Privacy Policy

This Privacy Policy explains what data WhaleTime ("the App") collects, how it is used, and the choices you have. WhaleTime is a movie and TV episode tracker with social features (comments, reactions, watchlists). By using the App, you agree to this policy.

Information We Collect

Account information

When you create an account, we collect your email address, display name, and username. If you sign in with Google or Apple, we receive your name, email, and (for Google) profile picture URL from that provider, and we store a link to your provider account so you can sign in again. If you set a password instead, we store only a securely hashed version of it, never the password itself.

Device and notification data

If you enable notifications, we store a push notification token for your device, your platform (iOS/Android), and your device's time zone, so we can deliver episode and release alerts at the right time. We also record the browser/device identifier (user agent) associated with your login sessions for security purposes.

Content you create

Comments, replies, likes, and reports you post are stored and may be visible to other users. If you attach a photo to a comment, the image is uploaded and stored on our behalf by our cloud storage provider. If you attach a GIF, we link to it from Giphy's servers — the GIF itself is not stored by us.

Activity data

We store the shows, movies, and episodes you mark as watched or add to your watchlist, along with who you follow or block, so the App can function.

How We Use Your Data

We use your data to operate your account, sync your watchlist and watch history, show your comments and activity to other users where applicable, send you notifications you've opted into, and secure your account (e.g. detecting suspicious login activity). We do not sell your personal data.

Third-Party Services

We rely on the following third parties to operate the App:

• TMDB — movie and TV metadata (no personal data shared).
• Google Sign-In — authentication.
• Giphy — GIF search and hosting for comments.
• Expo push notification service — delivers notifications via Apple (APNs) and Google (FCM); your push token is shared with Expo for this purpose.
• Cloudflare R2 — stores photos you upload to comments.
• Sentry — error monitoring on our backend servers, to help us detect and fix bugs.

This product uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.

Data Retention & Deletion

You can delete your account at any time from within the App. When you do, your profile is deactivated and your username/email are released for reuse, and your comments, likes, reports, follows/blocks, watch history, and push tokens are permanently removed. Some information may be retained where required for legal or security purposes (e.g. fraud prevention).

Children's Privacy

WhaleTime is not directed at children under 13, and we do not knowingly collect data from children under 13.

Your Rights

You may access, correct, or delete your data at any time via the App, or by contacting us at the email below.