Privacy Policy

Account Information. When you sign up using Google OAuth or email, we collect your name, email address, and avatar URL. This data is provided by your Google account or entered during registration.

Movie Viewing Data. You may log movies you have watched, including the title, viewing date, viewing type (cinema or home), optional cinema location, rating, review, mood tags, and watch partners.

Watch Partners. If you tag other users as watch partners for a movie entry, we store that association to display it in your feed and history.

Usage Data. We collect basic analytics such as page views and feature usage to improve the app. This data is anonymized where possible.

• Provide, maintain, and improve Cinetrail's features (movie logging, feed, stats, friend connections)
• Display your movie history and statistics on your profile
• Enable social features like watch partners and friend feeds
• Send essential account notifications (e.g., magic link emails, password resets)
• Detect and prevent abuse or violations of our terms

Cinetrail relies on the following third-party services:

• Supabase — Authentication, database, and storage. Your account credentials and movie data are stored in Supabase's infrastructure. See Supabase Privacy Policy.
• Google OAuth — Optional sign-in via Google. We receive only the profile information you authorize (name, email, avatar). See Google Privacy Policy.
• TMDB (The Movie Database) — Movie metadata, posters, and search results. Search queries are sent to TMDB's API. See TMDB Privacy Policy.

Your data is stored securely in Supabase, which uses encryption at rest and in transit. We implement Row-Level Security (RLS) policies to ensure that only you and authorized friends can access your data. While we take reasonable measures to protect your information, no online service is completely secure.

We retain your account data until you delete your account. Movie entries, watch partners, and associated metadata are kept as part of your lifelong watch history. You can delete individual entries at any time. When you delete your account, all your data is permanently removed from our systems within 30 days.

You have the right to:

• Access and export your data at any time
• Edit or delete individual movie entries
• Delete your entire account and all associated data
• Withdraw Google OAuth permissions from your Google Account settings

Cinetrail is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. Material changes will be notified via the app or by email. Your continued use of Cinetrail after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, you can reach us at andhika.haeruman@gmail.com.