Privacy Policy

Effective date: April 13, 2026 · Last updated: April 21, 2026

This Privacy Policy explains how ShareShows ("ShareShows", "we", "us", or "our") collects, uses, and shares information when you use the ShareShows mobile app and related services (the "Service"). ShareShows is operated by Artwalrus.

If you have questions, contact us at support@shareshows.app.

1. Who this applies to

This policy applies to everyone who installs and uses the ShareShows app on iOS or Android.

ShareShows is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

2. Information we collect

We only collect what the app needs to work. Specifically:

Account information

Email address — collected when you sign up with email and password or via Sign in with Apple. If you use Apple's Private Relay, we receive the relay address and treat it the same as any email.
Password — if you sign up with email and password, your password is hashed and stored by our authentication provider (Supabase). We never see or store your plaintext password.
Display name — set by you in the app.
Avatar image — optional, uploaded by you.
Country code — used to show the right streaming services in your region.

Profile phone number (optional)

If you choose to save your phone number so friends can find you, we store a salted SHA-256 hash of your number — never the plaintext. We cannot read your phone number back from the hash.

Content you create

Your recommendations (show/movie selections, ratings, watch status, and optional 280-character notes)
Your watchlist, dismissed titles, and friend groups
Family group memberships and family promotion pitches you send to family members
Your streaming service subscriptions (which ones you're subscribed to, and optional custom prices you set)

Friend connections

Your connections with other ShareShows users, including accepted, pending, and blocked relationships.

Contacts (only when you use "Add Friend")

When you tap "Find friends from contacts," the app asks your device for permission to read your contacts. If you grant permission:

Phone numbers from your contacts are hashed on your device (salted SHA-256) before they leave it. We do not receive plaintext phone numbers from your contacts.
Email addresses from your contacts are sent to our servers in plaintext so we can compare them against the email addresses of existing ShareShows accounts.
The hashed phone numbers and email addresses are used only to look up existing ShareShows users at the moment you tap the button. They are not written to any database, log, or analytics pipeline on our servers, and we do not store, retain, share, or sell your contacts.
You can revoke contacts permission at any time in iOS/Android settings.

Technical information

A user ID (UUID) assigned when you sign up.
Standard server logs (IP address, request timestamps) held temporarily by our infrastructure provider for security and abuse prevention.

What we do NOT collect

Precise or coarse location
Advertising identifiers (IDFA/IDFV)
Browsing or search history outside ShareShows
Health, financial, or biometric data
Any data for cross-app or cross-website tracking

3. How we use your information

We use the information we collect only to:

Run and maintain the app (authentication, recommendations feed, friend graph, family sharing, watchlists)
Match you with friends from your contacts (when you explicitly request this)
Generate personalized family pitch messages using an AI service (see below)
Respond to your support requests and reports
Detect and prevent fraud, abuse, and violations of our Terms of Service
Comply with legal obligations

We do not sell your personal information. We do not share your data with advertisers. We do not use your data for any form of cross-app or cross-website tracking.

4. How we share your information

We share data only with the following categories of recipients:

Supabase (our backend infrastructure)

ShareShows uses Supabase to store your account, content, and friend graph. Supabase is a hosted database and authentication provider acting as our data processor. Data is stored in Supabase's cloud infrastructure.

Anthropic (AI-generated family pitches)

When you use the "Share with Family" feature, we send the title name, your rating, your optional note, and the target family member's recent watch history (title names and ratings only — no personal identifiers) to Anthropic's Claude API to generate a personalized pitch message. Anthropic processes this request and returns the generated text. Anthropic does not use this data to train models. See anthropic.com/privacy.

Resend (email delivery for moderation reports)

When you report content or a user, we send a notification email to our moderation inbox via Resend (an email delivery provider). The email contains the reporter's and reported user's display name, email, and user ID so our team can act on the report. Resend processes this data solely to deliver the email and does not use it for any other purpose. See resend.com/legal/privacy-policy.

TMDB and Watchmode (title metadata)

We fetch show and movie metadata (title, poster, streaming availability) from The Movie Database (TMDB) and Watchmode. No personal information about you is sent to these services.

Other users of ShareShows

Your display name, avatar, recommendations, and watchlists are visible to people you have connected with as friends or who share a family group with you. Blocked users cannot see your content or send you connection requests.

Legal and safety

We may disclose information if we are legally required to, or if we reasonably believe disclosure is necessary to prevent harm, fraud, or abuse.

5. How long we keep your information

We keep your account and content for as long as your account is active. You can delete your account at any time from the Profile screen in the app. When you delete your account:

Your profile, recommendations, watchlist, friend connections, family memberships, and family promotions are deleted.
Server logs may persist for a short period (typically up to 30 days) for security and abuse prevention.

6. Your rights

Depending on where you live, you may have rights to:

Access the personal information we hold about you
Correct inaccurate information
Delete your account and associated data (available in-app from the Profile screen)
Object to or restrict processing
Data portability

To exercise these rights, email support@shareshows.app. We respond within 30 days.

7. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS) and encrypted authentication tokens on your device. No system is 100% secure, so we cannot guarantee absolute security.

8. International transfers

ShareShows is operated from the United States. If you use the Service from outside the US, your information will be transferred to and processed in the US and any other country where our infrastructure providers operate.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email. The "Last updated" date at the top reflects the most recent version.

10. Contact us

Questions, requests, or concerns? Email support@shareshows.app.