Fincher Privacy Policy

Effective date: July 27, 2026

Fincher ("Fincher", "we", "us", or "our") is a social app for discussing movies and TV shows, available on iOS and Android. Fincher is operated by an independent developer based in the United States. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

This policy is available at fincher.app/privacy. If you have any questions, contact us at contact@fincher.app.

1. Information We Collect

Account information. When you create an account, we collect your email address, a username, a display name, and a password. Passwords are handled by our authentication provider (Firebase Authentication) and are never stored by us in readable form. If you sign in with Google or Apple, we receive basic account information from those providers (such as your name and email address, subject to the choices you make in their consent screens, including Apple's option to hide your email).

Profile information. You may add a profile picture and choose a profile header image from movie and TV artwork provided by our metadata provider. Your profile, including your username, display name, picture, follower and following counts, posts, diary, and quest progress, is visible to other users of the service.

Content you create. Fincher is a public social platform. Posts, comments, ratings, diary entries, likes, and quest participation that you create are collected, stored, and displayed publicly within the service. Please post accordingly: content you share on Fincher can be seen by anyone.

Usage and device information. We use Firebase Analytics to collect information about how the app is used, such as screens viewed, features used, session information, device type, operating system version, app version, language, and approximate location derived from your IP address. We use Firebase Crashlytics to collect crash reports and diagnostic information when the app malfunctions. If you enable push notifications, we collect a device push token to deliver them.

Communications. If you contact us (for example at contact@fincher.app), we collect the contents of your message and your contact details in order to respond.

We do not collect precise location, contacts, photos (other than a profile picture you deliberately upload), health data, or advertising identifiers. We do not show ads and we do not sell your personal information.

2. How We Use Information

We use the information described above to:

Provide the service: accounts, feeds, posts, comments, ratings, diaries, themes, quests, profiles, search, and notifications.
Automatically screen posts for spoilers. The text of posts is processed by an automated AI system (see Section 3) to detect whether it reveals plot details; flagged posts are blurred for other users until they choose to reveal them.
Translate posts on request. When you tap to translate a post written in another language, its text is processed by an automated AI system to produce the translation.
Moderate the platform: process reports, enforce our Terms of Service, and keep the community safe.
Understand usage and improve the app (analytics), and diagnose and fix crashes and bugs.
Send push notifications you have enabled (such as activity on your posts, daily themes, or new quests). You can disable these at any time in your device settings.
Communicate with you about the service, including responding to support requests.
Comply with legal obligations and protect the rights, safety, and security of Fincher and its users.

3. Service Providers We Share Data With

We do not sell personal information, and we do not share it with third parties for their own advertising. We share information only with service providers that process it on our behalf to run Fincher:

Google Firebase (Google LLC): authentication, database and content storage, analytics (Firebase Analytics), crash reporting (Crashlytics), and push notification delivery (Firebase Cloud Messaging).
Stream (Stream.io, Inc.): powers our activity feeds and moderation infrastructure. Your posts, comments, reactions, and follow relationships are processed and stored by Stream to deliver feeds.
Google Gemini API (Google LLC): the text of posts is transmitted to Google's Gemini API for automated spoiler detection and, when requested, translation. Only the post text needed for these features is sent, and it is processed under Google's API terms.
The Movie Database (TMDB): we retrieve movie and TV metadata and artwork from TMDB to display in the app. We do not send your personal information to TMDB.
Apple and Google as app distribution platforms, and as sign-in providers if you choose Sign in with Apple or Google.

Each provider is bound by its own terms and processes data as needed to provide its service to us.

4. Public Content and Sharing Features

Fincher does not offer private accounts or private messaging. All posts, comments, ratings visible on posts, and profile information are public within the service. Fincher also lets you generate share images (for example, cards for Instagram Stories) from your own reviews; sharing those outside Fincher is your action and subject to the destination platform's terms.

5. Data Retention and Account Deletion

We retain your information for as long as your account is active. You can delete your account at any time in the app: Profile tab → Settings (⋯) → Account → Delete account. When you delete your account, your profile, posts, comments, diary, and other personal data are deleted or de-identified from the live service, and residual copies are removed from backups within a reasonable period. Limited records may be retained where required for legal, safety, or fraud-prevention purposes (for example, records of enforcement actions).

6. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, export, or restrict the processing of your personal information, and to object to certain processing.

All users can access and update profile information in the app, delete individual posts and comments, disable push notifications in device settings, and delete their account as described above.
European Economic Area, United Kingdom, and Switzerland: we process your data on the legal bases of performing our contract with you (providing the service), our legitimate interests (safety, moderation, improving the app), your consent where required, and legal compliance. You have the rights provided by the GDPR/UK GDPR, including the right to lodge a complaint with your local supervisory authority.
California: we do not sell or "share" (for cross-context behavioral advertising) personal information. You have the rights provided by the CCPA/CPRA, including to know, delete, and correct, without discrimination for exercising them.
Other jurisdictions (including Brazil's LGPD and similar laws): you may have equivalent rights under your local law.

To exercise any right, use the in-app tools or contact contact@fincher.app. We will respond within the timeframe required by applicable law and may need to verify your identity.

7. International Data Transfers

Fincher is operated from the United States, and our service providers process data in the United States and other countries. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses implemented by our providers.

8. Children

Fincher is not directed to children under 13, and you must be at least 13 years old to use it. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has created an account, we will delete it. If you believe a child under 13 is using Fincher, contact us at contact@fincher.app.

9. Security

We rely on reputable infrastructure providers and industry-standard safeguards (such as encryption in transit and managed authentication) to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by other reasonable means, and update the effective date above. Your continued use of Fincher after changes take effect means you accept the updated policy.

11. Contact

Questions, requests, or complaints about privacy: contact@fincher.app