optional private nickname the app uses to greet you. Nobody else sees the nickname.
• Ratings: your per-category film scores (1–10), and any comment you attach to one. Only you can see the comment.
• Imported ratings: if you import your ratings from IMDb, you pick the CSV file IMDb gave you and the app reads it on your device. We never upload that file. We send each film's IMDb ID to TMDB so we can identify the film, and we save the score you gave it as a rating marked "imported".
• Reviews: any written review you publish, and the reviews you like.
• Rating history: when you change a score on a film you have already rated, we keep a snapshot of the old scores so you can see how your view of the film moved. Only you can see this.
• Moderation data: the users you block, and any report you file about a review, meaning the reason you pick and an optional note. We can see who filed a report so that we can act on it; the author of the reported review cannot.
• Notification data: if you turn on watchlist alerts, a push token that identifies your installation of the app so we can send it a notification. It is not an advertising identifier, and we do not use it to track you across other apps or websites. We also keep a record of which films we have already alerted you about, so we do not send you the same alert twice.
• Purchase data: whether your account has the Pro unlock. Apple and Google handle the payment itself and tell us only whether it succeeded, so we never see your card details.
• Watchlist: films you've marked as "want to see."
• Settings: your chosen app language, theme, age-rating region, streaming region, and subscribed streaming services. Language and theme stay on your device only; the rest sync to your account so they follow you across devices.
• Support call data: EU law requires dbConsult AS to publish a phone number on our App Store listing in the EU. Nobody answers that line live. If you call and leave a message, we keep your caller ID and the recording, and we get an email with your number and a link to the audio so someone hears it. Calls shorter than three seconds send no email, because a recording that short is nearly always a hang-up.
• Connection data: whenever the app contacts our backend, our hosting provider logs the connection. That covers your device's IP address, the rough location its network infers from that address (city level at best), which account was signed in, and technical details like when the request came in and whether it worked. We do not use any of it; it is a byproduct of running a server. These logs never contain what you typed, including your searches, and our provider deletes them automatically after a few days.
• Error reports: when something in the app fails, we save a note of what went wrong. That covers which part of the app it was, an error code and message, the app version, whether you are on iOS or Android, and, if you were signed in, which account it was. It is how we find out something is broken and whose app it broke in, so we can check that it works for you again. The reference code the app shows you points at one of these notes. We delete them after 30 days. If you delete your account before then, the notes lose the link to it.
• Usage data we do not collect: we do not run analytics or crash-reporting SDKs, and we do not track you across other apps or websites. The error reports above are our own, and we use them only to fix the app.

How your data is used

• To operate your account (sign-in, storing and displaying your ratings and watchlist).
• To compute aggregate, anonymous-at-the-number-level statistics shown to all users (e.g. a film's average ScreenMetric rating). See "What's public" below for what this means for your own ratings.
• To fetch film metadata (titles, posters, cast, streaming availability) from our data provider, TMDB, on your behalf.
• To send you a password-reset code by email, if you request one.
• To send a notification to your device when a film on your watchlist reaches a streaming service you subscribe to, if you turn that on.
• To act on reports about written reviews, and to keep users you have blocked out of what you see.
• To listen to a message you leave on the support phone number published on our App Store listing, and to reply to it.
• To unlock Pro features on your account after a purchase.

We do not sell your data, and we do not use it to train AI/ML models.

What's public vs. private

• Public: your username, any written review you publish, the overall score shown next to it, and how many likes that review has. Nothing you write becomes public until you post it.
• Private: your individual per-category scores and any comment attached to them, your rating history, your nickname, your watchlist, the reviews you have liked, your subscribed streaming services, your age-rating and streaming regions, your push token, your Pro status, the users you block, and the reports you file. Other users never see your email address, and they never see how you scored a film category by category. We calculate a film's average from everyone's ratings, but we never attribute those numbers to individual users. Other users can see how many likes a review has, but not who gave them. We do not tell the person you block.

Who else processes your data (sub-processors)

We do not have separate data-processing agreements of our own with these providers beyond what's built into their standard terms; each publishes its own privacy policy at the links above.

Legal basis for processing (EU/EEA users, GDPR)

• Performance of a contract: account creation, storing your ratings, reviews, and watchlist, and displaying them back to you requires processing this data; there's no functional alternative.
• Legitimate interest: showing aggregate ratings (yours alongside other users') is core to how a rating app works, similar to any public review platform. The same basis covers keeping the app usable: acting on reports, honoring blocks, and filtering profanity out of published reviews. It also covers the support phone line, since we cannot answer a message without keeping the number it came from.
• Legitimate interest (rating integrity): we run automated checks on how fast ratings arrive. A rating that trips one of them can be held back from a film's public average until we have looked at it. A hold does not delete the rating or change your scores, and it does not restrict what you can do in the app. If you think a hold is wrong, email us and we will review it by hand.
• Legitimate interest (security and reliability): our hosting provider logs the connection data described above on every request. Any service needs that much to stay online and to deal with abuse. We do not read those logs to learn anything about you.
• Consent: we email you a password-reset code only when you ask for one, and we send push notifications only if you turn them on. You can withdraw either at any time, by not requesting a reset and by turning notifications off in Settings.

Data retention & deletion

You can delete your account at any time from Settings → Delete Account. This immediately and permanently deletes your account and cascades to delete your profile (username and nickname), ratings, rating history, reviews, likes, watchlist, settings, blocks, reports, push tokens, the record of which films we alerted you about, and your Pro status. There is no recovery period, and no manual cleanup is needed since deletion happens at the database level.

If you have uninstalled the app or cannot sign in, email support [at] screenmetric.app from the address your account is registered to and ask us to delete it. Writing from that address is how we confirm the request is yours. We run the same deletion by hand and reply once it is done, within 30 days.

Deleting your account does not clear the connection logs, since those sit with our hosting provider instead of in our database. They expire on their own within a few days.

Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data, object to certain processing, or request a copy of your data in a portable format. Account deletion is self-service in the app, or by email if you can no longer sign in (see above); for any other request, contact support [at] screenmetric.app.

International data transfer

Our database is hosted in the EU (Frankfurt). TMDB, Mailgun, Twilio, Expo, RevenueCat, Discord, and Apple/Google may process data outside the EU/EEA depending on where you are and where they operate. Each relies on its own legal transfer mechanism (e.g. Standard Contractual Clauses), described in the privacy policies linked above.

Children's privacy

ScreenMetric is not directed at children, and we do not knowingly collect data from children under 16.

Changes to this policy

If this policy changes materially, we'll update the "Last updated" date above. Continued use of the app after a change constitutes acceptance of the updated policy.