CinéFile privacy

What CinéFile stores

Your Record — the shows you swipe on, your scores and one-line reviews (your lines), and the profile you choose to fill in (a display name, a handle, a taste line, an avatar image you pick). The Record lives on your device first; a copy syncs to our database so it can be restored and, where you allow it, shared.

What identifies you

An anonymous identifier generated on your device. Sign in with Apple is optional; if you use it, the email address Apple provides (which you can hide) is stored to recover your Record, and for nothing else. CinéFile does not ask for your phone number, contacts, or location, and does not collect them.

Who can see your Record

You choose: Private (nobody), Friends (mutual follows only), or Public. Your handle is findable by other users when you claim one; the details of your Record follow the setting above, enforced on our servers.

What CinéFile sends elsewhere

• Show artwork, details and ratings come from TMDB first, with TVmaze for broadcast schedules, episode order and character images; trailers and themes play through official YouTube and Spotify embeds, which are governed by those services' own policies when you play them.
• This application uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.
• If you ask the clerk a question, your question and a summary of your Record are processed by Anthropic's Claude API to produce the answer, and are not used to train models.
• If you send a note through the app, it goes to the person who builds CinéFile.

What CinéFile does not do

No ads. No selling or sharing of data with data brokers. No tracking across other apps or websites. No analytics beyond the Record you can see yourself.

Deleting your data

In the app, open Settings (the ⚙ on the Profile page) and choose Delete my record everywhere. Your Record, scores, profile, handle, follows, messages and share cards are removed from our database at once, and the phone is wiped. Notes you sent to the builder and error reports keep their text but lose the identifier. "Hand this phone over" wipes only the device and leaves the database copy in place for a transfer.

If you no longer have the phone, email the address below from any account and name your handle; the record is deleted within 24 hours.

Contact

evan@evangillissie.com