Privacy Policy

Effective October 6, 2026

This policy covers the 35mm iOS app and this website (together, "35mm", "we", "us"). If you have a question it doesn't answer, email support@35mm.contact.

What we collect

Account information

• Your email address and a password. The password is stored only as a secure hash by our authentication provider. Your email is used to sign you in, to send you a code to confirm it and to reset your password, and for account messages. It isn't displayed in the app.
• Your username, and optionally a display name, profile photo and bio.
• Your age. We ask for your date of birth when you sign up and check on your phone that you're old enough. If you're 18 or over, we keep only that you confirmed your age, and when; your date of birth isn't stored. If you're 16 or 17, we keep your birth year and month (never the day), only so that the protections for under-18s end by themselves the month after your 18th birthday, and we delete them then. Where the law requires it (currently Texas), we also ask Apple for the age range on your Apple Account. Apple shares only the range, and we use it only to apply these protections.
• Your agreement to our terms. Which version of the Terms of Use and this policy you agreed to, when, and whether at sign-up or later, so we can show what you agreed to.
• Your settings. Your phone's time zone, so notifications and your month in review follow your day, and the streaming region and services you choose, so we can show where to watch. We don't use your location.

What you create

• Films and shows you log, with ratings and review text.
• Posts you publish on Explore, including thoughts, hot takes, reviews, critiques and discussions.
• Photos and voice notes you attach to reviews.
• Comments, replies, likes, reactions and agree/disagree votes.
• Your Top 3, favorite actors and directors, and the badges you earn.
• Your watchlist: the films and shows you save, and which you've marked as watched.
• Playlists you make (title, description and the titles on them), and other people's playlists you save.

Your connections

• Who you follow, who follows you, and pending follow requests.
• Accounts you block. Only you can see your block list, and the person you block isn't told.
• Notifications generated by that activity (for example, "liked your review").

Your devices

• If you turn on notifications, a push token for each phone you're signed in on, so we can deliver them, and which kinds of notification you've turned off. Signing out of a phone removes its token.
• If something goes wrong in the app, an error report: what failed, which screen you were on (not what was on it), and the app and iOS versions. Reports aren't linked to your account or your phone, and anything that could identify you, such as an email address, a link or an id, is removed before a report leaves your phone. We keep them for 90 days.

Reports

• If you report something (a review, comment, Explore post or reply, playlist or account), we store the report, the reason you chose, and your account, so we can review it. What you report is hidden from you straight away.

What we don't collect

• No location, contacts, advertising identifiers or browsing history.
• No third-party analytics, advertising or crash-reporting SDKs.
• We don't track you across other companies' apps or websites.

Device permissions

35mm asks for these only when you use a feature that needs them. You can turn them off at any time in iOS Settings.

• Photos and camera: to set a profile photo, attach photos to a review, or save a share card to your photo library. Saving asks only for permission to add photos, not to see your library.
• Microphone: to record a voice note on a review. Recording starts only when you tap record, and stops when you tap stop or after 10 seconds.
• Notifications: to tell you about follows, replies, likes, votes and new work from people you follow. You choose which kinds in Settings, then Notifications.

How we use it

• To run the app: show your profile, deliver your posts to the people who can see them, and send you notifications.
• To keep 35mm safe: review reported content and act on accounts that break the rules. Text you post is checked on our own servers against a list of banned terms. Photos you upload are checked automatically before others can see them (see OpenAI and Amazon Web Services, below). A photo refused for violence or self-harm is deleted. A photo refused as sexual is held privately for 90 days and then deleted, or, if it may show a child, kept for the report to the National Center for Missing & Exploited Children that US law requires. Voice notes are transcribed automatically (see Groq, below) and the words are checked the same way as text; a voice note that fails is deleted. We keep a record of each check, and the transcript of a voice note that fails. See how we keep 35mm safe.
• To meet legal duties: if a photo appears to show the sexual abuse of a child, we preserve it and the related account information for one year and report it to the National Center for Missing & Exploited Children, as US law requires.
• To share trends: we may publish anonymous, combined trends, like the most-watched films of the week, in the app and on our social media. They're counts across many people that never identify anyone, and they leave out private accounts and friends-only posts.
• To find and fix bugs, from error reports.
• To respond to you when you contact support.

We don't sell your personal information, share it for advertising, or use it to build advertising profiles.

Who can see what

• Accounts are public by default. You can make yours private in Settings. Then only followers you approve see your logs, reviews, Explore posts, playlists, badges, and who you follow and who follows you. Everyone else sees only your profile header: username, display name, photo, bio and counts.
• Your profile (username, display name, photo, bio, Top 3, favorites and badges) is visible to other 35mm users, subject to the private setting above.
• Explore posts from public accounts are visible to everyone on 35mm, along with their comments and vote counts. A private account's posts are visible to its followers. A reply you leave on someone else's post is visible to whoever can see that post. Who voted which way is not shown.
• Your logs and reviews appear in your followers' feeds and on your profile.
• Your watchlist is visible to other 35mm users by default. You can change it to followers only or only you from the watchlist itself.
• Share cards are images of your posts, profile, Top 3, month or playlists that you choose to post elsewhere. 35mm makes them on your phone. When you share one to Instagram or Facebook, the image and a 35mm link go to that app only when you tap to share, and what happens next is covered by that app's privacy policy. You can only share your own logged reviews this way; Explore posts are already public.
• Playlists each have their own setting: everyone, followers only, or only you. When you share a playlist link, anyone who opens it in 35mm and is allowed to see the playlist can view it. The owner of a playlist can see who saved it.
• Movie nights are seen only by the people in them. Everyone in a night sees who's in it, what each person added, and the result. How each person voted isn't shown, only the totals. "Everyone wants to watch" suggestions come from members' watchlists, and only from a watchlist every other member could already see. You can turn yours off for any night. Anyone you've blocked, or who has blocked you, can't be in a night with you.
• Taste match compares your ratings, favorites and watchlist with one other person's. It's shown only when you can each see the other's profile and you've both left it on. You can turn it off in Settings.
• Link previews. When you share a 35mm link to a public profile, a public playlist or a movie night, apps like Messages show a preview to whoever receives it, even without a 35mm account. A profile preview shows the username, photo and bio. A playlist's shows its title, owner's username and posters. A night's shows its name, the host's username and photo, how many people are in it and up to three posters, never the other members. Private accounts, private and followers-only playlists, and anyone under 18 never preview; an under-18 host's name and photo are left out of a night's.
• Finding friends from your contacts. On Find friends, you choose which contacts 35mm can see, using iOS's own controls. 35mm sends those contacts' email addresses to our server once to check which belong to people on 35mm, and shows you the matches. The addresses aren't stored or logged; we keep only a count of how many you checked that day, to stop anyone checking addresses in bulk, and delete it the next day. Phone numbers never leave your phone: they're only used to address an invite in Messages, which you send yourself. You can only be found this way if you turn on "Let friends find me by email" in Settings, which is off until you do, and it isn't available to anyone under 18. If you signed in with Apple and hid your email, contacts won't match you; your link and QR code still work.
• Duets are shared lists between two people, built from both watchlists, what each of you loved, and films TMDB recommends for both your favourites (looked up from your phone by film, with nothing about you). A Duet is private to the two of you unless one of you makes it public. A public one is shown only to people who can see both of your profiles.
• Watched with: when you log something, you can name friends you watched it with. Their names show on your review to whoever can see it. Someone with a private account shows as "1 other" to people who can't see their profile. Anyone named can take their name off, and it stays off.

Service providers

We rely on a small number of providers to run 35mm. They process data only to provide their service to us.

• Supabase: hosts our database, authentication and file storage. Your account, content and uploads are stored there.
• OpenAI: checks the photos you upload, and the words in your voice notes, for objectionable content, using its moderation service. It receives the photo or the transcript only, not your account details. OpenAI doesn't use data sent to its API to train its models; see OpenAI's Privacy Policy.
• Amazon Web Services (Rekognition): only for a photo the first check finds sexual, estimates the ages of faces in it so we can protect children. It receives that photo only, not your account details, and we've opted out of Amazon using it to improve its services; see AWS's Privacy Notice.
• Groq: transcribes voice notes so their words can be checked. It receives the recording only, not your account details; see Groq's Privacy Policy.
• Apple: delivers push notifications through the Apple Push Notification service. It receives your phone's push token and the notification's text.
• Resend: sends our account emails, such as sign-up and password reset codes. It receives your email address and the message.
• The Movie Database (TMDB): provides film and show information and artwork. The app loads posters and images directly from TMDB's servers, so TMDB receives standard request information such as your IP address. We don't send TMDB your account or activity.
• YouTube: trailer thumbnails load from YouTube's image servers, and trailers play in YouTube's embedded player in its privacy-enhanced mode. 35mm uses YouTube API Services to do this. When a trailer loads, YouTube receives standard request and device information such as your IP address, and Google's Privacy Policy and the YouTube Terms of Service apply. We don't send YouTube your account or activity.
• JustWatch: where-to-watch information comes from JustWatch, through TMDB. We don't send JustWatch anything about you.
• Vercel: hosts this website.
• Resend: sends the waitlist's emails. It receives your email address and the message.

This product uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.

The waitlist

If you join the waitlist on this website, we keep your email address, the username you asked us to hold (if any), and which link you came from. We use them only to send you a welcome email when you join, an early-access invite, and a note when 35mm is out, and to hold that username for an account signed up with the same email. We don't share them or use them for anything else. To be taken off, email support@35mm.contact from that address, and we'll delete it.

How long we keep it

We keep your data for as long as your account exists. If you delete a post, comment, photo or voice note, it's removed from our database and storage. A daily check removes any file whose post is gone, in case a deletion was interrupted. Backups kept by our hosting provider expire on their own schedule, generally within 30 days.

Deleting your account

You can delete your account in the app: go to your profile, tap the gear, then Delete account. It happens straight away and removes your profile, logs, posts, comments, votes, follows, blocks, photos and voice notes, and takes your name off anyone's reviews that named you. Movie nights you were in carry on without you.

If you can't sign in, email support@35mm.contact from the address you signed up with and we'll delete it for you within 30 days.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to how we process it. Most of your information can be edited directly in the app, and you can download a copy of everything 35mm keeps about you from Settings, under Download your data. For anything else, email us and we'll help. We won't treat you differently for making a request.

If you're in the UK or the European Union. 35mm is run by Khush Naidu, who is responsible for your information (the "controller"). We use it to provide the service you signed up for (running your account and what you post); for our legitimate interests in keeping 35mm safe and secure (checking content, reviewing reports, preventing abuse); to meet legal duties (such as reporting child sexual abuse material and applying age laws); and with your consent where we ask for it (such as contacts and notifications), which you can withdraw in iOS Settings. Your information is stored and processed in the United States. You can complain to your data protection authority, such as the Information Commissioner's Office in the UK, but please contact us first so we can try to help.

Children and teens

35mm is only for people 16 and older. We don't knowingly collect information from anyone younger. If someone gives a date of birth under 16 when signing up with email, no account is created and nothing they typed is sent to us. If they signed up with Apple or Google, the account is created before we can ask, and it's deleted with everything in it as soon as they give a date of birth under 16. If we learn that an account belongs to someone under 16, we delete it. If you believe someone under 16 has an account, report it in the app or email support@35mm.contact with "Underage account" in the subject.

Accounts of people aged 16 and 17 start private, so only followers they approve can see their posts. Only people they follow back can comment on or react to their posts, and adults can't invite them to movie nights or tag them. We never show ads or use tracking, for anyone, and we don't use anyone's location.

Anyone, including anyone under 18, can remove what they've posted at any time, in the app. A parent or guardian can ask us to delete their child's account by emailing us.

Security

Data is encrypted in transit (HTTPS). Access in our database is limited by row-level security rules, so each account can change only its own content. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you.

Changes

If we change this policy, we'll update the date at the top. If the change is significant, we'll tell you in the app before it takes effect, and ask you to agree again.

Contact

Email support@35mm.contact.