Denoo · Updated 31 October 2026
Privacy policy
Denoo provides film analysis and optional Google sign-in. This policy describes the Denoo app and these support pages.
Account and activity data
Google sign-in is optional. It provides Denoo with your name, email, profile image and account identifier. Signed-in accounts store saved films, seen films, reading history and counts, theory submissions, votes, reports and author blocks. Submissions remain private until approved; approved theories are public under a pseudonymous author identifier.
On your device
Guest lists stay on your device. Language, reading preferences, quiz progress and interpretation choices are stored locally. Browsing still connects to our content services and image providers, which receive network information such as your IP address. Guest mode does not mean anonymous network access.
Why we use data
We use data to sign you in, sync your lists and reading history, deliver film content, review theories and handle abuse. Usage analytics, crash reporting and notifications are optional and controlled separately in Settings. Denoo has no advertising and does not sell personal data. Do not include private information in a theory or report.
Services and sharing
Supabase hosts authentication and app data. Google provides sign-in, Firebase Analytics, Crashlytics and Cloud Messaging. TMDB supplies film metadata and images. Name.com forwards support email to our Gmail inbox. These providers process requests under their own policies. Sharing sends text to an app you choose. Read-aloud uses your device's speech service, which may process text online. Connections use HTTPS and access controls, not end-to-end encryption.
Retention and deletion
Account records remain until you delete your account. Deletion removes the account and its saved lists, reading history, submissions, published user theories, votes, reports and blocks from active systems. Provider security logs and backups follow their retention schedules. Copies saved or shared by other people cannot be recalled. Deleting Denoo does not delete your Google account.
Your controls
Delete your account from Settings or the web deletion page. Google sign-in verifies ownership before permanent deletion. Guests can clear saved device data in Settings. Signing out keeps account data on the server and separates it from guest data. Contact Denoo for privacy enquiries or deletion help. Denoo is not intended for children under 13.
Optional analytics and diagnostics
Both controls are off by default. If enabled, Analytics receives app interactions, film identifiers, explanation depth, analysis categories, quiz results, app-instance identifiers and device information. Crashlytics receives technical error classifications, stack traces and app/device diagnostics, including native crashes. We do not attach names, emails, account identifiers, tokens, raw searches or theory text. Turning usage sharing off resets the local analytics identifier; turning crash sharing off deletes unsent reports. Previously sent data follows Google's retention policies.
Optional notifications
Notifications are off by default. If enabled, Firebase uses an installation identifier for delivery and receives an opaque account identifier when routing private updates. For signed-in users, Supabase stores device registration identifiers, language and category choices to send updates about saved or seen films and submission decisions. Guests can receive weekly discovery only. Editorial previews avoid spoilers. Change categories or disable notifications in Settings or Android. Delivery is best effort; server-side revocation requires connectivity. Account deletion removes registered device records.
Provider policies
- Supabase privacy policy
- Google privacy policy
- Firebase privacy and security information
- TMDB privacy policy
- Name.com privacy policy
- GitHub privacy statement — GitHub Pages hosts these pages and may process connection logs.
Contact and support correspondence
If you email contact@denoo.app, Denoo receives the email address and information you choose to send to respond to your request. Name.com forwards incoming mail to a Gmail inbox. Avoid sending passwords, sign-in codes, access tokens or unnecessary personal information.
For access, correction, deletion or other privacy questions, contact the same address. Rights vary by jurisdiction; you may also contact your local data protection authority.