Privacy Policy

Last updated: 3 July 2026

Totem (“we”, “us”) is a personal film-journaling app. This policy explains what personal data we hold, why, and the rights you have under UK GDPR. We are the data controller for the information described here.

What we collect

  • Account — your email address, and either a password (stored securely hashed by our auth provider) or, if you sign in with Google, the basic profile information Google shares.
  • Profile — an optional profile photo you upload.
  • Your content — the viewing entries you create: films, dates, locations, companions, ratings, reviews, and any lists.
  • Technical — essential cookies (see below) and aggregate, privacy-friendly usage analytics.

Why we use it (lawful basis)

We process your data to provide the service you’ve asked for (performance of a contract) — to create your account, store your journal, and show it back to you — and on the basis of our legitimate interest in keeping the service secure and working. We do not sell your data or use it for advertising.

Where your data is stored

We use trusted providers to run the service:

  • Supabase — database, authentication, and file storage for your account, content, and profile photo.
  • Vercel — application hosting and cookieless usage analytics.
  • TMDB — film search and metadata; we send film search terms to TMDB but not your personal data.
  • Google — only if you choose “Sign in with Google”, to authenticate you.

Cookies

We use only essential cookies: your sign-in session and your appearance preferences (theme and accent colour). We do not use tracking or advertising cookies, so no consent banner is required.

Retention

We keep your data for as long as your account exists. If you delete your account, your personal data and content are removed.

Your rights

Under UK GDPR you have the right to access, correct, export, or delete your personal data, and to restrict or object to its processing. You can exercise these rights (including self-service export and account deletion where available in the app) or ask any question by emailing support@totemjournal.com. You also have the right to complain to the UK’s Information Commissioner’s Office (ICO).

Changes

We may update this policy; material changes will be reflected by the “last updated” date above. See also our Terms of Service.