fiyago.

Your data

Privacy at Fiyago

Last updated: 3 November 2026

Fiyago is operated by David Poole, the controller of the personal information described here. Contact support@fiyago.com about privacy, support or your data rights. This notice covers the Fiyago beta app and this website.

What you choose to keep

Guest libraries stay on your device. Using search, metadata, trailers and provider links still contacts the relevant services described below. With an account, Fiyago processes your email, account identifier and authentication information, plus your library, collection states, series progress, ratings, selected services, manual provider notes and recommendation preferences. These provide sign-in, sync and personalised suggestions.

Household names, membership and shared collection information are available to members of that Household. Your Personal collection and private ratings remain separate. We do not connect to your contacts or streaming-service accounts.

Why we use this information

We process account and library information to provide the service you request (performance of our agreement with you). We use necessary support and security information for our legitimate interests in running, protecting and improving Fiyago, and where necessary to meet legal obligations. Feedback is sent only when you choose to share it; it may include personal information you enter.

We do not sell your personal information or use it for advertising targeting. Fiyago does not make automated decisions with legal or similarly significant effects; recommendations help you choose what to watch.

Services and recipients

International processing

Some service providers process information outside the UK, including in the US. A London database and Ireland sending region do not keep all processing in those locations. Supabase and Resend describe contractual transfer safeguards in their data-processing terms, including standard contractual clauses and applicable UK provisions. Contact us for information about the safeguards relevant to your data.

How long information is kept

Account and Personal cloud information is kept while your account exists and removed from active application storage when deletion completes. Removing a title from your library alone keeps its private rating and relevant history for you; it is not account deletion. Shared content may remain for other Household members.

Resolved support and deletion correspondence is kept for up to 90 days after resolution, unless needed for an unresolved dispute or legal obligation. This also applies to resolved beta feedback retained by the developer.

Resend states that email content and delivery logs are retained for 30 days on its standard plans, with backups retained for seven days. Infrastructure security logs and backups follow the provider’s retention arrangements and may not be erased immediately with your account; they are used for security, recovery or legal requirements rather than to keep your deleted library active. Retention depends on the record’s purpose and the provider’s applicable plan and obligations. You can contact us for details.

Watchmode’s shared exact-title destination cache lasts up to 24 hours. Account-linked rate records are removed on account deletion and otherwise purged after their short rate window; aggregate credit accounting is not your Personal library. Exports and device backups you retain remain under your control.

Optional product analytics

In analytics-enabled versions of Fiyago Beta, we ask before sharing usage analytics with PostHog, our product analytics processor. Choose Allow analytics or Not now. All features remain available either way. You can change your choice in Settings → Data & attribution → Share usage analytics. The choice is saved for the current account or guest scope on this device; another account does not inherit it.

With your consent, we send categorical interactions such as tabs opened, whether searches returned results, Film/Series collection changes, and use of ratings, trailers, Watch Now and Household features. Events include platform, app version/build, timestamps, event/session identifiers and a pseudonymous identifier. Signed-in activity can be linked across sessions and devices. Guest activity uses a random identifier and may be associated when you sign in. Pseudonymous does not mean anonymous.

We deliberately do not send PostHog your name, email, search text, programme titles or content identifiers, Household names, invitation codes, selected service names, provider URLs, passwords or authentication tokens. We do not enable session replay, broad automatic interaction capture, advertising tracking or automatic crash capture. GeoIP enrichment is disabled and client IP data is discarded from stored events; network services still process connection information.

Our policy is to retain product analytics for no more than 12 months. We use PostHog’s free Product Analytics plan, which provides one-year event retention. We must reassess retention before moving to a paid plan. Event retention does not necessarily remove person profiles, which require separate erasure.

Turning analytics off stops future capture and resets the local analytics identity. Requests already sent cannot be recalled. Account deletion also stops and resets local analytics, but does not automatically delete historical records held by PostHog. Associated identified analytics require a separate administrator erasure process, including associated events. Contact support@fiyago.com, preferably before deleting your account, so we can locate the associated pseudonym and arrange erasure. Unlinked guest events cannot reliably be located from an account. Analytics erasure must not delay deletion of your Fiyago account.

We use PostHog Cloud EU, hosted in Frankfurt. PostHog and its subprocessors may process information internationally under their applicable data-processing terms and transfer safeguards; EU hosting does not mean all processing stays in the EU. See PostHog’s privacy notice. Consent is the basis for this optional analytics processing and can be withdrawn at any time without affecting prior lawful processing.

Website storage and security

These public pages have no sign-in form, advertising, analytics scripts or application cookies. We do not collect passwords here. Web hosting still processes requests to serve the pages. The app uses local storage for your library and secure native storage for authentication tokens. Account traffic uses HTTPS and access controls; it is not end-to-end encrypted.

Your choices and rights

You can use guest mode, edit your library, export local data in Settings or delete your account and Personal cloud data. Account deletion does not remove another member’s Personal data. An owner with another active Household member must resolve ownership first.

Depending on the circumstances, you can request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Contact support@fiyago.com. We may verify your identity and normally respond within one month. You can also raise a concern with the UK Information Commissioner’s Office.

Updates

We will update this notice as the beta changes and communicate material changes through appropriate app or account channels.