Privacy

Privacy Policy

Effective July 13, 2026 · Last updated October 23, 2026

Stay Tuned ("the app") is a personal TV & movie tracker built and operated by HakuSoft ("we," "us"). We built it to be quiet and private: it collects the minimum needed to keep your watch list in sync across your devices, and nothing more. We do not sell your data, we don't run ads, and the app contains no third-party advertising or analytics trackers. (This website counts page views with cookieless Cloudflare Web Analytics — see "This website" below.)

The short version: we store your account and the shows/movies you choose to track. Show information comes from public catalogs. Crash reports are always sent so we can fix problems, usage analytics are off unless you turn them on, and neither ever includes your watchlist. You can delete your account, and the data associated with it, at any time from inside the app.

Information we collect

Account information

When you create an account, we store your email address and, if you sign in with Apple or Google, the name those services return (when you allow it). If you sign in with Apple using its "Hide My Email" feature, we only ever receive Apple's private relay address. We use this information solely to create and secure your account and to sync your data.

Your library and preferences

The shows and movies you track, your watch progress (which episodes and seasons you've marked watched), and your in-app settings (such as reminder and theme preferences) are stored so they persist and stay in sync across your devices.

On-device data

Some features work entirely on your device and are not transmitted to us:

Reminders / notifications are scheduled locally on your device. We do not operate a push-notification server and do not receive a device push token.
Calendar entries, if you enable the calendar feature, are written to a calendar on your device using write-only access. We cannot read your calendar.

Diagnostics

There are two separate things here, and only one of them is a setting you control.

Crash reports are always sent. When the app crashes or hits an error it can't handle, we use Sentry to collect an anonymized report so we can fix it. We can't repair a crash we never hear about, so this isn't something you have to switch on. These reports are scrubbed before sending: no email address, no IP address, and request contents — headers, cookies, query strings and bodies — are stripped. We never attach your account to them, so a crash report is not connected to your identity.

Usage analytics are off unless you turn them on. The "Share diagnostics" switch in the app's settings controls a small set of product measurements — how many reminders were scheduled, whether a notification was tapped, and how long a screen took to load, recorded as ranges rather than exact figures. It is off until you choose otherwise.

Neither one includes your watchlist. No show or film title, and nothing you've typed into a note or a list name, is part of either. That is enforced in the app's code, not merely intended: the analytics channel can only carry counts and fixed labels, and cannot express the contents or even the size of your library.

Recent activity (no extra collection)

When you are signed in, your session periodically refreshes its sign-in token — this is a normal part of keeping you logged in, and it happens when you open the app. We look at when that last happened to estimate how many accounts have used Stay Tuned recently, shown to us only as totals such as "active in the last 7 days".

Nothing extra is collected from your device for this, and no analytics SDK or tracker is involved — it reads a timestamp our sign-in system already records. It tells us that an account opened the app, never what you did in it. If you sign out, the session record is deleted and the account simply stops being counted. It is not a way of detecting that you deleted the app; Apple provides no such per-person signal, and we do not attempt to infer one.

Community charts (no extra collection)

Community charts count how many accounts track or watch a title. Only titles with at least 5 accounts are shown, counts are shown as ranges, and no individual is identifiable.

They are worked out once a day from the library and in-app watch history that signed-in accounts already sync — nothing extra is collected from your device. A chart appears only once at least 50 accounts contribute to it; accounts less than 72 hours old are not counted, and watch history imported from TV Time is not counted. The charts store a title, its rank and a range such as "25+" — never your account or an exact count. If you delete your account, it stops counting at the next successful daily update — normally within 24 hours, and at most 48 hours if an update fails, because the app stops showing a chart that has not been updated for 48 hours.

Suggested Picks (Premium, or the one-time preview, and only if you turn it on)

Suggested Picks (Premium, opt-in): to choose your recommendations, the titles you track and watch and your favourite genres are sent to a third-party AI service acting as our processor. That service is currently Google's Gemini API, on its paid tier, under terms that do not let Google use this data to train its models. Your name, email address and account id are never sent. Nothing is sent until you allow it, and you can turn it off at any time in Profile → Privacy, which deletes your current picks.

The app calls this "a third-party AI service" rather than naming the vendor; this policy names it. If we move Suggested Picks to a different provider, we will update this policy first. If the new provider's data terms were less protective than those above (for example, if it could train on your data), the app would ask for your permission again before sending anything.

Android waitlist (website only)

Stay Tuned is out on iPhone. If you enter your email address on our home page to be told when the Android version is released, we store that address, the date you submitted it, which form you used, and the two-letter country code our host reports for the request. Nothing else — no name, no tracking pixel, no advertising profile. This is collected on the website, not in the app, and it is entirely optional.

We send at most two emails to it: one confirmation straight after you sign up, so you know it worked and can undo it, and one when Stay Tuned is available on Android. We do not sell or share the list, and there is no newsletter. The emails are sent through Resend, which receives only your address and the message. Ask us at hello@hakusoft.ai and we will delete your address; the whole list is deleted once the Android email has been sent.

Every email has an unsubscribe link. Opening it shows a page with a button, and your address is removed when you press it (or when your mail app's own unsubscribe button is used). When you unsubscribe, your address is deleted — but we keep a one-way code derived from it so the same address cannot be added back by someone filling in the form again. We treat obvious variants of one inbox as the same address for this — for example a Gmail address with dots or a "+" tag added. The code cannot be reversed into an address and cannot be used to contact you or anyone else; it exists only so that your decision to opt out sticks. It is deleted along with the list. Because of it, signing up again through the form will not add you back; if you change your mind, email hello@hakusoft.ai and we will.

This website

The pages on staytuned.hakusoft.ai load their typefaces from Google Fonts, so your browser fetches them from Google's servers, which receive your IP address and browser details as part of that request; Google's privacy policy governs that. We count page views with Cloudflare Web Analytics, which sets no cookies, does not fingerprint your browser, and shows us only totals such as visits per page and per country. Cloudflare also hosts the site and, like any web host, processes request data such as IP addresses to deliver and protect it.

How we use your information

To provide the core service — storing and syncing your watch list and progress.
To authenticate you and keep your account secure.
To send the on-device reminders you opt into.
To diagnose crashes and improve stability, and — if you opt in — to measure how the app is used.
To understand, in aggregate, how many people are using the app and whether they keep using it.
To show community charts: ranges of how many accounts track or watch a title, never who.

We do not use your information for advertising, and we do not sell it or share it for anyone else's marketing. The only personalisation is the optional Suggested Picks feature described above, which you turn on yourself and can turn off at any time.

App Store statistics

Apple publishes anonymous, aggregate statistics to us about the app as a whole — for example how many times it was downloaded or deleted in a given period, and in which countries. These are Apple's figures, they contain no identifiers, and they cannot be connected to you or to any individual account, by us or by anyone else. Apple's own privacy policy governs how it produces them.

Third-party services

Stay Tuned relies on a small number of service providers strictly to operate:

Railway — hosts the servers that run our database and authentication. Your account and library are stored there on our behalf, protected by row-level security so you can only access your own data.
Apple Sign in with Apple and Google Sign-In — used only if you choose them, to verify your identity. Their handling of your data is governed by their own privacy policies.
The Movie Database (TMDB) and TVmaze — public catalogs we query for show and movie details, artwork, and air dates. When the app looks up a title, your search terms are sent to these services to return results; your account identity is not shared with them.
Sentry — always receives scrubbed, anonymized crash reports; it additionally receives usage measurements only if you opt in (see above).
RevenueCat — used only if you buy Stay Tuned Premium, to verify your purchase with Apple and to remember that you own it across your devices. It receives your account identifier and the purchase itself. Apple processes the payment; we never see your card details.
Google (Gemini API, paid tier) — the current AI service for Suggested Picks, used only for Premium, or the one-time preview, and only if you turn Suggested Picks on, to choose your recommendations. It receives the titles you track and watch and your favourite genres, never your name, email or account, and does not use them to train its models.
Resend — sends the Android waitlist emails described above, and nothing else.
Cloudflare — carries the app's connections to our servers, stores our encrypted database backups (which Cloudflare cannot read), and hosts this website.
Google Fonts — serves this website's typefaces (see "This website").

Data retention & deletion

We keep your account data for as long as your account exists. You can delete your account at any time from within the app (Settings → account), which permanently removes your account and the library, preferences and purchase records associated with it from our systems, and deletes the customer record RevenueCat keeps for your account. Apple keeps its own record of any App Store purchase, as it does for every purchase, under Apple's privacy policy — that is what lets you restore a purchase on a new account. Data cached locally on your device is removed when you delete the app.

Deleting your account also removes the session records described under "Recent activity", so your contribution to those figures goes with it. One thing is kept: a daily tally of how many accounts fell into each activity band on a given day. Those rows are counts and nothing else — they contain no identifiers, so there is nothing in them to attribute to any person or to remove. They are deleted automatically after 730 days.

Your rights

Depending on where you live (for example, under the EU/UK GDPR or the California CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Because your data is tied to your account, you can exercise most of these rights directly in the app, or by contacting us at hello@hakusoft.ai. We do not sell or share personal information as those terms are defined under the CCPA.

Data security

Data in transit is encrypted with HTTPS, and access to your stored data is restricted by authentication and row-level security so that only you can reach your own records. No system is perfectly secure, but we work to protect your information and to minimize how much we hold in the first place.

International transfers

Our service providers may process and store data on servers located outside your country. Where required, we rely on appropriate safeguards for such transfers.

Children's privacy

Stay Tuned is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy as the app evolves. When we make material changes, we'll revise the "Last updated" date above and, where appropriate, notify you in the app.

Contact

Questions about privacy or your data? Email us at hello@hakusoft.ai.