Privacy policy · Reelist

Reelist collects your phone number so you can sign in, and the films you choose to log. We measure how the website and the app are used, with one analytics provider working for us, so we can see what confuses people and what is worth building next, and we measure how well the app performs on real phones. There is no advertising, no data broker, and nobody building a profile of you to sell. We do not sell your data.

Who we are

Reelist is operated by Amigo LLC. If you have a question about this policy or about your data, write to support@reelist.watch and a person will answer.

What we collect

Your phone number: This is the only credential Reelist has. There are no passwords. Signing up and signing in are the same act: you prove you control a number, and you land in the account that owns it. Your number is never shown to other members and is never returned by our API, not even to you.
Your profile: A handle, a display name, and a profile picture if you choose to add one. All three are visible to other members.
The films you log: Which films you have seen, the bucket you put each one in, the head to head comparisons you make, the ranking and score those produce, your watchlist, and any note or date you attach to a diary entry.
What you do with other members: Who you follow, and the likes and comments you leave on their activity.
Safety records: The accounts you block, and any content you report to us. Reports include whatever you type in the free text box, so please do not put anything in there you would not want a moderator to read.
Your contacts, but only if you choose to sync them: Reelist can find people you already know. If you turn that on, the app reads the names and phone numbers in your address book and sends them to us so we can match them against our members. It reads nothing else: no email addresses, no postal addresses, no birthdays, no contact photos. There is a section below on exactly what happens to them.
A notification address for your phone, if you allow notifications: If you say yes when the app asks to send notifications, iOS gives the app a delivery token for your phone and we store it so we can send you the notifications you have asked for. It is not your phone number and it identifies nothing but the installed app. Turning notifications off in iOS Settings stops us using it, and deleting your account deletes it.
The date you joined: That is it. There is no other profile metadata.

Analytics

We measure how Reelist is used. Not because the numbers are interesting, but because we cannot watch over your shoulder: without them we are guessing at which screens confuse people and which features deserve the next month of work. One provider, PostHog, does this for both surfaces.

This website. reelist.watch uses PostHog to count page visits and to see where visitors came from, such as a search engine or a link someone shared.
The app. The app sends usage analytics to PostHog: which screens you visit and which features you use. It is part of the app from its App Store release. It records what people do in Reelist, not what they think of any film.

Separately from analytics, the app measures its own performance: how long it takes to launch, how long each screen takes to appear and become usable, and errors it ran into but recovered from. That goes to EAS Observe, run by Expo, the platform that builds and updates the app. It carries the same random analytics identifier, so a slow screen and the thing that happened after it can be read as one visit. It does not carry your handle, your phone number, anything you typed, or the names of the films on the screen that was slow.

What analytics is not:

We do not sell it. Analytics data is not sold, and it does not go to data brokers.
There is no advertising. No ad network runs on this site or in the app, and nothing is shared for advertising purposes.
No tracking of you around the web. PostHog works only for us. It measures what happens on reelist.watch and inside Reelist, and it does not follow you to anyone else's site or app.
Other members see none of it. Analytics goes to us, not onto anybody's profile. Measuring that a comparison happened is not the same as showing someone which two films it was. What other members can see is described further down, and analytics does not change it.

What we do not collect

This list is worth as much as the ones above, and it is short because the app genuinely does not do these things:

No advertising and no attribution. There is no ad network and no advertising attribution library in the app. The only measurement is the analytics described above, and it works for us alone.
No tracking across apps or websites. Reelist does not use the device advertising identifier and does not share anything for advertising purposes. This is why the app does not ask for permission to track you.
No location. The app never requests it.
No email address required. We do not ask for one and we do not send marketing email.
No IP address logs of our own. Our application does not record or store the IP addresses of the people using it. Every web request carries one by necessity: PostHog receives it with each page view on this website, which is how a rough country or city is worked out, and Expo receives it with each performance report from the app. We do not use it for anything else, and the app does not ask PostHog to work out a location from it.

Contacts

Finding people you know is optional and off until you turn it on. If you never tap it, the app never asks for your contacts and nothing in this section applies to you.

If you do turn it on, here is exactly what happens.

What leaves your phone. The name on each contact card and the phone numbers on it. Nothing else is read.
What we store. One row per contact: the phone number, and the name as it is saved in your phone. We store them as ordinary text, not scrambled or hashed.
Who can see them. Only you. Your contacts are never shown to anyone else, and a member who turns out to be in your address book is never told they are in it, or what name you have them saved under.
We never contact them. Reelist sends no invitations, no texts, and no "your friend joined" messages. Ever.

Be aware

Two things here are worth understanding before you turn this on, because they involve other people.

We keep contacts who are not members. If someone in your address book has no Reelist account, we still store their name and number, so that if they ever join, the two of you can find each other. That means we hold information about people who have not agreed to anything with us. Only you can remove it, from Settings.

Matching runs both ways. If someone else has your number saved and syncs their contacts, you can be suggested to them, even if you never sync your own. They are never shown where the suggestion came from or what name they have you under.

Deleting them. Settings has a "Delete my contacts" button that removes every row we hold from your address book, immediately. Deleting your account removes them too. There is no other expiry: what you upload stays until you delete it.

Photos

If you set a profile picture, the app asks for access to your photo library so you can pick one. Only the single photo you choose is read, and only that photo is uploaded. Reelist never browses your library, never uploads anything in the background, and never asks for the camera.

What other people can see

Worth knowing

Reelist is a social app, so your profile is not private. Any signed in member can look up your handle and see your display name, your picture, the films you have logged, your ranking, and your comments. Treat everything except your phone number as public to the membership.

Two details that are not obvious. Profile pictures are served from a public content delivery network, so the image address itself is not secret and can be opened by anyone who has it. And when you block someone, the block works in both directions: neither of you can see the other, but we do not notify them that you did it.

Who else touches your data

We use a small number of service providers to run Reelist. They process data on our instructions and for no purpose of their own:

Twilio sends your verification code by SMS, so they receive your phone number. They generate and check the code; we never see it.
PostHog receives the usage analytics described above, from this website and from the app.
Amazon Web Services hosts the application, the database and the profile pictures, in the United States.
Expo delivers app updates to your device, relays push notifications to it, and receives the performance measurements described under Analytics.
Cloudflare provides DNS for our domains.

Film information, artwork and streaming availability come from TMDB. Our servers query TMDB, not your device, and we do not send them anything about you or about what you have watched.

We do not sell personal information, and we do not share it for advertising or for cross context behavioural advertising.

Deleting your account

You can delete your account yourself, at any time, from Settings inside the app. You do not have to ask us and there is no waiting period. It takes effect immediately and it is permanent: your profile, every film you logged, your notes, rankings and scores, your watchlist, your comments and likes, your follows in both directions, any contacts you synced, and your profile picture are all destroyed. Nothing is archived, and nobody can restore it, including us. Signing up again with the same number gives you a new, empty account.

Two things deliberately survive, and you should know what they are:

Reports you filed about other people are kept, with your identity removed from them. A report is a complaint about someone else, and if deleting your account withdrew your outstanding complaints, deletion would become a way to un report an abuser. Reports filed about you are kept for the same reason.
A number we have banned for abuse stays banned. If we have blocked a phone number by hand for churning accounts, deleting the account does not clear that, because otherwise "delete and sign up again" would launder a ban.

How long we keep things

For as long as your account exists. There is no separate retention clock: you hold the delete button, and the two exceptions above are the whole of what outlives it.

Security

Traffic between the app and our servers is encrypted in transit. Because the only credential is control of your phone number, there is no password database to be stolen. The database is not reachable from the public internet.

Children

Reelist is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has an account, write to support@reelist.watch and we will remove it.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information. Here is honestly where the app stands on each:

Access and export. Settings has an export of the films you have logged, as a CSV file you can keep or import elsewhere. No request to us needed.
Delete. Settings has an unconditional delete button, described above.
Correct. Partly. You can remove a film from your ranking and you can replace your profile picture at any time. You cannot yet change your handle or display name yourself, so for now write to us and we will do it.

If you want something the app cannot do for you, write to support@reelist.watch and we will handle it by hand.

Changes to this policy

If we change how Reelist handles your data, we will update this page and change the date at the top. If the change is significant, we will tell you in the app rather than relying on you to re read this page.

Contact

Amigo LLC, support@reelist.watch.