Privacy Policy

This Privacy Policy explains what information Flix Fix, a service operated by David Nash ("Flix Fix", "we", "us", or "our"), collects, how we use and share it, and the choices and rights you have. It applies to our website, web application, and mobile and TV apps (together, the "Service"). By using the Service, you agree to the practices described here.

We collect the following types of information to provide and improve our service:

• Account Data: Email address, display name, and avatar images.
• Activity Data: Movie and TV ratings, swipe preferences, watchlists, custom categories, and favorite entities (actors, directors, studios).
• Social Data: Connections with other users, including friends you follow, your designated partner pairing, and posts, reactions, comments, or messages you share on the Service.
• AI Advisor Data: The prompts, questions, and conversations you have with our AI advisor ("Flick") and the taste signals used to generate responses.
• Billing Data: Subscription status and, for paid plans, limited payment records processed through our payment provider (we never store full card numbers — see "Third-Party Services").
• Technical & Device Data: A first-party device identifier, IP address, browser and device type, app version, session cookies, login-attempt logs, and usage metrics.

In compliance with the Children's Online Privacy Protection Act (COPPA), children under the age of 13 are not permitted to create their own independent accounts.

A parent or legal guardian must create a "Child Account" linked to their primary adult account. The guardian retains full control over the child's data, including the right to review, modify, or permanently delete the child's information and ratings at any time. We do not knowingly serve behavioral advertising to, or build advertising audiences from, Child Accounts.

Your data is used to operate, personalize, and improve the Service. Specifically, we use it to:

• Power our recommendation engine and suggest movies and shows tailored to your unique taste.
• Provide combined "Couple Suggestions" and shared Movie Night picks when you pair or connect with others.
• Let you share your movie journey, ratings, and recommendations with friends on the platform.
• Operate the AI advisor, subscriptions, referrals, and rewards features.
• Measure product performance, prevent fraud and abuse, keep the Service secure, and comply with our legal obligations.
• Send you service and, where permitted, promotional communications you can opt out of at any time.

Our AI advisor ("Flick") and certain recommendation features are powered by third-party artificial-intelligence providers, currently including OpenAI, and may also include Anthropic and ElevenLabs. To generate a response, your conversation content and relevant taste data (such as your ratings and preferences) may be sent to and processed by these providers on our behalf.

We share only the data needed to produce a result, and we do not send these providers your password or payment details. Each provider processes data under its own terms and privacy practices. AI output is generated automatically, is intended for entertainment, and may be inaccurate — it is not professional advice.

We use a first-party device identifier (stored in a cookie and in your browser's local storage) to recognize your device across sessions, remember guest activity, and measure how the Service is used. Where enabled, we also use Google Analytics 4 and the Meta Pixel for analytics and for advertising and retargeting.

Consent-first. Analytics and advertising trackers are governed by a consent framework. By default, consent is set to denied (Consent Mode defaults to denied), and Google Analytics and the Meta Pixel only fire after you grant consent. Strictly necessary cookies required to run the Service (for example, your login session) are always active.

Your choices. You may withdraw consent at any time through the consent controls in the app, and you can clear cookies and local storage in your browser. We also honor your browser's "Do Not Track" (DNT) signal where sent.

To promote Flix Fix, we may create advertising and retargeting audiences on platforms such as Meta, TikTok, and Google. Where we do, we use hashed (pseudonymized) identifiers rather than raw personal information, and audiences are used only after you have granted advertising consent.

Data shared for promotional features. We may synchronize or share public, aggregated, and anonymized data — such as anonymous ratings and community or movie lists that do not identify any individual — with third-party social media APIs (including Meta and TikTok) to power promotional and social features. We share identifiable user content with these platforms only with your opt-in consent.

We do not sell your personal data. You can opt out of this advertising activity by withdrawing advertising consent in the app, adjusting your ad-preference settings on the relevant platform, or contacting us using the details below.

We rely on trusted third parties to provide parts of the Service. These providers process data only as needed to perform their function:

• The Movie Database (TMDB): Supplies movie, TV, actor, director, and studio metadata and images.
• OpenAI, Anthropic & ElevenLabs: Provide the artificial-intelligence advisor and related features (see "AI Processing").
• Stripe: Processes subscription payments. Payment card details are handled directly by Stripe under its own security and privacy standards; we never store your full card number.
• Google Analytics 4 & Meta Pixel: Provide analytics and advertising measurement (consent-gated — see above).
• Plex: Only if you choose to connect your Plex account. We use that connection solely to query your own Plex library on your behalf.
• TikTok: Only if you choose to connect your TikTok account in order to share a post you create. See "Posting to TikTok" below.

By using the Service, you acknowledge that certain interactions may be subject to these providers' own terms and privacy practices.

You can use Flix Fix without creating an account. In guest mode, your taste data — such as swipes and ratings — is tied to your device and browser session using the first-party device identifier, so we can personalize your experience and remember your activity.

If you later create an account, your guest taste data is migrated to that account so you don't lose your progress. If you never sign up, guest data remains associated with your device and session and is subject to the retention and deletion practices described below.

Flix Fix lets you invite friends and share recommendations. When you invite someone, you may provide their contact information (such as an email address). We process that information solely to deliver your invitation and to attribute the referral so any reward can be credited correctly. We do not use invitee contact details for unrelated marketing.

Every invitation clearly identifies the friend who sent it, and invitees can decline, opt out, or unsubscribe from further invitation messages at any time via the link in the message or by contacting us.

Flix Fix offers an optional integration that lets you share a post to your own TikTok account. This feature is off unless you turn it on: nothing is sent to TikTok, and no TikTok connection exists, until you deliberately connect your account. Flix Fix does not embed the TikTok SDK or a TikTok advertising pixel in the app.

What we receive and store when you connect. When you choose to connect, TikTok asks you to sign in and approve the permissions we request — basic profile information and permission to publish a post. If you approve, TikTok returns, and we store, a TikTok account identifier for you, your TikTok display name (so the app can show you which account is connected), the list of permissions you granted, and the access and refresh tokens that let us act on your instruction. These tokens are third-party credentials: they are stored on our servers only, are never sent to your browser, never included in our apps, and never written to our logs. We do not receive your TikTok password, your follower list, your contacts, or your existing TikTok content.

What is sent to TikTok when you post. Only what you compose, and only when you tap to post. That is: the image card generated by Flix Fix (which shows the title you are sharing and your own rating of it), the caption you write, and the posting options you select — such as who is allowed to view the post and whether comments, Duet, or Stitch are permitted — together with any commercial-content or AI-generated-content disclosure you choose to apply. So that TikTok can retrieve the image, we host that single image temporarily at a randomly generated, unguessable web address; it is not linked from anywhere, and it is deleted once TikTok has collected it or when it expires a short time later. We never post on your behalf without you initiating it, and we never post automatically, on a schedule, or in the background.

How to disconnect. You can disconnect at any time from Profile in the app. When you do, we ask TikTok to invalidate the tokens and we permanently delete the stored connection from our database. You can also remove Flix Fix's access from within TikTok itself, under your TikTok account's security and permissions settings. Deleting your Flix Fix account (see "Data Deletion Request Instructions" below) also permanently deletes the TikTok connection, any temporarily stored image, and the record of any posts made through the integration.

Once a post is published, it lives on TikTok and is governed by TikTok's own terms and privacy policy, not this one. Removing a published post, or deleting data TikTok holds about you, is done through TikTok.

You own your data. You may request to permanently delete your account and all associated ratings, watchlists, and social connections at any time by accessing your account settings or contacting support. Upon deletion, your personal data is removed from our active databases. We retain limited information only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

You can request permanent deletion of your Flix Fix account and personal data at any time. To make a request:

• By email: Send a message from the email address associated with your account to privacy@flix-fix.com with the subject line "Data Deletion Request." Include your account email so we can verify your identity and locate your data.
• In the app: Go to Profile → Account → Delete Account. After you confirm (by re-entering your password, or typing "DELETE" if you signed in with Google), your account and all associated data are permanently deleted and you are signed out immediately. This action is irreversible.

After we verify your request, we permanently delete your personal data from our active databases, typically within 30 days. Some limited information may be retained only as long as required to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Deletion is permanent and cannot be undone.

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access & portability: Request a copy of the personal data we hold about you in a portable format.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Ask us to delete your personal data, subject to legal exceptions.
• Opt-out of sale/sharing: We do not sell your personal data. You may opt out of the sharing of identifiers for advertising audiences at any time.
• Consent withdrawal: Withdraw analytics or advertising consent at any time.

Commercial messages (CASL): We send commercial electronic messages only with a lawful basis for consent, we identify ourselves in every message, and every commercial message includes a one-tap unsubscribe option that we honor promptly.

To exercise any of these rights, contact us using the details below. We will respond within the time required by applicable law (generally within 30–45 days) and will not discriminate against you for exercising your rights.

Flix Fix operates using infrastructure and service providers that may store or process data in countries other than your own, including the United States. Where we transfer personal data internationally, we rely on appropriate safeguards required by applicable law.

We protect your information with industry-standard measures, including encryption in transit and at rest and signed session tokens (JWT) for authentication. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to those who need it. In the event of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

If you have any questions about this Privacy Policy or our data practices, or wish to exercise your rights, please contact us at privacy@flix-fix.com. For general support, reach us at support@flix-fix.com.