Privacy Policy

Last updated: September 9, 2026

Cinny ("Cinny", "we", "us", or "our") is a movie and TV show tracking and recommendation service operated by Codesquare AB, a company registered in Sweden.

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use Cinny, including our mobile applications, website, and related services (collectively, the "Service").

1. Who We Are

Cinny is operated by:

Codesquare AB Organisation number: 559538-8108 Silkeborgsgatan 6 392 43 Kalmar Sweden

Email: info@codesquare.se

For purposes of the EU General Data Protection Regulation ("GDPR") and similar data protection laws, Codesquare AB is the controller of personal data processed through Cinny unless otherwise stated.

2. Information We Collect

The information we collect depends on how you use Cinny.

2.1 Account Information

When you create a Cinny account, we may collect:

If you sign in using Google or Apple, we receive information made available through the authentication process in accordance with your settings with that provider.

If you create an account using an email address and password, authentication credentials are processed to authenticate and secure your account. We do not need access to your password in readable form.

2.2 Movie and TV Show Activity

When you use Cinny, we process information about how you interact with movies and TV shows, including:

This information is used to provide Cinny's tracking, social, and recommendation features.

2.3 Profile and Social Information

Cinny includes social features.

Your username, name, biography, profile picture if provided, and certain profile statistics, such as the number of movies and TV shows you have watched, may be visible to other users.

Accounts are public by default. If your profile is public, other people may be able to see information such as your watched movies and TV shows, watchlist, ratings, and reviews.

You can make your profile private. If your profile is private, users generally need to request to follow you and be accepted before they can see profile activity that is restricted to followers.

Reviews have separate visibility controls. Depending on the option you select, a review may be:

You should not include sensitive personal information or information about other people in content you make public.

Information that you choose to make public may be viewed, copied, shared, or otherwise used by people outside your intended audience. Cinny cannot control what other people do with information after they have legitimately accessed it.

2.4 Recommendation Information

Cinny provides personalized movie and TV show recommendations.

Our recommendation system may use information associated with your Cinny user ID, including your watched movies and TV shows and your watchlist, to determine recommendations that may be relevant to you.

Our recommendation system is developed and hosted by Codesquare AB.

Cinny may also provide explanations for recommendations, such as indicating that a movie or TV show is recommended because of something else you have watched.

We use machine learning techniques and embeddings as part of the recommendation system. We may use third-party artificial intelligence services to generate technical representations or embeddings of movie and TV show catalogue information.

We do not send Cinny user IDs, individual viewing histories, watchlists, names, or email addresses to those AI services for this purpose.

Personalized recommendations are intended to improve your experience. They do not make decisions that produce legal or similarly significant effects concerning you.

2.5 Device and Technical Information

When you use Cinny, we may automatically receive technical information such as:

We may derive or use general country or regional information where necessary to provide location-dependent functionality, such as determining whether a movie or TV show is available in a particular country.

Cinny does not currently require precise GPS location for this purpose.

2.6 Analytics

If you choose to help us improve Cinny, we may collect product analytics about how you use the Service.

This may include information such as:

We currently use services including PostHog, with EU-hosted infrastructure, and services provided through Expo to help operate, understand, maintain, and improve Cinny.

Where consent is legally required for optional analytics, we ask for that consent. You may withdraw your consent through the available settings.

Some technical processing may still be necessary regardless of your analytics preference where it is required to provide, secure, maintain, or troubleshoot the Service.

2.7 Push Notifications

If you enable notifications, we process a device push token and notification preferences so that we can send notifications to your device.

Depending on your settings, notifications may include:

You can manage notification categories through Cinny where available and can also disable notifications through your device settings.

3. How We Use Personal Data

We may use personal data to:

4. Legal Bases for Processing

If the GDPR, UK GDPR, or another law requiring a legal basis applies to you, our legal bases depend on the processing involved.

Performance of a Contract

We process information necessary to provide Cinny to you, including account information, movie and TV show activity, watchlists, profile functionality, and core recommendation functionality.

Consent

We rely on consent where appropriate, including for certain optional analytics, device permissions, and similar optional processing.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

Legitimate Interests

We may process information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.

These interests may include:

Legal Obligations

We may process information where necessary to comply with laws, court orders, regulatory obligations, or other legal requirements.

5. Personalized Recommendations and Profiling

Cinny analyzes aspects of your activity, such as movies and TV shows you have watched and items on your watchlist, to create personalized recommendations.

This constitutes profiling in some jurisdictions.

The purpose of this processing is to make Cinny more useful by recommending movies and TV shows that are more likely to interest you.

Cinny's recommendation system does not make decisions that have legal effects or similarly significant effects on you.

6. How We Share Personal Data

We do not sell your personal data.

We may disclose information in the following circumstances.

Service Providers

We use service providers and technology providers to operate Cinny. Depending on how you use the Service, these may include providers supporting:

Our current infrastructure includes services such as Railway, PostHog, Expo, Google authentication, Apple authentication, and authentication technology provided through Better Auth.

These providers may process limited personal data as necessary to provide their services to us.

Public and Other Users

Information you choose to make public may be available to other Cinny users and, depending on the feature, potentially to people who are not signed into Cinny.

For private profiles and follower-only content, access is limited according to the privacy controls available through Cinny.

Legal and Safety Reasons

We may disclose information if reasonably necessary to:

Business Transactions

If Codesquare AB is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal data may be disclosed or transferred as part of that transaction, subject to applicable law.

7. Movie and TV Show Data

Cinny uses the TMDB API to obtain certain movie, TV show, image, and related information.

TMDB is a third-party service and is not responsible for Cinny.

This product uses the TMDB API but is not endorsed or certified by TMDB.

Your use of Cinny does not create a relationship between you and TMDB through Codesquare AB.

8. International Data Transfers

Codesquare AB is based in Sweden and seeks to use European infrastructure where reasonably appropriate, including EU-hosted analytics infrastructure where configured.

Some service providers may nevertheless process information in countries outside Sweden, the European Economic Area ("EEA"), or your country of residence.

Where required by applicable law, we use appropriate safeguards for international transfers, which may include adequacy decisions, standard contractual clauses, or another legally recognized transfer mechanism.

You may contact us for more information about safeguards applicable to your personal data.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Cinny, maintaining security, complying with legal obligations, and resolving disputes.

Account information and associated active user data are deleted when you delete your Cinny account, except where information must be retained for legal, security, fraud prevention, or other legitimate reasons permitted by law.

Deleted information may remain temporarily in technical backups until those backups are overwritten or deleted as part of our normal backup processes. Information retained in backups is not intended to be restored for ordinary product use.

Different technical and diagnostic records may have shorter or longer retention periods depending on their purpose and the service provider involved.

10. Account Deletion

You can delete your account through Cinny or through the account deletion functionality provided on our website.

Deleting your account removes your active Cinny account and associated user data, subject to the limited exceptions described in this Privacy Policy.

If you have difficulty deleting your account, contact us at info@codesquare.se.

11. Data Portability and Export

We are working to provide self-service data export functionality.

Regardless of whether self-service export is available, you may contact us to exercise any access or data portability rights available to you under applicable law.

12. Cookies and Web Technologies

Cinny's website may use cookies, local storage, or similar technologies necessary for functionality, authentication, security, preferences, and, where enabled, analytics.

Where required by law, we will request consent before using non-essential cookies or similar tracking technologies.

You may also be able to control cookies through your browser.

We do not currently use Cinny user data for third-party targeted advertising. If we introduce advertising or advertising-related tracking in the future, we will update this Privacy Policy and implement appropriate choices or consent mechanisms as required by applicable law.

13. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal data.

These may include the right to:

These rights may be subject to conditions and exceptions under applicable law.

To exercise your rights, contact info@codesquare.se. We may need to verify your identity before completing certain requests.

If you are located in the EEA, you may lodge a complaint with your local supervisory authority. Codesquare AB's supervisory authority in Sweden is the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten ("IMY"), where applicable.

14. California Privacy

California residents may have additional rights under California privacy law if the relevant law applies to Codesquare AB.

These may include rights to request information about personal information collected and disclosed, request deletion or correction, and exercise other rights provided by applicable California law.

Cinny does not currently sell personal information or share personal information for cross-context behavioral advertising as those concepts are defined under the California Consumer Privacy Act.

If our practices change, including through the introduction of targeted advertising, we will update our disclosures and provide applicable opt-out mechanisms before or when required.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

15. Children

Cinny is intended for users who are 13 years of age or older.

You may not create or use a Cinny account if you are under 13.

If you are between 13 and the age at which you can independently consent to relevant processing under the laws of your country, a parent or legal guardian may need to provide consent or authorization for certain processing.

Because privacy laws concerning children and minors differ between countries, additional requirements may apply depending on where you live.

If we learn that we have collected personal data from a child in circumstances where we were legally required to obtain parental or guardian authorization and did not obtain it, we will take appropriate steps, which may include deleting the information or account.

If you believe a child is using Cinny in violation of these requirements, please contact info@codesquare.se.

16. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.

However, no internet service, database, or method of electronic transmission can be guaranteed to be completely secure.

You are responsible for protecting access to your account and should use a strong, unique password where password authentication is used.

17. Your Privacy Choices

Cinny provides controls that may allow you to:

We encourage you to review these settings, particularly before publishing reviews or other information publicly.

18. Changes to This Privacy Policy

We may update this Privacy Policy as Cinny develops or when our legal, technical, or business practices change.

If a change is material, we may provide additional notice through Cinny, our website, email, or another appropriate method.

The "Last updated" date at the top indicates when this Privacy Policy was most recently revised.

19. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your personal data, or if you want to exercise a privacy right, contact:

Codesquare AB Organisation number: 559538-8108 Silkeborgsgatan 6 392 43 Kalmar Sweden

Email: info@codesquare.se