Clear choices.
Respect for your data.

Who we are

Entlo is provided by Electric Studios. This policy explains how Entlo handles information when you use our iOS, iPadOS, macOS, or Android applications for movie discovery, social, review, messaging, and account features.

Information we collect

We process your email address, username, optional first and last name, profile image, region preference, account settings, watchlists, ratings, reviews, comments, messages, reactions, friend connections, favourites, list collaboration settings, and activity you choose to share. We also process session information, technical data needed to keep the service secure and reliable, and a device push token (plus a Firebase installation identifier on Android) when you enable message or friend-request notifications.

Search history

Recent searches and items you open directly from Search (movies, TV shows and people) are saved locally on your device by default, separately for each signed-in account. Pages opened elsewhere in the app are not added to this viewed history. You may optionally enable private account synchronisation in Search for both histories. Only new searches and new Search openings made after enabling synchronisation are uploaded to Supabase; older local history is not automatically uploaded. Synced history is linked to your account, is visible only to you, is limited to 20 recent searches and 20 recently viewed items, and is hidden after 90 days; expired cloud entries are normally deleted by hourly cleanup within one additional hour. It is not shared with friends, used for advertising, or included in product analytics. You can clear either history or disable synchronisation in the app. Disabling synchronisation stops new uploads but existing cloud history remains until you clear it or it expires. Account deletion also deletes synced history.

Product analytics

Optional product analytics is off by default. If you enable it in Settings, Entlo counts each movie or TV show you open once per account per UTC day, regardless of your device or app language. The permanent popularity statistics are anonymous aggregates containing only the day, public TMDB title identifier, media type, and total count. They contain no account identifiers, names, email addresses, device identifiers, app language, or individual opening times and cannot directly identify you. Supabase authentication is used to prevent duplicate counts and abuse. Short-lived keyed, pseudonymous receipts and independent rate-limit markers are kept privately for deduplication and security, not as a permanent browsing history. Hourly cleanup removes previous-day receipts and daily secrets, normally within 25 hours, and expired rate-limit markers. You can disable analytics at any time. We do not use this data to track you across apps or websites.

Why we use it

We use this information to provide your account, synchronise your library and preferences across your devices, enable social features, deliver requested messages and notifications, prevent abuse, secure the service, and improve reliability. We do not sell personal information.

Service providers

Account, library, messaging, review, and social data are processed through Supabase. Entlo uses Resend to deliver transactional account emails, including email-address confirmation, password-reset, email-change, and security messages. For this purpose, Resend processes the recipient's email address and technical delivery information; Entlo does not use Resend for advertising or cross-app tracking. If you enable message notifications on Apple devices, Apple Push Notification service receives the sender's display name, optional public profile image URL, and routing identifiers to deliver an alert; the message text is not included. On Android, optional message and friend-request alerts use Google Firebase Cloud Messaging (FCM) and Firebase installations, as described in the Android push notifications section below. Film, series, cast, crew, artwork, metadata, and regional watch-provider information are requested from TMDB; availability data is supplied by JustWatch through TMDB. Public movie and TV details are temporarily cached on your device and in Supabase, separately for each language, to reduce repeated requests. These caches do not include your private reviews, messages, ratings, or account details. Cached details expire according to the title's release date and series schedule and are refreshed on demand; scheduled cleanup removes shared payloads more than 14 days old. Your region-specific provider results are not mixed into the shared title cache. Authentication and service providers' operational security and delivery logs are separate from the aggregate popularity counters. This product uses the TMDB API but is not endorsed or certified by TMDB. Electric Studios is not affiliated with TMDB.

Android push notifications

On Android, optional message and friend-request notifications use Google Firebase Cloud Messaging (FCM). When you are signed in and allow notifications, Google processes a Firebase installation identifier, a push token, technical app/device information needed for delivery, and routing identifiers. Supabase associates the token with your account and authenticated session. FCM receives a wake-up signal; private message text, names and profile photos are fetched by Entlo directly from Supabase under the existing access and blocking rules, rather than sent in the FCM payload. This is account-linked functionality, not anonymous analytics. Firebase Analytics is not enabled. Android's notification switch controls both messages and friend requests, and you can also disable Entlo notifications in system settings. Sign-out unregisters this session's installation when the server can be reached; expired sessions cannot receive new server-authorized notifications. Inactive Android installation registrations expire after 90 days. Google processes delivery data under its Firebase service and data-processing terms.

Read the Firebase Terms and Firebase privacy information.

Friend-request notifications

On Apple devices, friend-request push notifications are optional and have a separate device-local setting from message notifications. If enabled, Supabase sends Apple Push Notification service the requester's username, optional public profile image URL, and routing identifiers. No private message body or email address is included. Requests are checked again before delivery and are not sent if accepted, removed, blocked, or expired. You can disable these notifications in the app or disable all Entlo notifications in system settings. On Android, the combined notification switch and Firebase processing described above apply to both message and friend-request alerts.

Sharing and visibility

Your username, optional name, and profile image may be visible to other users. Public lists, ratings, reviews, comments, and activity are visible according to the feature and privacy settings you choose. New season and episode watched activities are shared with accepted, unblocked friends, like movie and TV-show watched activities; previously private watched marks are not automatically published. Private lists are not shown on your public profile. Direct messages and the media or reviews shared in them are available to the people in that conversation; a limited excerpt of reported content may also be available to authorised moderators for safety review.

Safety

You can block or report users in the app. Blocking removes the friendship and stops new direct interaction. We may retain the minimum information necessary to investigate abuse, fraud, security incidents, or unresolved reports where required by law.

Security

Information is transmitted over HTTPS. Session credentials are protected using operating-system security facilities, including Android Keystore on Android and the platform security facilities on Apple devices. No system can guarantee absolute security, so please use a unique password and protect access to your devices.

Retention and deletion

We retain account data while your account is active. When you confirm permanent account deletion in the app and it succeeds, the account and associated profile, lists, ratings, reviews, comments, messages, and connected social data are deleted immediately. If you cannot access the app, verified deletion requests sent to support are completed within 30 days. We may retain only the minimum data required for security, fraud prevention, legal obligations, or an unresolved abuse report, and only for as long as that purpose requires.

Children

Entlo is not directed to children under the age required by applicable law to consent to online services. Do not create an account if you do not meet that age requirement.

Your choices

You can edit your profile, change your language and region preference, control list visibility and optional product analytics, sign out, permanently delete your account, and report or block users. For privacy questions, contact Electric Studios at electric.support@icloud.com.

Changes

We may update this policy when the service changes. Material changes will be reflected by a new effective date in the app and on this page.