Your selected age band, never a birth date; display name; account identifier when signed in; discovery preferences; group membership; title decisions; plans; consent receipt; push token when enabled; reports; blocks; and limited diagnostics. ReelAgree does not collect payment data, precise location, contacts, or viewing-provider history.

Invite recipients can join and vote as guests. An account is required to host groups, recover durable history across devices, transfer ownership, and enable push. Account identity is designed for Clerk email verification codes, Sign in with Apple, and Google sign-in.

ReelAgree does not display advertising, request App Tracking Transparency permission, sell personal information, or use behavioral targeting.

Cloudflare hosts the API, reviewed catalog, queues, and database. Clerk provides signed-in identity when configured. Expo delivers opted-in native notifications. RevenueCat receives an app-specific user identifier and App Store purchase status to unlock ReelAgree Plus. When you opt in through Settings, Sentry may receive scrubbed crash diagnostics without request bodies, tokens, invite values, names, plan notes, or catalog payloads.

Expired guest sessions, invites, and idempotency records are purged by a maintenance queue. Diagnostics are retained for up to 30 days. In-app deletion removes decisions, memberships, preferences, consent, blocks, tokens, and notifications, disables identity, and retains only anonymous historical consensus aggregates. Remaining provider deletion work completes within 30 days.

You may decline notification and calendar access, opt out of crash diagnostics, export data, reset guest data, report or block members, leave groups, restore purchases, or delete an account in Settings.