Privacy Policy

What we collect

Your account: the email you sign up with, your handle, display name, and avatar if you add one. If you choose to add your phone number so friends can find you, only a SHA-256 hash of it is stored; the raw number stays on your device.

Your activity: the films you log, your Scare Score rankings, the films you mark as loved, your watchlist and lists, likes, comments, and who you follow.

Contacts, only if you allow it: to find friends, Gasper reads your address book on your device and sends only SHA-256 hashes of emails and phone numbers. The raw contacts never leave your phone, and you can decline or revoke access at any time in iOS Settings.

Camera, only if you allow it and only while the scanner is open: Gasper reads a member's profile code so it can open their profile. Nothing is photographed, recorded, saved, or sent anywhere, and the camera runs only on that one screen. You can decline or revoke access at any time in iOS Settings.

Device: a push notification token if you enable notifications, a crash report if Gasper crashes (what the app was doing when it failed, plus your device model and iOS version), and a small set of product analytics events (like app opens and completed rankings) tied to your account.

How we use it

To run Gasper: keep your rankings in sync across devices, power your feed and profile, match you with friends you choose to find, and send the notifications you turn on (your daily film pick, tags, and list invites; follows, likes, and comments arrive in your in-app inbox).

Community scores shown on film pages are aggregates. Your individual rankings feed them only in anonymous, combined form.

Analytics tell us which features get used so we can improve Gasper. The event set is deliberately small, and we never record what you type.

Who we share it with

Supabase hosts our authentication, database, and storage. Your account and activity live there.

TMDb (The Movie Database) provides film metadata. Your search queries and the titles you look up are sent to TMDb to fetch that data.

YouTube plays trailers inside the app. Loading a trailer is subject to YouTube's own terms and privacy policy.

Apple delivers push notifications.

Resend delivers the few emails Gasper sends: a code when you recover your password, and confirmation when you change your email address. Signing up sends no email at all. Your address passes through Resend for those messages.

PostHog processes our product analytics events and our crash reports.

We do not sell your data, and there are no ad networks in Gasper.

Your controls

Per-post visibility: every ranking or want-to-watch you share is either Public (on the feed, eligible for Trending) or Unlisted (kept off other people's feeds, still visible on your profile).

Lists are separate from posts: a list is public or private, and it is never posted to the feed.

Private account: flip it on in Settings and new followers must be approved before they see your rankings.

Contacts: access is optional and revocable in iOS Settings at any time. Adding your own number is optional too. We only ever hold hashes.

Camera: optional, and only ever used on the profile-code scanner. Revoke it in iOS Settings and the rest of Gasper is unaffected.

Notifications: toggle them off in Settings or in iOS Settings.

Deletion

Delete your account from Settings at any time. This permanently erases your account, rankings, follows, comments, and likes from our servers. It cannot be undone.

Data cached on your device is wiped as part of the same flow.

Questions

Write to support@gasperapp.com.