Privacy Policy

Last updated: 26 July 2026

This policy reflects how Mike Was Right actually handles your data. It’s written in plain language and kept up to date — if our data handling changes, this page changes with it. It isn’t a substitute for professional legal advice. Questions or requests: hello@mikewasright.app.

Who we are

Mike Was Right (mikewasright.app) is a personal project for sharing recommendations between friends. There are no ads, no data selling, and no third-party analytics or tracking scripts.

What we collect

Account — your email address, first name, an optional surname (stored for your own display only — never shown to other users), username, avatar, and — if you sign in with Google or Apple — the stable identifier those providers give us.
Your content — recommendations you save, ratings and reviews, Top 10 lists, and voice recordings you choose to make (quick-capture clips and voice notes), plus machine transcripts of them.
Your connections — friendships, follows, and the names of off-app people you credit recommendations to. Those names are personal data about someone else: please only name people who’d be comfortable with it.
App activity — in-app actions we log to run and improve the app: items you add, swipes, spinner use, ratings and where-to-watch taps, plus the title searches you type (cached to keep the app fast). This is product usage only — no behavioural ad profiles, no third-party trackers, no contacts access.
Approximate location — country-level only, and optional, used purely for app functionality: to show the right “where to watch” streaming availability. It’s either a region you pick (saved as a preference) or a rough guess from your connection’s country via our host. Never GPS or precise location.
Usage basics — notification preferences, push subscriptions for this device, and a coarse last-active timestamp.

How we use it

To run the app: matching what you say or type to a film/show/game/album/book, transcribing your voice clips, crediting recommendations to the right person, and sending the notifications you’ve opted into. That’s it.

Who processes it for us

Like nearly all apps, we run on infrastructure providers, who process data on our behalf. We don’t “share” your data with anyone for their own purposes — these providers only process it to run the app:

Supabase — database & voice-file storage (Singapore).
Vercel — hosting (Singapore region).
Railway — background processing.
Upstash — caching & a short-lived job queue.
Resend — email delivery (receives your email address and the message content, e.g. a sign-in code or a notification).
Firebase Cloud Messaging (Google) — delivers your push notifications; receives this device’s push token and the notification text (a friend’s first name and a title).
Anthropic — turns your capture text into a structured recommendation (receives that text; never your account data).
OpenAI — transcribes your voice clips (receives the audio only; never your account data).

Media search sends your search text only (never your account data) to the media databases we use: TMDB, IGDB, MusicBrainz / Cover Art Archive / ListenBrainz, and Open Library.

Voice recordings

Voice clips are the most personal thing you give us. They’re stored in cloud storage at unguessable addresses, transcribed once by OpenAI, and playable by you and the people you share them with. Honest caveat: the storage links are unguessable but not access-controlled — anyone who has a link can play that clip. Deleting your account in Settings destroys all your recordings — the actual audio files, everywhere they exist — and we’ll delete individual ones on request.

What other users see

You control visibility: the public/private profile switch, and separate toggles for sharing your ratings with friends and letting friends pool your watch-list — all in Settings. Your surname is never shown to other users. When your profile is private, other people see only your name and username.

Retention, deletion & export

We keep your data while your account exists. You can permanently delete your account yourself in Settings: it removes your account, list, ratings, reviews, relationships and Top 10s, and destroys your voice recordings everywhere they exist — the actual audio files are removed from storage, including on recommendations you sent to friends. Titles a friend chose to keep stay in their list, shown as “A former member” with no name, email or voice attached. Deletion is immediate and irreversible; deleted data also ages out of our short-term backups as they rotate. Full details, including a route for when you can’t sign in, are on the Delete your account page.

Export: you can download everything that’s yours anytime — in Settings, choose Export your data for a JSON or CSV copy — or email hello@mikewasright.app.

Separately from your account: media information fetched from the databases above (titles, artwork, details) sits in short-lived caches — typically hours to about 30 days — to keep the app fast and to be a polite API citizen.

Security

All data is encrypted in transit — the app and every connection it makes to our providers use HTTPS/TLS. Sign-in codes are stored only in hashed form.

Where your data lives

Our servers are in Singapore; some processors above are US-based. If you use the app from the UK/EU, your data crosses borders to those providers. (This is one of the areas a future legal review will formalise.)

Children

The app isn’t directed at children under 13, and we don’t knowingly collect their data.

Changes

If how the app handles data changes, this page changes with it — the “last updated” date above tells you when.

See also the Terms of Service and the data & attribution credits on the About page.