Privacy Policy
Last updated: 18 July 2026
This is a translation of the Italian original. In the event of any discrepancy, the Italian version prevails.
1Data controller
The data controller is Ivemind Società Cooperativa Sociale (Ivemind SCS), with registered office at Via Werner von Siemens 23, 39100 Bolzano (BZ), Italy, VAT no. IT03138990217, REA BZ-235349 (hereinafter “TVPocket” or “we”). For any request concerning personal data you can write to privacy@ivemind.com (PEC: ivemindscs@pec.it).
2What data we process
- Account data — email, display name, username, avatar/cover image. If you sign in with Google or Facebook, we receive your name and email from the provider in order to create or link the account.
- Viewing and activity data — the series, films and books you track, your ratings, lists, comments and reactions, and — if you choose to import it — your history exported from TV Time (or from Goodreads for books). This data describes your habits and constitutes personal data.
- Demographic data (age, gender) — processed only if you give the specific consent, whether provided by Google/Facebook or declared by you in the settings. We do not process special categories of data (art. 9 GDPR).
- Minimal technical data — IP address and user-agent at the time of registration/consent (for security and to document consents) and pseudonymous usage events if you consent to analytics.
3Why we process it (purposes and legal bases)
- Providing the service (account, tracking, social features, lists, statistics) — legal basis: performance of the contract (art. 6(1)(b) GDPR).
- Importing your history from the export you upload — legal basis: consent (art. 6(1)(a) GDPR), given by ticking the dedicated box at upload time.
- Marketing (promotional emails/notifications, news) — legal basis: consent, optional and separate, withdrawable at any time.
- Sharing aggregated/anonymous data with third parties (see §6) — legal basis: consent, optional and separate.
- Personalisation using demographic data — legal basis: consent, optional and separate.
- Security, abuse prevention and legal compliance — legal basis: legitimate interest (art. 6(1)(f)) / legal obligation (art. 6(1)(c)).
4Optional and granular consents
The consents for import, marketing, aggregated data sharing and demographic data are independent, off by default (opt-in) and do not condition your use of the service: you can use TVPocket without giving any of them. Each consent is recorded with the date and the version of this notice and is withdrawable at any time from the “Privacy and consents” page in the settings, as easily as you gave it. Withdrawal does not affect the lawfulness of processing carried out beforehand.
5How we process the data and for how long
- Minimisation: we import and retain only the fields useful to the service and discard the rest.
- The raw export file is deleted after processing (and in any case within 30 days). Only the viewing data mapped onto our identifiers remains.
- Catalogue metadata (titles, synopses, cover art) is a licensed cache with a maximum lifetime of 6 months, not owned by us: it expires and is regenerated.
- Account data and your activity are retained for as long as you use the service or until you request erasure (see §9).
6Who we disclose the data to
We rely on providers who process the data on our behalf as processors (art. 28 GDPR):
- Amazon Web Services — hosting in the European region eu-central-1, Frankfurt, and delivery of transactional emails.
- Google Ireland Limited — usage statistics (Google Analytics 4), only if you consent to the “analytics” category in the cookie panel. If you decline, the script is not even loaded.
- YouTube (Google) — trailer playback. The player loads only after you press play, from the
youtube-nocookie.comdomain; at that point Google receives your IP address and browser data.
Posters and cover art are served by the CDNs of TMDB (image.tmdb.org) and Open Library (covers.openlibrary.org): they receive only the IP address needed to deliver the image and do not set profiling cookies. Full details are in the Cookie Policy.
Sharing aggregated data with third parties. Only if you give the specific consent may we share or transfer to third parties aggregated and anonymised data (trend statistics that cannot be traced back to you) derived exclusively from your first-party data (imported history and in-app activity). This data is aggregated and stripped of every identifying element before being shared.
We do not sell or transfer to third parties the data obtained through Google or Facebook login (name, email, demographic data from the provider): the terms of those platforms prohibit it and we comply with them. We never sell identifying personal data.
7Signing in with Google and Facebook
If you sign in with Google or Facebook, authentication takes place through Amazon Cognito and we receive from the provider the minimum data for the account (name, email) and, only with your consent to demographic data, any age bracket/gender. The use of this data is also governed by the policies of Google and Meta/Facebook. You can revoke access from the security settings of your Google/Facebook account at any time.
8Transfers outside the EU and your rights
The data is processed in the EU (AWS eu-central-1). Some providers may process data outside the EU subject to appropriate safeguards (Standard Contractual Clauses / EU-US Data Privacy Framework): in particular Google LLC — for Google Analytics 4, for embedding YouTube trailers and for signing in with Google — and Meta Platforms for signing in with Facebook.
As a data subject you may exercise at any time the rights under artt. 15-22 GDPR: access and copy, rectification, erasure, restriction and objection, portability (you can export your data in JSON from the settings) and withdrawal of consent. Write to privacy@ivemind.com; you also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
9Data deletion
You can delete your account and all associated data yourself from the app settings, or by following the procedure described on the Data deletion page (in Italian).
10What we do NOT do
- We do not scrape TV Time / Whip Media and we do not ask you for their credentials: we import only the file that you upload voluntarily.
- We do not use licensed data (the catalogue) to train AI models.
- We do not sell identifying personal data, nor the data obtained from Google/Facebook.
11Attributions and changes
This product uses the TMDB API but is not endorsed or certified by TMDB.
We may update this notice: material changes will be communicated and the date at the top will be updated.