Privacy Policy

Last updated 21 July 2026

Graveyard Shift is built for exactly two people. Your data is scoped to your pact. It is never sold, never shared with advertisers, and never used to track you across other apps or websites.

What we collect

• Your email address, for signing in.
• Your profile: display name, avatar emoji, region and timezone. Region decides which country’s streaming catalogue we check. Timezone decides what time we show a movie night in.
• What you do in the app: swipes, matches, scheduled nights, live reactions, chat messages, ratings and predictions.

We do not collect your contacts, your location, your photos, or your advertising identifier. We do not ask for them.

How we use it

To run the app, and nothing else: to pair you with your partner, to surface films you can both actually stream, to coordinate a movie night across two timezones, and to build the archive the two of you keep.

Two rules are enforced by the database itself, not by our good intentions:

• Your swipes stay yours until a match forms. Your partner’s app cannot read them. The security rule that governs the swipes table only ever returns your own rows.
• Ratings stay sealed until you have both rated, or 24 hours have passed.

One deliberate exception, and it is opt-in by your own action: if you rate a film you have marked as seen, your partner can see that rating only once you have both marked the same film seen. Mutual disclosure. You learn what they thought by admitting what you have watched.

Analytics

We record product events — for example, that a night was scheduled — so we can tell which parts of the app are working. These events are tied to your account. They are never sold, never shared with advertisers, and never used to build a profile of you outside this app.

Crash reporting

The app sends crash reports to Sentry (Functional Software, Inc.), a third-party service. This is the only third party that receives anything about your device, and it is worth being precise about what it does and does not get.

What Sentry receives when the app crashes: the error and its stack trace, your device model, your operating system version, and the app version.

What Sentry does not receive, by explicit configuration: no session replay or screen recording, no screenshots, no view hierarchy, no IP address or personally identifying information, and no console logs. Your chat messages, your reactions and your ratings are never included. The app’s crash-reporting configuration disables each of these individually rather than relying on defaults, because a screen recording taken during a movie night would be a recording of your private conversation.

Sentry is used to fix crashes. It is not used for analytics, advertising, or tracking.

Movie data

Film information comes from TMDB and streaming availability from JustWatch. This product uses the TMDB API but is not endorsed or certified by TMDB.

We ask these services about films. We do not send them anything about you: no account, no identifier, no swipe. Trailers play through YouTube’s official player, and YouTube’s own privacy policy applies to that playback.

Retention and deletion

You can delete your account at any time from the You tab in the app. It removes your account and your swipes.

If you leave a pact, the shared history is kept for 30 days so your partner does not lose the archive the moment you go, then it is permanently deleted.

Children

Graveyard Shift surfaces horror films, including titles rated R. It is not intended for children and is age-rated accordingly on the App Store.

Changes

If this policy changes materially, we will update the date at the top and note it in the app.

Contact

Questions about your data: support@graveyardshift.app