Privacy Policy

Last updated: March 3, 2026

Overview

PocketStubs ("we", "our", or "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

We collect information you provide directly:

Account Information: Email address and password when you create an account, or authentication data if you sign in with Apple or Google.
Profile Information: Display name and profile picture (optional).
Movie Data: Movies you add to your watchlist, ratings, reviews, and watch history.

Information Collected Automatically:

When you use PocketStubs, certain information is collected automatically to help us provide and improve the service:

Device Information: Device type, operating system, and app version. This helps us optimize the app for your device and troubleshoot compatibility issues.
Usage Data: Features you access, time spent in the app, and interactions such as searches and page views. This helps us understand which features are most valuable and where we can improve.
IP Address: Your IP address is used to provide region-appropriate content such as local release dates and streaming availability in your country.
Crash Reports and Performance Data: If the app encounters an error, we collect diagnostic data including crash logs and performance metrics to identify and fix issues, improving app stability for all users.

How We Use Your Information

To provide and maintain the PocketStubs service
To personalize your experience and movie recommendations
To communicate with you about your account or updates
To improve our app and develop new features

Data Storage & Security

Your data is stored securely using Supabase, which provides enterprise-grade security. Supabase infrastructure is hosted on Amazon Web Services (AWS) in secure data center regions. We do not sell your personal information to third parties.

We implement the following security measures to protect your data:

Encryption at Rest: All stored data is encrypted using AES-256, an industry-standard encryption algorithm used by governments and financial institutions worldwide.
Encryption in Transit: All data transmitted between your device and our servers is protected using TLS 1.2 or higher, ensuring your information cannot be intercepted during transfer.
Regular Security Audits: We conduct regular security reviews and monitoring of our infrastructure to identify and address potential vulnerabilities.
Access Controls: Access to user data is restricted to authorized personnel only, and all access is logged and monitored.
Backup and Disaster Recovery: We maintain regular backups and have disaster recovery procedures in place to protect against data loss and ensure service continuity.

Advertising

PocketStubs displays ads through Google AdMob to support the app. AdMob may collect and use the following:

Device identifiers: Advertising ID (IDFA on iOS, GAID on Android) to serve and measure ads.
Usage data: Ad interaction data such as impressions and clicks.

On iOS 14.5 and later, PocketStubs will ask for your permission via Apple's App Tracking Transparency (ATT) prompt before using your device identifier for personalized advertising. If you decline, ads will still appear but will not be personalized. You can change this at any time in your device's Settings → Privacy & Security → Tracking.

Web Advertising (Google AdSense)

On our website (pocketstubs.com), PocketStubs uses Google AdSense, a web advertising service provided by Google LLC. Google AdSense uses cookies and similar technologies — including the DoubleClick DART cookie — to serve ads to visitors based on their visits to our site and other sites on the internet.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our website or other websites. Users may opt out of personalized advertising by visiting Google Ad Settings or learn about Google's advertising practices at policies.google.com/technologies/ads.

We do not control these third-party cookies directly. You can manage cookies in your browser settings, though disabling them may affect site functionality.

For more information on how Google uses your data, see Google's Advertising Privacy Policy.

Third-Party Services

We use the following third-party services:

Google AdMob: Ad serving and measurement (Privacy Policy)
Google AdSense: Web ad serving and measurement (Advertising Privacy Policy)
Supabase: Authentication and database storage
TMDB: Movie information and images (no personal data shared)
Apple/Google Sign-In: Optional authentication providers
Meta (Instagram / Facebook): Used by our internal social media tool to publish posts and manage public comments on the @pocketstubs Instagram Business account. See the dedicated section below.

Instagram Business Data

PocketStubs operates an internal admin tool ("PocketStubs Social") that connects to our own Instagram Business account (@pocketstubs) via the Meta Graph API. This tool is used solely by our staff to operate our marketing presence. It does NOT collect data from app users; it only interacts with our own business account and people who publicly interact with our posts.

Data we access via the Meta Graph API:

Our own Instagram Business profile information (handle, account ID, profile picture)
Media we have published to @pocketstubs (post IDs, image URLs, captions, engagement counts via Instagram Insights)
Public comments left on our posts, including the comment text and the commenter's public Instagram username, for the purpose of generating draft replies that a human staff member then reviews before publishing

What we do NOT collect:

Direct messages (DMs)
Any information about Instagram users who have not publicly commented on our own posts
Email addresses, phone numbers, or other private contact information of Instagram users

Retention: Inbound comments and their associated usernames are retained for 90 days for engagement analysis and reply drafting, then deleted. Our own published-post metadata is retained indefinitely as part of our marketing history.

Sharing: We do not share Instagram-derived data with any third party. The data is stored only in our private Supabase backend.

Replies: Reply text published to Instagram on our behalf is always reviewed and approved by a human staff member before being sent — no fully automatic replies are published.

If you commented on one of our Instagram posts and want your comment and associated username removed from our system, email help@pocketstubs.com with a link to your comment. We will remove the record within 30 days.

Your Rights

You have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you at any time.
Right to Correction: You can update or correct inaccurate personal information directly in the app through your profile settings.
Right to Deletion: You can delete your account and all associated data at any time via Settings in the app.
Right to Data Portability: You can export your movie data, including your watchlist, ratings, and watch history, in a portable format.
Right to Opt Out: You can opt out of personalized advertising through your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Privacy → Ads).

For EU/EEA Users: Under the General Data Protection Regulation (GDPR), you also have the right to object to certain processing of your data and the right to restrict how we process your personal information. To exercise these rights, please contact us at help@pocketstubs.com.

For California Residents: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal data we collect and the right to opt out of the sale of your personal data. Please note that PocketStubs does not sell your personal data to third parties. You may also request deletion of your data by contacting us or using the in-app deletion feature.

Data Deletion

To delete your account and all associated data, go to Settings → Delete Account in the app. This action is permanent and cannot be undone.

Data Retention

We retain your personal data only for as long as necessary to provide you with the PocketStubs service and fulfill the purposes described in this policy:

Active Account Data: Your account information, movie data, and preferences are retained for as long as your account remains active.
Deleted Account Data: When you delete your account, all associated personal data is permanently removed from our systems within 30 days of the deletion request.
Anonymized Analytics: Aggregated, anonymized usage data that cannot be used to identify you may be retained indefinitely for the purpose of improving our service.
Push Notification Tokens: Device tokens used for push notifications are automatically cleaned up after 90 days of account inactivity.

Cookies and Similar Technologies

PocketStubs is primarily a mobile application, but we also offer a web version at pocketstubs.com. Here is how we use cookies and similar technologies:

Essential Cookies: The web version of PocketStubs uses essential cookies for authentication and session management. These are necessary for the service to function and cannot be disabled.
Advertising Cookies: Google AdSense and AdMob may use cookies and similar technologies to serve and measure advertisements. These cookies may be used for ad personalization based on your browsing activity.
Managing Cookies: You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent the web version from functioning correctly.

For more information about how Google uses cookies in advertising, see Google's Cookie Policy.

International Data Transfers

PocketStubs operates globally, and your data may be processed and stored in countries other than your country of residence, including the United States where our infrastructure providers maintain data centers. These countries may have data protection laws that differ from those in your jurisdiction.

We ensure that appropriate safeguards are in place to protect your personal data when it is transferred internationally, including the use of industry-standard encryption and secure infrastructure. By using PocketStubs, you consent to the transfer of your information to these countries as described in this policy.

Children's Privacy

PocketStubs is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at help@pocketstubs.com.