Privacy Policy

Last updated 29 September 2026

Slate is a film and TV diary. It works best when it knows what you have watched, so this policy explains exactly what it keeps, why, and how to get rid of it. Slate does not sell your data, does not carry advertising, and does not track you across other apps or websites.

Who is responsible for your data

Slate is made and run by Tom Curnow, a sole trader based in the United Kingdom, who is the data controller for the purposes of the UK GDPR. You can reach me at hello@slate-app.com about anything in this policy.

What Slate collects

Your account

Your email address, or the private relay address Apple gives Slate if you use Sign in with Apple and choose to hide your email.
Your password, stored only as a salted hash by Supabase Auth — it is never visible to me.
Your Apple user identifier, if you sign in with Apple.
Your username, display name, bio, avatar image, and home region.
The streaming services you tell Slate you have, so a title can show where you can watch it.

You can also use Slate without an account, as a guest. Slate then creates an anonymous guest account on the server with no email or name attached, so your library survives a relaunch. A guest's library is private: nobody else can see it, and a guest cannot follow, comment, or tag anyone. If you later create a full account, the same library moves across with you.

What you log and write

Titles in your library, what you have watched (including which episodes of a show), ratings, reviews, notes, and journal entries, including the dates you watched things.
Photos you attach to journal entries.
Places you attach to entries — the cinema or venue name you pick, not a record of your movements.
Other members you tag as having watched with you, once they approve the tag.
Collections, their titles and descriptions, your watchlist, and your recent searches.
Which suggested titles you have been shown, skipped, or marked as not interested, so Slate stops offering them.
Anything you import from Letterboxd. If you sign in to Letterboxd inside Slate to fetch your export, you sign in on Letterboxd's own website: your Letterboxd password never reaches Slate, and that sign-in is forgotten when you close the screen. The export file is read on your device, and only the titles, ratings, and entries you choose to import are saved.

Social activity

Who you follow and who follows you, and which collections you follow or save.
Likes, comments, and recommendations you send or receive.
Accounts you block, and reports you submit about content or people.

Technical data

A push notification token, if you turn notifications on.
Crash and error reports, collected by Sentry. These include your device model, OS version, and app version, and are linked to your account identifier so a crash can be traced back to the session that caused it.
Anonymous usage events, collected by TelemetryDeck, which record that a feature was used but not who used it.

You can switch both off at any time in Settings → Privacy. Slate collects no advertising identifier, works with no ad network, and asks for no payment details.

Permissions Slate asks for

Permission	What it is used for
Location	Only when you add a place to an entry, to list cinemas near you. Your coordinates are used on the device to run that search and are not stored — only the venue you choose is saved.
Photos	To attach photos to entries, and to save a shared image back to your camera roll. Slate reads only the photos you pick.
Notifications	To tell you about follows, likes, comments, tags, and recommendations. Controlled per category in Settings.

All three are optional and Slate works without them. Images you upload are checked on your device for explicit content before they are sent anywhere; that check never leaves the phone.

Why Slate is allowed to hold it

To provide the service you asked for — your account, your library, your entries, and anything you choose to share. Without this data there is no app.
Legitimate interests — keeping Slate working and safe: moderating reported content, enforcing blocks, fixing crashes, and understanding in aggregate which features get used.
Your consent — notifications, location, photo access, and the analytics toggle. You can withdraw any of these at any time without losing access to the app.
Legal obligations — responding to a lawful request, or keeping a record of a serious safety report.

Who else sees it

Slate shares data with the services that run it, and with nobody else. They act on my instructions under contract and cannot use your data for their own purposes.

Service	What it handles
Supabase	Database, sign-in, and file storage for photos and avatars
Apple	Sign in with Apple, and delivery of push notifications
Resend	Sending sign-in and verification emails
Cloudflare	This website and the slate-app.com domain
Sentry	Crash reports
TelemetryDeck	Anonymous usage analytics
TMDB	Film and TV information, including where titles stream (supplied to TMDB by JustWatch). Your searches, the titles you open, and the titles you import are sent to TMDB to fetch results; your identity is not.

Your data is never sold, rented, or handed to advertisers or data brokers.

What other people can see

Slate is partly social, so some of what you write is meant to be seen. Every journal entry has a visibility setting, and your profile and collections can be public or private. A public entry, comment, or collection can be seen by anyone using Slate, and a public profile shows your username, display name, avatar, bio, and the activity you have made public. Blocking someone hides your activity from them and theirs from you.

Where your data is kept

Slate's database and file storage are hosted by Supabase on servers in the United States. Transfers out of the UK and EEA are covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses in Supabase's data processing agreement. Sentry and TelemetryDeck process data in the EU and the United States under the same safeguards.

How long it is kept

Your account and its contents are kept until you delete them. Deleting an entry, photo, or collection removes it immediately; deleting your account in Settings → Account → Delete Account removes your profile, library, entries, photos, collections, and social activity, and revokes the Apple credential if you used Sign in with Apple. Deleted data can persist in encrypted backups for up to 30 days before it is overwritten. Reports and block records are kept after an account closes only where they are needed to keep other people safe. Anonymous analytics are not linked to you and are not deleted by an account deletion.

If you use Slate without an account and have saved nothing to your library, journal, or collections, I delete the guest account and anything attached to it after 90 days of inactivity. A guest library you have saved to is kept until you delete it.

Your rights

Under UK and EU data protection law you can ask for a copy of your data, correct it, delete it, take it elsewhere in a portable format, restrict or object to how it is used, or withdraw a consent you gave. Email hello@slate-app.com and you will get a reply within 30 days. Deletion is immediate and in your own hands through the app.

If you think your data has been mishandled, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA. Please raise it with me first if you can — it is usually quicker.

Children

Slate is not for children under 13, and you must be older if the law where you live sets a higher age for consenting to online services. If you believe a child has created an account, email hello@slate-app.com and it will be removed.

Changes to this policy

If this policy changes, the date at the top changes with it. Anything that materially affects how your data is used will be flagged in the app before it takes effect.