Privacy Policy

Information you provide

• Account information: email address, username, password credentials, and email-verification or password-recovery activity.
• Profile information: optional display name and profile photo, privacy settings, selected region, and streaming-service preferences.
• Entertainment activity: favorites, Watchlist and custom lists, list order and visibility, watched movies, shows and episodes, ratings, reviews, spoiler settings, and likes.
• Social content: comments and replies, friend requests and friendships, blocks, reports, direct messages, shared titles or lists, and notification/read state.
• Support information: information you choose to include when contacting us by email.

Supabase Auth handles passwords and authentication credentials. Flikwiz does not store your readable password in its application database.

Technical and device information

When you use the Services, Flikwiz and its infrastructure providers may process request and diagnostic information such as IP address, browser or device type, timestamps, requested pages, response status, and errors. The current production application does not use PostHog or another product-analytics SDK, and it does not use advertising or cross-site tracking cookies.

The website uses localStorage, sessionStorage, and Supabase browser authentication storage to keep you signed in, remember settings, prevent repeated roulette picks, and cache profile, social, review, watched, list, and media information. Some of this data is account-scoped and is cleared during normal logout or account switching. You can clear browser storage through your browser; doing so may sign you out or reset local preferences.

How we use information

• Authenticate accounts, verify email addresses, recover passwords, and protect account access.
• Operate profiles, lists, reviews, messages, friendships, notifications, and watched tracking.
• Personalize recommendations and search using your activity, preferences, region, and selected streaming services.
• Apply privacy, blocking, and relationship rules to content and social features.
• Investigate reports, prevent abuse, enforce our Terms, troubleshoot errors, and improve reliability.
• Respond to support, privacy, and feedback requests.

Public, private, and shared information

• Public profiles: profile identity and permitted profile sections, reviews, lists, and activity can be viewed by other people, including signed-out visitors where supported.
• Private profiles: profile activity and social sections are limited to the account owner and accepted friends, subject to feature-specific rules.
• Lists: public lists appear on a profile, unlisted lists are available to people with the direct link, and private lists are owner-only. The Watchlist is private.
• Messages: direct messages and shared media are stored for the conversation participants and are available only while the relationship and access rules permit.
• Blocking: blocking limits profile access, messaging, and interaction, but it cannot remove copies or screenshots another person already made.

Before posting, consider the audience selected by your profile and list settings. No online sharing control can guarantee that another person will not copy content they are allowed to view.

Service providers and external services

• Supabase: authentication, database storage, access controls, and transactional authentication email delivery through its configured email service.
• Vercel: website hosting, server execution, delivery, and operational logs.
• TMDB: movie, TV, cast, crew, image, trailer, search, and watch-provider metadata. Requests may include a selected country/region, but not your precise location.
• YouTube: trailer thumbnail images and optional outbound trailer links.

These providers process information under their own terms and privacy policies. Flikwiz does not currently call JustWatch directly. Watch-provider information is obtained through TMDB. Following a streaming-provider or other external link takes you to a third-party service that controls its own data practices.

When information is shared

Flikwiz does not sell personal information. We disclose information to the service providers above as needed to operate the Services, when you direct us to share content, when reasonably necessary to investigate abuse or protect users and the Services, or when required by law. We do not use your messages or private lists for advertising.

Retention, deactivation, and deletion

Active account and content records are generally kept while your account is active and for as long as reasonably needed to provide the Services. We may also retain information as needed for security, abuse prevention, legal obligations, disputes, and enforcement.

Deactivation hides your account from normal discovery and social access but keeps your product data so you can reactivate later. Deactivation is not account deletion.

Permanent account deletion is designed to remove your Supabase Auth account, profile, and user-owned Flikwiz database records, including social relationships, lists, favorites, watched records, reviews, comments, messages, reports, and related activity. Deleting a review does not delete the separate watched record created when the review was submitted. Account deletion may not immediately remove limited copies in operational logs, backups, or provider systems, browser caches on another device, or content another user copied outside Flikwiz. Those copies may remain temporarily until they are deleted or overwritten through ordinary system processes. Flikwiz does not promise a fixed retention period where one is not technically enforced.

Your choices

• Edit your username, display name, photo, region, and streaming preferences in Settings.
• Choose public or private profile visibility and public, unlisted, or private list visibility.
• Manage favorites, watched records, Watchlist items, reviews, comments, friendships, and blocked users through their available controls.
• Deactivate or permanently delete your account from Account settings.
• Contact us to ask a privacy question or request help using these controls.

Security

We use authentication, row-level access controls, and account-scoped data handling to protect information. No internet service or storage system is completely secure. Use a unique password and contact us promptly if you believe your account has been compromised.

Children

Flikwiz is not intended for children under 16 and does not currently collect a birth date or perform age verification. If we learn that we collected personal information from someone below the applicable minimum age, we may delete the account and associated information as appropriate, subject to necessary legal, security, and backup retention. Users must also meet any higher minimum age required by the law where they live.

International processing

Flikwiz and its service providers may process information in countries other than the one where you live. Those countries may have different data-protection laws.

Changes to this policy

We may update this policy as the Services change. We will update the date above and, when appropriate, provide additional notice. A future mobile app policy update will be required before adding push notifications, device permissions, mobile analytics, social sign-in, payments, precise location, or photo-library access beyond a photo you deliberately choose for your profile.

Contact

Privacy questions or requests can be sent to flikwizapp@gmail.com. Do not send passwords or authentication links.