We collect only what the recommendations need, we never sell it, and you can export or delete all of it from Settings in one click.
Your privacy matters to us
CHOICE is a personal recommendation service. We collect only what we need to make it work well for you, and we never sell your data to anyone. This policy explains what we collect, why, on what legal basis, who processes it, and what rights you have.
Who we are (data controller)
CHOICE ("we", "us") is the data controller for the personal data processed through this app. For anything privacy-related — questions, requests, complaints — contact us at privacy@choiceapp.org.
What we collect
When you sign up we collect your email address and the preferences you set during onboarding — your streaming platforms, country, and a few favourite titles. As you use the app, we store:
- Your profile (username, display name, optional avatar, language, privacy settings)
- Ratings, likes, dislikes, swipe reactions, and reviews you write
- Your watchlist, watch history, and TV episode progress
- Lists you create and comments you post
- Who you follow and watch parties you join
- In-app interaction signals (e.g. what you view or skip) used to tune your recommendations
- If you opt in to analytics: product usage events collected via PostHog
Why we process it (legal bases)
Under the GDPR, each processing purpose needs a legal basis. Ours are:
| Purpose | Legal basis |
|---|---|
| Providing the service: your account, watchlist, history, lists, reviews, and personalised recommendations | Contract (Art. 6(1)(b)) |
| Social features you actively use (following, public profiles, watch parties) | Contract (Art. 6(1)(b)) |
| Keeping the service secure and preventing abuse | Legitimate interest (Art. 6(1)(f)) |
| Product analytics (PostHog) | Consent (Art. 6(1)(a)) — off unless you accept, withdrawable any time on the cookie page |
Profiling: how recommendations work
CHOICE builds a taste profile from your ratings, reactions, and viewing activity, and uses it — together with signals from users with similar taste — to rank what to show you. This is automated profiling in the GDPR sense, but it is used only to order movie and TV suggestions. It produces no legal or similarly significant effects, and no decision about you is made from it. You can reset your taste profile from Settings at any time, and deleting your account removes the profile entirely.
Who processes your data
We use a small number of service providers (processors and independent services):
- Supabase — authentication, database, and file storage (avatar images)
- Vercel — application hosting and delivery
- PostHog — product analytics, only after you opt in; hosted in the United States
- TMDB — movie and TV metadata; your queries are proxied through our servers
- JustWatch — streaming availability lookups
- YouTube — trailer playback, loaded only when you choose to play a trailer
Each of these publishes its own privacy policy, which we encourage you to read. We share only what is technically necessary for each service to work, and we do not share your data with anyone for advertising or marketing.
International transfers
Some of our providers (including Supabase, Vercel, and PostHog) may process data in the United States. Where personal data leaves the EEA, transfers rely on the European Commission's Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as offered by each provider.
How long we keep your data
We keep your data for as long as your account is active, because the service is built on your viewing history and taste profile. If you delete your account, your data — including your avatar image — is permanently removed within 30 days. Consent choices and analytics identifiers live in your own browser and are removed when you withdraw consent or clear your browser storage. Server logs used for security are kept only briefly. You can also request deletion by emailing privacy@choiceapp.org.
Your rights
Under the GDPR you have the right to:
- Access your data and get a copy — Settings → Export my data gives you a full machine-readable export instantly
- Correct inaccurate data (editable directly in your profile and settings)
- Delete your account and all data (Settings → Delete account, or email us)
- Data portability (the export is JSON, usable anywhere)
- Restrict or object to processing based on legitimate interests
- Withdraw analytics consent at any time on the cookie page — as easy as giving it
- Lodge a complaint with your data protection authority (in Norway: Datatilsynet; in any EEA country: your national supervisory authority)
For anything you can't do in-app, email privacy@choiceapp.org and we'll respond within 30 days.
Changes to this policy
If we make meaningful changes to this policy, we'll update the date at the top and, for significant changes, notify you in the app. We won't reduce your rights under this policy without asking for your consent.
Questions
Reach us any time at privacy@choiceapp.org.