Gillflix privacy policy
Last updated 9 October 2026
Gillflix is a weekly film club for a group of friends. This page explains what the app and gillflix.com keep about you, why we keep it, who else handles it and how to get it deleted.
Who runs Gillflix
Gillflix is run by Oliver Gill in the UK. Oli is the data controller. That means Oli decides what happens to your data and is responsible for it. Gillflix isn't a company. It doesn't make money and has no adverts.
If you have a question about your data, email [email protected].
What we keep and why
When you sign in
You sign in with Google, Apple or Discord. Sign in with Apple is offered on iPhone only. The service you choose tells us your name, your email address and an account number for you. We use them to sign you in and to fill in the name the film club sees, which you can change. If you use Sign in with Apple and choose to hide your email, we get a private relay address from Apple and never see your real one.
Before launch you may also be able to sign in with a code sent to your email address. We switch that off before the film club opens.
If you sign in with Google, we also keep the link to the profile picture Google sends, and show that picture next to your name. Otherwise the film club sees your initials. You can't upload a picture of your own.
We never get your password for any of these services.
Your profile
We keep the name you use in the film club and your settings. That covers whether your name shows on results, how often you want new films, which notifications you want and whether you've entered the film club passcode.
Your reviews
When you review a film we keep your scores, whether you'd recommend it and what you liked or didn't. We also keep your answers to the week's questions. Some weeks there's a longer written answer. Before you write one, we ask if you're happy for Claude (see below) to mark it. If you'd rather not, you can skip it. When you agree, Claude gives your answer a grade and a short comment, and we keep those too. We also keep any reactions you add to other people's comments.
Films you've watched
If you link a media account (see below), we note the film club's films it shows you've watched. This builds your list of films still to review.
A linked media account
If you link an optional media account, we keep only its account number and username, so we can note the film club's films you've watched there, until you unlink it in the app or delete your account.
Notifications
If you allow notifications, your phone gives us a push token, which is an address for sending notifications to that phone. We keep it with the type of phone (iPhone or Android). We also keep a copy of each notification we send you.
Records from the old film club
Gillflix ran from 2018 to 2022 and we've brought its history across. That includes members' names, the reviews they wrote and the usernames the old site recorded. If you were a member then, you can claim your old reviews so they join your new account. If you'd rather your old records were removed, email us.
Technical data
Supabase, which runs our database, keeps server logs for 1 day. They include IP addresses and help keep the service running and safe. Cloudflare, which hosts gillflix.com, doesn't give us request logs on our plan. Any logs it keeps for its own security are covered by Cloudflare's privacy policy. The app saves your sign in on your device so you stay signed in. It uses no cookies for tracking.
Gillflix has no analytics, no advertising and no tracking across other apps or websites.
Who can see what
Anyone can browse Gillflix without signing in. They see films, scores and charts, with no names and no written comments.
Members who have entered the film club passcode can also see names and comments. If you turn off "show my name", your reviews appear as "A Gillflix Member".
You can report a comment or block another member. We keep reports so Oli can act on them. If you block someone, we keep that so their comments stay hidden from you.
Oli can see everything, as the film club's admin.
Services that handle your data
We use these services to run Gillflix. Each one only gets what it needs for its job.
| Service | What it does for us | What it handles | Where |
|---|---|---|---|
| Supabase | Database, sign in and server code | Everything listed above | London, UK |
| Cloudflare | Hosts gillflix.com and runs its DNS | IP addresses in its logs | US, with servers worldwide |
| Google, Apple and Discord | Sign in | That you used them to sign in to Gillflix | US |
| Expo | Sends notifications | Your push token and the text of each notification | US |
| Apple Push Notification service and Google Firebase Cloud Messaging | Deliver notifications to your phone | Your push token and the notification | US |
| Anthropic (Claude) | Writes film intros and questions, and marks written answers | Written answers you've agreed to have marked, and a few review comments picked at random as examples of how the film club writes. No names go with them, and Anthropic doesn't use them to train its models | US |
| TMDB | Film details and pictures | Your IP address, because your device loads posters straight from TMDB | US |
| Resend | Sends sign in codes by email, only until the other ways to sign in are working. We switch it off before the film club opens | Your email address | US |
The Gillflix writer and the film club's other helper programs run on Oli's own server at home. Nobody else has access to that server.
We only use services whose own terms protect your data at least as well as this policy does. We never sell your data or share it with advertisers.
Our reasons under UK data protection law
The law asks us to give a reason, called a lawful basis, for using your data.
For running the film club and keeping its history, the basis is legitimate interests. You've chosen to join a film club and we need this data to run it. We've kept it to what the film club needs.
For notifications, and for sending your written answers to Claude to be marked, the basis is your consent. You can turn notifications off in the app or in your phone's settings, and you can skip any written answer.
Data outside the UK
The database is in London. Some of the services above are in the US. Where your data goes outside the UK, it's protected in one of two ways.
- Cloudflare, Expo, Google (including Firebase), Discord and Resend are certified under the UK Extension to the EU US Data Privacy Framework.
- Anthropic, Apple and TMDB aren't certified under the UK Extension. For these we rely on the UK's International Data Transfer Addendum, the UK's standard terms for sending data abroad.
Keeping it safe
Everything travels over encrypted connections. Supabase encrypts the database where it's stored. Database rules mean each member can only change their own data, and the passcode protects names and comments. Only Oli has admin access, and the keys that run Gillflix are kept out of the code.
How long we keep it
| What | How long |
|---|---|
| Your account, profile and settings | Until you delete your account |
| Push tokens | Until you sign out on that phone, it stops accepting notifications, or you delete your account |
| Copies of notifications sent to you | 90 days |
| Server logs | 1 day at Supabase. Cloudflare doesn't give us request logs |
| Backups | Copies roll off within 30 days |
| Your reviews | They stay in the film club's results after you delete your account, shown as "A Gillflix Member" and no longer linked to you. If you tick the box to remove your written words, your comments and written answers go and only your scores stay |
| Records from the old film club | Kept as film club history unless you ask us to remove them |
Deleting your account
You can delete your account in the app at any time. Go to You and tap Delete account. The full details, including how to ask us by email, are on our page about deleting your account.
Deleting the app from your phone doesn't delete your account.
Your rights
You can ask us for a copy of the data we hold about you. You can also ask us to correct it, delete it, stop using it or send it to you in a form another service can read. Email [email protected] and we'll reply within a month.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Age
Gillflix is for adults. Please don't sign up if you're under 18.
Changes to this policy
If we change this policy we'll update the date at the top. If the change matters, we'll tell members in the app before it takes effect.