Amaree ("we," "our," or "us") operates the Amaree mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data. It also covers the Amaree website at amaree.ai (the "Site"), including signing in to your account there.
01Information You Provide
- •Account information: Email address used to create your account and sign in, managed through our authentication provider (Supabase). The same account works in the App and on the Site.
- •Web sign-in: When you sign in on the Site with a code sent to your email or with Sign in with Apple, we receive your email address (or Apple's relay address), the time of the sign-in and your IP address, which our authentication provider uses to limit repeated attempts. When web sign-up is offered, entering the code for an email address we do not know creates your account on the Site, with the same profile information as an account created in the App.
- •Profile information: Username, nickname, date of birth, and gender, which you provide during onboarding.
- •Profile photo: An optional avatar image you may upload.
- •Preferences: Your selected streaming services, region, and language preferences.
02Information Generated Through Use
- •Ratings and reactions: Your movie ratings, reactions, and interests (saved or blocked titles), which are used to build and improve your personal algorithm.
- •Recommendation requests: The filters and preferences you apply when requesting personalized recommendations.
- •Subscription information: Your subscription status, plan, renewal or expiration date and where it was bought (the App Store or the Site), used to determine access to premium features. Payment processing is handled entirely by Apple for subscriptions bought in the App and by Stripe for subscriptions bought on the Site. We never receive or store your payment card information.
- •Billing on the Site: When you subscribe on the Site, Stripe collects your payment card, your billing address and the email address for receipts directly on its own pages, and tells us the outcome: a customer reference, the subscription and its status, the plan, the billing country and the dates of payments, trials and refunds. We keep those records to run your subscription, answer billing questions and meet tax and accounting rules. Your card number never reaches us.
03Information Collected Automatically
- •Device token: If you enable push notifications, we collect your device's push notification token to deliver notifications via Apple Push Notification Service (APNs).
- •Server logs: Our servers record each request they handle (the route, the time, the outcome, your account identifier when you are signed in, and your IP address) so we can find faults and abuse. These logs are kept for 90 days and then deleted.
- •Performance data: Response times and processing metrics from our servers, used to monitor and improve service performance. This data is not tied to individual user identities.
- •Crash data: Crash reports collected through Apple's standard crash reporting tools, used to identify and fix bugs. This data is anonymized by Apple.
- •Error reports: When something goes wrong on the Site's signed-in pages or in the server code behind them, a report goes to Sentry with the technical details of the failure (the page or route, the browser and its version, the error and where in our code it happened) and your account identifier, so we can tell how many people were affected. Reports never include your email address, your cookies, what you typed, or your IP address, and are kept for 90 days.
- •Website usage: When you visit the Site, Google Analytics and Vercel Analytics record the pages you view, where you came from, and technical details such as browser and device type and an approximate location derived from your IP address. Google's tags use cookies, and where the law requires it they wait for your consent; the details are under Website Analytics and Cookies below.
05How We Use Your Information
We use the information we collect to:
- •Provide and operate the App, including authentication and account management.
- •Build and maintain your personal recommendation algorithm based on your ratings and reactions.
- •Generate personalized movie predictions, reaction predictions, and explanations.
- •Deliver push notifications you have opted into.
- •Process and manage your subscription, including trials, renewals, cancellations and refunds, and send you the billing emails the law requires, such as a reminder before an annual renewal.
- •Monitor, maintain, and improve the performance and reliability of the App and the Site, including finding and fixing errors.
- •Understand how people find and use the Site, including whether one of our own ads led to a visit or an App install.
We do not sell your information, and we do not build advertising profiles about you from your ratings, reactions, or profile. The Site loads Google's analytics and advertising tags to measure visits and our own ad campaigns, subject to your consent and choices as described under Website Analytics and Cookies; the App contains no advertising and no ad-tracking code.
07Data Sources
Movie metadata and images displayed in the App are sourced from The Movie Database (TMDB). Streaming availability data is provided by JustWatch. This product uses the TMDB API but is not endorsed or certified by TMDB. The same data appears on the Site.
08Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the App and the Site.
When you delete your account it is hidden at once and can be restored by signing in within 30 days. After those 30 days it is permanently deleted: your account with our authentication provider, your profile and profile photo, your ratings, reactions, interests, friends and blocks, your feedback, your predictions and recommendation data, your device tokens, and your record with Amplitude. A subscription bought on the Site is canceled at that point and your customer record is deleted from Stripe (see the Refund Policy). Copies in our database backups are removed as those backups expire: the daily backups within seven days of the permanent deletion, the monthly snapshots we keep for disaster recovery within twelve months of it.
Your ratings and reactions are removed from the data our recommendation model is trained on at the permanent deletion. The model is retrained nightly, and the first training after the permanent deletion no longer includes them; a model trained before it may hold what it learned from your ratings (not the ratings themselves) until the next nightly retraining replaces the model we serve, normally within a day. Copies of earlier models that we keep so we can roll back carry the same until they are deleted.
Three things survive the permanent deletion, and nothing in them says who you are beyond the account identifier itself: your account identifier on a suppression list, so no model we train after the deletion learns from you again; one record of the deletion, with its date and which version of the Terms you accepted and when, as proof that we acted and when; and the rows in our training archive, an append-only store that we do not rewrite, holding that identifier, the title identifier and the rating or reaction you gave it, and nothing else about you. Every model trained after the deletion excludes those rows.
Server logs, which hold account identifiers and IP addresses, are kept for 90 days. Error reports are kept for 90 days.
Billing records for subscriptions bought on the Site (the customer reference, the subscription, its payments, trials and refunds) are kept for as long as tax, accounting and card-dispute rules require, up to seven years, and are removed from Stripe when your account is permanently deleted. Stripe keeps its own records under its legal obligations.
09Your Choices
- •Data export: You can download a copy of the data we hold about your account (your profile, ratings, reactions, saved and blocked titles, friends, feedback, subscription records and Terms acceptances) as one JSON file from the Settings page on the Site, once a day.
- •Account deletion: You can delete your account at any time from the Settings screen within the App or from the Settings page on the Site after signing in. Your account is hidden immediately and restored if you sign in within 30 days; after that it is permanently deleted, as described under Data Retention. Deleting the account does not refund a subscription; a subscription bought on the Site is canceled at the end of its paid period, and at the permanent deletion any remainder is canceled without a refund (see the Refund Policy).
- •Subscription: You can cancel a subscription bought on the Site from Settings on the Site (Manage subscription, which opens your billing portal at Stripe) and one bought in the App from your device's Settings under your Apple ID.
- •Signing out: Signing out on the Site ends only that browser's session; signing out of the App ends every session, on the Site included.
- •Push notifications: You can enable or disable push notifications at any time through your device's Settings.
- •Profile information: You can update your username, nickname, date of birth, gender, and other profile details at any time from the Settings screen.
- •Cookies and advertising: Accept or reject the Site's analytics and advertising cookies through the banner where it is shown, and change your answer or turn off the sharing of your visit for advertising at any time through the "Do Not Sell or Share My Personal Information" link in the footer, as described under Website Analytics and Cookies.
- •Your rights: Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict some processing, and to complain to a data protection authority. The export and deletion above answer most requests at once; for anything else, email privacy@amaree.ai from the address on your account and we will answer within 30 days. We never treat you differently for exercising a right.
10Children's Privacy
The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.
11Security
We use industry-standard measures to protect your personal information, including encrypted connections (TLS), secure authentication, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App before the changes take effect. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.
13Contact Us
If you have questions about this Privacy Policy or your data, contact us at privacy@amaree.ai.