Privacy Policy
Effective date: 17 May 2026 · Last updated: 29 June 2026
TL;DR
- The app works without an account — no email, phone, name, or password required to watch.
- If you choose to use Sign in with Apple, we store the name and email Apple gives us so your watchlist follows you across devices. Apple's Hide My Email gives us a relay address instead of your real one.
- The only persistent identifier is the per-install
identifierForVendor— it resets if you delete the app. - We log taps, saves, likes, and skips so the For You feed can learn your taste. We never sell this data or share it with advertisers.
- Every film comes from the Internet Archive public-domain collection.
- Delete every byte of your data via Settings → Account → Delete account.
1. Data we collect
We collect the minimum needed to make the recommendation engine personal.
| Category | Examples | Purpose | Tied to identity? |
|---|---|---|---|
| Device identifier | identifierForVendor (Apple-issued per-install UUID) | Identify your account on the backend; resume watch position; keep your watchlist | Yes — resets when you delete the app |
| Product interactions | Films watched, completed, skipped, saved, hid, shared, liked | Train the For You recommendation algorithm | Yes |
| Preferences | Onboarding genres, session length, playback toggles | Personalisation | Yes |
| Crash diagnostics | Stack traces, device model, iOS version | Fix bugs | No (aggregated only) |
| Account details (only if you sign in) | The name and email address Apple returns from Sign in with Apple, plus Apple's per-app user identifier | Keep your watchlist and history across devices and reinstalls; contact you about your account if we ever need to | Yes — removed entirely when you delete your account |
Sign in with Apple is optional. If you use it, Apple lets you share your
real email or hide it behind a private relay address
(@privaterelay.appleid.com). We store whichever one Apple sends and never
attempt to resolve a relay address to your real one. We do not currently send marketing or
newsletter email; if that ever changes we will ask for your consent first.
We do not collect:
- Your name, email address, or phone number — unless you choose Sign in with Apple, which shares a name and email (see above). We never ask for a phone number.
- Your location, contacts, photo library, microphone, camera, calendar, or health data.
- The IDFA (advertising identifier).
- Browsing history outside the app.
- Anything from third-party tracking SDKs — there are none.
2. Where the data lives
- Backend: Our API and database run on cloud infrastructure operated for us by third-party hosting providers, encrypted at rest.
- Video: Films are public-domain works that we host ourselves and stream from our own cloud storage and content-delivery network over HTTPS. They originate from the Internet Archive public-domain collection; we keep our own copies so playback is fast and reliable.
- Images: Posters, backdrops, and cast photos load from TMDB's image CDN. We do not copy these images.
- On your device: Your settings, last watched position per film, and a small offline cache of poster images.
We do not sell your personal data, and we do not share it with anyone except the service providers that help us run the app.
3. Sharing
We do not share your data with third parties for advertising, analytics, or any commercial purpose.
We may share aggregated, de-identified statistics publicly (e.g., "the average user watches 4 films per session") — these contain no identifiers.
The only third parties we rely on are:
- Hosting & delivery providers — the cloud companies that run our servers, database, storage, and content-delivery network. To play a film or load the feed, your device connects to these providers, so they process your requests and IP address solely to deliver the service on our behalf (the same as any website behind a CDN). They are bound by contract and do not use your data for their own purposes.
- Apple — for Sign in with Apple (opt-in), App Store crash reports, and push notifications.
- TMDB and OMDB — at content-pipeline time only, never with your data. Poster and backdrop images also load from TMDB's image CDN, which sees your IP when an image loads.
- Internet Archive — the original public-domain source of the films. We download from them when building the catalog; your device does not stream from them.
We do not use Google Analytics, Facebook SDK, Firebase Analytics, Mixpanel, Amplitude, or any similar service.
4. Your rights & choices
| Action | Where in the app |
|---|---|
| See your genre profile | Profile → Library counters |
| Reset watch history | Settings → Preferences → Reset watch history |
| Restart onboarding | Settings → Preferences → Restart onboarding |
| Delete your account and all data | Settings → Account → Delete account |
You can also email privacy@oddflick.com with "data deletion request" and your Diagnostic ID (Settings → About). We respond within 7 business days.
5. Children
The app is rated 12+ because the public-domain catalog includes classic horror and noir. We do not knowingly collect data from children under 13. Contact privacy@oddflick.com if you believe a child under 13 has used the app.
6. Security
- All traffic to our API and all video streaming is over HTTPS.
- Our database is stored on encrypted cloud storage.
- No password column exists — Sign in with Apple uses Apple's token system end-to-end.
- Crash reports are sanitised on-device before upload.
7. Changes to this policy
If we materially change what we collect or how we use it, we will:
- Update this page and bump the "Last updated" date.
- Show an in-app banner summarising the change.
- Let you delete your account before continuing if you disagree.
8. Contact
privacy@oddflick.com
This privacy policy is offered in plain English on purpose. If anything here is unclear, that's a bug — please tell us.