Privacy policy

Last updated: 6 October 2026

Episodic is an app for iPhone and iPad that keeps track of the shows and movies you watch. It also runs in your browser at app.episodic.aroncreates.com. This policy explains what data the app, its web version and this website handle, where it goes and what you can do about it.

Who's responsible

Episodic is made by Aron Creates ("we", "us"), who is responsible for your data. You can reach us at episodic@aroncreates.com.

Data that stays on your device

The app keeps these on your iPhone or iPad, and we can't see them:

• your library: tracked shows and movies, watched episodes, your watchlist and ratings
• settings such as your region and reminder time
• the reports you've sent us, so you can check their status
• the names of devices you've synced with
• if you're signed in, your account's email address and how you signed in

They're deleted when you delete the app. If you back up your device to iCloud or a computer, the backup includes them.

The web version keeps the same kinds of data in your browser's storage on that computer, including your sign-in if you sign in. It's deleted when you clear the browsing data for app.episodic.aroncreates.com. The web version and the iPhone app don't share a library.

Data that leaves your device

Show and movie information

Search results, show and movie details, release dates, posters and where-to-watch information come from The Movie Database (TMDB). The app requests them directly from TMDB, so TMDB receives your IP address, your device's language, what you search for and which titles the app loads. When you import a file, the app looks up the titles in it on TMDB in the same way. These requests don't pass through us, and TMDB handles them under its own privacy policy.

Where-to-watch information is provided to TMDB by JustWatch. Your device only contacts JustWatch if you open one of its links.

App configuration

When it starts, the app asks our server for its current settings, such as the key it uses for TMDB. The server runs on Cloudflare, which receives your IP address to deliver the request. The server's technical logs can include your IP address and approximate location, such as your country, and are kept for up to 7 days to fix problems and prevent abuse.

Feedback you send

When you report a bug or suggest a feature in the app, we receive what's on the form: your message and, if you add them, a screenshot, an email address for a reply, and diagnostics (app version, iOS version, device model and your region setting). If you're signed in, the email field starts with your account's address, and you can change or clear it. Your library is never included.

Reports are stored as issues in a private GitHub repository that only we can access, and screenshots are stored with Cloudflare. To limit abuse, our server counts reports per IP address for one minute. We use reports to fix problems, improve Episodic and reply to you. We keep a report while it's useful for that, and if you ask, we delete it, screenshot included.

Accounts (optional)

You don't need an account to use Episodic. When the welcome or sign-in screen is open, the app asks our account provider, Supabase, which sign-in options are available, so Supabase receives your IP address.

If you create an account, it's stored with Supabase in Frankfurt, Germany. Depending on how you sign in, it holds:

• Email and password: your email address and your password, stored in a hashed form that we can't read.
• Google: your email address, name and profile picture link, which Google shares when you sign in. Episodic doesn't use your name or picture.
• Apple: your email address, or a relay address if you choose Hide My Email.

For every account, Supabase also records when it was created and last signed in, and the IP address and device type of your sign-ins. Sign-in records are removed when you sign out or delete the account. Security logs are kept for up to 7 days.

We use this to run your account, to send account emails such as address confirmations and password resets (sent through Supabase), and to keep accounts secure. Your library isn't uploaded to your account. If we add cloud sync, we'll update this policy before it's available.

Deleting your account

In the app, go to Settings, tap your account, then tap Delete account. The account and everything stored with it are deleted right away, and security logs expire within 7 days. Your library stays on your device, because it was never uploaded. You can also email us to delete your account.

Reminders

Reminders are scheduled on your device. We don't run a notification server, and we don't learn what you're reminded about.

Nearby sync

Nearby sync sends your library directly between your devices over Bluetooth or Wi-Fi, encrypted with Apple's Multipeer Connectivity. It doesn't go through the internet or our servers. While the Nearby sync screen is open, your device's name is visible to other devices nearby that have Episodic's Nearby sync screen open.

Export and import

Exported files are created on your device, and you choose where they go. We don't receive them.

Data from Apple

Apple provides App Store downloads. If you've chosen to share analytics with app developers in your device's settings, Apple shares usage statistics and crash reports with us that don't identify you.

This website

This website is hosted by Cloudflare. It uses no cookies, analytics or third-party content. Cloudflare processes your IP address to deliver pages and protect the site from attacks.

The web version

The web version is also hosted by Cloudflare, which processes your IP address to deliver it. Apart from reminders and nearby sync, which it doesn't have, it works like the app: it gets show and movie information directly from TMDB, and accounts work the same way. It uses no cookies, ads or analytics.

Who processes data for us

TMDB, and Google or Apple if you sign in with them, receive data directly from you and handle it under their own privacy policies. We don't sell your data or share it for advertising.

International transfers

Supabase, Cloudflare and GitHub are US companies and may process data outside your country. Where a provider is certified under the EU-U.S. Data Privacy Framework, we rely on that certification. Otherwise, the transfer is covered by the European Commission's standard contractual clauses.

Legal bases

If you're in the European Economic Area, the UK or Switzerland, we process your data:

• to provide the app and the features you use, including your account, because it's necessary for our agreement with you (GDPR Article 6(1)(b))
• to handle your feedback and reply to you, and to keep our services secure and prevent abuse, based on our legitimate interests (GDPR Article 6(1)(f))

How long we keep data

• Your library and settings: on your device until you delete them or the app, or in your browser until you clear its data for the web version.
• Your account: until you delete it.
• Feedback reports: while they're useful for fixing and improving Episodic, or until you ask us to delete them.
• Technical and security logs: up to 7 days.

Your rights

You can ask us for a copy of your data, and ask us to correct it, delete it or send it to you in a portable format. You can also object to or ask us to restrict how we use it. Email episodic@aroncreates.com. In the app, Settings → Export data gives you your whole library at any time.

If you're in the European Economic Area, the UK or Switzerland, you can also complain to your data protection authority.

Children

Episodic isn't directed at children under 13, and we don't knowingly collect their personal data. If you think a child has given us personal data, contact us and we'll delete it.

Changes

If we change this policy, we'll update this page and the date at the top. For significant changes, such as adding cloud sync, we'll also tell you in the app before they take effect.