This Privacy Policy explains which personal data is processed when you use the Cachedly mobile app ("App", "Cachedly", "we"), for what purposes and how. Cachedly is developed and operated by the individual developer Yağmur Karasöğüt.
For users in Türkiye, this policy is prepared in line with Law No. 6698 on the Protection of Personal Data (KVKK); see the KVKK Information Notice (in Turkish) for the detailed notice required by KVKK. The rights of users in the European Union under the GDPR are set out in section 8. The Turkish version of this policy is at cachedly.com/privacy.
1. Data Controller
Name: Yağmur Karasöğüt
App/brand: Cachedly
Contact: [email protected]
Cachedly is not a company; it is an app operated by an individual developer.
2. Data We Collect
2.1 Account Information
- From your Google account: email address, name and profile photo (via Sign in with Google)
- From your Apple account (Sign in with Apple on iOS): email address (or Apple's private relay address if you chose it) and the name you share at first sign-in
- Your in-app user ID (user_id)
2.2 Usage Data
- Titles you add to your library, your ratings and notes
- Lists you create and their contents
- Queries, links, texts and screenshots you send to "Ask Cachedly" and for content analysis
- Public media (images and videos) and text (caption) taken from a public post link you submit for analysis
- Your daily AI usage and ad-earned credit counters
- Content reports you submit
- Social features: your username, display name, profile photo, who you follow and who follows you, people you block, lists you make public, other people's lists you save or like, and your participation in shared lists
- Your list invitation links and the titles you add to shared lists
- Your release-day reminders (title, release date and country)
- If you grant location permission: your city name, worked out on your device from your approximate location (city only; stored only on your device and not sent to our servers; precise location is never stored)
- How many people follow, save and like your public lists (shown to other users as counts only)
2.3 Device and Technical Data
- Your device push notification token and platform (Android/iOS), to send notifications
- App version and basic technical logs (for debugging)
- Your device's region (country) setting, to show where-to-watch information for your country
- Your notification preferences (which notification types you want); promotional notifications are off by default
2.4 Payment and Subscription Data
Payments are made directly through Google Play / the Apple App Store; Cachedly has no access to your card details. Your subscription status (active/inactive, plan type) is verified and processed through our service provider RevenueCat.
2.5 Permissions
When you first open the App you see all permissions on one screen; you can allow all, choose one by one, or decide later. You can use the App without granting any permission.
| Permission / access | Why we ask |
|---|---|
| Photo selection | So you can upload a screenshot you want analysed to identify a title. Only the image you pick is sent for analysis. |
| Notifications | Release-day reminders, follower/list/review notifications, daily AI credit reminders and account notifications; promotional notifications only if you turn them on. You can choose which notifications you get in Profile → Notifications. |
| AI analysis consent | Your explicit consent for the links, text or screenshots you send to be analysed with Google Gemini (see 2.6). Without consent these features do not work and nothing is sent. |
| Internet access | Required for the App to work |
| Location (approximate) | To find your city and show cinema chains near you; optional. Coordinates are converted to a city name by your device's operating system (Google/Apple geocoding) and are not sent to our servers. |
You can turn off notification, location and photo access at any time in your device settings.
2.6 Link and Media Processing, AI Analysis
When you submit a link to a public social media post, the link is passed to a service provider (Apify) to fetch the post's public media (carousel images, video) and caption. The media is processed temporarily and sent to Google Gemini for analysis. Only public posts are processed; private accounts or content that requires a login are never accessed, and no account credentials (yours or anyone else's) are used. This media is not stored permanently by Cachedly and is not republished; only the identified title is saved to your library. Providers may briefly retain residual data in their own systems for technical reasons, subject to their own policies.
Links, text or screenshots you send for content analysis and "Ask Cachedly" are sent to Google Gemini for processing. Your explicit consent is requested in the App before this transfer (the link to the service provider and the media to Gemini); without consent nothing is sent. How Google processes content you send is subject to Google's own terms. We recommend not sending images that contain other people's private or sensitive information.
2.7 Social Features and Visibility
- Public: Your username, display name and profile photo are visible to other users on your profile. Only lists you mark as "public" are shown to people who visit your profile and to your followers, and may appear in Discover (including popular profiles and lists). Other users can save or like your public lists, and you may be notified (you can turn this off in Profile → Notifications).
- Private: Your library, ratings and notes and lists you have not made public are not shown to others (except a rating and note you choose to share with "share publicly", see 2.8). People you invite to a list can see it and add to it.
- You are in control: You can make lists private at any time, block users and report inappropriate content. People you block cannot see you or your public lists.
2.8 Public Ratings/Reviews, User Search and Community Statistics
- Sharing ratings and reviews (optional): If you turn on "Share my rating and note publicly" on a title page, your rating, note, the title and your username and profile photo are shown to all users in Discover and in your followers' "Following" tab, and your followers may be notified. This is off by default, is set per title, and can be turned off at any time; turning it off removes the share from Discover. Users who blocked you or whom you blocked do not see these shares.
- User search: Other users can find you by typing @username in "Search users" in Discover; results show only your username, display name and profile photo. Your email address is never shown.
- "Most added": Discover lists the titles most added to libraries in the App. This is an aggregate count across all users' libraries; it does not show who added what. Each user counts at most once per title, and titles picked in the first-run (onboarding) screen are not counted.
- Sponsored content: Sponsor cards and "popular on platform" lists labelled "Ad" may be shown on the home screen and in Discover. They are not personalised using your data; they are chosen only by your country and interface language. Views and taps are counted in aggregate without personal information.
- "Top 250 films" and "In cinemas": compiled from TMDB's public vote data and release calendar; they contain no personal data.
- Cinema offers: Public offer pages of cinema companies such as Paribu Cineverse, Biletinial and Cinemarine are checked automatically once a day and summarised with AI; no personal data is used. Offers appear with an "Offer" label on pages of films in cinemas; tapping one opens that company's website, where its own privacy policy applies.
2.9 Adding Content via Instagram Messages (optional)
If you link your account with Cachedly's Instagram account, post/reel links and texts you send to the Cachedly account as direct messages (DMs) are analysed automatically and the titles found are added to your library. This feature is optional and off by default.
- Data processed: the user ID Instagram passes to us (IGSID), the text of the message you send to the Cachedly account and the link or caption of the shared post. We do not access your Instagram password or your other messages.
- Linking uses a single-use 6-digit code from the App (valid for 15 minutes).
- We send an automatic reply to your message (e.g. "Added to your library").
- Message content is not stored after analysis; only the identified title is saved to your library and analysis history.
- To unlink, email [email protected]. The link is removed when you delete your account.
2.10 Anonymous Usage Statistics
We measure, in aggregate and anonymously, interest in titles, streaming platforms and cinemas. We record when you tap a streaming platform or free source, tap a cinema chain or cinema offer, play a trailer, turn a release reminder on or off, change a title's watch status (want to watch, watching, watched), and only the general topic of an "Ask Cachedly" request (genre, mood, actor, similar title, era, platform or other). The text you type is not stored in these statistics.
- Each event includes the title, platform or cinema name, country, city (if available), operating system, app version and a random session ID. If you granted location permission, the city is worked out on your device from your approximate location; your coordinates are never sent to or stored on our servers.
- Purpose: to improve the App, understand demand, and share aggregate, anonymous reports with cinema chains, distributors, streaming services and brands.
- Sharing: no personal data is given to anyone for this purpose. Partners receive only aggregate counts with no identity, email, name or username, and results covering fewer than 50 people are not shown.
- Retention: the user ID linking events to your account is deleted after 90 days; anonymised records are kept for at most 400 days. Deleting your account removes the link immediately.
- Your control: turn off "Anonymous usage statistics" in Settings and none of these events are collected or sent.
3. How We Use Your Data
- To create your account and verify your identity
- To store and show your library, lists and preferences
- To provide AI-powered title identification and recommendations
- To apply daily usage limits and ad-earned credits
- To send you notifications (if allowed and not turned off for that type): new followers, new lists and public ratings/reviews from people you follow, release reminders, shared-list joins, and saves or likes of your lists
- To provide social features such as profiles, following, shared lists, saving/liking lists and Discover; username search and (if you turned it on) public ratings/reviews
- To produce aggregate, non-identifying statistics such as "Most added"
- To show which platforms a title is available on in your country
- To verify your Premium subscription
- To review abuse, spam and reports of inappropriate content
- To improve the App and fix errors
- To produce anonymous usage statistics and provide partners only with aggregate, anonymous reports (see 2.10)
- To send release-day and day-before reminders and show cinema offers for films in cinemas
- To send promotional notifications only if you turned them on in Profile → Notifications (sent at most every few days; can be turned off at any time)
- To show cinema companies near you (using your city only)
- To analyse content you send through the optional Instagram DM feature and add it to your library
4. Third Parties We Share Data With
Your data is shared with the following service providers only as far as needed to provide the service:
| Service | Purpose | Data shared |
|---|---|---|
| Google (OAuth) | Sign-in | Email, name, profile photo |
| Apple (Sign in with Apple) | Sign-in on iOS and revoking the session when the account is deleted | Email (or Apple relay address), name, Apple user ID |
| Google Gemini | AI title analysis | Links, text or screenshots you send with consent |
| Apify | Fetching media and caption from a public post | The public post link you submit |
| Meta (Instagram API) | Adding content via Instagram DM (optional) | Your Instagram user ID, messages and links you send to the Cachedly account |
| TMDB (The Movie Database) | Title/person information, posters, ratings and where-to-watch data (provided by JustWatch) | Searched title and country code (not personal data) |
| DuckDuckGo | Finding a title's page on a platform | Title and year only (not personal data) |
| Internet Archive | Legal free viewing links for public-domain films | Title and year only (not personal data) |
| RevenueCat | Subscription/payment management | User ID, subscription status |
| Google AdMob | Banner and rewarded (credit-earning) ads | Ad interaction data, device advertising ID; personalised ads only if you consent (may also reach ad networks mediated by AdMob, such as Meta Audience Network) |
| Supabase (servers: Frankfurt, Germany / EU) | Database, sign-in and server infrastructure (data processor) | Your account and app data |
| Expo (Expo Push), Google Firebase Cloud Messaging, Apple Push Notification service | Delivering notifications to your device | Device push token and notification text |
| Cloudflare | The cachedly.com website and shared-link previews | IP address and browser information when you visit the site (technical logs) |
| Cinema companies (Paribu Cineverse, Biletinial, Cinemarine) | Ticket and offer links for films in cinemas | No personal data is shared; tapping a link takes you to that company's site |
Each of these providers is subject to its own privacy policy. We do not sell your data to third parties for marketing.
5. International Transfers
The servers of the providers listed above (Google, Apple, Meta, RevenueCat, Apify, Expo, Cloudflare and Supabase) may be located outside Türkiye. Your data may therefore be transferred abroad as far as needed to provide the service. Transfers are made in line with the KVKK rules on international transfers. See the KVKK Information Notice for details.
6. How Long We Keep Your Data
Your data is kept while your account is active. When you delete your account:
- Your library, lists, likes, AI query history, notification preferences and feedback records, device push token and any Instagram link (Instagram user ID ↔ Cachedly account) are permanently deleted.
- The user ID linking anonymous usage events to your account is deleted at the latest after 90 days; anonymous records are kept for at most 400 days. Deleting your account removes this link immediately.
- Media fetched temporarily for analysis is deleted once the analysis is complete. The result for the same link may be cached for up to 7 days, without being linked to your account, to avoid repeat analysis. Results for identical questions (e.g. onboarding suggestions) may also be cached for up to 3 days without being linked to your account.
- Your public lists, publicly shared ratings/reviews and profile stop being shown to other users; your contributions to shared lists are no longer linked to you.
- The account record itself may be kept in anonymised form (with email and name removed) to prevent abuse.
7. Deleting Your Account
You can delete your account in the App (Profile → Settings → Delete account) or on the web at cachedly.com/delete-account. If you signed in with Apple and cannot sign in on the web page, email [email protected] to request deletion.
Important: deleting your account does not cancel an active subscription. Cancel it separately in the store where you bought it (Google Play or the App Store).
8. Your Rights
KVKK (Türkiye)
Under Article 11 of the KVKK you have the right to:
- learn whether your personal data is processed
- request information about it if it is processed
- learn the purpose of processing and whether it is used accordingly
- know the third parties to whom it is transferred in Türkiye or abroad
- request correction if it is incomplete or inaccurate
- request deletion or destruction under the conditions in the law
- request that corrections and deletions be notified to third parties it was transferred to
- object to an outcome against you resulting solely from automated analysis
- claim compensation if you suffer damage due to unlawful processing
GDPR (European Union)
If you live in the EU you also have the rights to access, rectify and erase your data, restrict processing, data portability and to object to processing. Where processing is based on consent, you can withdraw consent at any time. You have the right to lodge a complaint with a supervisory authority.
To exercise these rights, contact [email protected]. We reply as soon as possible and within 30 days at the latest.
9. Children's Privacy
Cachedly is not intended for people under 18 and does not knowingly collect data from users under 18. If we learn that someone under 18 has provided us with data, we delete it within a reasonable time.
10. Data Stored on Your Device
Some data is stored only locally on your device (not sent to our servers):
| Data | Purpose | Where |
|---|---|---|
| Session token | Keeping you signed in | Device secure storage (SecureStore) |
| Language preference | Remembering the interface language | Device local storage |
| Permission/onboarding seen and your AI consent | Not showing the onboarding and consent screens again | Device local storage |
| Widget data | Keeping the home-screen widget up to date | Device local storage |
| Your ad consent choice | Remembering your personalised-ads choice (the App's consent prompt / Google consent management tool) | Device local storage |
11. Advertising
We show rewarded ads so free users can earn extra AI credits, as well as banner and in-feed ads on the home screen, Discover, library and title pages; both are served through Google AdMob (Android and iOS). In addition, sponsor cards from brands we work with directly may be shown with an "Ad" label; these are chosen by your country and interface language. If our advertising changes, we will update this section. Google AdMob may use your device's advertising ID to serve ads, limit frequency, prevent fraud and measure ad performance.
Personalised ads only with your consent. The App asks whether you want personalised ads: on Android in the App's own consent prompt, on iPhone through Apple's "Allow app to track" prompt; in the European Economic Area and the UK first through Google's consent management tool. Until you have been asked, if you do not answer, or if an error occurs, only non-personalised ads are shown. If you agree, AdMob and the ad networks it mediates (e.g. Meta Audience Network) may use your advertising ID and in-app ad interactions to choose ads that match your interests. If you do not agree, you only see non-personalised ads; no feature of the App depends on this choice. On iPhone, if you choose "Ask App Not to Track", your advertising ID is not shared. You can change your choice at any time in the App under Settings → Ad preferences, and on iPhone also in the device's Settings → Privacy & Security → Tracking; on Android you can reset or delete your advertising ID in device settings.
We do not sell or give your personal data to data brokers. Sponsor cards and partner platform lists are independent of this consent and are never personalised.
To serve ads technically, AdMob may use your approximate location from your IP address and basic diagnostic/device information; this is covered by Google's own Privacy Policy.
Offer cards and notifications. Current cinema offers are shown with an "Offer" label on pages of films in cinemas. Offer or promotional notifications are sent only if you turn on "Promotional notifications" in Profile → Notifications; this is off by default and can be turned off at any time. There is no personalisation and your personal data is not given to advertisers.
12. Data Security
We use reasonable technical and organisational measures (encrypted connections, access control) to protect your data. Please note that no transmission over the internet is 100% secure.
13. Changes to This Policy
We may update this policy from time to time. We will inform you in the App about significant changes. The "Last updated" date at the top of this page always reflects the current version.
14. Contact Us
For any privacy question, request or complaint: [email protected]
Cachedly