FlickDrop Privacy Policy

Who we are

FlickDrop is made by JC Mobile App Studio LLC, a one-person studio based in Pennsylvania, USA. In this policy, "we" and "us" mean JC Mobile App Studio LLC. You can reach us at contact@jcmobileappstudio.com.

Short version

• No account, no analytics, no ads, no trackers, no third-party SDKs.
• Your collection, watch log, ratings, loans, wishlist and locations stay on your device and, if you use iCloud, in your own private iCloud database. We cannot see them.
• Barcode lookups pass through our server to a barcode database. They carry the barcode and nothing about you.
• Film details, trailers and streaming availability come from TMDB, requested from your device with the title or TMDB id.
• If you correct an edition or submit a cover photo, that fix is sent to our server with a random installation identifier, never your name, email or Apple ID.
• The camera is used only for scanning, and images are processed on your device.
• We never sell your data or use it for advertising.

What stays on your device

• Your collection: every disc, its format and edition, genre, the films inside a box set, watched states, watch dates and ratings, locations such as a shelf or room, your wishlist, and the streaming services you picked.
• Scanning uses the camera and on-device barcode recognition. Camera frames are read for barcodes and discarded. No image leaves your device unless you tap to submit a cover photo, described below.
• Behind the film notes are written on your device by Apple Intelligence from the public facts already on the title's page. They are labeled as AI-written. Nothing is sent to an outside AI service, and we never see them.
• Siri, Shortcuts, widgets and Spotlight read your collection on your device. Spotlight's index of your titles stays on the device.
• Lending: if you choose a contact for a loan, FlickDrop reads that contact's name from Contacts and stores it with the loan. It never uploads your contacts. If you ask for a due-date nudge, FlickDrop creates it in Reminders. Both permissions are optional.
• CSV import and export happen entirely on your device. Files you import from CLZ Movies, My Movies, Blu-ray.com or Letterboxd are read locally, and export writes a file you choose where to keep.

What leaves your device, and where it goes

FlickDrop connects to the internet to look up barcodes, to fetch film details and streaming availability, to sync through iCloud, to send edition fixes you choose to share, and to check a purchase with Apple.

• Our server (run on Cloudflare). When you scan a barcode the app does not already know, it sends the barcode number to our server, which looks it up in a third-party barcode database, UPCitemdb, and caches the answer so the next person scanning the same disc gets a faster reply. The request carries the barcode and nothing about you. Like any website, Cloudflare handles your IP address to deliver the reply.
• Community edition database, also on our server. When a barcode isn't recognized or comes back as the wrong release, you can correct it and, if you like, photograph the cover. Only when you tap to submit, the app sends the barcode, your correction (format, edition, label and title) and the cover photo if you took one. The submission is tagged with an anonymous installation identifier, a random UUID created when you install the app, so we can discard a bad batch or weigh repeated confirmations. It is never sent with your name, email address or Apple ID, and we have no way to connect it to you. Reinstalling the app creates a new identifier. Cover photos should be of discs you own, and they may be shown to other FlickDrop users who scan the same release.
• TMDB (themoviedb.org). Film and series details, posters, cast, trailers, budget and box office, and streaming availability are requested directly from your device. The request contains the title or TMDB id, and TMDB receives your IP address and the standard network information any internet request carries. We do not receive a copy. TMDB privacy policy. This application uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB. Streaming data by JustWatch, delivered through TMDB's watch providers.
• Wikipedia (wikipedia.org). For production history on a title's page, the app may ask Wikipedia's public API for the article on that film. The request carries the title and your IP address. Wikimedia privacy policy.
• Apple iCloud. If you are signed in to iCloud, your collection, watch log, loans, wishlist, locations and settings sync through CloudKit to your own private iCloud database so they follow you to your other devices. This data is stored by Apple under Apple's Privacy Policy. We have no access to it. There is no FlickDrop account.
• Apple's App Store. If you buy FlickDrop Pro, Apple handles the payment through StoreKit and tells the app that the purchase is active. We never see your name, email address or payment details. Apple's sales reports give us totals only.

What reaches us

Nothing that identifies you. Our server sees barcodes and the edition fixes and cover photos you choose to submit, each tagged only with the random installation identifier. We don't run analytics, crash reporting or advertising, and FlickDrop includes no third-party SDK for any of them. If you email us or use the support form, we receive what you send and use it only to answer you.

Permissions FlickDrop may request

• Camera, only to scan barcodes and, if you choose, to photograph a cover for the community database.
• Contacts, optional, only to pick the person you are lending a disc to.
• Reminders, optional, only to create a due-date nudge for a loan.
• Siri and Shortcuts, to answer "Do I own this?", add a disc and pick something unwatched from your collection.

App Store privacy label summary

Data not linked to you: none collected, except as described above: barcodes sent for lookup, and the edition fixes and cover photos you choose to submit, tagged with a random installation identifier that cannot be tied to you. Data linked to you: none. Data used to track you: none. FlickDrop does not use the advertising identifier and does not track you across apps or websites.

Deleting your data

• Delete a disc in the app to remove it, along with its watch log and loans, on every device that syncs.
• Deleting the app removes everything stored on that device.
• To delete the iCloud copy, open Settings on your iPhone or iPad, tap your name, then iCloud, then Manage Account Storage, and choose FlickDrop. Or use Erase all data in FlickDrop's own Settings, which clears the device and your iCloud database together.
• Community confirmations are anonymous and cannot be tied back to a person, so there is nothing for us to look up by name. If you submitted a cover photo you would like removed, email us the title and barcode and we will take it down.

For users in the European Union, EEA, United Kingdom and Switzerland

This section explains how the General Data Protection Regulation (GDPR) and the UK GDPR apply to FlickDrop. Where it says something different from the rest of this policy, this section applies to you.

Controller. JC Mobile App Studio LLC, a limited liability company registered in Pennsylvania, United States, is the controller for the little personal data FlickDrop processes. Contact us at contact@jcmobileappstudio.com. We are a small studio and are not required to appoint a data protection officer or an EU representative; this address reaches the person responsible.

What we process, and why. FlickDrop is designed so that your collection never reaches us. The processing that does take place is:

• Barcode lookups and community confirmations sent to our server on Cloudflare, tagged with a random installation identifier. We process these to resolve the disc you scanned and to improve the shared edition database. Legal basis: our legitimate interest in operating the service you asked for, Article 6(1)(f), and for confirmations and cover photos you choose to submit, your consent, Article 6(1)(a), which you can withdraw by turning off Share confirmed matches in Settings.
• Technical data such as your IP address, received by our server and by Cloudflare when the app makes a request, and kept in short-term logs for security and abuse prevention. Legal basis: legitimate interest, Article 6(1)(f).
• Support messages you send us by email or through our website, processed to answer you. Legal basis: performance of a contract or steps at your request, Article 6(1)(b).
• Purchase of FlickDrop Pro is processed by Apple under Apple's own terms; we receive only an anonymous receipt confirming the purchase. Legal basis: performance of a contract, Article 6(1)(b).

Your collection, watch history, loans and preferences are stored on your device and in your own iCloud account, which Apple provides to you under Apple's privacy policy. We cannot access them. Film information is fetched by the app directly from TMDB, and sometimes Wikipedia, which receive your IP address and the title you requested under their own policies.

International transfers. Our server runs on Cloudflare's global network and our company is in the United States, so requests from the EU are processed in the United States. Cloudflare participates in the EU-US Data Privacy Framework and offers Standard Contractual Clauses. The data involved is limited to the installation identifier, the barcode, the title you confirmed, and your IP address in logs.

Retention. Cached barcode lookups are kept for 90 days. Confirmations and cover photos are kept while they are useful to the shared database. Rate-limit records and server logs are kept for no more than 30 days. Support messages are kept for as long as needed to resolve your request and for a reasonable period afterwards.

Your rights. You have the right to access, correct and erase personal data we hold about you, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. Because confirmations are stored only under a random installation identifier, we cannot match them to a person by name; to exercise a right over them, include the installation identifier shown under Settings, About, in your request, or the barcode and title of a cover you submitted. Export your own collection at any time from Settings, Import and export, which produces a CSV you can keep or move. You also have the right to lodge a complaint with your local supervisory authority, for example the data protection authority of your EU member state, or the Information Commissioner's Office in the United Kingdom.

No automated decisions. FlickDrop makes no decision about you with legal or similar effects. The on-device "behind the film" note is generated by Apple Intelligence on your device from public film facts, not from anything about you, and nothing is sent to an AI service.

Children

FlickDrop does not collect personal information from anyone, including children. Film synopses, posters and trailers come from TMDB and reflect the titles in your own collection.

Changes

If this policy changes, we will update this page and the date at the top.

Contact

Questions about privacy? Email contact@jcmobileappstudio.com.