Your selected age band, never a birth date; display name; account identifier when signed in; discovery preferences; group membership; title decisions; plans; consent receipt; push token when enabled; reports; blocks; and limited diagnostics. ReelAgree does not collect payment data, precise location, contacts, or viewing-provider history.

Invite recipients can join and vote as guests. An account is required to host groups, recover durable history across devices, transfer ownership, and enable push. Account identity is designed for Clerk email verification codes, Sign in with Apple, and Google sign-in.

The web app is ad-free. Native Search and Library may show contextual non-personalized banners only after consent. ReelAgree does not request App Tracking Transparency permission, sell personal information, or use behavioral targeting. Privacy choices remain available in Settings. Ad failure never blocks app features.

Cloudflare hosts the API, reviewed catalog, queues, and database. Clerk provides signed-in identity when configured. Expo delivers opted-in native notifications. Google AdMob and its consent platform are used only for eligible native contextual ads. Sentry may receive scrubbed crash diagnostics without request bodies, tokens, invite values, names, plan notes, or catalog payloads.

Expired guest sessions, invites, and idempotency records are purged by a maintenance queue. Diagnostics are retained for up to 30 days. In-app deletion removes decisions, memberships, preferences, consent, blocks, tokens, and notifications, disables identity, and retains only anonymous historical consensus aggregates. Remaining provider deletion work completes within 30 days.

You may decline notification and calendar access, withdraw ad consent through Privacy choices, export data, reset guest data, report or block members, leave groups, or delete an account in Settings.