Privacy Policy
Popcorn Pick, last updated September 15, 2026
Popcorn Pick ("the app," "we," "us") is a movie-night app operated by Somewhere Media, LLC. It lets you keep a list of movies, invite friends to add to it, and draw tonight's pick together. This policy explains what we collect, why, who we share it with, and your choices. By using Popcorn Pick you agree to this policy.
Information we collect
- Account email: if you choose to keep your list across devices or sign in, we collect your email to send you a sign-in link. You can use the app without one.
- Display name: the name you choose to show to people on your list and on lists you join. Use a nickname if you prefer; it doesn't need to be your real name.
- Content you create: your list, lists you join, movies you add, categories, and your pick history.
- Guest identifier: if you use the app without an email, we create an anonymous session (via our authentication provider, Supabase) to recognize you on this device. It isn't tied to your name, email, or any other identifying information unless you choose to add an email.
- Limited technical data: your IP address is processed transiently to rate-limit requests and prevent abuse. If you enable notifications, we store a device push token to deliver them.
- Basic usage events: we log that certain actions happened (a list was created or joined, a movie was added, a pick was drawn, "Surprise Me" was used) along with the list and user identifier involved, so we can tell whether the app is working and being used. This stays in our own database. It's not sent to any third-party analytics or advertising service.
- Reports: if you report someone on a list, we keep the report (who made it, the name reported, and the reason) so a person can review it and act. A report is kept even if either account is later deleted, with the link to that account removed.
We do not show ads, use third-party advertising or analytics trackers, or sell your personal information.
How we use your information
- To sign you in (magic-link email) and keep you signed in.
- To run the app: create and join lists, add movies, draw picks, and sync those live between everyone on a list.
- To send notifications you've opted into.
- To protect the service (rate limiting, abuse prevention) and fix problems.
The "Surprise Me" feature
"Surprise Me" interprets the short description you type (your "vibe") entirely within the app. It is not sent to any third-party AI provider. It's only used to search our movie-database providers (TMDB) for a matching suggestion.
Service providers we share data with
We use trusted providers to run the app; they process data only to provide their service to us:
- Supabase: authentication (including anonymous guest sessions) and database (stores your email, session, and app content).
- Resend: sends the sign-in email (processes your email address).
- TMDB: movie data and ratings. Your searches are sent to fetch results. Streaming availability within TMDB's data is sourced from JustWatch.
- Railway: application hosting.
- Apple Push Notification service: delivers notifications, if enabled.
We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.
Data retention and deletion
We keep your information for as long as your account exists. You can delete your account from inside the app at any time: open You and choose Delete account. That removes your account, your list (unless friends are on it, in which case it stays for them without an owner), your place on friends' lists, and your usage events. Movies you added to a friend's list stay on it, credited to "Former member". Deleted data may remain in our hosting provider's backups for a short period before those backups expire. For help, email popcorn-support@somewheremedia.com.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these, contact us at popcorn-support@somewheremedia.com. You can turn off notifications in your device settings at any time.
Children
Popcorn Pick is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll delete it.
Security
We use industry-standard safeguards, including encryption in transit and database access controls (row-level security). No method of transmission or storage is 100% secure, so we can't guarantee absolute security.
International users
We operate the app from the United States, and your information may be processed there and in other countries where our providers operate. Those countries may have different data-protection laws than yours.
Changes to this policy
We may update this policy from time to time. We'll change the "Last updated" date above and, for significant changes, provide additional notice where appropriate.
Contact
Questions about this policy or your data? Email popcorn-support@somewheremedia.com.