Filmi
Privacy Policy
Filmi is a free iPhone app that alerts you when sold-out seats open up at AMC theaters and keeps a log of the movies you see. This policy explains what Filmi stores about you, why, who else sees it, how long it's kept, and how to delete it. In this policy, "Filmi", "we" and "us" mean the independent developer who runs the app. Filmi is not affiliated with, endorsed by, or sponsored by AMC Theatres.
The short version
- You don't need an account to use Filmi. An email address is only needed if you create one.
- We store what you put into the app (alerts, tickets, settings) so the app can work. We don't collect your phone number, location, contacts or photos.
- No ads, no analytics or tracking SDKs, and we never sell or rent your data.
- You can delete everything, immediately and permanently, from Profile → Delete account in the app.
What we collect
Your account
When you first open Filmi, the app creates an anonymous account for your device with a random ID, so you can use it without signing up. If you choose to create an account, we store:
- your email address, and whether you've confirmed it
- your password, stored only as a secure hash, never in readable form
- when the account was created and when you last signed in
Your profile and settings
- a display name, if you enter one
- your AMC membership plan (A-List or none), used to work out your savings
- whether push notifications are on, and your quiet hours
- whether you've finished the first-launch walkthrough
What you put into the app
- Seat alerts: the theater, showtime, movie title, auditorium and seats you're watching, your seat-matching preferences, and the alert's status (for example, which seats opened up)
- Saved seat maps and favorite theaters
- Ticket tracking: the movies you log and details about them (title, year, runtime, genres, rating, countries, poster and image links from TMDB), the date and showtime, theater, format, seats, your seat rating, the ticket price and booking fees you enter, and any tags and notes you add
- Watchlist: movies you plan to see and any booked showtime. There's no watchlist screen in the app yet, so for most people this is empty.
Your device
- If you turn on notifications: a push token that lets us send notifications to your device, a device ID, and your device's platform (iOS)
- Like almost any online service, our servers see your IP address when the app connects. It appears in the server and sign-in logs described below and is used to limit repeated sign-in attempts. We don't use it to work out your location.
Stored only on your phone
Your sign-in session (with your email address, if you have an account, so the app can fill it in when you need to sign in again), your Light/Dark appearance setting, and whether you've seen the walkthrough are kept on your device. We don't collect them.
What we don't collect
No phone numbers, precise or approximate location, contacts, photos, payment details, advertising identifiers, or health data. Filmi has no ads and no analytics, tracking or crash-reporting SDKs, and it doesn't track you across other apps or websites. Filmi doesn't sell tickets or take payments, so we never see your AMC account or card details.
How we use it
Only to run Filmi:
- to check AMC's public seat maps for the seats you're watching, and send you a push notification when they open
- to show your ticket tracking, savings and Insights
- to sign you in, send account emails (confirmation and password-reset codes), and keep your data in sync across your devices
- to prevent abuse (for example, limiting repeated sign-in attempts) and to fix problems
Seat alerts are sent only as push notifications. We use your email address only for account emails, never for marketing.
Who else sees it
We never sell, rent or trade your data, and we don't share it for advertising. These service providers handle it on our behalf, only as needed to run the app:
| Provider | What for | What it receives |
|---|---|---|
| Supabase | Database, sign-in and servers | All the data described above |
| Expo, and Apple Push Notification service | Delivering push notifications | Your push token and each notification's text (for example, the movie and seats that opened) |
| Resend | Sending account emails | Your email address and the code in each email |
| TMDB (The Movie Database) | Movie details and posters | Movie searches go through our servers, so TMDB doesn't see who searched. Your phone loads poster images straight from TMDB, which sees your IP address when it does. |
Filmi's seat checks send AMC only showtime and theater IDs, never anything about you. When you tap "Book on AMC", AMC's website opens in your browser, and anything you do there is covered by AMC's own privacy policy. The same goes for the optional tip jar on the Profile screen, which opens an external page (Ko-fi). Filmi doesn't see who tips.
We may also disclose data if the law requires it, or to protect the safety of our users or the service.
How long we keep it
- Your account, ticket tracking, saved seat maps, favorite theaters and settings: until you delete them or your account.
- Seat alerts: deleted automatically five minutes after the showtime starts, whether or not seats opened.
- Push tokens: removed when Apple reports that the device can no longer receive notifications, when the device is used by another Filmi account, or when you delete your account.
- Anonymous data you leave behind: signing in to an existing account moves your phone to that account, and the anonymous data from before stays on our servers. To remove it, use "Delete my data" on the Profile screen before signing in.
Deleting your data
Open the app and go to Profile → Delete account (or Delete my data if you haven't created an account). After you confirm, your account and everything in it are deleted immediately and permanently: alerts, ticket tracking, watchlist, saved seat maps, favorite theaters, settings and push tokens, on every device. There's no waiting period, and it can't be undone. You don't need a confirmed email to do it.
A few copies outlive the deletion for a short time, outside the app's database:
- our hosting provider's backups keep deleted data until they rotate out on their regular schedule
- server logs, which can include your account ID and IP address, until they expire
- notifications that were already delivered stay on your phone, and in Expo's and Apple's records under their own policies
If you can't use the app, email support@filmi.us from the address on your account and we'll delete it for you within 30 days.
Your choices and rights
- See and correct your data: everything you've entered is visible and editable in the app.
- Delete it: in the app, as above, or by email.
- Get a copy: there's no export in the app yet. Email us and we'll send you your data.
- Turn off notifications: in Profile, or in your iPhone's Settings.
Depending on where you live (for example, California), you may have legal rights to know, access, correct or delete your personal information, and to not be discriminated against for using them. You can use any of them by emailing us. We don't sell or share personal information as those laws define it.
Security
Data is encrypted in transit between the app and our servers. Every account's data can only be read by that account, which the database enforces, and passwords are stored only as hashes. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it, as the law requires.
Children
Filmi isn't directed at children under 13, and we don't knowingly collect data from them. If you believe a child has given us personal data, email us and we'll delete it.
Where Filmi is available
Filmi is available in the United States only, and your data is processed and stored by the providers above, which may be in the United States or other countries.
Changes to this policy
If we change what we collect or how we use it, we'll update this page and the date at the top before the change takes effect.
Contact
Questions, requests or concerns: support@filmi.us