Privacy Policy

Effective date: 24 January 2026

Who we are

Home Reels is a movie and series companion app that lets you save titles, maintain a watch list, add ratings, and view insights. If you have questions about this policy, contact us at support@homereels.co.uk.

What we collect

We collect the minimum information needed to provide the service:

• Email address (personal data) to create and manage your account.
• Password which is stored as a hashed password (we do not store your plain text password).
• Account metadata such as account creation/update timestamps and account status.
• Account verification and recovery data stored in hashed form with expiry timestamps.
• Security and authentication data (for example, hashed token identifiers and related timestamps).
• Saved title identifiers for movies and series (for example TMDB IDs) to store your collection and watch list.
• Your ratings for movies and series.
• Watch list notes you add to titles.
• Timestamps for items you save or add to your watch list.
• Diagnostic and performance data collected by Firebase Crashlytics and Firebase Performance Monitoring, which can include app version, device and OS information, country, network details, crash stack traces, performance traces, IP addresses, and pseudonymous identifiers. This data does not include your name or email address.

We do not intentionally collect sensitive personal data.

How we use your information

• To create your account and authenticate you.
• To verify your email address and help you reset your password when requested.
• To store and sync your collection, watch list, and ratings across devices.
• To generate insights based on your saved titles and ratings.
• To communicate with you about service updates or support requests (only when needed).
• To protect the service, including preventing abuse and rate limiting (we may process network identifiers such as IP addresses for security purposes).
• To diagnose crashes, monitor performance, and keep the app reliable and secure.

Legal bases (UK GDPR and EU GDPR)

We process your personal data based on:

• Contract, to provide the app features you request (account, storage, sync, insights).
• Legitimate interests, such as preventing fraud and maintaining security.
• Consent, where required (for example, if you opt in to marketing emails in future).

Sharing and third parties

We do not sell your personal data. We may share data with service providers that help us operate the app, such as:

• Hosting and database providers that store your account data and saved title IDs.
• Backup and storage providers that store encrypted backups for a limited period.
• Email delivery providers (if we send account or support emails).
• Security and monitoring providers to protect the service and detect abuse (if enabled).
• Crash reporting and performance providers (Firebase Crashlytics and Firebase Performance Monitoring, provided by Google LLC).

These providers act as processors and are required to protect your data and use it only to provide services to us.

We do not use crash or performance data for advertising.

Crash reporting and performance monitoring

We use Firebase Crashlytics and Firebase Performance Monitoring to keep the app reliable and to diagnose issues. These services collect technical and diagnostic data (such as device and OS details, app version, crash stack traces, performance traces, country, and network information), along with pseudonymous identifiers and IP addresses. We use this data only for stability, security, and performance improvements.

TMDB

The app may fetch public movie and series metadata (such as titles, images, cast) from third party sources like TMDB. Your account data (email, saved title IDs, ratings) is stored by us. Public metadata is retrieved as needed to display content.

International transfers

Your data may be processed in countries outside the UK or EEA if our service providers operate globally. Where this happens, we use appropriate safeguards such as contractual protections.

Data retention

We keep your account data for as long as you maintain an account. If you delete your account (or request deletion), we will delete or anonymise your personal data within a reasonable period, unless we must retain certain information for legal or security reasons.

Security and authentication data is retained only as long as needed for authentication or recovery and is removed or invalidated when no longer required.

Diagnostic and performance data collected via Firebase is retained for limited, rolling periods to operate those services and is then deleted or aggregated.

Backups are retained for a limited period (for example, up to 30 days) and then deleted or overwritten.

Your rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Object to or restrict certain processing.
• Receive a copy of your data (data portability).
• Withdraw consent where processing is based on consent.

To exercise these rights, contact support@homereels.co.uk.

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). In the EU, you can contact your local data protection authority.

Security

We use reasonable administrative, technical, and organisational measures to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

Home Reels is not intended for children under 13. If you believe a child has provided personal data, contact us and we will take appropriate steps.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the latest version on this page and update the effective date above.