Privacy Policy
Last updated 14 October 2026
What we collect
- Account details — the email address you sign in with, whether you use a password, Sign in with Apple, or Sign in with Google, and a display name and avatar if you set one.
- Your activity in the app — the films and shows you rate, swipe, add to your watchlist, or mark as watched.
- Your preferences — the streaming services you've selected and your filter settings.
- Things you write and build — reviews, the lists you create, and who you follow.
- Device and diagnostic data — a push-notification token if you allow notifications, and a crash report (device model, operating system and app version) if the app fails.
Browsing without an account
You can browse Flixr without signing in. A guest has no account, and nothing they do is saved to one. To stop abuse we count each guest's requests by IP address, a minute at a time, and delete those counts within the hour.
How we use it
Your ratings and swipes build a taste profile, which is what makes the deck personal. It is used to rank what you're shown, and — when you're in a group — to find titles that work for everyone in it. Group picks are scored from each member's own profile; we do not build or store a combined profile for a group.
Who we share it with
We do not sell your data. We use third-party services to run the app, and the ones that handle your data on our behalf must protect it at least as well as this policy does:
- Hetzner — hosts our servers, the database and uploaded files such as profile pictures.
- Cloudflare — stores off-site backups of the database and uploaded files.
- Resend — sends the emails we send you, such as sign-up confirmation and password reset, so it sees your email address.
- Sentry — receives crash and error reports so we can fix bugs. They contain technical details such as your device model, operating system and app version, and a trail of what the app was doing when it failed. We don't add your name or email to them.
- Expo — delivers app updates and relays push notifications to your device, through Apple's push service. To do that it sees your device's push token and the text of each notification.
- TMDB — supplies film and TV metadata, artwork, and streaming availability.
- YouTube — plays film trailers. Playing one loads YouTube's own player, so Google receives your IP address and what was played, and handles it under its own privacy policy.
- iTunes Search and Wikidata — supply soundtrack previews and filming locations. We look these up by film, not by account, but they can see your IP address.
- Apple — if you use Sign in with Apple. Apple tells us your email address, and a name the first time you authorise the app.
- Google — if you use Sign in with Google. Google tells us your name, email address and profile picture. We use them only to create and identify your account, we do not share them onward, and we ask for nothing else from your Google account.
What other people can see
Visibility is set per item, not once for your whole account:
- Reviews carry their own setting — public, followers-only, or private — chosen as you post each one.
- Lists work the same way, and anyone you invite as a collaborator can see and add to that list.
- Your ratings and watch history are seen by whoever you choose: everyone, your followers, or only you. You pick when you set up your account and can change it at any time in Settings > Privacy, along with who sees your watchlist and the starting setting for new reviews and lists. Whatever you choose, your ratings count, without your name, towards each title's average.
- Your username and profile are how people find and follow you. Group members can see that you're in the group and what it has matched on.
You can block someone, which hides you from each other in both directions, and report a review or a person for us to look at.
How long we keep it
We keep your data for as long as you have an account. Deleting your account deletes it from our database straight away; copies in our backups are removed as those backups expire.
Your rights
You can delete your account and its associated data from within the app. You can request a copy of your data by emailing us. If you're in the UK or EU, you have the right to access, correct, export or erase your data, and to complain to your data protection authority.
Children
Flixr is not intended for children under 13, and we don't knowingly collect their data.
Changes
If this policy changes materially we'll say so in the app before the change takes effect.
Contact
Questions about your data: hello@flixrapp.com.