Privacy Policy

When you visit our website (https://dirofilms.vercel.app) and join the waitlist, we collect only your email address through the waitlist form. We use a third-party database provider to securely store this information. Your email is used solely to notify you when the Diro app launches. We do not sell or share waitlist emails with third parties for marketing purposes. To request deletion of your waitlist email, contact us at dirofilms@gmail.com and we will remove your address within 30 days. This policy will be updated when the mobile app launches to reflect any additional data the app collects (such as account information, watch history, or device data).

This Privacy Policy describes how Diro ("we", "us", or "our") collects, uses, and shares information when you use the Diro mobile application and website (https://dirofilms.vercel.app). By using Diro, you agree to the collection and use of information in accordance with this policy.

We collect information you provide directly: • Account information: email address and password when you register, or profile data when you sign in with Google • Profile data: display name, avatar URL, and notification preferences • Usage data: favourite directors, interested directors, watched films, watchlist items, and film ratings • Device data: push notification tokens for delivery of app notifications • Purchase data: subscription status processed through RevenueCat (we do not store payment card details) We automatically collect: • Analytics events via PostHog (app usage patterns, feature interactions) • Crash reports and error logs via Sentry • Device type, operating system, and app version for diagnostics

We use collected information to: • Provide and maintain the Diro service • Sync your favourites, watchlist, ratings, and profile across devices • Send push notifications you've opted into (e.g., daily movie reminders) • Process premium subscriptions and verify entitlements • Improve app performance and fix bugs • Analyze usage patterns to improve features • Respond to support requests

Diro integrates with the following third-party services: • Supabase: authentication and database hosting • Google Sign-In: optional authentication provider • RevenueCat: in-app purchase and subscription management • PostHog: product analytics • Sentry: error tracking and crash reporting • TMDB (The Movie Database): film and director metadata, images, and watch provider data • Firebase: credential validation for Google Sign-In Each service has its own privacy policy. We encourage you to review them.

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

Depending on your location, you may have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion of your account and associated data • Opt out of analytics tracking • Disable push notifications at any time in app settings To exercise these rights, contact us at dirofilms@gmail.com.

Diro is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us and we will delete it promptly.

We use industry-standard security measures including encrypted authentication tokens (SecureStore on mobile), HTTPS for all API communication, and row-level security on our database. However, no method of transmission over the Internet is 100% secure.

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at dirofilms@gmail.com.