Privacy policy

This policy explains what data the app keeps, what for, who it is shared with and what you can do about it. If anything isn’t clear, write to us.

Who is responsible

[NAME OR COMPANY], with address at [ADDRESS], Argentina. Contact: [EMAIL].

What data we keep

• Your account: name, username, email, profile and cover photo (if you upload them), time zone and whether your profile is public or private. If you sign in with email, your password is stored only as a hash (argon2id): we don’t know it.
• Your age: we ask for your date of birth to check that you are 13 or older and we don’t store it. We store the date you accepted these terms.
• If you sign in with Google or Apple: your account identifier with that service and, if they give it to us, your email and name. With Apple we also keep, encrypted, a token used only to revoke access when you delete your account.
• What you post: your reviews (stars, comment, how you watched it), up to two photos per review, the messages in each round’s chat, replies, likes, votes to change a round and the meetups you suggest or join.
• Photos: when you upload them we remove their metadata (including the camera’s GPS location) and store them privately: only people who can see them do, through links that expire.
• Your location: only if you post a round about a place and give the app permission, we use your location at that moment to tell whether you were there (the “I was here” badge). We don’t store it: we only keep whether you were there or not. If you search for places near you, the app sends your location rounded (to about 100 meters) only for that search, and we don’t store it either: we note, without knowing whose it was, the wide area (a square of about 100 km) so we can bring in the places there. A group’s area (a point and a radius chosen by whoever runs it) is visible to its members. We don’t track your location.
• Your people and groups: your friends and requests, who you blocked, the groups you’re in and your role, and requests to join.
• Your tastes: your list (what you want to watch, play, listen to, read or visit), the people you follow (directors, musicians, authors…), the global rounds you follow and the categories you picked when you started. The kinds of places you pick (cafés, museums…) are used only to understand, in aggregate, what people like: they aren’t shown to anyone, don’t change what you get and aren’t used for advertising.
• Points: they are computed from what you post; we only store the redemptions you make.
• Notifications: your notification inbox (deleted after 90 days), your notification preferences and, if you agree to receive them, the identifier your phone gives the app, with its system and language. It is removed when you sign out or delete your account.
• Reports: what you report and why, so we can review it.
• What you write to the team: your messages from Help, with the topic, your phone’s system and the app version (to understand a problem), and our replies. If you sign in with email, the reply also reaches you by email.
• Technical data: to stop abuse we count how many requests come from each IP address, account or phone over a short period (for the phone, a random number the app creates when installed: it doesn’t come from the device and says nothing about you); we store this as a code that can’t be turned back into the IP, and it is deleted when the period ends. When you sign in, create the account or ask for a code, we check that the request comes from the official app: on iPhone, with a key the phone creates for the app (we keep its public part, without your account, and delete it after a year without use); on Android, with a Google Play verdict we don’t keep. Your open sessions (without the password) expire on their own.

What we use it for

• To make the app work: putting together the rounds for your groups and the global ones, showing what people posted and letting you post.
• To choose what comes up in a round: your list, the people you follow and the group’s filters weigh in your groups’ rounds.
• To notify you when a round comes out, when someone posts or replies to you, and anything else you choose in your preferences.
• To moderate: reviewing reports and keeping blocks in place.
• To keep accounts secure and stop abuse.

We don’t sell your data, we don’t use it for advertising and we don’t build profiles for third parties.

What other people see

Each review says who can see it: only your group, your friends or everyone. Until someone posts their own, they can’t see the others’ in that round. If your profile is private, people who aren’t your friends or in your groups only see your name, username and photo. If you block someone, neither of you sees the other.

Who we share it with

Only with the services that make the app work:

• Railway: hosts the server and the database.
• Cloudflare R2: stores the photos, privately.
• Brevo: sends the emails (the code to create your account or reset your password).
• Expo, Apple and Google: deliver notifications to your phone. A notification never contains the text of a review.
• Apple and Google: if you sign in with them, they confirm who you are.
• TMDB, IGDB, CheapShark, MusicBrainz and Open Library: the movies, games, albums and books come from them. We ask them about works (and what you search for), never about you: we don’t send them your name or your account. Your phone downloads the covers and images of the works directly from them (or from our storage): they see your IP address, like any page you open, but not your account.
• Apple and Google (verifying the app): when you sign in or create the account, your phone’s system asks them to confirm the app is the official one and the phone hasn’t been tampered with. We don’t send them your account.
• Google and Apple (maps): they draw the maps and, when you type an address (a group’s area, a meetup’s place), they look it up. Your phone asks them directly, without your account.
• Authorities: if a law requires it.

Where it is stored

Some of these services store data outside Argentina (for example in the United States or the European Union). We choose providers with appropriate security measures for that.

How long

For as long as you have your account. If you delete it, everything of yours is deleted: your account, reviews and photos, messages, list, friends and your place in groups (the group stays; if you were the only admin, the role passes to another member). Photos are removed from storage within minutes and access through Apple is revoked. What remains, without your name or your data, are the reports you made (so moderation stays on record) and the log of what the team did, which keeps only an identifier and cannot be edited. If you started creating your account with Google or Apple and didn’t finish, we delete it after a week. Things that expire earlier are deleted on their own: notifications after 90 days, resolved requests after a month, codes and sessions when they expire.

Your rights

Under Argentina’s Personal Data Protection Law 25.326, you can:

• Access everything we keep about you: “Download my data”, in your account settings.
• Correct it from your profile and settings.
• Delete it: “Delete my account”, in settings. It is immediate. Without the app, you can request it as explained in Delete your account.
• For anything else, write to [EMAIL].

Argentina’s Agency for Access to Public Information, as the supervisory authority for Law 25.326, handles complaints from anyone whose rights are affected by a breach of the personal data protection rules.

How we protect it

• Everything travels encrypted (HTTPS).
• Passwords, codes and sessions are stored as hashes.
• On your phone, the session is kept in the system’s secure storage.
• Photos are kept in private storage, without metadata.
• Team access to moderation requires a second factor and is logged.

Children

The app is for people aged 13 or older. If we learn that an account belongs to someone younger, we delete it.

Changes

If we change something important in this policy, we’ll let you know in the app before it takes effect.