RE:RN Privacy Policy

Who we are and what this covers

RE:RN ("we", "us") is a TV-tracking app for iOS and the website at rern.app. This policy explains what data we collect, why we collect it, and the choices you have.

The short version: on the free tier your watch history stays on your device. We only receive account and sync data if you create a subscription account, and only then does the app contact our subscription provider, RevenueCat. Free-tier ads are served by Google AdMob.

• Operator: Dwarf Planet, United States of America
• Contact: [email protected]
• Effective date: November 6, 2026

Information we collect

What we collect depends on whether you use RE:RN anonymously or with a subscription account.

Free tier (no account)

• Your library stays on your device. Your shows, watched episodes, ratings, lists, and tags are stored locally. We do not receive them, and we cannot recover them if you delete the app or lose the device.
• Show lookups. When you search or open a show, the app requests metadata from our servers. Our servers receive standard technical data such as IP address, app version, and request time, which appear in infrastructure logs. We do not link these logs to an identity.
• Local notifications. Episode reminders on the free tier are scheduled on your device. No notification data is sent to us.
• Advertising data. See the advertising section below.

Subscription tier (account)

• Account details. Your email address and, if you sign up with email, your password. Sign-in is handled by Amazon Cognito; we never see your password in readable form. If you sign in with Apple or Google, we receive the identifier and email address they share with us (Apple may give us a private relay address instead of your real one). We do not receive your Apple or Google password.
• Synced data. Your library, watch progress, ratings, lists, tags, and settings, stored in our cloud database so they sync across your devices.
• Sharing. Anything you choose to share with other people, along with who you shared it with.
• Push notification token. A device token used to deliver episode alerts through Apple's push service.
• Purchase status. Whether your subscription is active, which plan it is, and when it renews or ends. Payments are processed by Apple; we do not receive your card details. Subscriptions are managed through RevenueCat, which receives your account identifier (a random ID assigned to your account, not your email address), your purchase and subscription history, and technical details sent by its software in the app, such as device type, OS and app version, language, and IP address. We do not send RevenueCat your email address, name, or anything from your library. The app contacts RevenueCat only after you sign in to an account; free-tier use without an account never does.

Crash and usage data (all users): we use PostHog for crash reporting and Google Analytics for general usage analytics. They collect device and app details (such as device model, OS and app version, and crash traces), a pseudonymous identifier, and how you use the app, such as screens viewed and features used. Usage events do not include show titles, and analytics honors both the iOS tracking prompt and the EEA/UK consent form. PostHog data is stored in its US region.

Advertising and Google AdMob

The free tier shows ads served by Google AdMob, and AdMob collects some device data to do that. Subscribers do not see ads.

• What AdMob may collect: your device's advertising identifier (only if you allow tracking), IP address, device and OS details, approximate location derived from IP, and how you interact with ads. Google uses this to serve and measure ads, limit repeat ads, and detect fraud.
• Your choice on iOS: RE:RN asks permission through Apple's App Tracking Transparency prompt before using your advertising identifier. If you decline, you still see ads, but they are not personalized using that identifier. You can change this any time in iOS Settings under Privacy & Security, then Tracking.
• EEA, UK, and similar regions: we show a consent form (Google's User Messaging Platform) before personalized ads are served. You can revisit your choice in the app's settings.
• More detail: see How Google uses information from sites or apps that use its services and Google's Privacy Policy.

We do not give AdMob your library, ratings, lists, or account details.

How we use information

We use information only to run and protect the service.

• Provide the app: show metadata, sync your library, and share what you choose to share
• Send episode notifications you have turned on
• Show and measure ads on the free tier
• Keep the service secure, prevent abuse, diagnose crashes, and understand how the app is used so we can improve it
• Meet legal obligations and respond to your requests

We do not sell your personal information for money, and we do not build advertising profiles from your library or watch history.

Service providers and third parties

We share data only with the providers below, and only as needed for the purpose listed. We do not sell your data to data brokers.

| Provider | Purpose | Data involved | | --- | --- | --- | | Amazon Web Services (Lambda, API Gateway, DynamoDB, Amplify Hosting) | Hosting, database, website | Synced library, server logs | | Amazon Cognito (part of AWS) | Account creation and sign-in | Email address, password (stored only as a hash), the identifier from Apple or Google if you use them to sign in, sign-in times | | Apple and Google (sign-in) | Optional "Sign in with" options | The identifier and email address you allow them to share with us | | RevenueCat | Subscription purchases, restore, and entitlement status | Account identifier, purchase and subscription history, device and app details, IP address | | Google AdMob | Ads on the free tier | Advertising identifier (with permission), IP address, device data, ad interactions | | The Movie Database (TMDB) | Show, episode, and streaming-availability metadata | Search terms and title requests relayed from our servers, not your account or device | | Apple | App Store, subscription payments, push notifications | Purchase status, push token | | PostHog | Crash reporting and diagnostics | Crash traces, device model, OS and app version, pseudonymous identifier | | Google Analytics | General usage analytics | Pseudonymous identifier, device and app details, screens viewed, features used |

We may also disclose information if required by law, to protect against fraud or abuse, or as part of a sale or merger of the service. If that happens we will tell you and this policy will continue to apply until you are told otherwise.

This product uses the TMDB API but is not endorsed or certified by TMDB.

Data retention and deletion

We keep data only as long as we need it, and you can ask us to delete it at any time.

• Free tier: your library lives on your device and is removed when you delete the app.
• Subscription account: we keep your account and synced data while the account is active. When you ask us to delete your account, we delete your account and synced data within 30 days, except where we must keep something by law. Backups are overwritten on their normal cycle.
• If your subscription ends: your on-device library is not affected. We keep your synced data for 30 days after the subscription lapses, during which you can still download it to your device but not add to it. If you do not resubscribe, we then delete it. Resubscribing within that time keeps it.
• Purchase records: Apple and RevenueCat keep subscription and purchase records under their own policies, for example for accounting, tax, and fraud prevention. Deleting your RE:RN account does not cancel your Apple subscription; manage that in your Apple account settings. See RevenueCat's privacy policy.
• Server logs: kept for 30 days, then deleted.
• Metadata cache: temporary copies of public show data, not tied to you.

To request deletion or a copy of your data, email [email protected] from the address on your account.

Your rights

You can access, correct, delete, and export your data, and you can object to or limit some uses. Email [email protected] and we will respond within one month (45 days for California requests).

If you are in the EEA, UK, or Switzerland (GDPR)

• You have the right to access, correct, delete, restrict, and port your data, to object to processing, and to withdraw consent at any time.
• Our legal bases are contract (running your account and sync), consent (personalized ads and tracking), and legitimate interests (security and abuse prevention).
• You may complain to your local data protection authority.

If you are in California (CCPA/CPRA)

• You have the right to know what we collect, to delete and correct your information, and to opt out of the sale or sharing of personal information. You will not be treated differently for using these rights.
• We do not sell personal information for money. Sharing advertising identifiers with AdMob for personalized ads may count as "sharing" for cross-context behavioral advertising. You can opt out by declining the iOS tracking prompt, changing the setting in iOS, or emailing us.
• An authorized agent may make a request for you.

We may need to verify your identity before acting on a request. Anonymous free-tier data lives only on your device, so we cannot look it up or delete it for you.

Children, security, transfers, and changes

• Children: RE:RN is not directed to children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect their data. If you believe a child has given us data, email [email protected] and we will delete it.
• Security: we use encrypted connections (HTTPS) and managed AWS services with access controls. No system is perfectly secure, so we cannot guarantee absolute security.
• International transfers: our servers are in the United States (AWS Ohio region). If you use RE:RN from elsewhere, your data is transferred there, and where required we rely on approved safeguards such as Standard Contractual Clauses.
• Changes: if we change this policy we will update the effective date above and, for material changes, notify you in the app or by email.
• Contact: questions or requests to [email protected].