Legal

Privacy Policy

Effective 6 August 2026 · Last updated 6 August 2026

Filmalyst is an iOS app that recommends films. This policy explains what it collects, why, where that information lives, how long it is kept and how to get rid of it.

1. Who is responsible

Filmalyst is operated by Ayomide Adeyanju, trading as Filmalyst — an individual trading under that name, not a registered company. Ayomide Adeyanju is the data controller for the personal information described here.

2. What Filmalyst collects, and where it is held

Stored in your Filmalyst account

• Email address — you provide it to sign in. Filmalyst uses passwordless sign-in, so a one-time code is sent to that address.
• A user identifier — an automatically generated identifier that links your account information to your account.
• Display name and profile details — optional. A display name if you choose one, and your chosen profile emblem and featured Taste Identity.
• Taste Identity and persona records — the identities you have reached, kept with your account so your profile survives a reinstall.

Stored on your device

• Film ratings and other taste signals.
• Seen history — the films you mark as watched, and the rating you give them.
• Essential, Interested and Not for Me selections.
• Watchlist — films you save for later.
• Viewing dates and rewatches — where you have provided them, which in this release means through a Letterboxd import.
• Letterboxd import records — the normalised film entries read out of an export you choose to import.
• Source mappings — where you confirm which film an ambiguous entry refers to, that decision is kept so a later import on the same device does not ask again.
• Unresolved import records — entries that could not be matched, kept with their title and year so you can finish resolving them on that device.
• Import state — which import produced what, and how far through it you are.
• Limited interaction information — with each signal, Filmalyst records how long the card was on screen and whether you expanded its details, because that helps distinguish a considered decision from an idle one. It is held with the signal, on your device.

Information Filmalyst derives

• Taste Identity, affinities and recommendation information — patterns worked out from your ratings, such as the tones, genres, eras and filmmakers you return to. These are calculated on your device from the information above; they are not collected separately. The resulting Taste Identity and persona records are kept with your account, as listed above.

Support correspondence

• If you email support, that message and its contents are processed so the request can be answered.

3. Importing from Letterboxd

Filmalyst can import a viewing history from a Letterboxd export that you download and select. To be precise about what that involves:

• The ZIP file you choose is read and processed on your device.
• The complete ZIP file is not uploaded to Filmalyst or to anyone else.
• In this release the imported history stays on your device. The entries read out of the export are written to the app’s storage on that device and are not sent to your Filmalyst account.
• Filmalyst never asks for and never collects a Letterboxd password, and holds no Letterboxd credential of any kind.
• Entries that could not be matched are kept on that device, with the title and year the export gave, so you can resolve them later there.
• The export’s filename is not stored, because a Letterboxd export filename contains the account’s username.
• Letterboxd is not connected as a live account and there is no ongoing synchronisation. Filmalyst reads a file you exported, once. There is no link, no token and no continuing relationship.

Imported history is treated differently from your own ratings. History brought in from an export is shown to you in your collection, but it is currently excluded from the recommendation engine, from your Taste Identity and from Tonight. Filmalyst recommends from what you have told it you like, not from a list of what you have watched.

4. Why Filmalyst uses this information

• To create and secure your account and sign you in.
• To keep your profile and Taste Identity records, so they survive a reinstall.
• To personalise Discover and Tonight on your device — deciding what to show you and in what order.
• To build your Taste Identities and the affinities behind them.
• To exclude films you have already seen or rejected.
• To provide the import feature and let you finish an unfinished import.
• To investigate faults and support requests.
• To keep the service working and to prevent misuse of it.
• To respond to support enquiries and to privacy requests.

5. Automated recommendations

Filmalyst uses automated processing to produce film recommendations and Taste Identities. It works out patterns from the signals you give it and uses them to choose what to show you.

These recommendations do not make legal decisions, or decisions with a similarly significant effect on you. They decide which film to suggest tonight. If you would like to understand why something was recommended, or disagree with a Taste Identity, email filmalyst.support@gmail.com.

6. Lawful bases

Under UK and EU data protection law, personal information must be processed on a lawful basis. Filmalyst relies on the following, separately:

Agreeing to this policy is not consent for the purposes of data protection law, and it is not treated as such. Where consent is ever used, it will be asked for separately and can be withdrawn at any time.

7. Service providers

Filmalyst uses a small number of providers. No personal information is sold, and none is shared for advertising.

This product uses the TMDB API but is not endorsed or certified by TMDB.

8. Where information is stored, and transfers

• On your device. Filmalyst keeps your film history in the app’s own on-device storage, so the app works offline and stays fast. In this release that is the only copy, and it is on your device, under your control.
• In your account. Your account information — email address, user identifier, profile and persona records — is stored with Supabase in the Central EU (Frankfurt, Germany) region.
• Providers. The providers listed above may process limited technical and operational information — such as request logs — as part of running their services. The details and retention of those provider-side records are governed by their own policies and are not set by Filmalyst.
• Processing outside the UK. Some of these providers, or the suppliers they use, operate outside the United Kingdom, and information may be processed there. Where a transfer requires a legal basis, Filmalyst relies on the transfer mechanisms in that provider’s own terms — the contractual or legal arrangements each provider applies. If you would like more information about the arrangements for a particular provider, email filmalyst.support@gmail.com and you will be told what applies.

9. How long information is kept

• Account information — your email address, user identifier, profile and persona records are retained while your account exists, or for as long as is reasonably necessary to provide the service.
• Film history on your device — it remains on that device until you delete your account, clear the app’s data, or remove the app, subject to how iOS handles app storage, including any device backup you have chosen to make.
• Uninstalling the app does not by itself delete your Filmalyst sign-in account. Removing the app takes the on-device history with it, but the account itself remains until it is deleted. Use the in-app deletion, or contact filmalyst.support@gmail.com.
• Deletion. You can delete your account from inside the app, in the account settings. Deleting your account removes your Filmalyst account and its sign-in, your profile and display name, the Taste Identity and persona records held with your account, and the film ratings and signals, watchlist, viewing history, import records, source mappings and unresolved import entries held on your device — together with any other account-scoped Filmalyst data.
• Deletion cannot normally be undone. Information that has to be kept to meet a legal requirement may be retained where that applies, though no such retention category is currently identified for ordinary Filmalyst account data. The general film catalogue — titles, release years, posters and similar — is not owned by any account and is not removed by deleting one; it contains nothing personal. Service providers keep their own operational records, such as request logs, under their own retention policies, and those are not erased by this request.
• Support correspondence — retained only as reasonably required to answer the request and to keep any necessary record of it.

10. Security

Filmalyst uses account-scoped access controls for the account information currently stored with Supabase, so a signed-in session reaches its own account’s information rather than anyone else’s. Connections use transport encryption. Credentials that allow privileged access are held only on the server side and are never present in the app.

The film history on your device is protected by the operating system’s own separation between apps, and by whatever passcode or biometric lock you have set. Keeping that lock on is the single most useful thing you can do for it.

No service can guarantee complete security, and this policy does not claim otherwise.

11. Your rights

Subject to the conditions in applicable law, you have the right to:

• access the personal information held about you;
• have inaccurate information corrected;
• have your information deleted;
• restrict how your information is processed;
• object to processing carried out on the basis of legitimate interests;
• receive your information in a portable form, where that right applies;
• withdraw consent, where processing is based on consent.

To exercise any of these, email filmalyst.support@gmail.com. Deletion is also available in the app, in account settings, without contacting anyone.

Because your film history is held on your device in this release, a great deal of it is already directly in your hands: you can see it in the app, change it there, and remove it there.

If you are unhappy with how your information has been handled you may complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, or to your local supervisory authority if you are in the EEA. Raising it with Filmalyst first is welcome but not required.

12. Children

Filmalyst is not intended for children. You must be at least 16 years old to create an account.

If you believe an account has been created by someone under that age, email filmalyst.support@gmail.com. Reports are investigated. Verification of identity or age may be needed before anything is done — an account is not removed on an unverified report, because that would itself be a way to have someone else’s account deleted — and appropriate action, which may include removing the account, follows.

13. Changes to this policy

This policy may change as Filmalyst changes. The effective and last-updated dates at the top of this page will be revised, and material updates will be shown on this page. Where an appropriate mechanism exists, material changes may also be communicated by email or in the app.

14. Contact

For anything in this policy, contact Ayomide Adeyanju, trading as Filmalyst at filmalyst.support@gmail.com, or by post:

Postal address:

138 Waterside Close SE28 0GS