Privacy Policy

1. Information We Collect

A. Account & Authentication Data

To create an account and sync your library across devices, we collect data via our backend authentication provider (Supabase):

• Email Address: Your unique account identifier and the channel for critical account communications.
• Sign-In Method: You may register with an email/password, Sign in with Google, or Sign in with Apple. When you use Google or Apple, that provider returns your email address and basic account identifier to us so we can create or match your account. We never receive your Google or Apple password. If you use Apple’s “Hide My Email,” we only ever see the relay address Apple generates.
• Profile Details (optional): A display name, and optionally your country and state/region, which you can set or clear at any time in Settings. These are used for display and regional formatting only.
• Authentication Metadata: Registration date, login timestamps, and security logs maintained by Supabase Auth.

B. Application-Specific Tracking Data (Your Library)

Nxtory is a logging tool, so the App stores your personal media history:

• Catalog Entries: The TV shows, movies, and books you add to your library, along with their public metadata (title, cover art, genres, runtime, page count, release dates).
• Watch & Read Progress: Individual watched episodes with timestamps; movie watch logs including rewatches and an optional “where watched” note; book reading progress (current page) and completion logs including format (print, ebook, audiobook) and duration.
• Ratings & Diary Entries: Your 1–5 star ratings for shows, seasons’ episodes, movies, and books, plus the dated diary entries the App generates from your activity.
• List States: Your Tracking / Want to Watch / Watched, and Reading / Want to Read / Read placements, along with paused and skipped items.
• People You Follow: The actors and authors you choose to follow in order to receive release reminders.

C. Technical Data

• The App collects no analytics, advertising, or behavioral telemetry. Nxtory contains no third-party analytics, tracking, or crash-reporting SDK. We do not collect device identifiers, advertising IDs, location data, or contacts.
• Platform-Level Diagnostics: If your device is configured to share crash and performance data with Apple or Google, those platforms may provide us with aggregated, anonymized crash reports through App Store Connect or the Google Play Console. This data is controlled by your device’s OS settings, not by the App, and we cannot use it to identify you.
• Web Server Logs: When you visit the Website, standard server logs may record your IP address, browser type, referring pages, and timestamps for security and operational purposes.

2. How Your Data is Stored and Processed

• Local Device Storage: Your entire library, diary, and list states are stored on your device in a sandboxed SQLite database (via the Drift framework), so the App works fully offline. Poster images are cached to local storage after first download.
• Cloud Sync (Supabase): Your library is pushed to our hosted Supabase infrastructure so it survives reinstalls and syncs across your devices. Access is enforced by row-level security: by default, only your own account can read your rows — with the single, explicit exception described in Section 4.
• Connected-Account Credentials: If you connect Trakt (Section 5), the resulting access and refresh tokens are stored only on your device, never on our servers.
• Global Content Delivery (Cloudflare): Website files and static assets are hosted and distributed via Cloudflare Pages.

3. Third-Party Service Providers

Puri Consulting LLC does not sell, rent, trade, or monetize your personal information or media history to advertisers or data brokers.

• Infrastructure Partners:
  • Supabase, Inc. — database, cloud infrastructure, and authentication.
  • Cloudflare, Inc. — DNS, network security, domain registration, Website hosting, and email routing ([email protected]).
  • Resend, Inc. — transactional processing of the Website contact form.
  • Apple Inc. / Google LLC — Sign in with Apple and Google Sign-In, and app distribution.
• Metadata Catalogs (no personal data shared): To display titles, cover art, cast, and descriptions, the App queries public metadata catalogs. It transmits only the search term or public media ID. No account data, email address, credentials, or library history is ever sent to these providers:
  • The Movie Database (TMDB) and OMDb — film and television metadata, artwork, and ratings.
  • Google Books and Open Library — book summaries, author details, and publication data.
  • Trakt.tv is also queried anonymously for title lookups. Note that this is separate from the optional connected account described in Section 5, which does involve your personal data.

4. Sharing With Other Users (Friends)

Nxtory includes an optional social layer. Nothing is shared with another person unless you approve them.

• Follow Requests: Another user can request to follow you. Until you approve that request, they can see nothing.
• What an approved follower can see: Once you approve someone, they may view your Diary entries (title watched or read, your note or detail line, your star rating, the date and time, and the season/episode where applicable) and your Stats, including your Top Actors list (your ten most-watched actors and their watch counts).
• Revoking access: You can remove a follower at any time in Settings, which immediately ends their access.
• Shared release cache: To power release reminders, our servers maintain a catalog of upcoming releases for actors and authors that users follow. This catalog contains only public release information and is identical for everyone — it never contains your identity, your library, or any indication of who follows whom.

5. Connected Accounts (Trakt)

Connecting a Trakt account is entirely optional and off by default.

If you choose to connect Trakt, you authorize it through Trakt’s own login screen, and the App then performs a two-way synchronization of your viewing history:

• We import from Trakt: your watched shows, movies, and complete play history, which is added to your Nxtory library.
• We send to Trakt: episodes and movies you mark as watched in Nxtory, so your Trakt profile stays current. Removing a watch in Nxtory also removes the corresponding play from Trakt.

Your Trakt access and refresh tokens are stored only on your device. You may disconnect Trakt at any time in Settings, and you can revoke Nxtory’s access directly from your Trakt account settings. Data already sent to Trakt is governed by Trakt’s privacy policy.

6. Notifications

The App can send optional reminders: one hour before a tracked show’s next episode airs, and before a new release from an actor or author you follow. These are scheduled locally on your device. We do not operate a push-notification service and do not collect push tokens. Each reminder type can be turned off individually in Settings, or disabled entirely in your device’s OS settings.

7. Home Screen Widget (Android)

If you add the Nxtory widget to your home screen, the App stores the titles, next-episode details, and poster images for your in-progress shows in the App’s own private storage so the widget can render them. This data never leaves your device.

8. Subscriptions and Payments

Nxtory offers a free trial followed by a paid subscription. We do not collect, process, or store any payment information. When subscriptions are purchased, the transaction is handled entirely by the Apple App Store or Google Play, and we receive only a subscription status — never your card number, billing address, or financial details.

9. Data Retention, Export & Account Deletion

• Export (Data Portability): You can export your complete library at any time from Settings as a JSON or CSV file, directly on your device — no request to us required.
• Account Deletion: You can permanently delete your account from within the App (Settings → Delete Account). This immediately and irreversibly purges your account, library, watch and read history, ratings, and diary entries from our Supabase databases. You may also request deletion via the contact details below.
• Local Copies: The database file on your own device remains until you clear the App’s data or uninstall it.
• Retention: We retain your data only while your account is active.

10. Global Privacy Rights (GDPR & CCPA/CPRA)

Depending on where you live, you may have specific rights over your personal data:

• Access / Portability: Request a copy of the data we hold, or use the in-App export at any time.
• Rectification: Edit your profile and media logs directly in the App.
• Erasure (“Right to be Forgotten”): Delete your account in-App, or request erasure from us.
• Opt Out of Sale/Sharing: We do not sell or share personal information as those terms are defined under the CCPA/CPRA, so there is nothing to opt out of.
• Non-Discrimination: We will never penalize or degrade your experience for exercising these rights.

To exercise any right, use the Website contact form.

11. Children’s Privacy

Nxtory does not knowingly target, solicit, or collect personal data from anyone under 13 (or under 16 in certain European jurisdictions). If we learn that a child has created an account without verifiable parental consent, we will terminate the account and purge the data.

12. Updates to This Privacy Policy

Puri Consulting LLC may modify this Policy as features evolve or regulations change. If we make material changes to how we handle, store, or route your data, we will provide notice in the App, by email to your registered address, or by updating the “Last Updated” date above.

13. Contact Information

For questions, concerns, or to exercise your data rights, please contact us.