Slate Mate

Privacy Policy

Effective date: 8 August 2026 · Last updated: 8 August 2026

Slate Mate is a movie diary. You log what you watched, rate and review it, and share that activity with people you have specifically chosen. This policy explains exactly what is stored, who can see it, and how to get rid of it.

The short version. Slate Mate does not contain advertising, analytics, or tracking software of any kind. Nothing you do in the app is sold, shared with data brokers, or used to build an advertising profile. Your watch history is visible only to the groups you tag an entry to and to friends you have mutually accepted, and you can delete your entire account from inside the app at any time.

1. Who is responsible for your data

Slate Mate is an independent app developed and operated by Jacob Spitale, an individual developer, acting as the data controller for the information described below.

Privacy questions, access requests, and deletion requests: slatemate.app.legal@gmail.com

2. Information you give us

Account information

Email address and password — if you create an account with email and password. Your password is never stored in readable form; it is stored only as a salted hash by our authentication provider, and it is not visible to the developer.
Google or Apple account identifier and email address — if you instead choose “Continue with Google” or “Continue with Apple”. We receive only an account identifier and email address from the provider. If you use Apple’s Hide My Email option, we receive only the relay address Apple generates, and never your real one.
An account identifier assigned by the system, used to link your content to your account.

Profile information (all optional)

Display name, shown to your group-mates and friends.
Profile photo, if you choose one from your photo library.
Friend code — a short code generated for you by the server so you can be added as a friend by someone you hand it to. You cannot edit it, and it is not derived from any other personal information.
Privacy preferences — your choices about whether friends may see your watch history and watch list.

Content you create

Watch entries — the movie, the date you say you watched it, an optional 1–10 rating, an optional written review, an optional short “gut take”, whether you marked it as liked, and any reaction tags you selected.
Watch list entries — movies you have saved to watch later, personally or in a group.
Group information — groups you create or join, their names, their optional group photos, member roles, and invite codes.
Social connections — friend requests you send, receive, accept, or decline, and reactions (the popcorn/tomato votes) you cast on a group’s shared watch list.

3. Information we do not collect

This section is unusually specific on purpose, because the answer is unusually short. Slate Mate contains no third-party advertising SDK, no analytics SDK, and no crash-reporting or attribution SDK. Accordingly, the app does not collect:

Advertising identifiers (IDFA) — the app never requests tracking permission, because it does not track.
Location data of any kind, precise or coarse.
Contacts, calendars, reminders, microphone, or camera data.
Your photo library’s contents. The app can only ever receive the single image you explicitly pick, and it does not browse, scan, or index your library.
Health, fitness, financial, or payment information. Slate Mate is free and contains no purchases.
Browsing history, search history outside the app, or usage analytics such as screen views, session length, or feature engagement.

4. How your information is used

Purpose	Data used	Legal basis (UK/EU)
Create and secure your account; keep you signed in	Email, password hash or provider identifier	Performance of a contract
Store and display your watch history, ratings, and reviews	Content you create	Performance of a contract
Show your activity to the groups you tag it to and to friends you accepted	Content you create, display name, profile photo	Performance of a contract
Let people add you as a friend	Friend code, display name, profile photo	Performance of a contract
Show movie titles, posters, cast, and recommendations	Movie identifiers and search text only — never your identity	Performance of a contract
Keep the service working, prevent abuse, and respond to support requests	Account information, and any content relevant to a report	Legitimate interests

Your information is never used for advertising, profiling, or automated decision-making that produces legal or similarly significant effects.

5. Who can see your activity

Slate Mate’s sharing model is deliberately narrow, and it differs between groups and friends. It is worth reading closely.

By default, nothing you log is visible to anyone else. An entry you do not tag to a group, at a time when you have no friends, is visible only to you.
Groups see only what you tag to them. Sharing to a group is a per-entry decision you make when you log a movie. Members of that group can then see that entry — the movie, your rating, your review, your gut take, your reaction tags — along with your display name and profile photo. Groups are invite-only; there is no way to browse or join a group without its invite code.
Friends see your whole history. This is broader, and it is why becoming friends requires both people to agree. Once a friend request is accepted, that person can see your entire watched history and watch list, including entries you never tagged to any group, plus the statistics derived from them. Either person can remove the friendship at any time, which immediately ends that access.
You can switch friend visibility off. Settings → Privacy lets you hide your watched history, your watch list, or both, from friends. Note carefully what this does not do: entries you previously tagged to a group stay visible to that group. Tagging is an explicit, deliberate act of sharing, and silently withdrawing an entry would change that group’s shared statistics for everyone else in it. To remove an entry from a group, untag or delete the entry itself.
Group-mates can log a movie into your history. When you watch something with a group, another member can credit you for it. That creates a real, unrated entry in your account, and you are told about it in your notifications. You can delete it like any other entry.

Profile and group photos are publicly readable

Profile photos and group photos are stored in a public storage bucket, which means that anyone holding the direct image URL can view that image without signing in. The URLs are not listed, indexed, or discoverable through the app by people outside your groups, but they are not access-controlled either. Please do not use a photo you would not be comfortable being seen outside the app. Deleting your photo or your account removes the file.

6. Service providers

Slate Mate relies on a small number of third parties to operate. They act on our instructions and are not permitted to use your data for their own purposes.

Provider	Role	What it receives
Supabase	Database, authentication, file storage, real-time sync	Everything described in section 2. This is where your account and content live.
The Movie Database (TMDB)	Movie titles, posters, cast, runtimes, recommendations	Movie identifiers and any text you type into movie search, plus your device’s IP address as an unavoidable part of any internet request. Requests are not signed with, labelled with, or otherwise connected to your account. TMDB is never told who is asking.
Google / Apple	Optional sign-in	Only involved if you choose that sign-in method. They confirm your identity to us; we do not send them your app activity.
Apple	App distribution	Download and, if you opt in, crash data — handled under Apple’s own privacy policy, not visible to us in an identifiable form.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so.

Information may also be disclosed if required by law, or to protect the rights, safety, or property of users or the public — for example, in response to a valid legal demand.

7. Where your data is stored

Data is stored on servers in the United States. If you use Slate Mate from the United Kingdom, the European Economic Area, or another region with data-transfer rules, your information is transferred to and processed in the United States under Standard Contractual Clauses or an equivalent transfer mechanism offered by our hosting provider.

8. How long we keep it

Your account and content are kept until you delete them. Deleting a single entry removes it immediately.
Deleting your account removes your profile, watch history, reviews, watch list, friendships, group memberships, votes, and photos immediately and permanently.
Groups you own are handed to the longest-standing remaining member so the group survives your departure. If you were the only member, the group is deleted with your account.
Encrypted backups held by our hosting provider may retain deleted data for up to 30 days before being overwritten in the normal backup rotation.

9. Your rights and choices

You can, at any time and without asking us:

Edit or delete any rating, review, or watch entry.
Change or remove your display name and profile photo.
Hide your watch history and watch list from friends (Settings → Privacy).
Remove a friend, ending their access to your history.
Leave a group.
Change your password (Settings).
Delete your entire account (Settings → Delete account). See the deletion page.
Deny or revoke photo library access in iOS Settings. Everything except setting a photo continues to work.

If you are in the UK or European Economic Area

Under the UK GDPR and EU GDPR you have the right to access, correct, erase, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent where processing relies on it. Most of these are exercisable directly in the app; for the rest, or for a copy of your data in a portable format, email slatemate.app.legal@gmail.com. You also have the right to lodge a complaint with your national data protection authority — in the UK, the Information Commissioner’s Office at ico.org.uk.

If you are in California

Under the CCPA as amended by the CPRA you have the right to know what personal information is collected and how it is used, to request correction or deletion, and to opt out of the sale or sharing of personal information. Slate Mate does not sell or share personal information, so there is nothing to opt out of, and we do not offer financial incentives in exchange for data. You will never be discriminated against for exercising these rights. Requests: slatemate.app.legal@gmail.com.

We aim to respond to any request within 30 days. We may need to verify that a request comes from the account holder before acting on it.

10. Security

All traffic between the app and our servers is encrypted with TLS, and data is encrypted at rest. Access to your content is enforced at the database level by row-level security policies, so the rules described in section 5 are applied by the database itself on every single query, rather than only by the app’s screens. Passwords are stored as salted hashes.

No system is perfectly secure. If you believe your account has been compromised, or if you find a security vulnerability, please contact slatemate.app.legal@gmail.com and we will respond as quickly as we can.

11. Children

Slate Mate is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact slatemate.app.legal@gmail.com and we will delete the account and its data promptly.

12. Changes to this policy

If this policy changes, the “last updated” date above changes with it. If a change materially affects how your information is used or who can see it, we will give notice in the app before it takes effect.

13. Contact

Jacob Spitale — slatemate.app.legal@gmail.com