Privacy Policy

1. Information We Collect

GoodWatch collects the following data to provide personalised movie recommendations and manage your account:

• Email address: When you create an account (via Google Sign-In, Apple Sign-In, or email)
• Viewing preferences: Streaming platforms, languages, mood preferences, and watchlist
• Interaction data: Which recommendations you accept, skip, or reject (to improve future picks)
• Device information: Device model, OS version, app version, and anonymous device identifier
• Subscription status: Whether you are on the free or paid plan

We do NOT collect:

• Location data
• Contacts or photos
• Payment card details (handled entirely by Apple via the App Store)

2. Purpose of Data Collection

Your data is used for the following purposes:

• Generate personalised movie and series recommendations
• Remember your streaming platforms and language preferences
• Manage your subscription and free-tier daily recommendation limit
• Send transactional emails (welcome, password reset, account deletion confirmation)
• Improve recommendation quality through anonymised analytics
• Send push notifications for re-engagement (with your permission)
• Monitor app stability and performance

3. Data Storage

• Local storage: Preferences, tag weights, and session data are stored on your device
• Cloud storage: Account data syncs via Supabase (hosted in AWS, Singapore region)
• Analytics data: Stored by third-party services listed below, on their respective infrastructure

4. Third-Party Services

We share data with the following third-party service providers, solely for the purposes stated:

• Supabase — Database, authentication, and user data storage
• Firebase (Google) — Crash reporting, performance monitoring, analytics, push notification delivery, and remote configuration
• RevenueCat — Subscription management and entitlement verification
• PostHog — Product analytics, session replay (text inputs masked), and event tracking
• OneSignal — Push notification delivery and user segmentation
• ZeptoMail (Zoho) — Transactional email delivery
• Google Analytics 4 — Website analytics (goodwatch.movie)
• TMDB — Movie information and posters (The Movie Database)

We do NOT:

• Sell your data to any third party
• Share data with advertisers
• Use your data for purposes other than those listed above

5. Your Rights Under the Digital Personal Data Protection Act, 2023 (India)

As a Data Principal under the DPDP Act, 2023, you have the following rights:

• Right to Access: You may request a summary of the personal data we hold about you and the processing activities performed on it
• Right to Correction: You may request correction of inaccurate or incomplete personal data
• Right to Erasure: You may request deletion of your personal data. We will process deletion requests within 30 days
• Right to Grievance Redressal: You may raise grievances regarding the processing of your personal data by contacting us at hello@goodwatch.movie
• Right to Nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity

To exercise any of these rights, email hello@goodwatch.movie with your request. We will respond within 30 days.

6. Data Retention and Deletion

We retain your personal data only as long as necessary for the purposes described above.

• Account deletion: Request via the app (Profile > Delete Account) or by emailing hello@goodwatch.movie
• Processing time: Deletion is completed within 30 days of request
• What is deleted: Account information, viewing preferences, watchlist, interaction history, tag weights, and all recommendation data
• Anonymised data: Aggregated, non-identifiable analytics data may be retained for service improvement

You may also clear local data at any time by uninstalling the app.

7. Data Security

We implement reasonable security measures to protect your data, including encrypted data transmission (HTTPS/TLS), secure cloud storage with access controls, and masked text inputs in session replay. However, no method of electronic transmission or storage is 100% secure.

8. Children's Privacy

GoodWatch does not knowingly collect personal data from children under 18 without verifiable parental consent. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Consent

By using GoodWatch, you consent to the collection and processing of your personal data as described in this policy. You may withdraw consent at any time by deleting your account or contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

10. Changes to This Policy

We may update this policy. Changes will be reflected in the "Last updated" date above. Continued use of GoodWatch after changes constitutes acceptance of the revised policy.

11. Grievance Officer

In accordance with the DPDP Act, 2023, the Grievance Officer for GoodWatch is:

Email: hello@goodwatch.movie

Response time: Within 30 days of receiving a complaint.