About Wecide
Wecide is published and operated by Wecide Support, who can be reached at wecide.apps@gmail.com. Wecide is run by Carolina Campos, based in El Salvador, who is the controller of this information under the EU General Data Protection Regulation (GDPR).
If you have a question about this policy, email Wecide Support at wecide.apps@gmail.com.
What the app stores about you
Everything in this table lives in our database.
| Information | Why it exists | Who can see it |
|---|---|---|
| The display name you type | It labels your votes so the room knows who liked what | Everyone in your room. Anyone with the room's invite link sees, while the room is open and without joining, the host's name, the first letter of each seated person's name and how many seats are taken. On a shared deck, anyone with the link sees the name of the person who started the room before playing, and everyone who played that deck sees all the names |
| An anonymous identifier | Created automatically the first time you open the app. It tells your device apart from the other devices in a room. It is tied to the display name you type and to nothing else about you | Never shown on screen. Other players' apps receive it: the members of your room and everyone who played the same shared deck |
| The room code and who is in the room | Puts you and your friends into the same session | Everyone in your room |
| Your vote on each film: like, pass or super like | Detects when everyone agrees, and builds the results screen at the end | Everyone in your room, on the results screen. On a shared deck, everyone who played that deck sees each player's votes by name once their own round has finished; nobody sees your swipes while you are still swiping. Any member can send the results, including names and who starred or missed which film, to other apps through the phone's share menu |
| The streaming services you tick | The deck only deals films someone in the room can stream | Everyone in your room |
| The night you suggest to the host | Lets a guest nudge the host's pick before the deck is built | Everyone in your room |
| The room's settings: streaming services, the night (its moods, rating floor, eras, kids rating and an optional name), session length, the country your phone is set to and the host's app language | Chooses which films appear in the deck | Everyone in your room |
| A shared deck's key and share window, created when anyone in your room taps Share on a finished round | The key is the secret in the share link, so friends can play the same deck. The share window is the time the link works: 2 hours after Share is tapped, and never past the room's first day. The key is kept in a table the app cannot read | Anyone the link is sent to, because the key is in the link. A friend who plays the deck can pass the link on |
| A late player's own room, created when a friend taps Start on your link | Lets them swipe the same deck at their own pace. It copies your room's settings, including the country, and its film list, holds their display name, their votes and a pointer to your room, and follows the same rules as any room | The friend, and everyone who played that deck once their own round has finished |
| Whether you tapped Done on a shared round | Lets the app leave the shared round open for your friends while you go home | Everyone in your room |
| A push token, the phone's time zone, country and app language, and a yes/no flag for whether you saved a crew, only after you tap "Ping me" or turn a reminder on, and while notifications are allowed | Lets Google Firebase Cloud Messaging deliver two notifications: a friend finished a deck you shared, and a Friday 18:00 movie-night nudge. The time zone makes the nudge arrive at 18:00 where you are. The token is tied to your anonymous identifier | Only Wecide and our providers. Other players never see it. Google Firebase Cloud Messaging receives the token to deliver the notifications |
| Short-lived limit counters: how many times your anonymous identifier recently created a room, joined a room, changed room settings or sent a count, with the time the current count started | Stops one phone from overloading the service or inflating the daily totals | Only Wecide. No app can read it |
What is sent to TMDB
Apart from your device's network address (see below), the room's filters are the only part of your information that goes to TMDB (not the night's name or the session length). They are sent to TMDB as search parameters when the film list is built, and the combined list of everyone's streaming services is sent as a search parameter. The phone's language is also sent as a search parameter, so film titles and synopses come back in it.
What we do not collect
We do not collect your email address, phone number, contacts, photos, files, precise location or advertising identifier.
Wecide shows no advertising and contains no analytics or crash-reporting software from other companies; we keep anonymous daily totals in our own database.
The Wecide website (wecide-app.vercel.app) counts page visits with Vercel Web Analytics: anonymous, no cookies, nothing that identifies you. It records the page, the site that sent the visit, the campaign tags in the link, the country and the device type. The link wecide-app.vercel.app/go uses the same count and then forwards to Google Play.
Counting what works
To see what works and to fix what does not, we keep anonymous daily totals in our own Supabase database. A total is one number per day. No identifier, name, room, code or IP address is stored with it, so a total cannot be traced to you. The totals are:
- Rooms created
- Rounds started, in total and by group size (1, 2 or 3 or more players), by night (the preset, seasonal or custom night picked, otherwise "other"), by the host's app language (one of the seven the app offers, otherwise "other") and by origin (started from a saved crew, or from the Friday reminder)
- Matches, in total and by the same origin
- Finished rounds
- Shared decks
- Joins (a player other than the host entering a room)
- Late players joining a shared deck
- First opens, by the install campaign tag of the Google Play install referrer (the utm_source, one of a fixed list, otherwise "other")
- Daily app opens, by days since install (day 0, day 1, days 2 to 7, days 8 to 30, day 31 or later)
- Taps on invite sharing
- Taps on sharing a match card
- Rematches started from a saved crew
The app works out the days since install on your phone, and that day never leaves it. The totals are kept indefinitely as totals, and no other company receives them. To stop one phone from inflating a total, the database also keeps a short-lived limit counter per anonymous identifier (see How your data is protected); it is not part of the totals.
Why we are allowed to use it
We use the information in the table above because you ask us to run a room for you; this is necessary to provide the service you requested (GDPR Article 6(1)(b)). The exception is the push token, time zone, country, language and crew flag: we use them on the basis of your consent, which you give by tapping "Ping me" in the app or turning a reminder on (Article 6(1)(a)) and can withdraw by turning notifications off. Short technical logs, including your device's network address, are kept by our providers for security and to fix faults; this is our legitimate interest in keeping the service safe and working (Article 6(1)(f)). We also count the anonymous daily totals described above on the basis of our legitimate interest in knowing what works and what does not (Article 6(1)(f)); they identify no one. We keep the limit counters on the basis of our legitimate interest in keeping the service available and safe from abuse (Article 6(1)(f)).
You need to type a display name to join a room; without it the app cannot label your votes. Wecide makes no automated decisions about you: a match is a simple count of votes.
What the app stores on your phone
The app keeps a small amount of data on the device itself so that closing and reopening it does not lose your place:
- Your display name
- The room you are currently in together with its film list
- The sign-in session for your anonymous identifier
- The streaming services you ticked last time, so the next room can fill them in
- A clock offset used for the countdown
- If you share a deck or play one late: the list of those shared decks (each deck's room and the time its share window ends)
- Your Friday reminder setting, and whether you dismissed the reminder offer
- Your answer to the notification prompt, and whether the phone is registered for notifications
- The day you last opened the app, so each day is counted once
- The last version whose news you saw, so the news shows once
- The names of the people in your last group, that group's room code and your list of matches (title, poster, date and who agreed). These stay on the phone only and are removed when you uninstall
This data never leaves your phone by itself, and Android's automatic backup is switched off for Wecide, so it is not copied to your Google account. Uninstalling the app removes all of it.
The app also reads the phone's country setting to show what streams there. It is not sent anywhere except as the room's country setting and, if you said yes to notifications, with the push token.
On its first launch only, the app reads the Google Play install referrer once, to fill in a friend's room code or shared deck from the invite link you installed through and to add its campaign tag, without any identifier, to the anonymous daily totals described above; the rest of it is not kept or sent.
The app downloads the list of seasonal movie nights (for example Diwali) from wecide-app.vercel.app. The request carries nothing about you and the file holds no personal data; Vercel sees your device's network address, as for any web request.
The match picture is made on your phone, shows players' initials and goes only where you choose to share it.
Notifications
Only after you tap "Ping me" in the app's notification prompt (or turn a reminder on), and while notifications are allowed, the app sends a push token, your phone's time zone, its country, the app language and a yes/no flag for whether you saved a crew to Wecide's database. We use them to deliver two notifications: one when a friend finishes a deck you shared, and one every Friday at 18:00 that nudges a movie night, which you can switch off in the app. The language and the crew flag only choose the wording; no name is sent. Google Firebase Cloud Messaging delivers them. The token is tied to your anonymous identifier and is not shown to other players. The app asks once, after the intro tour, on every Android version; Android 13 and later then also asks for notification permission. If you say no, nothing is sent.
We use this information on the basis of your consent, which you give by tapping "Ping me" or turning a reminder on. The push token is deleted when you turn notifications off (the next time you open the app), when Firebase reports it is no longer valid, or after 60 days unseen, meaning the app has not been opened in that time. You can change whether to allow notifications in Android's notification settings.
The web player
If a friend with an iPhone opens your share link in a browser, they play in the web player at wecide-app.vercel.app. The browser keeps the anonymous session, the display name and the room in its own storage on wecide-app.vercel.app; clearing the site's data removes them. Film information goes through Wecide's Supabase function, posters load directly from TMDB, and Vercel hosts the page.
Who else is involved
- Supabase hosts our database and issues the anonymous sign-in. It processes the information in the table above on our behalf. See Supabase's privacy policy.
- TMDB supplies the film information, posters and streaming availability. It receives the room settings as search parameters, and your phone loads posters directly from its servers, so TMDB sees your device's network address while you swipe. It never receives your name, your identifier or your votes. This product uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB. See TMDB's privacy policy.
- Vercel hosts the Wecide website, including the page a share link opens, the web player and the seasonal list the app downloads. Share links carry the room code, the deck key or a room invite token, so Vercel's request logs can hold them for Vercel's log retention period. See Vercel's privacy policy.
- JustWatch produces the streaming availability data. We send JustWatch nothing; the data reaches us through TMDB.
- Google Firebase Cloud Messaging delivers the two notifications. It receives the push token and the notification text, and Google runs it as our service provider. See Google's privacy policy.
- Google Play may show its rating dialog if Wecide asks it to. Google handles that dialog under its own privacy policy; Wecide does not see your rating.
Like any internet service, the servers the app connects to record your device's network address in their connection logs.
We do not sell your information, and we do not share it with anyone beyond what this section describes.
Where your data is processed
Our database runs on Supabase servers in Ireland (EU). We are based in El Salvador and look after the service from there. Supabase, Vercel and Google (Firebase Cloud Messaging) are companies with operations outside the EU. Where they can access personal data from outside the EU, their data processing terms rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. TMDB's servers are in the United States: when your phone loads films and posters, TMDB receives your device's network address and the room's search settings.
How your data is protected
All traffic between the app and our servers is encrypted (HTTPS). The database only lets a player read rooms they are in. Every change goes through checks on the server: the app cannot add or change rows in the room tables directly, every server function the app does not need is closed to it, and no secret administrator key exists in the app. To keep one phone from overloading the service, the server limits how often an anonymous identifier can create rooms, join rooms, change room settings and send counts. It does this with a small table of limit counters: for each identifier, the name of the limit, when the current count started and how many times it was used. The table holds no name, room, code or vote, and no app can read it. Data is deleted automatically about a day after a room is created, except the push token, which is kept up to 60 days, and the copy that Supabase's real-time service keeps of room changes, which is deleted after about 3 days (see How long it lasts).
How long it lasts
Nothing about you is stored long term. A room and everything in it—the members, the votes, the settings and the code—is deleted automatically about a day after the room was created (the cleanup runs every hour).
A shared deck's key, its share window and the rooms of late players are deleted the same way, with the room they belong to.
A room that has no members left is deleted in the next hourly cleanup, and a lobby you leave open is deleted when you create or join another room.
Anonymous identifiers that no longer belong to any room are deleted in the same sweep. The limit counters are deleted in the same sweep once they are more than a day old, and with the anonymous identifier when it is deleted.
The one exception to the day is the real-time copy. When a room or one of its members changes, the database sends a copy of the changed row (the room's settings, code and film list, or a member's display name and ticked services; never votes) to the players in that room through Supabase Realtime, which writes it to a message log in our database. Supabase keeps that log in daily parts and deletes a part about 3 days after it was created, so a copy can outlive its room by up to about 2 days. The app only listens live and never reads old messages. A room update is logged once, as its new state, without a second copy of the previous state.
The other exception is the push token, with its time zone, country, language and crew flag: it is deleted when you turn notifications off (the next time you open the app), when Firebase reports it is no longer valid, or after 60 days unseen.
The anonymous daily totals are kept indefinitely. They are numbers per day with no identifier, so there is nothing in them to delete.
Our hosting provider keeps short technical logs of requests, including your device's network address, for a limited time for security and troubleshooting; we do not use them to identify you.
Children
Wecide is meant for people aged 13 and over, or, in the EU, the age at which your country lets you use online services on your own, if that is higher.
The Kids in the room filter is for groups that include children watching with an adult; children should not set up rooms themselves. If you think a child has used Wecide on their own, email us and we will delete what is left right away (everything is deleted within a day anyway, except a push token, within 60 days, and the real-time copy, within about 3 days).
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format, by emailing Wecide Support at wecide.apps@gmail.com. Because everything is deleted automatically about a day after a room is created (a push token after 60 days at most, the real-time copy after about 3 days), and because we cannot tell who you are from an anonymous identifier, we may ask for your room code and display name to find your data. Usually it will already be gone.
If you think we have mishandled your data, you can complain to the data protection authority in the EU country where you live or work, or where you think the problem happened.
There is no account to delete, because the app never creates one. Uninstalling Wecide removes what the app kept on your phone.
Do Not Track
Wecide does not track you across other apps or websites, and no third party collects information about your activity across apps or sites through Wecide, so there is nothing to change when your device sends a Do Not Track signal.
Changes to this policy
If this policy changes, the date at the top of the page changes with it. If a change is significant, we will tell you in the app or on this page before it takes effect.