Privacy Policy

Information CloseCut Handles

Account information

When you create an account, CloseCut processes your name or display name, email address, Firebase Authentication user identifier, authentication credentials in tokenized form, and account preferences. Passwords are handled by Firebase Authentication; CloseCut does not store a readable copy of your password.

Journal and other content you create

Depending on the features you use, CloseCut handles journal entries, watch history, dates, notes, quotes, tags, personal ratings, moods, watch context, saved titles, rewatch preferences, cinema details, and other information you choose to enter.

Profile photo

You may choose a profile photo from your photo library. CloseCut processes it locally by cropping, resizing, and compressing it as a JPEG, saves a local copy, and may upload it to Firebase Storage under a path associated with your Firebase user ID. The audited app contains no feature for attaching photos to journal entries and no video-upload feature.

Circles and planning content

CloseCut handles Circle names, descriptions, membership and invitations, memories you deliberately share, comments, reactions, activity, content reports, Watch Plans, and responses to plans. These records can include Firebase user IDs, display names, Circle identifiers, and—in Circle membership records—member email addresses.

Local-only product data

QuickPick recommendation history, local Battle results, Awards & Culture predictions, Culture Battle results, some nominee metadata, onboarding state, notification preferences, language and appearance preferences, and pending synchronization actions may be stored locally. Some of these records are not represented in Firestore.

Analytics and diagnostics

Firebase Analytics and Firebase Crashlytics are linked to the app build, but their presence does not establish that they currently collect data. No custom Analytics events, Analytics user ID, Analytics user properties, Crashlytics API calls, Crashlytics user ID, or custom Crashlytics values were found in the audited code. Analytics is disabled in the checked app configuration files. Whether the linked Crashlytics SDK automatically collects crash information in a release runtime has not yet been confirmed. Firebase Performance Monitoring was not found in the audited implementation.

App security information

Firebase App Check processes app or device attestation material and short-lived App Check tokens to help verify that requests come from an authentic instance of CloseCut. Firebase and network providers may also process technical request information such as IP address, timestamps, and device or connection metadata when providing their services.

Local notifications

CloseCut uses local iOS notifications for Watch Plan reminders and follow-ups. A notification may contain a Watch Plan title, schedule, notification type, and plan identifier. CloseCut does not implement Firebase Cloud Messaging or remote push notifications and does not use notifications for advertising.

Local-First Storage and Firebase Sync

CloseCut writes supported content to local storage immediately and queues pending synchronization actions so core journaling can continue when a connection is unavailable. Pending actions may contain entry, saved-title, profile, Circle, or Watch Plan data and remain on the device until they synchronize or are otherwise cleared.

Profiles, entries, saved titles, Circles, memberships, shared activity, comments, reactions, reports, Watch Plans, responses, and associated TMDB metadata can synchronize to Firestore. Cloud Functions process Circle invitation operations and account deletion. Profile photos can synchronize to Firebase Storage. QuickPick history, local Battles, Awards & Culture predictions, and certain app preferences remain local according to the audited implementation.

Deleting the app removes its local container through iOS but does not delete synchronized Firebase data. Conversely, some local preferences may remain until changed, explicitly cleared, purged by an applicable app flow, or the app is removed. Account deletion is the mechanism for deleting the account and the covered backend records.

Movie and Television Data from TMDB

CloseCut uses The Movie Database (TMDB) for movie and television search, Discover, trending and popular results, details, metadata, posters, and backdrops. Requests may include user-entered search text, TMDB movie or television IDs, language, page number, genre IDs, discovery filters, media type, and ordinary technical request information. Current product flows filter out person results and do not request cast, crew, credits, or person details.

TMDB and normal network infrastructure may receive the search text and information such as IP address or user-agent data needed to serve HTTPS requests. CloseCut does not deliberately send Firebase UID, email address, display name, journal notes, tags, comments, reactions, private memories, or Circle IDs to TMDB.

This application uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB. CloseCut does not use TMDB content to train, fine-tune, evaluate, validate, or benchmark artificial-intelligence or machine-learning models.

TMDB IDs, titles, overview, poster and backdrop paths, release information, ratings, popularity, genres, runtime, and television details may be stored locally and some may synchronize to Firestore. TMDB metadata may be refreshed, changed, or removed to reflect TMDB updates or comply with its terms. The audited app does not yet implement a dedicated metadata expiration or refresh schedule. Learn more in TMDB's Privacy Policy and API Terms of Use.

How Information Is Used

CloseCut uses information to:

• create and authenticate accounts, support password reset and reauthentication, and maintain account access;
• provide the Journal, saved titles, preferences, and local-first synchronization;
• provide Circles, memberships, comments, reactions, reports, sharing controls, and Watch Plans;
• generate local, rule-based QuickPick suggestions, predictions, and Battles;
• retrieve and display movie and television information from TMDB;
• schedule local Watch Plan reminders;
• authenticate app requests, enforce access rules, prevent abuse, and protect the service;
• diagnose crashes if Crashlytics collection is confirmed as active in the release runtime;
• process content deletion and account deletion requests.

Sharing and Visibility

Entries are private by default and become visible to other people only when you explicitly share them with one or more Circles. Circle members can view permitted shared entries, member records, activity, comments, reactions, Watch Plans, and responses. Comments, reactions, membership records, and plans include account identifiers or display names so members can understand who participated. Circle membership records may include a member email address.

Reports about content or activity are sent to Firestore and can contain reporter and target identifiers and display names, the related Circle, entry or content identifier, reason, details, and timestamp. Reports are not readable by app clients under the audited rules.

CloseCut does not sell personal information, use it for targeted advertising, share it with data brokers, or conduct cross-app advertising tracking.

Third-Party Services

Firebase and Google

CloseCut uses Firebase Authentication, Cloud Firestore, Cloud Functions for Firebase, Cloud Storage for Firebase for profile avatars, and Firebase App Check. Firebase Analytics and Crashlytics are linked, but Analytics is disabled in the checked configuration and Crashlytics runtime collection remains unconfirmed, as explained above. Firebase Performance Monitoring is not implemented in the audited app. Google processes service and operational information under its applicable terms. See Privacy and Security in Firebase and the Google Privacy Policy.

Apple

Apple provides iOS, TestFlight, the App Store, device-level protections, and local notification services. Apple may independently process device, account, download, diagnostic, or TestFlight information under its own policies. See Apple's Privacy Policy.

TMDB

TMDB provides the external entertainment metadata described above and processes requests under its own privacy policy and terms.

Data Retention

Account information is generally retained while the account remains active. Synchronized content remains until deleted by you, soft-deleted through the relevant feature, or removed when account deletion completes. Reports are submitted to Firestore, but their retention period is not determinable from the audited implementation. Local data may remain until deleted, purged by an applicable app flow, or the app is removed.

Provider backups, security records, Cloud Function logs, and any runtime diagnostic records may remain temporarily under the relevant provider's practices. TMDB-derived metadata can remain in local and Firestore records; the current app has no dedicated expiration or refresh schedule. CloseCut does not claim a fixed provider retention period that the implementation does not establish.

Account and Data Deletion

You can initiate account deletion from CloseCut's in-app account settings. The flow requires password reauthentication and confirmation. Deletion is blocked while you own active Circles; those Circles must first be deleted or otherwise resolved.

When the deletion flow completes, it deletes the Firebase Authentication account, Firestore profile, owned entries, saved titles, profile avatar, your comments, reactions and activity, your Watch Plan responses, plans you own, and Circle memberships. It also removes your identifier from relevant plan and Circle membership arrays. The app then purges covered SwiftData records, pending actions, local notification data, and locally stored profile photos.

The audited purge does not confirm removal of every UserDefaults preference. Awards & Culture predictions, Culture Battle results, nominee caches, language, appearance, or notification preferences may remain locally until separately cleared or the app is removed. Provider backups and external logs may persist temporarily under provider practices, and deletion may not be immediately reflected on another member's device until it refreshes.

If you cannot access the in-app flow or need help with a deletion request, email blueintechofficial@gmail.com from the address associated with your account when possible.

Security

CloseCut uses Firebase Authentication, Firestore Rules, Storage Rules, Firebase App Check, access controls, and HTTPS/TLS for Firebase and TMDB communications. The audited rules restrict user records by ownership or Circle membership and restrict profile-avatar storage to the authenticated owner. Rule deployment and server configuration cannot be confirmed from app source alone.

Local information relies on iOS platform and device protections. The audit did not find app-specific encryption at rest or Keychain storage, so CloseCut does not claim those controls. No system is completely secure; protect your device and credentials and contact us if you believe your account has been compromised.

International Processing

CloseCut is developed in Mexico. Firebase, Google, Apple, TMDB, and their service providers may process information in countries other than your own. Privacy laws and protections may differ between jurisdictions. These providers determine processing locations according to their infrastructure, service configuration, and applicable terms.

Children's Privacy

CloseCut is not designed as a service directed to children. If you believe a child has provided personal information in circumstances that require parental consent or deletion under applicable law, contact us so the situation can be reviewed and appropriate action taken.

Your Choices

You can choose what to record, what to share with a Circle, and whether to allow notifications. You may edit or delete supported content, leave Circles where the feature permits, sign out, reset your password, or request account deletion. iOS settings provide additional controls for notifications and device permissions.

Changes to This Policy

This Privacy Policy may be updated as CloseCut evolves or its services change. Material updates will be reflected on this page and the “Last updated” date will be revised.

Contact

Data controller and app developer:
Azul Grisel Ramirez Kuri
blueintechofficial@gmail.com
https://azulrk.com/closecut/privacy