GachaCine — Privacy Policy

GachaCine (Film & TV Series Collection Cards) — This policy explains what data we process when you use the app, why we process it, who we share it with, how long we keep it, and what your rights are.
Data Controller: GachaCine
Contact (for all privacy requests): teamgachacine@gmail.com

1. Data We Collect

a) Account data (via Clerk): Clerk user ID, full name or username, email address, profile photo. If you sign in with Google, this information is transferred to the same fields through Clerk. Session tokens are used only for authentication and are not stored in our database. You can also use the app anonymously without signing in; anonymous use stays only on your device and is never sent to the cloud.

b) Collection and game data: The film and series cards you capture, rarity and rating info, your watchlist, XP and level progress, completed sets, unlocked figures, mascots and avatars, your profile showcase (favorite card, displayed cards, showcase title).

c) Scan images: Scene images you photograph or pick from your gallery are sent to AI services solely to identify the film. Image files are not stored on our servers.

d) Custom profile photo: If you upload your own photo, it is downscaled to 256x256 and saved to your account. Note: Your profile photo and display name are shown publicly to all users in the Explore section. Do not upload a photo you don't want to be public.

e) Social interactions: Profile showcases are public. Reactions you give to other users and Hot Take votes are stored for counting purposes. The type of votes you cast is visible to the relevant profile owner as an aggregate count.

f) PRO waitlist: If you indicate interest in PRO, your user ID, name, email address and avatar are saved to the interest list. Your email address is never shown to other users.

g) On-device data: A local copy of your collection, offline cache, app preferences and session reminder info are stored on your device. You can delete the data on your device at any time from the app's Settings menu or your browser settings. We have no proprietary advertising/tracking cookies and no behavioral analytics tool; only strictly necessary session cookies (Clerk) and security cookies (Cloudflare) are used.

2. Purposes and Legal Bases

Your data is never sold and never shared with third parties for advertising. The basis for each processing activity is below (under GDPR Art. 6 and KVKK Art. 5):

Account creation, sign-in and session security: Establishment and performance of a contract, and legitimate interest in security.
Collection, XP, showcase and cross-device sync: Performance of a contract.
Film recognition and cinematic commentary (AI): Performance of a contract.
Film and series info, posters and cast: Performance of a contract and legitimate interest in providing content.
Public display of showcases in Explore: Performance of a contract (the app's social feature).
PRO waitlist: Your explicit consent.
Custom profile photo upload: Your explicit consent (the upload action itself).
PRO subscription billing: Performance of a contract.
Security, abuse prevention, quota and limit checks: Legitimate interest.

3. Services That Process Data

The following services process only the data needed for their own task:

Clerk: Authentication and account management. Email, name and profile photo are kept by Clerk.
Cloudflare: App hosting and database. Your collection, profile, XP and interaction data is stored here.
DeepSeek: Primary visual recognition engine and cinematic commentator. Your image is sent at scan time. Film title, synopsis, genres and cast info is sent for commentary.
Xiaomi MiMo: Backup visual recognition engine when DeepSeek produces no result. Your image is sent at scan time.
TMDb (The Movie Database): Film and series info, posters and cast. Your search queries, i.e. film and series titles, are sent.
Trakt.tv: Film search and cast support. Title and person queries are sent.
Fanart.tv: Poster and artwork enrichment. Film IDs are sent.
OMDb: Rating, synopsis and cast support. Film ID or title is sent.
TVmaze: Series info support. Series title is sent.
Wikidata: Film series and collection discovery. Film ID or title is sent.
Google Translate: Translating English synopses into Turkish. The relevant synopsis text is transmitted to Google from your device or via our server.
Polar: Subscription payment processing. Checkout and billing for PRO run on Polar; your card and billing details go directly to Polar and are never sent to or stored on our servers. We receive only your subscription status (active/cancelled) to switch PRO features on or off.
Content networks: TMDb images, Google Fonts, 3D viewer, animation players and YouTube trailer player. These receive only standard technical data, i.e. IP address and browser info.

How AI and external content services (DeepSeek, Xiaomi MiMo, Google, TMDb and others) store data in their own systems is subject to their own policies and outside our control. You can review these services' current policies on their own sites.

Your data may be transferred to the countries where the above services are located. Transfers are carried out with security measures in line with applicable data protection regulations.

4. Retention Periods

Collection, profile, XP and interaction data is kept while your account is active and permanently deleted upon your deletion request (Delete Account; including identity row, vote/reaction records, XP ledger and album exclusions).
Deleted-item records (technical sync records) are kept for cross-device consistency until the account is deleted.
Your PRO waitlist entry is kept until you request its deletion.
On-device data stays on your device until you delete it.
Anonymous usage data is never written to the cloud. It disappears when you wipe device data.

5. Account and Data Deletion

From the app's Settings > Danger Zone > Delete Account steps you can permanently delete your collection, profile, XP and sync data. You are then signed out. This deletes your cloud data but not your Clerk account itself. If your Clerk account also needs full closure, do it from your Clerk account settings or write to teamgachacine@gmail.com. Deleted cloud data cannot be recovered.

6. Your Rights (GDPR and KVKK)

You have the following rights, exercisable by writing to teamgachacine@gmail.com:

Access: Learn what data of yours is processed.
Rectification: Request correction of inaccurate or incomplete data. You can also change your display name inside the app (up to 3 times).
Erasure: Request deletion of your data.
Restriction: Request restriction of processing.
Portability: Receive your data in a common format.
Objection: Object to processing based on legitimate interest.
Withdraw consent: Withdraw consent at any time for consent-based processing (profile photo, waitlist).
Complaint: Complain to your country's data protection authority if you live in the EU, or to the Personal Data Protection Authority (KVKK) if you live in Türkiye.

We respond to requests within 30 days at the latest. We may ask for additional information to verify your identity before fulfilling your request.

7. Age Limit (13+)

GachaCine is not directed at children under 13. Do not use the app if you are under 13. If you are between 13 and 18, use the app with the knowledge of a parent or legal guardian.

8. Payments and Analytics

PRO subscriptions are paid through our payment processor Polar: card and billing details are processed by Polar and never touch our servers — we keep only your subscription status. We have no proprietary cookies, ad trackers or behavioral analytics tools; only strictly necessary session (Clerk) and security (Cloudflare) cookies are used.

9. Security

Data travels over encrypted connections (HTTPS), and database access is authenticated and protected. No internet system is fully secure. Please report anything unusual to teamgachacine@gmail.com.

10. Changes to This Policy

When we update the policy we publish it here with a new date. We announce material changes inside the app.

Last updated: September 23, 2026
Contact: teamgachacine@gmail.com