Privacy Policy

Last Updated: February 22, 2026

1. Legal Basis for Processing

In accordance with the UK GDPR, we process your personal data under the following legal bases:

• Contractual Necessity: To provide account services, Google and Apple authentication, and region-specific streaming discovery.
• Legitimate Interests: To monitor application stability and performance via New Relic, and to maintain service security (e.g., fraud prevention).
• Consent: Should we implement third-party advertising or non-essential tracking in the future, we will obtain your explicit consent beforehand.

2. Information We Collect & Why

We collect account identifiers and pseudonymous technical data to operate the service:

• Account Identifiers: Email address and profile name via Google Sign-In or Sign in with Apple. If you use Sign in with Apple, we may receive a unique, randomized email address via Apple's private relay service to protect your identity.
• Social Interaction Data: To facilitate "Circles," we process movie ratings and comments you choose to share. This data is linked to your User ID and is visible to users within your approved Circles.
• Technical Logs: IP addresses and device identifiers used for security monitoring and performance analytics.

3. Children's Privacy

FlickMate is not intended for individuals under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will take immediate steps to delete it.

4. Data Transfers & Security

We utilize industry-standard encryption (TLS/SSL) and secure cloud providers. Your data is handled by our designated Data Processors:

• Apple Inc.: For "Sign in with Apple" authentication and token validation (Global).
• New Relic: Performance data is processed in EU-based data centers.
• Google Firebase: Authentication data may be processed in the United States. We ensure these transfers are protected by Standard Contractual Clauses (SCCs) or recognized UK adequacy frameworks.

5. Data Retention & Account Deletion

• Account Deletion: You may initiate account deletion at any time within the App Settings. You could also request us to delete your data via support channel. Upon request and post due dilligence, we will permanently delete your account record and all associated personal data (including ratings and social links) from our active databases within 30 days.
• Token Revocation: If you signed in with Apple, deleting your Flickmate account will also trigger a revocation of your Apple Sign-In token in accordance with Apple's security requirements.
• Technical Logs: Retained for a maximum of 12 months for security audit purposes before being purged.

6. User-Generated Content (UGC)

As a social platform, Flickmate allows you to share content with your Circles. We maintain a zero-tolerance policy regarding objectionable content or abusive users. By using the service, you agree not to share content that is defamatory, offensive, or violates the rights of others. We provide in-app tools to report such content and block users.

7. Your GDPR Rights

You have the right to Access, Rectify, Erase (Right to be Forgotten), Restrict processing, and Data Portability. You also have the right to object to processing based on legitimate interests.

To exercise these rights, or to lodge a complaint with the Information Commissioner's Office (ICO), please use the contact details below.