Privacy Policy

Last updated September 27, 2026

1. What we collect

Account data (email, display name, handle, optional avatar and bio), the content you create (watch history, ratings, private notes, watchlists, recommendations), your social graph (friendships, mutes, blocks), and basic usage analytics (via PostHog) to improve the product.

2. Profile photos

When you add a profile photo, we use OpenAI's moderation service to screen it automatically for nudity and graphic violence before other people can see it. OpenAI provides this screening as a service to us: your photo is sent to them once for the check, is not stored by them, and is not used to train their models.

3. What we don't do

DubDub currently has no for-profit mechanisms: we do not sell your data, and the service currently shows no advertising. If that ever changes, we will update these policies and announce it in the app. We never share your private notes with anyone — they are visible only to you. Recommendations are delivered only to their recipients, never broadcast.

4. Visibility controls

Your watchlist, watch history, and received recommendations each have a visibility setting (public, friends, friends-of-friends, or private) that you control in Settings. We enforce these on every read, server-side. Public means anyone on the internet can see it, including people without a DubDub account. Signed-out visitors see your profile header and your first few titles; the rest needs a sign-in.

5. Sign-in providers

If you sign in with Google, Apple, or another sign-in provider we receive your name, email, and avatar from the provider. We never receive your password from them.

6. Data retention & deletion

You can delete your account in Settings. After a 14-day grace period (during which you can change your mind by signing back in), your account and content — including recommendations you sent — are permanently purged. Minimal account identifiers may be retained to prevent abuse and impersonation (see Terms).

7. Service providers

We use Convex (data hosting), Cloudflare (web hosting), Expo (app delivery and push notifications), Resend (email), PostHog (analytics), TMDB (film metadata), and OpenAI (profile-photo screening). Each receives only what's necessary to provide its function.

8. Contact

Privacy questions and data requests: info@dubdub.watch.