Privacy policy

What FamFlix stores

• Your account: you sign in with Google, which shares your name, email address and profile picture with FamFlix. FamFlix never sees your Google password or anything else in your Google account. It also keeps one setting of yours: whether the people in your families can see your list.
• What you add: the titles on your lists (a title your family logs as watched together with you is also added to your personal list), the episodes you tick on a series (with your own score and note for each, kept on your personal list), your scores, notes, likes and dislikes, who watched what and when (and, for a title you watched again, each day you watched it before; or that you don't remember when, if that is what you say), the families you belong to, and a history of family activity (for example “Ana added Dune”; each family keeps its latest 500 events).
• Movie nights: when a family starts a movie night, the titles it shows, who took part, how each person voted (nope, yes, love or seen it) and what was picked. A night stays in the family's history until the family's owner, or whoever started or ended it, deletes it. Swiping on your own (Discover) stores nothing except the titles you put on My list.
• Planned movie nights: when a family plans a movie night, its time, the note (if any) and the mood, who planned it, and whether each person answered Going, Maybe or Can't. They stay with the family: a plan that was cancelled or has passed is hidden after a day but kept, a person's answers go when they leave the family or delete their account, and the note goes when the person who wrote it deletes their account. The reminders are only shown in the app; FamFlix sends no e-mails and no calendar files.
• Guests: a family can save a guest's name for reuse, record which viewings they attended (with a date or no known date), and enter an optional movie score on their behalf. A guest can also join one night through a general or person-specific link and vote without an account. Voting and actual attendance are recorded separately. Family members can correct guest names and attendance. A separate invitation can connect that guest history to a Google-authenticated account only after the person confirms; existing account data is kept and duplicate attendance/scores are not counted twice.
• Counters: how often you add titles, search, try invite codes or start movie nights, kept for a day, to stop abuse.

FamFlix uses this only to run the watchlist for you and your families.

Who can see it

• Your personal list is visible to you and, unless you switch that off in Settings, to the people in the families you are in: the titles on it, whether you watched them and when, and your score for each. Your notes and reactions, the episodes you tick on a series, the earlier times you watched a title, and Your year, which is worked out from them, are visible only to you.
• Family lists, and your name, picture, scores, notes and reactions on them, are visible to the members of that family. So are the family's stats (the Stats tab), which only count what members can already see; the Share button sends a few numbers and a title, no names.
• Your votes in a family movie night stay private while you swipe. Once you finish a stack (or someone shows the results early), the other members of the family see them next to your name.
• A guest's name and votes are shown to the members of the family whose night it is, and to the other people in that night. A guest sees that one night (its titles, who is taking part and the votes), never the family's lists, saved guest directory or history. A valid personal invitation can show the invited guest name and family name, but does not expose their past history. Saved guest profiles and scores are visible only within that family until the person explicitly joins with an account.
• FamFlix doesn't sell your data, show ads, or use analytics or tracking cookies.

Where it's kept, and the services FamFlix uses

• Supabase stores the data and handles sign-in, in the EU (Ireland).
• Microsoft Azure hosts the website, in the EU (Netherlands).
• Google handles sign-in. Profile pictures load from Google's servers.
• The Movie Database (TMDB) supplies movie and series information. FamFlix never tells TMDB who you are, but posters, cast photos and other pictures load straight from TMDB's servers, which see your device's IP address like any site you load pictures from.
• YouTube plays trailers. Nothing loads from YouTube until you press play; then it plays in YouTube's privacy-enhanced mode and may set its own cookies.

Cookies and browser storage

FamFlix only uses the cookies needed to keep you signed in, so it doesn't ask for cookie consent. A guest of a movie night, who has no account, gets one cookie that only lets them back into that night, for up to a day. Your browser also remembers a few things for FamFlix: your theme, whether you've seen the welcome tour, and which movie night invites it has already shown you. These stay on your device.

Deleting your data

Leaving a guest voting session removes that session and its votes, not attendance that the family recorded separately or the reusable guest profile. Guests without an account can ask their family to correct their name or attendance, or contact us about deleting their stored guest data. Linking a guest profile to an account brings that data under the account's existing download and deletion controls.

You can change your name in Settings, remove titles, delete your scores and notes, and leave a family at any time (which also removes your votes from a movie night that is still going).

Settings → Account → Delete account deletes your account right away, with your personal list (and the episodes you ticked), your watch history, and your scores, notes, likes and dislikes. Families you shared keep the titles you added to their lists, without your name, and your name is removed from their activity history. Your votes in movie nights go too; the nights themselves stay in the family's history. Your answers to planned movie nights go as well, and the plans you made stay with the family without your name and without your note. If database backups are kept, deleted data drops out of them within 7 days.

Guests: a guest can leave a movie night from its menu, which deletes their name and votes at once, and any member of the family can take a guest out while the night is going. Once a night is over, a guest's name and votes stay with it in the family's history, until the night or the family is deleted (the family's owner can delete a night); to have them removed sooner, write to etticov@gmail.com.

Your rights

You can download a copy of your data yourself, any time: Settings → Account → Download my data gives you one file with everything FamFlix keeps about you, and another with your watch history for a spreadsheet. They hold nothing of other people's apart from their names where you watched something together. You can ask for your data to be corrected or deleted by writing to etticov@gmail.com. You can also complain to your data protection authority (in Romania, the ANSPDCP).