Films Rx Privacy Policy
Last Updated: October 20, 2026
Films Rx (“we,” “us,” or “our”), operated by Proteverse LLC, respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “App”). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.
1. Information We Collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your device.
A. Personal Data You Provide
| Data Type | Description | Purpose |
|---|---|---|
| Account Information | Email address, authentication credentials (via Firebase Auth) | Account creation and authentication |
| Profile Data | Public alias (auto-generated username), display preferences | Community features and identification |
| Reviews and Ratings | Your 1-10 ratings and text reviews (up to 1000 characters) | Community reviews feature |
| Favorites/Watchlist | Movies and TV shows you add to your favorites | Watchlist functionality and sync |
| Personal Notes | Private notes you write about movies/TV shows | Personal reference |
| Watch Status | Whether you’ve watched, are watching, or want to watch content | Progress tracking |
| User Reports | Reports you submit about other users or content | Content moderation |
| Blocked Users | List of users you have blocked | Privacy and safety |
B. Data Automatically Collected
| Data Type | Description | Purpose |
|---|---|---|
| Device ID | Unique device identifier (IDFA on iOS, Advertising ID on Android) | Multi-device sync, analytics, ad personalization |
| Device Information | OS version, device model, manufacturer | App compatibility and debugging |
| Usage Data | Screens viewed, features used, time spent, search queries | Analytics and app improvement |
| Crash Data | Error logs, stack traces, app state at time of crash | Bug fixing and stability |
| IP Address | Your network IP address | Fraud prevention, approximate location for ads |
C. Data from Third Parties
| Source | Data Type | Purpose |
|---|---|---|
| TMDB (The Movie Database) | Movie/TV metadata, posters, cast information | Display content information |
| Firebase Auth | Authentication tokens, sign-in methods | Account security |
2. How We Use Your Information
We process your data based on:
- Contract Performance: Providing the App functionality you requested
- Consent: Personalized advertising and optional analytics
- Legitimate Interests: Security, fraud prevention, and service improvement
Specific Uses:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account management | Email, credentials | Contract |
| Sync watchlist across devices | Favorites, device ID | Contract |
| Display community reviews | Reviews, public alias | Contract |
| Show public watchlists | Favorites (if public), alias | Consent (opt-in) |
| Personalized ads | Device ID, usage patterns, interests | Consent |
| Non-personalized ads | Contextual data only | Legitimate interest |
| Crash reporting | Error logs, device info | Legitimate interest |
| Usage analytics | Anonymized usage patterns | Legitimate interest |
| Content moderation | User reports, content | Legitimate interest |
| Fraud prevention | Device ID, IP, behavior patterns | Legitimate interest |
3. Data Security and Encryption
We implement industry-standard security measures:
Encryption
| Data | Protection | Storage Location |
|---|---|---|
| Personal notes | Stored as plain text in the App’s private storage on your device; if you sign in, synced to Google Cloud Firestore, which encrypts data at rest and in transit. Notes are not end-to-end encrypted | Local device + Firestore |
| Watchlist titles and poster paths | Encrypted in watchlist records on your device with AES-128-GCM; the encryption key is stored in the Keychain (iOS) and protected using the Android Keystore (Android). Movie and TV metadata the App caches for display (which also includes titles and poster paths) is stored unencrypted. Titles and poster paths are not synced to Firestore: the synced favorites record holds the title ID, media type, timestamps, your account ID, a device identifier and a deleted flag | Local device |
| Data in transit | TLS | All network communications |
Local Storage
We use an ObjectBox database in the App’s private storage on your device. The database itself is not encrypted; watchlist titles and poster paths are encrypted individually as described above. Notes written by older versions of the App may be stored encrypted, and the App still reads them.
Access to Your Data
If you sign in, your notes and other synced data are stored in Google Cloud Firestore. Our database rules make your personal notes readable only by your account. Other data you choose to share is readable by others: favorites you make public, your public profile alias, and reviews you post. Notes are not end-to-end encrypted; as with any cloud service, Films Rx’s service operators can technically access stored data.
4. Third-Party Services
We share data with the following service providers:
Analytics and Performance
| Provider | Data Shared | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase Analytics | Device ID, usage events, user properties | App analytics | Google Privacy Policy |
| Firebase Crashlytics | Crash logs, device info, user ID | Crash reporting | Google Privacy Policy |
| Sentry | Error logs, breadcrumbs, user context | Error tracking | Sentry Privacy Policy |
Advertising
| Provider | Data Shared | Purpose | Privacy Policy |
|---|---|---|---|
| Google AdMob | Device ID, IP address, usage patterns, contextual signals | Serve relevant ads | Google Privacy Policy |
Note on Advertising: Under California law (CCPA/CPRA), sharing data with advertising partners for targeted advertising may be considered a “sale” or “sharing” of personal information. You can opt out (see Section 7).
Payments and Subscriptions
| Provider | Data Shared | Purpose | Privacy Policy |
|---|---|---|---|
| RevenueCat | Purchase history, entitlements, user ID | Subscription management | RevenueCat Privacy Policy |
| Apple App Store | Payment info (not shared with us) | Process purchases | Apple Privacy Policy |
| Google Play | Payment info (not shared with us) | Process purchases | Google Privacy Policy |
Backend Infrastructure
| Provider | Data Shared | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase (Google Cloud) | All Firestore data | Backend hosting | Google Privacy Policy |
| Firebase Auth | Email, credentials | Authentication | Google Privacy Policy |
| Firebase Cloud Messaging | Device tokens | Push notifications | Google Privacy Policy |
Content Providers
| Provider | Data Shared | Purpose | Privacy Policy |
|---|---|---|---|
| TMDB | API requests (no personal data) | Movie/TV metadata | TMDB Privacy Policy |
4A. Website, cookies and advertising
This section explains our use of cookies, advertising and analytics on the Films Rx website at https://filmsrx.com (the “Website”), in addition to the App practices described elsewhere in this policy. Advertising, analytics and consent features described below apply when the corresponding feature is enabled on the Website.
Cookies and Similar Storage
When enabled and permitted by your applicable consent choices, Google advertising and analytics features may store cookies or use browser storage. Cookies support website analytics and advertising. Our consent system also remembers your choice so that it can be honoured when you return.
In the EEA, UK and Switzerland, advertising storage, advertising user data, advertising personalization and analytics storage are denied by default before the consent message updates your choices. Elsewhere, the default state is granted, subject to the consent system’s updates and applicable opt-outs. If you do not respond, the applicable default remains in effect. Rejecting consent in the EEA, UK and Switzerland keeps these settings denied; accepting allows storage according to your choice. No analytics cookies does not mean that no analytics requests are sent: see Website Analytics below.
Website Advertising
The Website launches in house-ad mode, showing promotions for the Films Rx app without loading Google’s advertising script. Google AdSense is deferred. The following AdSense disclosure applies only once AdSense advertising is enabled.
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Google AdSense (Google, the advertising vendor) | Serve website advertisements, subject to consent and opt-out choices | Google Privacy Policy |
When enabled, Google advertising loads only on pages that permit ads and after the applicable consent signal. The Website’s privacy and terms pages do not load the advertising script or display advertisements. If the consent message fails to load in a regulated region, the advertising script remains off and the applicable default consent state is retained.
Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to the Website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to the Website and/or other sites on the Internet. You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors’ use of cookies for personalized advertising by visiting www.aboutads.info.
The App’s Google AdMob disclosure is separate from this Website AdSense disclosure.
Website Analytics
When website analytics is enabled, we use Google Analytics 4 (GA4) through a web data stream in our Firebase project. It measures interactions with app-download links, QR codes and store redirects; advertising-slot status, including house promotions; and website performance. Event parameters describe placements, platforms, content types and title identifiers, slot status or performance measurements, as applicable. Page-template and placement dimensions help us understand where these events occur. Advertising-slot status is not a measure of advertising revenue.
GA4 uses Consent Mode v2 in Advanced mode. When analytics storage is denied, GA4 can still send cookieless pings to Google carrying the denied consent state. These requests do not require analytics cookies; denying consent to cookies therefore does not stop all analytics network requests. When storage is permitted, analytics cookies may be used. Google’s Privacy Policy describes Google’s privacy practices.
Consent and US Opt-Out Choices
When the website consent system is enabled, we use Google Privacy & Messaging, a certified consent management platform (CMP). It presents an IAB TCF consent message in the EEA, UK and Switzerland and a US state regulations message. The CMP updates the Website’s advertising and analytics consent settings, and a stored choice is honoured on a return visit.
The US “Do not sell or share my personal information” option is also available through a link in the Website footer. Global Privacy Control (GPC) signals are honoured through the CMP’s GPC support; for the US state message, an enabled GPC signal is treated as an opt-out. These Website choices are separate from the App’s device-level advertising controls described in Section 7.
Privacy Inquiries: For questions about Website cookies, analytics, advertising or your privacy choices, contact privacy@filmsrx.com.
5. Community Features and Public Data
Public Watchlists
When you enable “Public Favorites”:
- Your watchlist is visible to all users
- Your public alias (not email) is displayed
- Your pin count is publicly visible
- This setting is off by default
Reviews
When you submit a review:
- Your review is publicly visible to all users
- Your public alias is shown with the review
- Reviews contribute to aggregate ratings
- You can delete your reviews at any time
Blocking and Reporting
- When you block a user, they are not notified
- Your blocked users list is private
- Reports you submit are confidential
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion |
| Reviews | Until deleted by user or account deletion |
| Favorites | Until removed or account deletion |
| Personal notes | Until deleted or account deletion |
| Analytics data | 14 months (Firebase default) |
| Website analytics event data (Google Analytics 4) | 14-month configured retention; aggregate statistics are not limited by this setting |
| Crash logs | 90 days (Sentry default) |
| Backup data | Up to 30 days after deletion |
Account Deletion
When you delete your account:
- Personal data is removed from active databases immediately
- Reviews, favorites, and notes are deleted
- Backup copies are purged within 30 days
- Anonymized analytics data may be retained
7. Your Rights and Choices
A. All Users
| Right | How to Exercise |
|---|---|
| Access your data | Contact privacy@filmsrx.com |
| Delete your account | Settings > Account > Delete Account |
| Update profile | Settings > Profile |
| Control public visibility | Settings > Privacy > Public Favorites toggle |
| Block users | User profile > Block |
| Delete reviews | Your review > Delete |
B. Advertising Choices
iOS Users:
- App Tracking Transparency (ATT) prompt on first launch
- Settings > Privacy & Security > Tracking > Films Rx
Android Users:
- Settings > Google > Ads > Delete advertising ID
- Settings > Google > Ads > Opt out of Ads Personalization
In-App:
- We respect your device’s ad tracking preferences
- Non-personalized ads shown if tracking denied
C. GDPR Rights (European Users)
If you are in the EEA, UK, or Switzerland, you have additional rights:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Request correction of inaccurate data |
| Erasure | Request deletion (“Right to be Forgotten”) |
| Restriction | Request we limit processing |
| Portability | Receive data in machine-readable format |
| Object | Object to processing based on legitimate interests |
| Withdraw Consent | Withdraw consent at any time |
To exercise: Email privacy@filmsrx.com with your request.
Response Time: Within 30 days (extendable by 60 days for complex requests).
D. CCPA/CPRA Rights (California Users)
| Right | Description |
|---|---|
| Right to Know | Request categories and specific pieces of personal information |
| Right to Delete | Request deletion of personal information |
| Right to Correct | Request correction of inaccurate information |
| Right to Opt-Out | Opt out of “sale” or “sharing” of personal information |
| Right to Limit | Limit use of sensitive personal information |
| Non-Discrimination | We will not discriminate for exercising rights |
To exercise: Email privacy@filmsrx.com or use in-app settings.
Opt-Out of Sale/Sharing: Adjust device ad tracking settings or contact us.
Verification: We may ask you to verify your identity before processing requests.
E. Other State Privacy Laws
We comply with applicable state privacy laws including Virginia CDPA, Colorado CPA, Connecticut CTDPA, and Utah UCPA. Contact us to exercise rights under these laws.
8. International Data Transfers
Your data may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards through:
- Standard Contractual Clauses (for EU/UK transfers)
- Service provider certifications
- Data Processing Agreements
9. Children’s Privacy
- The App is not intended for children under 13
- We do not knowingly collect data from children under 13
- Community features (reviews, public lists) require age 13+
- If we discover we have collected data from a child under 13, we will delete it promptly
- Parents may contact us at privacy@filmsrx.com to request deletion of a child’s data
10. Push Notifications
We may send push notifications for:
- New features and updates
- Watchlist reminders
- Community activity (optional)
You can disable notifications in your device settings at any time.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Updating the “Last Updated” date
- In-app notification for significant changes
- Email notification (for major changes)
Your continued use after changes constitutes acceptance.
12. Contact Us
Privacy Inquiries: privacy@filmsrx.com
Summary of Data Collection
| Category | Collected | Shared with Third Parties | Can Opt Out |
|---|---|---|---|
| Identifiers (email, device ID) | Yes | Yes (analytics, ads) | Partially |
| Account Information | Yes | No | No (required for service) |
| User Content (reviews, lists) | Yes | Public by choice | Yes |
| Usage Data | Yes | Yes (analytics) | Partially |
| Device Information | Yes | Yes (analytics, ads) | Partially |
| Location (IP-based only) | Yes | Yes (ads) | Yes |
| Financial Information | No | N/A | N/A |
| Biometric Data | No | N/A | N/A |
| Precise Geolocation | No | N/A | N/A |
