Privacy Policy

1.1 Account and Identity Information

• Phone number when Firebase Phone OTP sign-in is used.
• Google account name, email address, and profile photo when Google Sign-In is used.
• Apple account identifier, and the name and email address you choose to share, when Sign in with Apple is used. Apple may provide a private relay email address instead of your real one.
• Display name and avatar URL provided during onboarding.
• Account or user identifiers necessary to operate your account.

1.2 Preferences and Behaviour

• Content, genre, mood, language, and OTT/streaming-platform preferences.
• Swipe interactions, including interested, not interested, and watched.
• Ratings and review text submitted by you, where this feature is used.
• Watchlist and watch history.
• Region settings and timezone.

1.3 Device and Technical Information

• Firebase Cloud Messaging (FCM) token for push notifications.
• IP address for rate limiting and security.
• Request identifiers and limited technical information used for error tracing, troubleshooting, and Service security.

1.4 Information We Do Not Collect

• Personalisation — generate and improve movie and series recommendations based on your preferences, swipes, ratings, OTT subscriptions, watchlist, and viewing activity.
• Authentication — verify your identity using Firebase Phone OTP, Google Sign-In, or Sign in with Apple.
• Account functionality — maintain your profile, preferences, watchlist, history, ratings, and other account features.
• Push notifications — send enabled alerts such as new-arrival alerts, watchlist availability notifications, weekly digests, and other Service-related notifications through FCM.
• Kids Mode — filter content when Kids Mode is enabled.
• Service improvement — use aggregated or appropriately anonymised usage information to improve application performance and recommendation quality.
• Analytics and service improvement — analyse app usage and performance to understand how Pickin30 is used, improve functionality and recommendation quality, and diagnose product issues. Analytics are used for app analytics and improvement, not for advertising or marketing tracking.
• Security — protect accounts, detect abuse and fraud, prevent unauthorised activity, diagnose technical problems, and maintain Service availability.
• Legal compliance — process information where necessary to comply with applicable legal obligations.

Personalisation is a core feature of Pickin30. Pickin30 may analyse genres, moods, languages, OTT preferences, swipes, ratings, watchlist activity, viewing history, likes, dislikes, and watched status to understand the types of movies and series you may enjoy. These signals may be combined to create or update a preference profile and determine the order and relevance of recommendations shown to you.

Pickin30 uses third-party authentication services, including Firebase/Google and Apple.

Firebase Phone Authentication

If you choose phone-based authentication, your telephone number is processed as necessary to send and verify a one-time password (OTP), authenticate your account, protect the authentication process, and detect or prevent abuse. Google/Firebase may process information necessary to provide and secure this functionality.

Google Sign-In

If you choose Google Sign-In, information made available through the Google authentication process may include your name, email address, profile photo, and account identifier. We use this information to authenticate and operate your Pickin30 account.

Sign in with Apple

If you choose Sign in with Apple, Apple provides a stable account identifier that we use to recognise your account. Apple provides your name and email address only on your first authorisation, and you may choose Apple’s “Hide My Email” feature, in which case we receive a private relay address rather than your personal email address. We use this information solely to authenticate and operate your Pickin30 account. When you delete your account, we also revoke Pickin30’s access to your Apple ID.

Pickin30 uses Firebase Cloud Messaging (FCM) to provide push notifications. If you enable notifications, a push-notification token associated with your application or device may be processed to deliver notifications. You can disable push notifications at any time through your device settings.

We do not sell, rent, or trade your personal data. We share or make information available only where necessary to provide, secure, or legally operate the Service.

• Firebase / Google — authentication, Firebase Phone OTP, Google Sign-In, and push-notification delivery.
• Apple — Sign in with Apple authentication and token revocation.
• TMDB (The Movie Database) — movie and series metadata. Pickin30 sends content-related queries and does not intentionally provide personal identifiers for these queries.
• Watchmode — OTT/streaming availability. Pickin30 does not intentionally provide personal identifiers when requesting streaming-availability information.
• Cloud infrastructure providers — hosting, database operation, caching, security, and Service delivery.
• Public authorities or law enforcement — where disclosure is required or permitted by applicable law or valid legal process.

Third-party services may process information according to their own privacy policies and their respective roles in providing services to Pickin30.

Pickin30 is available internationally. Some service providers may process information in countries different from the country in which you live. Where applicable data-protection law requires safeguards for an international transfer of personal information, we use or require an appropriate legally recognised transfer mechanism. For users in the European Union or European Economic Area, this may include an applicable adequacy decision, appropriate contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism where required.

• TLS 1.2 or later for data transmitted between the application and backend services.
• Rate limiting of API endpoints to help prevent abuse.
• Restricted access to production systems.
• Authentication and access controls.

No method of electronic transmission or storage can be guaranteed to be completely secure. While we use safeguards designed to protect your information, absolute security cannot be guaranteed.

We retain personal information only for as long as reasonably necessary to provide Pickin30, fulfil the purposes described in this Privacy Policy, maintain security, resolve disputes, and comply with applicable legal obligations.

Technical Data Retention. Server logs, security logs, IP/rate-limiting information, analytics records, error and diagnostic records, and similar technical data are retained only for as long as reasonably necessary for security, fraud and abuse prevention, troubleshooting, system maintenance, service improvement, and legal compliance. Retention may vary depending on the type of data and operational purpose. Data that is no longer required is deleted or anonymised in accordance with our retention practices.

Active account information is retained for as long as your account exists. Information that has been irreversibly anonymised so that it can no longer identify an individual may be retained for statistical, analytical, security, or Service-improvement purposes.

You can request account deletion through Settings > Delete Account. Following a deletion request, personal data associated with the account is deleted or anonymised in accordance with our applicable retention practices, except where limited information must be retained for security, fraud prevention, dispute resolution, or compliance with applicable law.

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of personal information.
• Request restriction of certain processing where applicable.
• Receive certain information in a structured and portable format where applicable.
• Object to certain processing where applicable.
• Withdraw consent where processing relies on your consent.

You may update certain information through the application’s Profile settings and delete your account through Settings > Delete Account. To exercise another privacy right, contact us at creationseliteapp@gmail.com. We may need to verify your identity before completing certain requests.

Pickin30 does not knowingly permit children under 16 to create their own accounts. Kids Mode is a content-filtering feature intended to help an eligible account holder discover age-appropriate content for younger viewers; it is not a separate child account. If we learn that personal information has been collected from a person who is not eligible to hold an account under this rule, we will take appropriate steps in accordance with applicable law.

If you are located in the European Union or European Economic Area, the following additional information applies.

Data Controller

For purposes of the General Data Protection Regulation (GDPR), the operator responsible for the processing described in this Privacy Policy is:

Legal Bases for Processing

• Performance of a contract — Article 6(1)(b) GDPR: where processing is necessary to create and maintain your account, authenticate you, provide requested Pickin30 functionality, maintain your preferences, and provide personalised recommendations requested through the Service.
• Legitimate interests — Article 6(1)(f) GDPR: where processing is necessary for Service security, fraud and abuse prevention, troubleshooting, maintaining application performance, protecting users and systems, and appropriate Service improvement, provided those interests are not overridden by your rights and interests.
• Consent — Article 6(1)(a) GDPR: where processing requires your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legal obligation — Article 6(1)(c) GDPR: where processing is necessary to comply with an applicable legal obligation.

GDPR Rights

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to restriction of processing.
• Right to data portability where applicable.
• Right to object where applicable.
• Right to withdraw consent where processing relies on consent.
• Right to lodge a complaint with a competent data-protection supervisory authority.

International Transfers. Where personal data is transferred from the EEA to a recipient in another country, we use an applicable lawful transfer mechanism and appropriate safeguards where required by GDPR.

Personalisation and Profiling. This automated personalisation is used only to provide and improve entertainment recommendations. It is not used to make decisions concerning employment, credit, insurance, healthcare, education, legal rights, or other decisions that produce legal or similarly significant effects concerning you.

EU/EEA Representative. EliteClicks does not currently have a designated representative in the European Union or European Economic Area. The applicability of GDPR Article 27 is assessed separately based on the nature, scale, and risk of the processing.

If you are located in the United States, applicable federal or state privacy laws may provide additional rights depending on your state of residence and whether the applicable law applies to Pickin30.

• Right to know or access personal information where applicable.
• Right to correct inaccurate information where applicable.
• Right to request deletion where applicable.
• Right to obtain certain information in portable form where applicable.
• Right to opt out of certain regulated sales, sharing, targeted advertising, or profiling where applicable.
• Right to exercise applicable privacy rights without unlawful discrimination.

Pickin30 does not sell personal information.

Children in the United States. Where the Children’s Online Privacy Protection Act (COPPA) applies, Pickin30 will not knowingly collect covered personal information from children under 13 without legally required parental consent.

If you are located in Canada, Pickin30 handles personal information in accordance with applicable Canadian privacy requirements.

• Be accountable for personal information under our control.
• Identify the purposes for collecting personal information.
• Obtain meaningful consent where required.
• Limit collection to information reasonably necessary for identified purposes.
• Limit use, disclosure, and retention.
• Maintain reasonable accuracy.
• Use safeguards appropriate to the nature of the information.
• Be transparent about our privacy practices.
• Provide appropriate access and correction mechanisms.
• Provide a mechanism for privacy questions and complaints.

Subject to applicable law, Canadian users may request access to personal information, correction of inaccurate information, withdrawal of consent where processing relies on consent, and other applicable rights. Requests may be submitted at creationseliteapp@gmail.com.

If you are located in India, Pickin30 handles personal data in accordance with applicable Indian data-protection requirements.

Where India’s Digital Personal Data Protection framework applies, EliteClicks may act as the Data Fiduciary, and the individual to whom personal data relates is the Data Principal.

We process personal data for the purposes described in this Privacy Policy, including account authentication, providing Pickin30, personalised movie and series recommendations, user-requested notifications, security and fraud prevention, Service operation and improvement, and compliance with applicable law.

Where consent is required, we will seek consent in accordance with applicable Indian law and provide an appropriate mechanism for withdrawal. Rights available may include:

• Information concerning personal-data processing where applicable.
• Correction and updating of personal data.
• Erasure of personal data where applicable.
• Grievance redressal.
• Nomination where applicable.
• Withdrawal of consent where processing relies on consent.

We may update this Privacy Policy from time to time to reflect changes to Pickin30 functionality, our data-processing practices, technology, service providers, security practices, or applicable legal requirements. When changes are material, we may notify users through the Pickin30 application, an in-app banner, push notification, email where appropriate, or another appropriate method. Where applicable law requires consent for a new processing activity, we will request the required consent. We will update the “Last Updated” date whenever this Privacy Policy is revised.

If you have questions about this Privacy Policy, wish to exercise a privacy right, request deletion of personal information, or submit a privacy complaint, please contact: