Privacy Policy

• Your account - email address and the username you choose, through Supabase Auth. We never see your password; Supabase stores it encrypted.
• An age band - one of 13–15, 16–17 or 18+. You enter a date of birth once; it is turned into a band and never stored. We keep the band and the date your band next changes, so you move up on your own without telling us again.
• Your preferences - the avatar you pick from our set, genres you like or would rather not see, the streaming services you say you have, and four switches for which notifications you want.
• What you create - ratings and any review you write, your watchlist and where each title has got to, watch groups you’re in, titles and recommendations you add to them, your votes, chat messages, reactions, comments on titles, and the titles you mark “not interested”.
• Push notification tokens - one per device you sign in on, so we can send a notification to that phone. Deleted when you sign out.
• Email addresses you invite - if you invite someone who isn’t a member yet, we hold their address until they accept or you withdraw it.
• Server logs - IP address, timestamps and error traces, kept briefly for debugging and abuse prevention.
• Which features you use - that an account was created, that a group was made, that something was rated. Names of actions and nothing about the content: not which film, not what you wrote. It stays on our own servers, goes to no third party, and exists so we can tell where people get stuck rather than guessing.

We don’t process payments, we don’t run ads, we have no advertising identifiers and no third-party analytics or tracking SDKs of any kind. We don’t collect your location or your contacts, and we don’t sell personal data to anyone.

Anything you post inside a watch group - chat, recommendations, shared list, your ratings - is visible to the other people in that group. That’s the point of the feature, and it’s said where you post it. It isn’t visible outside the group.

These outside services each handle a slice of it:

• Supabase - authentication and the database. This is where your account and everything in it actually lives.
• OpenAI - everything you type that other people can see is sent to OpenAI’s moderation service before it appears: chat messages, reviews, recommendation notes, comments, your username and group names. It goes as text with no account attached. This is how we screen for the things in our Community Guidelines, and it happens before anyone else can read what you wrote.
• TMDB - film and television data, and streaming availability via JustWatch. We send TMDB the title being looked up and not who is looking. Posters and artwork, though, are loaded by your own browser or phone directly from TMDB’s servers, which means TMDB sees your IP address the same way any website you visit would.
• OMDb - critics scores for films, looked up by title, on the same basis as TMDB.
• Expo - delivers push notifications. Expo receives your device token and the text of the notification, and passes it to Apple or Google.
• Resend - sends email: invitations, and notifications you’ve asked for. It receives your address and the message.
• Render and Vercel - host the service and the website.

You can delete your account yourself, from Settings, in the app or on the website. It happens immediately - there’s no waiting period and nothing to confirm by email. Your profile, age band, ratings, reviews, watchlist, messages, comments, votes, memberships, notification settings and device tokens all go at once, along with your sign-in record.

Two things survive, and both are deliberate: watch groups you created keep existing for the other people in them, and a safety report keeps its copy of the content that was reported - otherwise deleting an account would erase the evidence of what it did. The full explanation is here, including what to do if you can’t sign in.

You can also ask us for a copy of your data, or ask us to delete it on your behalf, at privacy@featurenight.com. We aim to answer within seven days.

• Leave any watch group, or delete one you created, from the group itself.
• Block anyone, from Settings - they stay in the group, you stop seeing them.
• Turn off any category of notification, from Settings, on either platform.
• Change your username, avatar, genres and streaming services whenever you like.

Feature Night is for people aged 13 and over. Everyone is asked for a date of birth when they sign up, or the first time they open the app if they joined another way. If the answer is under 13, the account is deleted straight away rather than kept and restricted - and because the date itself is never stored, there is nothing left behind.

For 13 to 17, the age band decides what the app will offer: no R, NC-17 or TV-MA titles appear in suggestions, search results, or anywhere else the app chooses what to show.

Separately, a watch group can be told a child is present - set by a manager of that group, not by the child - and then anything added to it above that group’s rating waits for a manager’s approval before anyone sees it. See Family Safety for how that works and where its limits are.

The service runs in the United States, and the companies listed above process data there. If you’re using Feature Night from elsewhere, your data is transferred to the US to provide it.

If this changes in a way that materially affects how your data is used, we’ll update the date at the top and, where required, tell you directly.

Questions, or want to exercise any of the above: privacy@featurenight.com. Anything about safety: safety@featurenight.com.