Privacy Policy

Effective September 6, 2026

Overview

Social Entertainment ("the app", "we", "us") is a movie and TV discovery app operated by Uncoded Lifestyle. This policy explains what information we collect, how we use it, and the choices you have. It applies to the app everywhere it is available, including the mobile apps and the web app.

You can browse the app as a guest without creating an account. If you only browse as a guest, we do not collect any personal information about you beyond the routine server logs described below.

Information we collect

When you create an account and use the app, we collect:

Account information: your email address and a password. Passwords are handled by our authentication provider (Supabase) and stored only in hashed form — we never see or store your plain-text password. You also choose a username.
Taste preferences (optional): answers you give during onboarding or edit later — preferred media type, genres, streaming services, region, era, an age range, and favorite titles and actors. These only shape your feeds.
Profile picture (optional): if you choose to set a profile photo, the single image you pick is uploaded to our storage provider (Supabase) and shown on your profile. The app does not access the rest of your photo library — only the one image you select.
Your activity: star ratings you give titles, comments you post (on movies, shows, and individual episodes), titles on your watch list and their watch status, the other users you follow, users you block, and reports you submit about comments or messages.
Titles you share out to other apps: when you use "Share via…" to hand a title or episode to your device's own share sheet, we record which title it was and when — once per title, no matter how many times you share it. We record only that you shared it, never which app you picked or who you sent it to, because that hand-off belongs to your device and we cannot see into it. This is what counts toward your share badges.
Titles and messages you send to other people in the app: when you send a title to someone you follow who follows you back, we store the title, who you sent it to, any note you wrote with it, and when you sent it. Replies in that conversation are stored the same way. If you start a group conversation, we also store who is in it and the name it is given. We store the time you last opened each conversation, which is how we know what is unread. Messages are stored in ordinary readable form and are NOT end-to-end encrypted: we can access them where we need to, which in practice means acting on a report (see "Reports and moderation" below).
Security data on your device: your login session is stored on your device (your device's secure storage in the mobile app, browser storage on web). If you enable biometric login, a session token is stored in your device's secure enclave-backed storage — biometrics themselves are handled entirely by your device's operating system and never reach us.
Push notification token (optional, mobile only): if you turn on push notifications, we store the anonymous push token your device's operating system issues to this app, together with your device's time zone, so we can deliver the alerts you asked for at a sensible local hour. The token identifies this installation of the app, not you or your device across other apps, and we use it for nothing else. Turning notifications off in Profile → Settings → Notifications (or in your device's settings) removes it, and signing out removes it from that device.
Server logs: like nearly every online service, our servers automatically record routine request metadata (such as IP address and request time) for security and reliability. We do not use it to profile you.

What we do NOT collect

We do not collect your precise location, contacts, or advertising identifiers, and we do not access your photo library beyond the single image you choose as a profile picture. The app contains no advertising and no third-party analytics or tracking SDKs, and we do not track you across other companies' apps or websites. We never sell your personal information.

In particular, the list of people you can send a title to is built only from accounts you already follow inside the app. We never read your device's contacts or address book, and we never ask for your phone number, to find people for you.

How we use your information

We use the information above only to run the app:

to create and operate your account and keep you signed in;
to personalize your movie and TV feeds using your preferences;
to show your ratings, comments, and watch list, and to compute community rating averages;
to count how many titles you have rated, commented on, and shared, so we can award the milestone badges shown on your profile;
to run the social features you opt into — showing who you follow, and building the activity feed of what the people you follow rate and say;
to deliver the titles and notes you send to the people you send them to, to keep a conversation readable to the people in it, and to show you what has arrived and what you have not read yet;
to enforce our rules — reviewing reported comments and messages, and honoring blocks;
to send the push notifications you have turned on, and nothing else — we never use push for advertising or promotion;
to secure the service and prevent abuse.

Push notifications

Push notifications are entirely optional and off until you turn them on. We only ask after you have done something that a notification would follow from — for example, following another user — and we ask inside the app first, so declining costs you nothing.

When they are on, we notify you about two things and nothing else: activity from people you have chosen to follow — when they rate or comment on a title — and titles someone has sent you directly. We do not send marketing or promotional notifications.

You control this in two places, and both are honored: your device's system settings, and Profile → Settings → Notifications in the app, where you can switch push off entirely, or keep it on and silence individual kinds — ratings, comments, or "Titles friends send me" — globally, or per person from your Following list.

Delivery goes through Apple's and Google's push services (via Expo's push service), which necessarily receive your device's push token and the notification's text in order to deliver it. Worth knowing what that text contains: a notification about a title someone sent you includes their username, the title, and the note they wrote with it, because that is what makes the notification worth reading. If you would rather message content never left our servers that way, switch "Titles friends send me" off — the message still arrives in the app.

Messages and group conversations

You can send a title, with an optional note, to someone you follow who also follows you. That mutual rule is the whole design: a stranger cannot reach you, so there is no request inbox to police and no way to be messaged by someone you have not already chosen.

A conversation is visible to the people in it and to nobody else. It is not shown on your profile, it does not appear in the activity feed, and it is never used to shape anyone's recommendations. What you send is not scanned to build a profile of you or to target advertising, of which the app has none.

A few consequences of how it works are worth stating plainly, because they surprise people:

A conversation outlives the follow that allowed it. If either of you unfollows the other, nobody can send anything new, but the messages already sent stay readable to both of you. We do not delete somebody's history because a follow changed.
In a group, every member can see the other members' usernames and profile pictures, and everything posted in it since they joined. Membership is fixed when the group is created — nobody can add a stranger to it later.
You can delete a message you sent, which removes it for everyone in that conversation. Leaving a group removes the conversation from your inbox permanently and you cannot rejoin it, but the messages you already posted stay visible to the members who remain.
Blocking someone hides your one-to-one conversation in both directions and closes it to new messages. Inside a group, a block hides that person's messages from you rather than removing the whole conversation, since the other members are still talking.
To keep your inbox current, our server sends your device a signal saying only that a conversation changed — no message text, no sender, no title. Your device then asks our API for the content, over your authenticated session, exactly as it would if you had opened the app yourself.

What other users can see

Some of what you do in the app is visible to other people who use it. This is the full list.

Always public: your username, your profile picture (if you set one), the month you joined, your comments, and — shown next to a comment you post — the star rating you gave that title. Anyone can tap your name or avatar on a comment to open your profile. Your follower and following counts are also visible.

Public by default, and you can turn it off: your profile page shows your watch list, your ratings, the milestone badges you have earned, and the lists of who follows you and who you follow. Switching off Profile → Settings → Privacy → Public profile hides all five from everyone else — your comments and username stay public either way, because a comment is a public post. Your profile displays only the badges you have already earned, not your progress toward the next one; the counts behind them — how many titles you have rated, commented on, and shared — are part of the profile data shared alongside your list and ratings.

Visible only to the people you sent it to: the titles and notes you send in a conversation, and the members and name of any group you are in. These are covered in full in the section above.

Never shown to other users: your email address, your taste preferences, the users you block, the reports you submit, and your notification settings. Community rating averages include your ratings, but the average itself is anonymous.

Blocking is mutual in effect: someone you have blocked (or who has blocked you) cannot see your profile, list, ratings, or connections, and you will not see theirs.

Your profile has a web address you can share with anyone, in or out of the app. Two things follow from that, and both are worth knowing before you send one.

Anyone holding the link can open the page — they do not need an account. The page shows exactly what your privacy setting allows: with Public profile on, your username, picture, join month, badges, watch list and ratings; with it off, your username and picture and nothing else. It is the same gate the app applies, so turning Public profile off is enough, and the app asks you to confirm before you share a link to a profile that would show nothing.

When the link is pasted into a messaging app — iMessage, WhatsApp, Slack, Discord, X and so on — that service fetches the page itself to draw a preview card, so whatever the card contains reaches that service too. This is unavoidable in any link preview, so it is worth knowing what the card says. With Public profile on, it carries your username, the title you most recently rated or commented on and the rating you gave it, and how many titles you have rated and have on your list, over that title's artwork. With Public profile off, it carries your username and picture and the words "Private profile".

Profile pages also tell search engines not to index them. A shared profile is meant to be reachable by the people you sent it to, not discoverable by a stranger searching your name.

Third-party services

We use a small number of service providers to run the app. Each receives only what is needed to provide its function:

Supabase — authentication, database, and profile-picture storage. Your account data, your activity, and your messages are stored with Supabase (supabase.com/privacy). Supabase also carries the live-update signal that tells your device a conversation has changed; as described above, that signal contains no message content.
Resend — delivers our account emails (such as your signup confirmation code and password-reset code), and delivers reports to our moderators. Resend processes your email address only to send you these messages; where a report is involved, it also carries the reported content to us (resend.com/legal/privacy-policy).
The Movie Database (TMDB) — all movie and TV information. Poster and artwork images load directly from TMDB's servers, which therefore see your device's IP address (themoviedb.org/privacy-policy). This product uses the TMDB API but is not endorsed or certified by TMDB. Streaming availability data is provided by JustWatch.
YouTube — trailers are played through YouTube's embedded player. When you play a trailer, Google/YouTube may collect data as described in their privacy policy (policies.google.com/privacy).
Expo Application Services (EAS) — hosts our web app and API, and relays push notifications to Apple's and Google's push services on our behalf (expo.dev/privacy).

Reports and moderation

You can report a comment, and you can report a message that was sent to you. A private conversation is not an exemption from our rules, so reporting works there too — but only the people a message was addressed to can report it, since nobody else can read it.

When you report something, we store the report, who filed it, and any reason you gave, and we send the reported content to our moderation address by email so a person can act on it. For a message that means the message's text and the title attached to it leave our database and reach that mailbox. We do this only for content that has actually been reported; we do not read conversations otherwise. The person who was reported is not told who reported them.

We also keep reports after the fact, so that a pattern of behavior across several reports is visible rather than lost.

Data retention and deleting your account

We keep your information for as long as your account exists. You can permanently delete your account at any time in the app: Profile → Settings → Delete account. Deletion is immediate and removes your account, profile, preferences, ratings, comments, watch list, follows, blocks, reports, badge counts, and any push notification tokens from our database. You can also email us to request deletion.

Deletion reaches your messages too, and in both directions: the messages other people sent you are removed, and so are the messages you sent them — which means your side of a conversation disappears from the other person's inbox as well. Groups you were in survive for their remaining members, without your messages in them. This is deliberate, but it is not reversible, so it is worth knowing before you delete rather than after.

Your rights

Depending on where you live (for example under the GDPR or the CCPA), you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the app (edit your preferences, delete comments, delete your account), or contact us at socialentertainment2026@gmail.com and we will respond to your request.

Children

The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

Security

All traffic between the app and our servers uses HTTPS. Access to your data is scoped to your authenticated session, and sensitive credentials are stored in your device's secure storage. Your data, messages included, is encrypted in transit and encrypted at rest by our database provider.

Messages are not end-to-end encrypted, and we would rather say so than let the word "encrypted" imply otherwise. Encryption at rest protects your messages from someone who gets at the storage underneath; it does not put them beyond our reach, which is what end-to-end encryption means and what a service that must act on reports cannot offer. Treat a message here as private from other users, not as private from us.

No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

Changes to this policy

If we change this policy, we will post the updated version at this address with a new effective date. Material changes will be highlighted in the app.

Contact

Questions or requests about your privacy: socialentertainment2026@gmail.com.