Privacy policy
Effective October 23, 2026. Applies to the Rewind app for iPhone and iPad (Rewind: Movie & TV Tracker, formerly PixelFlix) and the RewindClan community at rewindclan.com, both made by Damobo.
The short version. You can use Rewind without an account, and then your library stays on your phone. If you join RewindClan, we keep your account details and a backup of your library so it comes back on any phone, and the things you post in the community are public. No ads, no tracking across other apps, no selling your data. We use anonymous usage analytics to improve the app, and you can turn them off. Delete your account in the app at any time.
1. Without an account
Everything you create is kept in a database on your device: the first name you optionally enter, your favorite genres and tastes, shelves and watchlists, your Collection, watch history, ratings, private notes, episode progress, and cached posters and film details. It stays on your phone. (Usage analytics, in section 4, can include the titles you add or watch, but not your notes.)
Anonymous moments on the community feed. Without an account, some of what you do in Rewind can appear on the community feed under a generated pen name (like "Velvet Projectionist"): finishing a film, a season or a show, starting a show, a rating, a Movie Night pick, adding to your Collection, and watching streaks. Never your name, your notes, your location or anything that identifies you. To do this the app creates a random install ID that isn't linked to your device or Apple ID; we store only a scrambled (hashed) form of it, used to limit how often moments are posted, to tell you when people react, and to move these cards to your account if you join. You can turn this off at any time in Settings → Privacy ("Share anonymously on the feed").
2. With a RewindClan account
An account is optional. It backs up your library and lets you take part in the community. We store:
- Account details: your username, email address, and a securely hashed password, or, if you use Sign in with Apple, the identifier Apple gives us (which can be a private relay email). For Apple sign-ins we also keep a token from Apple, used only to unlink your Apple ID when you delete your account.
- Profile: display name, bio, profile photo, banner color, your favorite four, and the tastes you picked when you set up the app.
- Library backup: for each film or show in your library: whether it's on your watchlist or in your Collection, watch count and date, rating, episode progress, and your private note. Notes and the library backup are never shown to anyone else.
- Community activity: posts, comments, votes, reactions, follows, club memberships, and activity cards (e.g. "watched Alien") if "Share what I watch" is on. You can turn that off in Settings.
- Safety records: reports you make, people you block, and moderation actions.
- Security: the IP address you signed up from and the one you last used, sign-in session tokens, and password-reset links (single use, valid one hour). We use these to keep accounts safe and to stop spam and abuse.
- Notifications: if you turn on notifications, your phone's push token, so we can send replies, follows and reactions through Apple's push service.
What other people can see
Your username, display name, photo, bio, banner, favorite four, followers and following, and everything you post, comment, react with or share as an activity card. Your email, library backup, notes, ratings you haven't shared, and IP addresses are never shown.
3. Services that help Rewind work
Some features need information from other services. We don't send your name, email or account with these requests.
| Service | What is sent | Why |
|---|---|---|
| Rewind AI service (our own, hosted on Cloudflare, using Google Gemini) | The text you type into Ask Rewind or a vibe; titles you've watched, saved or passed on so picks aren't repeated; a film's title and year; a random install ID the app creates; and, for Plus, Apple's proof of your purchase. | AI picks, recaps, watch orders and film extras, and counting free daily picks. |
| TVmaze, TheTVDB, Wikipedia | Film and series titles. | Seasons, episodes, details and poster art. |
| RewindClan catalogue (rewindclan.com) | Titles you search for or open. | A shared catalogue of film details and backup posters, so titles load fast and keep their art. |
| Apple | Handled by Apple: purchases, Sign in with Apple, push notifications, and the top-movies chart. | Rewind Plus, signing in, notifications, the "Hot right now" row. |
| YouTube | Opens when you tap Play trailer. | Trailers. Google's privacy policy applies from there. |
| JustWatch and streaming services | Opens when you tap Where to watch or a service button: the title you're looking at. | Finding where to stream, rent or buy it. Their privacy policies apply from there. The services you tick in Settings stay on your phone. |
The RewindClan server is hosted by hosting.com and our domain uses Cloudflare. Account emails (welcome, password reset, "password changed") are sent from our own mail server. We don't send marketing email.
4. Usage analytics and screen recordings
To see which features people use and fix what's confusing, the app sends usage events to PostHog (US cloud): things like which screens you open, swipes, searches, what you add to your watchlist, onboarding steps, and paywall and purchase steps. Each event carries your plan (free, monthly, yearly or lifetime), whether you're in a free trial, whether you're signed in, your device model, iOS and app version.
- Who it's tied to: a random id the app creates. If you sign in to RewindClan, it's linked to your account number (never your email or username) so your phone and iPad count as one person.
- Screen recordings: the app may record how screens are used (taps, scrolling, what's on screen) to find bugs and confusing spots. Anything you type that's personal (notes, posts, comments, your name and bio, email and passwords) is hidden in the recording. App logs and network timings are included to help debug errors.
- Turn it off: Settings, Privacy, "Share usage data". When it's off, the app sends no usage events and makes no recordings.
- Analytics data is kept for up to one year (recordings for 30 days), isn't used for advertising, and is never sold.
5. Purchases
Rewind Plus is bought through Apple. We never see your payment details. The app checks your purchase with Apple to unlock Plus.
6. What we don't do
- No advertising, ad identifiers or ad networks.
- No tracking you across other apps or websites, and no ad SDKs. The only analytics tool is PostHog, described above, and you can switch it off.
- No selling or sharing of your personal information.
- No access to your contacts, location, microphone or camera. If you add a profile photo, the app only reads the one picture you choose.
7. How long we keep it, and deleting it
- Delete your account in the app: Settings, your RewindClan account, Delete account. This immediately erases your email, profile, photo, library backup, tastes, push tokens, sessions and IP addresses, removes you from clubs, deletes your follows, reactions and notifications, and unlinks Sign in with Apple. Posts and comments you made stay in their discussions but are shown as from a deleted account, so conversations still make sense. Delete any you want gone first, or ask us to.
- Without an account: Settings, "Erase all shelves & history", or delete the app.
- Want a copy of your data, or deletion by email? Write to [email protected] from your account's email and we'll reply within 30 days.
8. Community safety
Posts can be reported, and people can be blocked. Our moderators review reports and may remove content or suspend accounts that break the community rules. A filter blocks some offensive words before they're posted.
9. Children
Rewind and RewindClan are for people 13 and older. We don't knowingly collect information from children under 13. If you think a child has an account, email us and we'll delete it.
10. Your rights
Depending on where you live (for example in the EU, UK or California), you may have rights to access, correct, delete or export your data, or to object to how it's used. Most of this you can do in the app; for anything else, email us. You can also complain to your local data protection authority.
11. Changes
If we change how Rewind handles data, we'll update this page and its date, and mention material changes in the app's release notes.
12. Contact
Damobo · [email protected]