Privacy Policy
Fin ("we", "our", "the app") is a cinema companion app for Vienna's independent cinema circuit. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
Account data: When you create an account, we collect your email address and an optional display name. If you sign in with Apple, we receive the identity token provided by Apple.
App preferences: Your favorite genres, moods, cinemas, and watchlist selections are stored locally on your device and are not transmitted to our servers unless you are signed in.
Push notification tokens: If you sign in and enable notifications, your device token is stored on our server to deliver reminders.
App usage events: The app records which screens and features are used (for example opening a film or tapping a ticket link), together with an app-specific device identifier (Apple's identifier for vendor, not the advertising identifier), the iOS and app version and, if you are signed in, your account ID. These events are stored in our own database on Supabase and are only used to understand which features work and to fix problems.
Website statistics: fincinema.app uses Plausible Analytics, a privacy-friendly analytics service hosted in the EU. Plausible sets no cookies and stores no IP addresses or personal data; it only counts page views, referrers, country, device type and clicks on App Store and ticket links in aggregate.
2. Data We Do NOT Collect
- We do not track your location
- We do not use advertising identifiers or cross-app tracking
- We do not use cookies for tracking on the website
- We do not sell your data or share it for advertising
3. How We Use Your Data
- To authenticate your account and sync your favorites
- To send you showtime reminders (if enabled)
- To personalize your movie recommendations based on your preferences
- To understand how the app and website are used and to improve them
The legal basis is the performance of our terms of service (Art. 6(1)(b) GDPR) for account features and our legitimate interest in running and improving Fin (Art. 6(1)(f) GDPR) for usage statistics.
4. Data Storage
Your account data is stored securely on Supabase (hosted in the EU). Local app data (favorites, watchlist, cached movies) is stored on your device using Apple's SwiftData framework.
5. Data Retention and Deletion
You can delete your account at any time from the Profile screen in the app. This permanently removes all your data from our servers, including your email, preferences, device tokens, and favorites. Local data on your device is also cleared.
6. Third-Party Services
- Supabase: Authentication and database hosting (EU-based)
- TMDB: Movie metadata enrichment (ratings, posters, cast information). No personal data is shared with TMDB.
- Apple Push Notification Service: For delivering showtime reminders
- Plausible Analytics: Cookieless website statistics (EU-based)
- Vercel: Website hosting
7. Children's Privacy
The app is not directed at children under 13. We do not knowingly collect data from children.
8. Your Rights
Under GDPR and applicable privacy laws, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing based on legitimate interest
- Withdraw consent at any time
- Lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at)
9. Changes
We may update this policy from time to time. Changes will be posted on this page with an updated date.
10. Contact
The controller is Alessandro Chalimba (postal address in the legal notice). For privacy questions or data requests, contact us at: hello@fincinema.app