Legal

Privacy Policy

Last updated: 9 September 2026

The short version

This app doesn't have a server, doesn't collect your data, and doesn't share it with us. Everything you enter (films, bookings, reviews, wishlist items, and the names you set in Settings) is stored in your own iCloud account and, if you choose to share your library, in the iCloud account of whoever you invite. We (the developer) never see it, never receive a copy of it, and have no way to access it.

What data the app stores, and where

The app uses Apple's CloudKit to store and sync your data:

• Your private iCloud database: holds your library until you choose to share it.
• A shared iCloud database: used only if you invite someone else, so you can both see and edit the same library.

Both are provided directly by Apple as part of your iCloud account. We do not operate any servers, and no copy of your data passes through anything we control.

The data the app stores is limited to what you put into it: films you add, bookings, star ratings and written reviews, wishlist items and notes, and the display names you set for yourself and anyone you share with. None of this is linked to an account with us, because there is no account with us. The app identifies people only through Apple's CloudKit sharing, using whatever Apple ID you and the people you invite are already signed into.

Guest invites

If you invite a guest who doesn't have the app, the details of that one booking (the film title, the showtime, your cinema's name, the guest's name, and who else is attending) are stored so the web page you send them can display their ticket. This is the only feature in the app that stores anything outside your own iCloud account, and it happens only when you tap "Send invite".

These invites are held in Cloudflare's storage, are reachable only by the unguessable link you send, and are deleted automatically after six months. No account or sign-in is involved, nothing about the guest is collected when they open the page, and no other part of your library is included.

Third-party services

The Movie Database (TMDb). When you search for a film, the title you type is sent to TMDb's API to find matching results and fetch posters, cast, and other film details. No other information about you is sent. TMDb's own privacy policy governs how they handle that request: themoviedb.org/privacy-policy.

This application uses TMDb and the TMDb APIs but is not endorsed, certified, or otherwise approved by TMDb.

Apple CloudKit. Sync, sharing, and notifications are all provided by Apple's CloudKit and are governed by Apple's own privacy practices for your iCloud account: apple.com/legal/privacy.

Your own media server. If you connect a Plex, Jellyfin or Emby server, the app talks to it directly over your own network or account. Nothing about that connection reaches us, and the key or token it uses is stored in your device's keychain.

We do not use any analytics, advertising, or tracking services of any kind. The app does not collect data for any purpose beyond making its own features work, and nothing you do in the app is used to track you across other apps or websites.

Photos and Calendar

Saving a ticket stub asks for add-only access to Photos, and adding a showtime to your diary asks for write-only access to Calendar. In both cases the app can only put something in. It can never read your photo library or look at your calendar.

Notifications

The app can send you local notifications: a booking confirmation, a reminder before a showtime, or, if you're sharing a library, a notification when the other person makes a booking. These are generated on your own device from your own data; nothing is sent to us to make this work.

Children's privacy

This app is not directed at children and does not knowingly collect information from anyone. Since we don't collect data at all, there's nothing to distinguish here by age.

Data deletion

Because everything lives in your own iCloud account, deleting the app or removing its data from iCloud (Settings → your name → iCloud → manage storage) removes it entirely. There is no separate copy anywhere for us to delete, because we never had one. Guest invites you've sent expire on their own within six months, and can be removed sooner on request.

Changes to this policy

If this policy changes, the update will be posted here with a new "Last updated" date.

Contact

Questions about this policy: [email protected]