Privacy Policy

Reeligion
Last updated: 4 October 2026 (fifteenth revision)

What this app collects

An account is required. You rank your first films before being asked for one, and those are kept on the phone until you sign up. After that everything below is stored on our server.

• Your email address, used to sign in, and to be found by people who already have it, if you turn that on. We never send email to it
• Your name, given when you sign up
• Your phone number, only if you choose to give one. It is optional, the app works identically without it, and its only purpose is letting someone who already has your number find you here
• A handle and optional display name, which are public to other signed-in users
• The films you rank, their position and score, and any notes you write
• Your watchlist, and the genre, rating and length of the films on it
• Watches you log, with dates and captions
• Who you follow
• Anyone you block. A block is stored against both accounts so it can be enforced in both directions, which means the person you blocked exists in that record
• How many comparisons it took to place each film, and how often you chose "I can't decide"
• Bug reports and feature requests you send, with the app version and build and your phone's operating system and version attached
• Likes and comments you leave on somebody's ranking or on a film they watched again, which are visible to the people who can already see that ranking or that watch, and to nobody else
• A record of who liked or commented on something of yours, who asked to follow you, and who answered a film you sent them. That is your inbox: what happened, who did it, which film it was about, and when. It is deleted with your account
• Reports you file about another person or about a comment, which record what you reported and what you wrote. Apple requires this for an app carrying anything people write, and a report nobody can act on is not a safety feature
• If you turn on contact matching, a scrambled form of your own phone number and email, so other people can find you. Not the number or the address — a one-way scramble that can be compared against but not read or reversed
• If you use an invite code, a record linking your account to the account that shared it. That link is the whole of it, and nothing else about either of you is recorded because of it

• Which steps of the app you reached, and when, with the app version and build and your phone's operating system and version. Names of steps, counts, and a few short labels such as which tab you opened or why a sign-in failed, and nothing else. "Reached the sign-up screen", "placed a film", "was shown the contacts question". Never a film title, a note, a handle, a search, or anything you typed

That is the complete list.

Everything there is something you did on purpose, except three: the comparison counts, the record of which steps you reached, and the app version and phone details that go with that record and with a report.

The comparison counts exist so we can tell whether the ranking flow is working: whether it asks too many questions, whether people get stuck.

The app version and build, and your phone's operating system and version, go with two things: a report you send, and each step record. A report saying something is broken cannot be acted on without knowing which version of the app it broke in, and a step where people give up cannot be fixed without knowing which version they gave up in. That is all that is recorded about the phone — not its model, not its name, not any number Apple or the maker gives it. And nothing else is attached to a report — not your list, not your notes, not your watch history.

The comparison counts and your reports are stored against your own account under the same rules as everything else, and are deleted when you delete your account. The step records work differently, and are described under "Which steps you reached" below.

There is no advertising, no tracking across other apps or websites, no third party analytics service, and no data broker. The step records above are our own table in our own database, and go nowhere else.

Who can see what

• Following you requires your approval, with the one exception below. Somebody asks, and nothing of yours opens until you accept. Declining is silent and permanent: they are not told, and they cannot ask again.
• The exception: the developer's account. When you make your profile, the account of the person who builds this app follows you automatically, already accepted, without a request. It can see what anyone you accepted can see: your ranked list, watches, notes and lists. You are told by the usual "followed you" notification, and blocking that account undoes it, the same as for anyone.
• Your ranked list, watches and notes are visible to you, and to people whose request you accepted. Nobody else.
• Your watchlist is stricter. It is visible only to people you follow who also follow you back. Following you is not enough on its own. If you unfollow someone, they immediately stop being able to see it.
• Someone in that position can see which films are on both of your watchlists, and can use that to pick something to watch together. That is the same information as seeing your watchlist, shown as an overlap.
• Lists you make by hand — a name, an optional line under it, and the films you put on it — are visible to you and to people whose request you accepted. The same people who can see your ranked list, and nobody else.
• Your handle and display name are visible to any signed-in user, so people can find you.
• Aggregate averages across all users are shown on film pages. These are counts and averages only, never tied to a name.
• Blocking cuts both ways. Once you block someone, neither of you can see the other's list, watches, notes or watchlist, whichever direction the following went. Nobody is told they were blocked.
• Likes and comments go as far as the ranking they are on, and no further. Anyone whose follow request you accepted can like or comment on something of yours, and the same people can see what they wrote. Never a stranger, on either side. The database enforces that, not the app.
• Your inbox is yours. Nobody else can read it, and nothing in the app can write to it — the rows are written by the database itself when something happens.
• You can delete any comment on your own ranking or watch without asking anyone, and any comment you wrote anywhere. Reports on a comment are looked at within one business day.
• Reports go to us and to nobody else. The person you reported is not told, and never sees the report or your name on it.

Access is enforced by the database itself, not by the app.

Notifications

If you turn them on, we store a push token for each phone you use, and whether that phone is an iPhone or an Android phone. The token is issued by Expo, the service that builds and delivers this app, and addresses a device, not a person. It is deleted when you sign out and when you delete your account.

Sending one means handing Expo the token and the notification's title and body, which it passes on to Apple to put on your screen. The title and body are short and name what happened — a person's name or handle, and a film title where the notification is about one.

These send one, and nothing else does. The list is the same one the server checks before it sends anything:

• Somebody asked to follow you, or started following you
• Somebody accepted your request to follow them
• Somebody sent you a film and asked where it goes on your list
• Somebody placed a film you sent them
• Somebody you follow ranked a film already on your watchlist

Each can be turned off in Settings. The first two share one switch, the two about sending films share another, and the last has its own.

A like and a comment never send one. Neither does somebody telling you they have not seen a film you sent. Those land in your inbox and wait for you, which is also where everything above except the last is recorded — turning a notification off stops the interruption, not the record.

Which steps you reached

The app records the point you got to in setting it up, so we can see where it is confusing enough that people stop. That is a step name and a count. "Was shown the sign-up screen." "Placed a seventh film." "Skipped the contacts question."

• No content, ever. Not a film, not a note, not a search, not a handle
• It is tied to a random id made on your phone when you install it. That id is not your Apple ID, not your phone's serial, and not built from anything about you or your device. It exists so the steps before you have an account can be read as one sequence, which is the only place we can see people give up
• Once you make an account, that account is attached, so the two halves join up
• It is our own table in our own database. No analytics company, no product is involved, and nothing is sent anywhere else
• It is write-only from the app. Nothing in the app, and no key that ships in the app, can read any of it back, including through any summary of it
• Deleting your account detaches it. The step records stay, but your account is removed from every one of them, leaving only the random install id. What remains says that some phone reached some step, and nothing about who

Your contacts

If you let the app check your contacts, your phone book is not uploaded. Every number and address is scrambled on your phone first, and only the scrambled values are sent. The server compares them against people who have turned on contact matching and answers with whoever matched.

• Nothing from your contacts is stored, matched or not
• The list of people who are not here yet, which the app shows you so you can invite them, is worked out on your phone from the ones that did not match. It is never sent anywhere, and inviting somebody just opens your own share sheet with a link in it — we are not told who you invited, or whether you did
• A scrambled value cannot be read or reversed, so a match tells us that two people know each other and nothing else about either of them
• Nobody is told that you looked, and nobody is told they were found
• People who have not turned matching on are never returned, whatever you send
• You can stop being findable at any time, which clears the scrambled values from your profile

The app asks for contacts once, and only after you tap to start it. Saying no costs you nothing — you can still find anyone by handle.

Who we share it with

Nobody. Data is not sold, rented or shared.

These services are involved in running the app:

• Supabase hosts the database and handles sign-in
• TMDB provides film information, posters and streaming availability. The app asks TMDB about films; TMDB is not told who is asking
• YouTube hosts the trailers. Tapping play loads a YouTube player inside the app, and Google can see your IP address and which trailer you watched, the same as if you had opened it in a browser. It uses YouTube's no-cookie player, and nothing loads from Google until you tap play
• Google, only if you choose "Continue with Google" to sign in. Your phone opens Google's own sign-in page, you approve it there, and Google tells us your email address and name and nothing else. It is not used unless you tap that button, and signing in with Apple or an email address never involves Google at all
• Cloudflare runs the "confirm you're human" check on the sign-up form, so a script cannot make accounts in bulk. It is a small box on that one screen and it sees your IP address and how you interacted with the box — nothing you typed, and nothing about your list. It loads on the sign-up screen and nowhere else in the app
• JustWatch, when you tap a where-to-watch button. The film's page opens in your browser and nothing about you is sent — not your account, not your list, not which film you were looking at before it
• Expo delivers notifications, if you turned them on. It gets your phone's push token and the title and body of each notification we send you, and it hands those to Apple, which puts them on your screen. It is not told who you are, what you have ranked, or anything else on your account

Getting your data out

Account tab, Export. Your whole ranked list comes out as a CSV, written on your phone and handed to the share sheet. Nothing is uploaded to do it.

Deleting your data

Account tab, Delete my account. Your rankings, watchlist, watches, notes, comments, likes, inbox and follows are removed from the server permanently and immediately. There is no recovery, and no waiting period. The record of which steps you reached is kept, with your account taken off it, as described above.

Signing out without deleting leaves the account intact and the copy on your phone untouched.

Children

The app is not directed at children under 13 and does not knowingly collect their information.

Changes

If this policy changes, the date at the top changes with it.

Contact

[email protected]