Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Display Names: When you create or join a lobby, you may provide a display name. This is optional and can be changed at any time. Display names are visible to other users in the same lobby.

1.2 Automatically Collected Information

• Anonymous User Identifiers: We use Supabase anonymous authentication to create unique user identifiers for app functionality. These identifiers are not linked to your personal information and cannot be used to identify you outside of the app.
• Lobby Data: Information about lobbies you create or join, including lobby codes, user ready status, and participation in voting activities.
• Media Preferences: Your swipe preferences (like/dislike) for media items within active lobbies.
• Genre Votes: Your genre voting preferences when participating in genre selection within lobbies.

1.3 Information We Do NOT Collect

We do not collect, store, or process:

• Email addresses
• Phone numbers
• Physical addresses
• Location data or GPS coordinates
• Device identifiers beyond anonymous session IDs
• Analytics or tracking data
• Plex account credentials (Plex authentication tokens are stored locally on your device only and never transmitted to our servers)
• Payment or financial information
• Biometric data

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Functionality: To enable real-time synchronization between users in the same lobby, allowing you to see other users' ready status, swipe preferences, and match results.
• Match Detection: To identify when all users in a lobby have liked the same media item, enabling the match feature.
• Lobby Management: To maintain lobby state, track user presence, and manage lobby sessions.
• Genre Filtering: To filter and display media items based on genres selected through the voting process.
• Technical Support: To troubleshoot issues and provide customer support when requested.

3. Data Storage and Security

3.1 Data Storage

• Your data is stored securely in Supabase, a PostgreSQL database service with industry-standard security measures.
• Data is isolated by environment (development vs production) to ensure proper separation.
• All data access is protected by Row-Level Security (RLS) policies that restrict access based on user permissions and environment settings.
• Plex authentication tokens are stored locally on your device using secure storage mechanisms and are never transmitted to our servers or shared with other users.

3.2 Security Measures

• We use encrypted connections (HTTPS/TLS) for all data transmission.
• Database access is restricted through Row-Level Security policies.
• Anonymous authentication ensures user identifiers cannot be linked to personal information.
• Plex tokens remain on the host device only and are never shared.

4. Data Sharing and Disclosure

4.1 Within the App

Your display name, ready status, and swipe preferences are visible to other users within the same lobby session. This information is necessary for the app's core functionality of matching preferences.

4.2 Third-Party Services

We use the following third-party services that may process your data:

• Supabase: We use Supabase for authentication, database storage, and real-time synchronization. Supabase's privacy policy applies to data stored in their service. View Supabase Privacy Policy
• Plex: If you choose to connect your Plex account, the app accesses your Plex media library through Plex's API. Plex authentication is handled directly between your device and Plex. We do not receive or store your Plex credentials. View Plex Privacy Policy

4.3 We Do NOT Share Your Data

We do not sell, rent, or share your information with third parties for marketing or advertising purposes. We do not share your data with data brokers or analytics companies.

5. Data Retention

• Lobby data is retained while lobbies are active and for a limited period after lobbies become inactive.
• You can leave a lobby at any time, which will remove your association with that lobby.
• Historical lobby data may be retained for a limited period for functionality purposes and to support troubleshooting.
• You may request deletion of your data by contacting us at support@flicksymatch.com.

6. Your Rights and Choices

You have the following rights regarding your information:

• Access: You can view your display name and lobby participation within the app.
• Modification: You can change your display name at any time within the app.
• Deletion: You can leave a lobby at any time, and you may request deletion of your account data by contacting support.
• Opt-Out: You are not required to provide any personal information to use the app. You can use the app with minimal information (anonymous identifier only).
• Data Portability: You may request a copy of your data by contacting support.

7. Children's Privacy

FlicksyMatch is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@flicksymatch.com, and we will delete such information from our systems.

If you are between 13 and 18 years of age, you must have your parent's or guardian's permission to use this app.

8. International Users

FlicksyMatch is operated from Australia. If you are using the app from outside Australia, please be aware that your information may be transferred to, stored, and processed in Australia and other countries where our service providers (including Supabase) operate.

By using the app, you consent to the transfer of your information to these locations and the use and disclosure of your information as described in this Privacy Policy.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at support@flicksymatch.com.

10. Australian Privacy Rights

If you are located in Australia, your privacy is protected by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). As an Australian-based service, we are committed to complying with these principles:

• We collect only the information necessary for app functionality
• We use and disclose your information only for the purposes stated in this policy
• We take reasonable steps to protect your information from misuse, loss, and unauthorized access
• You have the right to access and correct your personal information
• You can make a complaint about our privacy practices, which we will investigate and respond to

If you wish to access, correct, or make a complaint about your personal information, please contact us at support@flicksymatch.com. You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain data protection rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, please contact us at support@flicksymatch.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Effective Date" at the top of this policy
• Posting the updated policy on our website
• Updating the app version with a notice about policy changes

Your continued use of the app after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within a reasonable timeframe.