Privacy policy
- You can use Gaze-it without an account, email or name.
- We keep your preferences and what you do in the app (titles you love, swipe, add or watch) to recommend things to you. That's the only reason.
- No ads, no advertising trackers, and we never sell or share your data for advertising.
- Your data is stored in the EU (Ireland).
- You can download or delete all of it in the app at any time: Taste → Your data.
Who we are
Gaze-it is operated by Hibouduc Holding AB (organisation number 559588-6432), Grevgatan 39 lgh 1304, 114 53 Stockholm, Sweden. We are the controller of the personal data described here (the “responsible party” under South Africa's POPIA). For anything about your data, including requests to our Information Officer, contact hello@gazeit.app.
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account: a random account ID created the first time you open the app. If you choose to sign in, your email address (and, when available, the identifier Apple or Google gives us). | To keep your preferences, lists and taste on your device and, if you sign in, across devices. | Contract (providing the service you ask for) |
| Preferences: your country, streaming services, minimum score, films or series, subtitles, rentals, kids filter, hidden genres and, only if you give it, an age range. | To show only what's on your services in your country, the way you like it. | Contract |
| Activity in the app: titles you love, add to your list, swipe past, open in a streaming app, mark as watched (and how you rated them), and the screen and setting (who's watching, time available) where it happened. | To learn your taste and improve your recommendations; to measure, across all users, whether recommendations work. | Contract; legitimate interests (making recommendations better) |
| Your taste profile: themes, genres and people we work out from your activity, and short “why this pick” lines written for your top picks (kept for 24 hours). | To rank titles for you and explain why. | Contract |
| Searches: what you type in search. Mood searches (“something like Slow Horses, but lighter”) are sent to our AI providers to understand them. | To find titles and picks that match. | Contract |
| Technical data: your IP address, device and app version, as part of each request. | To run the service securely, prevent abuse and fix problems; your IP address is also used, without being stored by us, to suggest your country. | Legitimate interests (security and reliability) |
We do not collect your precise location, contacts, photos, advertising ID, or your viewing history from Netflix or any other service (they don't share it, and we don't ask for your logins). The app stores your session and recently loaded lists on your device so it opens quickly and works offline; this is needed for the app to work and isn't used for tracking.
Recommendations and profiling
Recommending titles from your activity is a form of profiling. It decides which films and series we show you first and nothing else: it has no legal or similarly significant effect on you. You stay in control: hide genres, mark titles “not for me”, retune your taste, or delete everything in Settings and Taste.
Who else processes your data
We use a small number of providers to run Gaze-it. They process data only on our instructions and to provide their service to us.
| Provider | What for | What they receive | Where |
|---|---|---|---|
| Supabase | Database and sign-in (including sign-in emails) | Everything listed above, stored for us | EU (Ireland) |
| Vercel | Hosting the app, website and our servers | Requests to our service, including IP address | Servers in the EU (Ireland); content delivered from the nearest location |
| Anthropic | AI that understands mood searches and writes “why this pick” lines | The text of your mood search, and titles and themes from your taste. Not your email or account ID. | United States |
| Voyage AI | Matching mood searches to titles | The text of your mood search. Not your email or account ID. | United States |
Film and availability data comes from TMDB and Movie of the Night. They receive no data about you: our servers download their catalogues on a schedule, and the app only ever talks to us. When you tap “Open in Netflix” (or another service), that app or website opens, and what happens there is covered by its own privacy policy.
Where data is processed outside the EU/EEA (Anthropic and Voyage AI in the United States), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. We never sell your personal data and don't share it with advertisers or data brokers.
How long we keep it
- Your account, preferences, activity and lists: until you delete them in the app or ask us to. Deleting is immediate.
- “Why this pick” lines: 24 hours, then they're rewritten.
- Accounts that haven't been used for a long time may be deleted; we'll update this policy with the exact period before we start.
- Technical logs held by our hosting providers: a short time (typically days to a few weeks) for security and troubleshooting.
- Backups held by our database provider are overwritten on their normal cycle (within 30 days).
Your rights
Depending on where you live (including under the GDPR in the EU and POPIA in South Africa), you have the right to:
- Access and portability: get a copy of your data. In the app: Taste → Your data → Export my data.
- Deletion: in the app: Taste → Your data → Delete my data. See also how to delete your data.
- Correction: change your preferences any time in Settings, or ask us.
- Objection and restriction: object to processing based on our legitimate interests, or ask us to limit it.
- Withdraw consent where we rely on it, without affecting what happened before.
- Complain to a data protection authority: in Sweden, the Swedish Authority for Privacy Protection (IMY, imy.se); in South Africa, the Information Regulator (inforegulator.org.za); or your local authority.
Email hello@gazeit.app for anything you can't do in the app. We reply within one month.
Children
Gaze-it isn't aimed at children under 13 and we don't knowingly collect their data. If you believe a child under 13 has used Gaze-it, contact us and we'll delete the account. Families can use the “With kids” setting to see age-appropriate titles.
Security
Data is encrypted in transit, stored in the EU, and protected so each account can only read its own data. Access keys stay on our servers, never in the app. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.
Changes
We'll update this policy when what we do changes (for example, if we add paid features or new sign-in options) and change the date at the top. For significant changes, we'll tell you in the app.