Privacy policy
Last updated: October 6, 2026
This policy explains which personal data the “I Watched This” (Turkish: “İzledim Ben Bunu”) mobile app (the “App”) collects, why it is used, and what your rights are.
1. Data controller
Ali Rıza Uzunoğlu (developer). Contact: alirizahd@gmail.com
2. Data we collect
| Data | Purpose |
|---|---|
| Email address | Creating an account, signing in, email verification and password reset. Verification/reset codes are delivered through our email delivery service (Resend); only your email address and the code are given to it. |
| Username | Showing your account and reviews to other users |
| Password (only as an irreversible hash) | Authentication. Your password is never stored in plain text. |
| Watch history, lists, ratings and reviews | The core function of the App |
| Two-step verification secret and backup codes (optional) | Only if you turn two-step verification on: your authenticator secret is stored encrypted (AES-256) and backup codes are kept only as irreversible hashes. They are deleted when you turn it off or delete your account. |
| Notification token (optional) | Sending new-episode alerts. Only if you turn on Settings → New episode alerts, your device’s notification token (Expo Push) and language are stored on our server; they are deleted when you turn it off, sign out or delete your account. Notifications are delivered through Expo and Google (FCM) infrastructure. |
| Profile photo (optional) | Showing it on your profile. The photo you choose is resized to 256×256 on your device, uploaded to our server and visible to everyone regardless of profile privacy. You can remove it any time; it is also deleted with your account. |
| Profile bio, your own lists and your privacy setting | Showing your profile and lists to other users. While your profile is public, your username appears in search and your watch list, reviews and public lists can be seen. With a private profile only you can see them (your username still appears in search, but your content does not). |
| Moderation records | When a review is removed or an account is suspended, the decision, the reason and the text of the removed review are kept so that appeals can be assessed. These records are deleted when you delete your account. |
| Report and block records | Keeping the community safe. When you report a review, your account, the reason and (if you wrote one) your description are recorded; the reported person is never told who reported them. The list of users you have blocked is also stored. |
| Session information (refresh token) | So that you do not have to sign in every time you open the App. It is kept in the device's secure storage (Android Keystore). |
| Language preference | Stored on your device only, to show the App in your chosen language. The language is also sent with requests so that titles and summaries come back in that language. |
You can browse series, movies and public content as a guest without an account; in that case no account data about you is stored on our server. We do not collect advertising IDs, location, contacts, camera or microphone data. We show no ads and we do not sell your data.
3. How data is used and shared
- Your data is used only to run the App.
- We do not sell your data or share it with third parties for marketing.
- Your reviews and username may be visible to other users, depending on your privacy settings. The text of reviews you mark as spoilers is not sent to users who have not watched that title.
- Series and movie information comes from TMDB. These requests are made through our server; none of your personal data is shared with TMDB.
- Your data is processed and stored by the services that run the App’s infrastructure: Neon (database, Frankfurt/EU), Google Cloud Run (server, Belgium/EU), Cloudflare (traffic protection and delivery), Resend (verification and password-reset emails) and, for optional notifications, Expo and Google (FCM). These are service providers acting on our behalf; they don’t use your data for their own purposes. Some providers (e.g. Cloudflare, Resend, Expo) may process data outside the EU/Türkiye; this transfer is necessary to provide the service and is subject to the cross-border transfer rules of Turkish KVKK.
4. Security
Connections are encrypted (HTTPS). Passwords are stored hashed with a strong algorithm (argon2id). Session keys are stored encrypted on the device.
5. Retention and deletion
We keep your data for as long as your account exists. You can delete your account inside the App (Settings → Delete my account) or by following the steps on the account deletion page. When you delete your account, the account and all data linked to it (reviews, ratings, lists, watch history, sessions) are removed permanently and irreversibly. Automatic database backups are fully erased within 30 days at the latest, following the hosting provider's backup cycle.
6. Your rights
Under Turkish Personal Data Protection Law No. 6698 (KVKK) and related legislation, you have the right to access, correct and delete your data and to object to its processing. You can send your requests to the email address above.
7. Children
The App is not directed at children under 13, and we do not knowingly collect data from them.
8. Changes
This policy may be updated. Important changes are announced inside the App. The current version is always on this page.
9. TMDB attribution
This app uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.