Privacy policy

In short

Have You Seen is a place to shortlist, track and recommend what to watch with friends. We only collect what the app needs to work. We do not sell your data, show adverts or track you around the web. Your lists and progress are private unless you choose to share them, and you can delete your account and everything in it at any time.

Who we are

Have You Seen (haveyouseenapp.com) is responsible for your personal data under UK data protection law (UK GDPR). For any question about your data, or to use any of your rights below, email privacy@haveyouseenapp.com.

What we collect

• Account details: your email address (to sign you in), your name, username and region (to show where titles can be watched).
• What you do in the app: your lists and the titles on them, what you are watching, have watched or dropped, the episodes you tick, your ratings, and your privacy choices. We store the ID of each film or series, not your viewing history from any streaming service.
• Friends and sharing: who you are friends with, invite links you make, people you invite to lists or block, share links you switch on, and the notifications we show you.
• Requests to join: if you ask for access, your email and name so we can review the request.
• Technical data: our hosting provider keeps short-lived server logs (such as IP address and browser type) to keep the service running and secure.

We do not ask for your date of birth, address, phone number or payment details.

Why we use it

• To provide the app you signed up for: signing you in, saving your lists and progress, and showing them to the friends you choose (contract).
• To keep the app safe, for example blocking, preventing misuse and fixing problems (legitimate interests).
• To send sign-in emails. We do not send marketing emails.

Who can see your data

Your lists, statuses and ratings are private by default. Friends only see what you choose to show them, and a share link only works while you have it switched on. Anyone with a share link sees the list's name and titles, never your name. Blocked people cannot see you at all. These rules are enforced in our database, not just on screen.

Services we use

We use a small number of trusted providers to run the app:

• Supabase: sign-in and our database.
• Vercel: hosting the website.
• Resend: sending sign-in emails.
• TMDB (The Movie Database): film and series information. We fetch title details from TMDB on our servers; we do not send them your personal details.

Some of these providers may process data outside the UK, including in the United States. Where they do, they protect it with the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.

How long we keep it

We keep your data while you have an account. When you delete your account (Profile, then Settings), we delete your profile, lists, progress, ratings, friends and notifications straight away. If you change your username, your old one is held for 30 days so nobody else can take it and pretend to be you. Server logs are deleted automatically after a short time.

Your rights

Under UK data protection law you can:

• ask for a copy of your data
• ask us to correct it (you can also change most details yourself in Settings)
• ask us to delete it (or delete your account yourself in Settings)
• object to, or ask us to limit, how we use it
• ask for your data in a format you can take elsewhere

Email privacy@haveyouseenapp.com and we will reply within one month. If you are not happy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).

Age

Have You Seen is for people aged 16 and over. If you think someone younger has an account, please let us know and we will delete it.

Cookies

We only use the cookies the app needs to work, such as keeping you signed in. No advertising or tracking cookies. See our cookie policy.

Changes

If we change this policy in a way that matters, we will tell you in the app before the change takes effect.