VOID Privacy Policy

Effective Date: April 24, 2026

VOID ("we", "our", or "the App") is a media guidance application that provides objective, fact-anchored VOID Scores and reviews for movies, TV shows, and books. We are committed to protecting your privacy while delivering a transparent, family-focused service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the VOID mobile application (the "App") for iOS and Android.

Please read this policy carefully. By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you sign in, we use Clerk for authentication. We may receive your email address, name, and authentication identifiers. This is synced with our database backend under strict Row Level Security (RLS) policies.
• Profile and Preferences: During onboarding, you may complete a quiz about your family values, content preferences, and viewing priorities. These answers are stored in your user profile to personalize guidance.
• Watchlists and Feedback: You can create watchlists and provide feedback on VOID Scores. This data helps us improve our service and is stored in our database.
• Subscription Information: Subscription status and purchase history are managed via RevenueCat and synced to our backend.

1.2 Media and Scan Data

• Camera and Photos: To scan posters, DVD covers, or book covers, the App requires access to your device's camera and/or photo library. Images you capture or select are uploaded to database Storage temporarily for AI analysis. Images are not stored long-term for user profiling and are processed to extract title/year information before being discarded or secured according to our retention policies.
• Scan History: We may retain metadata about your scans (titles queried, results viewed) to provide features like queue status and history, subject to your subscription tier.

1.3 Automatically Collected Information

• Usage Data: Information about how you use the App (features accessed, search terms, session duration) to improve functionality and enforce free-tier limits (e.g., 5 scans/searches per day).
• Device Information: Device type, OS version, and unique identifiers (subject to platform policies) for analytics, crash reporting, and ad personalization where applicable.
• Advertising Data: If you are on the free tier, we display non-intrusive ads via Google AdMob. AdMob may collect device identifiers and usage data for ad targeting and measurement.

1.4 Device Permissions Requested

The App explicitly requests the following permissions (as declared in our AndroidManifest.xml and iOS Info.plist):

Android:

• CAMERA: To scan physical media (posters, DVD cases, book covers).
• READ_EXTERNAL_STORAGE / WRITE_EXTERNAL_STORAGE: To access photos from your gallery when selecting images for scanning.
• RECORD_AUDIO: For potential future voice features or media analysis (currently limited use).
• INTERNET: Required for all backend communication, database queries, AI analysis, and content delivery.
• VIBRATE: For haptic feedback on interactions (e.g., successful scans).
• SYSTEM_ALERT_WINDOW: For system-level notifications or overlays (used sparingly).

iOS:

• NSCameraUsageDescription: "VOID uses the camera to scan movie posters and DVD covers."
• NSPhotoLibraryUsageDescription: "VOID may access photos when you choose an image to scan."

You can revoke these permissions at any time through your device settings. Note that core features like scanning will not function without camera access.

2. How We Use Your Information

We use the collected information to:

• Provide core functionality: media scanning, VOID Score generation, personalized recommendations, and watchlist management.
• Process images server-side to deliver accurate, reproducible ratings.
• Manage user accounts, onboarding preferences, and subscription status.
• Enforce usage limits on the free tier and provide ad-free experience for Pro subscribers.
• Display relevant, non-intrusive advertisements (free tier only).
• Improve the App through aggregated feedback and usage analytics.
• Communicate important updates and respond to support requests.
• Comply with legal obligations and protect the security of our systems.

We do not sell your personal data to third parties.

3. How We Share Your Information

We share information only as necessary to provide the service:

• Supabase: Our backend provider. All user data is protected by Row Level Security (RLS).
• Clerk: Authentication provider. Handles sign-in and token issuance.
• RevenueCat: Manages in-app purchases and subscription status.
• Google AdMob: Serves ads on the free tier. Subject to Google's privacy policy.
• xAI: Processes uploaded images server-side for title extraction and analysis. Images and prompts are not used to train models.
• TheTVDB: Provides metadata (server-side only).
• Open Library: Provides metadata (server-side only).
• Service Providers: Other processors who help us operate the App under strict data processing agreements (e.g., hosting providers).

We do not share identifiable scan images or detailed preference data beyond what's required for the above services. Aggregated, anonymized data may be used for product improvement.

4. Data Storage and Security

• Storage: User data is stored in Supabase with enterprise-grade encryption at rest and in transit. Images in Storage follow strict access controls.
• Security Practices: We follow industry best practices including token normalization, RLS, server-side only sensitive operations, sanitized error handling, and no console logging of PII in production.
• Retention: We retain data only as long as necessary for the purposes outlined. You can request deletion of your account and associated data.
• International Transfers: Data may be processed in the United States and other jurisdictions where our providers operate. We use appropriate safeguards (Standard Contractual Clauses, etc.).

5. Your Rights and Choices

Depending on your location (including GDPR, CCPA/CPRA, and similar laws), you may have rights to:

• Access, correct, or delete your personal data
• Opt-out of certain data processing (including targeted advertising)
• Withdraw consent for permissions
• Object to or restrict processing
• Data portability

To exercise these rights, contact us at the details below. We respond to verified requests within 30 days.

Account Deletion: You can delete your account from within the App settings. This will remove your profile, watchlists, feedback, and subscription linkage (subject to RevenueCat/Apple/Google records).

6. Children's Privacy (COPPA)

The App is designed for families and may be used by children under 16 with parental supervision. We do not knowingly collect personal information from children under 16 without verifiable parental consent. If you believe we have collected such data, please contact us immediately so we can delete it.

Parental controls and family-oriented content filtering are core to our mission.

7. Third-Party Links and Services

The App may contain links to external sites or services (e.g., TheTVDB, xAI). We are not responsible for their privacy practices. We encourage you to review their policies.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the App, updating the Effective Date, and (where feasible) providing in-app notification. Your continued use of the App after changes constitutes acceptance of the updated policy.

9. Contact Us

For questions, requests, or concerns about this Privacy Policy:

• Email: contact@tothevoid.com (or the address listed in the App Store/Play Store listing)
• In-App: Use the settings or feedback features