Privacy Policy

Data Controller

CueActors is operated by Oleh Konovalenko, an individual based in Switzerland. Contact: privacy@cueactors.com. A postal contact address is available to data subjects on request.

Jurisdiction

Switzerland (revised Federal Act on Data Protection - nFADP). For users in the EU/EEA, the General Data Protection Regulation (GDPR) applies where it is stricter.

Data we collect

• Account data (email, name, password hash, profile info)
• Waitlist data (email address, if you join the launch waitlist)
• Content you create (watchlists, ratings, follows, inquiries)
• Usage data (app interactions, analytics)
• Device data (push token, language, region)
• Website server logs (IP address, browser type and language, pages requested, referring page), to keep the site secure and understand how visitors find it

How we use it

• Provide and improve the service
• Authenticate and secure your account
• Send notifications you opted into
• Notify waitlist subscribers when the apps launch
• Comply with legal obligations

Waitlist & marketing email

If you join our launch waitlist, we store your email address to email you when the apps go live. The legal basis is your consent. This list is managed by our email provider Resend, and you can unsubscribe at any time.

Lawful bases (GDPR Art. 6)

Contract · Consent · Legitimate interest · Legal obligation.

Automated processing and AI

CueActors uses AI-assisted features (for example recommendations and discovery) that analyse your in-app activity - such as your watchlist, ratings and follows - to suggest relevant titles. These features do not make decisions that produce legal or similarly significant effects about you. You can ask us about this processing at any time.

Third parties (processors)

We share data only with the processors needed to run the service:

• Google Cloud - hosting, database and file storage (United States), and website server logs
• Resend - transactional and waitlist email (United States)
• Authentication providers - Google, Apple and Facebook sign-in
• Cloudflare - cookieless website analytics (sets no cookies)
• Google Analytics - website analytics (cookieless until you opt into Marketing cookies)
• Affiliate networks - only when approved, for outbound link tracking
• Payment processors - when subscriptions launch (e.g. App Store, Google Play, Stripe)

Content and data sources

Film, TV and actor metadata and imagery come from The Movie Database (TMDB). This product uses the TMDB API but is not endorsed or certified by TMDB.

Data location & international transfers

Our core infrastructure runs on Google Cloudin the United States. The website and the app backend are hosted in the us-central1 region (Iowa), our database is in the same region, and files you upload, such as profile photos, are stored in Google's US multi-region. Website server logs are kept in Google Cloud Logging's global location, so they may be stored in the United States or in other countries where Google operates. Only public images that contain no personal data, such as our logo and film posters, are served from Zurich, Switzerland.

Most of our other processors, including Resend (email), are also based in the United States. Transfers to Google are covered by Google's Cloud Data Processing Addendum, which includes the EU Standard Contractual Clauses (SCCs), also recognised by the Swiss FDPIC for data leaving Switzerland. Transfers to our other processors outside Switzerland and the EEA are covered by the SCCs and each processor's Data Processing Agreement.

How we protect your data

We apply appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS), hashed passwords, access controls and optional two-factor authentication. No system is perfectly secure, but if a breach is likely to affect your rights we will notify the competent authority and, where required, you.

Retention

• Active accounts: while the account is active
• Waitlist: until launch, or until you unsubscribe
• Website server logs: up to 180 days
• On deletion: a 30-day grace window, then erasure. Your public profile is hidden immediately and you can cancel by signing back in during the window; after it, personal data is erased and a single anonymised record remains. Full detail, and how to request deletion without the app: Delete your account.

Your rights

Access · rectification · erasure · portability · restriction · objection · withdraw consent. Contact us at privacy@cueactors.com. We respond within 30 days. You may also lodge a complaint with a supervisory authority - the Swiss Federal Data Protection and Information Commissioner (FDPIC), or your local authority in the EU/EEA.

Children

The service is not directed to users under the age of 16. We do not knowingly collect data from children below this age.

Changes

Material changes are notified in-app or by email at least 14 days in advance.

Contact

Privacy enquiries: privacy@cueactors.com
General contact: press@cueactors.com