Privacy Policy
Reeligion
Last updated: 16 September 2026 (ninth revision)
What this app collects
An account is required. You rank your first films before being asked for one, and those are kept on the phone until you sign up. After that everything below is stored on our server.
- Your email address, used to sign in, to confirm the account is yours, and to be found by people who already have it, if you turn that on
- Your name, given when you sign up
- Your phone number, only if you choose to give one. It is optional, the app works identically without it, and its only purpose is letting someone who already has your number find you here
- A handle and optional display name, which are public to other signed-in users
- The films you rank, their position and score, and any notes you write
- Your watchlist, and the genre, rating and length of the films on it
- Watches you log, with dates and captions
- Who you follow
- Anyone you block. A block is stored against both accounts so it can be enforced in both directions, which means the person you blocked exists in that record
- How many comparisons it took to place each film, and how often you chose "I can't decide"
- Bug reports and feature requests you send, and — attached to those only — the app version and the type of phone you sent them from
- Likes and replies you leave on a friend's note, which are visible to the people who can already see that note and to nobody else
- Reports you file about another person or about a reply, which record what you reported and what you wrote. Apple requires this for an app carrying anything people write, and a report nobody can act on is not a safety feature
- If you turn on contact matching, a scrambled form of your own phone number and email, so other people can find you. Not the number or the address — a one-way scramble that can be compared against but not read or reversed
- Which steps of the app you reached, and when. Names of steps and counts, and nothing else. "Reached the sign-up screen", "placed a film", "was shown the contacts question". Never a film title, a note, a handle, a search, or anything you typed
That is the complete list.
Everything there is something you did on purpose, except three: the comparison counts, the app version and phone type attached to a report, and the record of which steps you reached.
The comparison counts exist so we can tell whether the ranking flow is working: whether it asks too many questions, whether people get stuck.
The app version and phone type are attached to a bug report and to nothing else. A report saying something is broken cannot be acted on without knowing which version of the app it broke in. Nothing else is attached — not your list, not your notes, not your watch history — and nothing is collected unless you send a report.
Both are stored against your own account under the same rules as everything else, and both are deleted when you delete your account.
There is no advertising, no tracking across other apps or websites, no third party analytics service, and no data broker. The step records above are our own table in our own database, and go nowhere else.
Who can see what
- Following you requires your approval. Somebody asks, and nothing of yours opens until you accept. Declining is silent and permanent: they are not told, and they cannot ask again.
- Your ranked list, watches and notes are visible to you, and to people whose request you accepted. Nobody else.
- Your watchlist is stricter. It is visible only to people you follow who also follow you back. Following you is not enough on its own. If you unfollow someone, they immediately stop being able to see it.
- Someone in that position can see which films are on both of your watchlists, and can use that to pick something to watch together. That is the same information as seeing your watchlist, shown as an overlap.
- Your handle and display name are visible to any signed-in user, so people can find you.
- Aggregate averages across all users are shown on film pages. These are counts and averages only, never tied to a name.
- Blocking cuts both ways. Once you block someone, neither of you can see the other's list, watches, notes or watchlist, whichever direction the following went. Nobody is told they were blocked.
- Likes and replies are between people who follow each other both ways. Never a stranger, on either side. The database enforces that, not the app.
- You can delete any reply on your own note without asking anyone, and any reply you wrote anywhere. Reports on a reply are looked at within one business day.
- Reports go to us and to nobody else. The person you reported is not told, and never sees the report or your name on it.
Access is enforced by the database itself, not by the app.
Notifications
If you turn them on, we store a push token for each phone you use. That token is issued by Expo, the service that builds and delivers this app, and addresses a device, not a person. It is deleted when you sign out and when you delete your account.
Sending one means handing Expo the token and the notification's title and body, which it passes on to Apple to put on your screen. The title and body are short and name what happened — a handle, and a film title where the notification is about one.
Two things send one, and nothing else does:
- Somebody followed you
- Somebody you follow ranked a film already on your watchlist
Both can be turned off separately in Settings. Everything else that happens is in the feed, which waits for you.
Which steps you reached
The app records the point you got to in setting it up, so we can see where it is confusing enough that people stop. That is a step name and a count. "Was shown the sign-up screen." "Placed a seventh film." "Skipped the contacts question."
- No content, ever. Not a film, not a note, not a search, not a handle
- It is tied to a random id made on your phone when you install it. That id is not your Apple ID, not your phone's serial, and not built from anything about you or your device. It exists so the steps before you have an account can be read as one sequence, which is the only place we can see people give up
- Once you make an account, that account is attached, so the two halves join up
- It is our own table in our own database. No analytics company, no product is involved, and nothing is sent anywhere else
- It is write-only from the app. Nothing in the app, and no key that ships in the app, can read any of it back, including through any summary of it
Your contacts
If you let the app check your contacts, your phone book is not uploaded. Every number and address is scrambled on your phone first, and only the scrambled values are sent. The server compares them against people who have turned on contact matching and answers with whoever matched.
- Nothing from your contacts is stored, matched or not
- The list of people who are not here yet, which the app shows you so you can invite them, is worked out on your phone from the ones that did not match. It is never sent anywhere, and inviting somebody just opens your own share sheet with a link in it — we are not told who you invited, or whether you did
- A scrambled value cannot be read or reversed, so a match tells us that two people know each other and nothing else about either of them
- Nobody is told that you looked, and nobody is told they were found
- People who have not turned matching on are never returned, whatever you send
- You can stop being findable at any time, which clears the scrambled values from your profile
The app asks for contacts once, and only after you tap to start it. Saying no costs you nothing — you can still find anyone by handle.
Who we share it with
Nobody. Data is not sold, rented or shared.
These services are involved in running the app:
- Supabase hosts the database and handles sign-in
- TMDB provides film information, posters and streaming availability. The app asks TMDB about films; TMDB is not told who is asking
- YouTube hosts the trailers. Tapping play loads a YouTube player inside the app, and Google can see your IP address and which trailer you watched, the same as if you had opened it in a browser. It uses YouTube's no-cookie player, and nothing loads from Google until you tap play
- Google, only if you choose "Continue with Google" to sign in. Your phone opens Google's own sign-in page, you approve it there, and Google tells us your email address and name and nothing else. It is not used unless you tap that button, and signing in with Apple or an email address never involves Google at all
- Cloudflare runs the "confirm you're human" check on the sign-up form, so a script cannot make accounts in bulk. It is a small box on that one screen and it sees your IP address and how you interacted with the box — nothing you typed, and nothing about your list. It loads on the sign-up screen and nowhere else in the app
- Our email provider receives your address in order to send you the one confirmation message when you sign up, and a reset link if you ask for one. It gets the address and the message, and nothing else about you
- Expo delivers notifications, if you turned them on. It gets your phone's push token and the title and body of each notification we send you, and it hands those to Apple, which puts them on your screen. It is not told who you are, what you have ranked, or anything else on your account
Getting your data out
Account tab, Export. Your whole ranked list comes out as a CSV, written on your phone and handed to the share sheet. Nothing is uploaded to do it.
Deleting your data
Account tab, Delete my account. Your rankings, watchlist, watches, notes and follows are removed from the server permanently and immediately. There is no recovery, and no waiting period.
Signing out without deleting leaves the account intact and the copy on your phone untouched.
Children
The app is not directed at children under 13 and does not knowingly collect their information.
Changes
If this policy changes, the date at the top changes with it.