Privacy Policy

Last updated: May 2026

1. Who we are

Tely is operated by {{LEGAL_ENTITY}} ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Tely mobile application and website at telyapp.com (together, the "Service").

For privacy questions or to exercise your rights, contact us at support@telyapp.com.

2. Information we collect

Information you provide directly

  • Account credentials: your email address and password (your password is hashed by Supabase Auth; Tely never stores it in plaintext).
  • Profile information: first name, last name, username, optional bio (up to 100 characters), optional profile photo (uploaded as a WebP image), and optional banner image (selected from publicly available movie/TV artwork).
  • Content you create: posts, reviews, ratings (0.0–10.0), comments, watchlist and library entries, TV episode progress, custom lists, "watched with" tags, and comment mentions. Each piece of content has a visibility setting you control: public, followers-only, or private.
  • Social actions: follows, blocks, mutes, and content reports.
  • Support communications: if you contact us by email, we retain that correspondence.

Information generated automatically

  • Push notification token: your device's Expo push token, collected only when you enable notifications.
  • Timezone: your IANA timezone string (e.g., "America/New_York"), submitted when your device registers for notifications and used only to schedule time-sensitive alerts.
  • Notification preferences: your granular per-notification-type settings.
  • Aggregated view statistics: counts derived from your library entries (e.g., total runtime watched), computed server-side and stored as a gzipped cache.

Diagnostic data (via Sentry)

We use Sentry for crash reporting and performance monitoring, configured with sendDefaultPii: false. Sentry may receive error stack traces, navigation breadcrumbs, and your Tely user ID. It does not receive your email, name, password, content, screenshots, or UI hierarchy data. Approximately 10% of sessions include a performance trace sample.

What we do not collect

  • Date of birth
  • Phone number
  • Precise or approximate location
  • Device contacts or address book
  • Advertising identifiers (IDFA/GAID) or cross-app tracking identifiers
  • IP address (used only transiently by server infrastructure; not logged or stored)

Tely has no analytics SDK, no advertising SDK, and no third-party behavioral tracking.

3. How we use your information

We use the information we collect to:

  • Create and manage your account
  • Operate social features — your feed, follows, notifications, comments, and liked content
  • Deliver push notifications you have requested, including time-sensitive alerts (episode premieres, release dates) using your timezone
  • Enforce your content visibility settings (public, followers-only, private)
  • Monitor for and respond to abuse, spam, and safety issues via our in-app report system
  • Debug crashes and improve stability using anonymized diagnostic data
  • Respond to your support requests and legal inquiries
  • Comply with applicable laws and legal process

We do not use your information to serve you third-party advertising, build advertising profiles, or sell your data to brokers.

4. Legal bases for processing (EU/UK users)

If you are in the European Union, United Kingdom, or another jurisdiction that requires a legal basis for data processing, we rely on:

  • Performance of a contract (Art. 6(1)(b) GDPR): account creation, core features, content delivery, and account deletion.
  • Legitimate interests (Art. 6(1)(f) GDPR): security monitoring, anti-abuse enforcement, and crash diagnostics. Our interests do not override your fundamental rights and freedoms.
  • Consent (Art. 6(1)(a) GDPR): push notifications. You may withdraw consent at any time by disabling notifications in the app or your device settings.
  • Legal obligation (Art. 6(1)(c) GDPR): complying with valid legal process.

5. How we share your information

Service providers

  • Supabase — account authentication, database hosting, and profile image storage. Data is stored in Supabase-managed infrastructure subject to Supabase's security controls.
  • Sentry — crash reporting and performance monitoring, as described in Section 2.
  • Expo Push Service — notification delivery. Your push token is submitted to Expo, which routes notifications through Apple APNs (Apple's infrastructure) and Google FCM (Google's infrastructure).

Each service provider is bound by contractual data-protection obligations and is not permitted to use your data for their own purposes.

Public by design

Your username, display name, bio, and profile photo are visible to all Tely users. Content you mark "public" is visible to all users; "followers only" content is visible to your approved followers; "private" content is visible only to you. With a private account, your follower list requires your approval.

What we never do

  • We do not sell your personal information.
  • We do not share personal information for third-party advertising.
  • TMDB and TVDB provide movie/TV metadata to us on a server-to-server basis; we do not send your personal information to them.

Legal disclosure

We may disclose personal information if required by valid legal process (court order, subpoena, or other compelled disclosure), or to protect the rights, safety, or property of Tely, its users, or the public. We will attempt to notify you before disclosure where permitted by law.

Business transfers

In the event of a merger, acquisition, or sale of substantially all assets, personal information may be transferred as part of that transaction. We will notify affected users by email or prominent in-app notice before their information becomes subject to a materially different privacy policy.

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account (see Section 7), we immediately initiate deletion of your profile, content, push tokens, and Supabase Auth credentials. Residual copies in automated system backups may persist for up to 30 days before being overwritten. Abuse reports and moderation records may be retained for a reasonable period to prevent circumvention of safety policies.

7. Account deletion

You can permanently delete your account at any time from Settings → Account → Delete Account. Deletion immediately removes:

  • Your profile, bio, and profile photo
  • All posts, reviews, comments, likes, and library entries
  • All custom lists and list items
  • All follow, block, and mute relationships
  • Your push notification token and all notification preferences
  • Your Supabase Auth account and associated email address

Alternatively, email support@telyapp.com from the address on your account and we will process the deletion within 30 days.

8. Your rights

EU/UK users (GDPR / UK GDPR)

  • Access: request a copy of the personal data we hold about you.
  • Rectification: correct inaccurate data. Most profile information can be updated directly in the app.
  • Erasure: delete your account as described above, or contact us.
  • Portability: request your data in a structured, commonly used, machine-readable format.
  • Objection: object to processing based on legitimate interests.
  • Restriction: request that we limit processing in certain circumstances.
  • Withdraw consent: for push notifications, disable them in-app or in your device settings at any time.
  • Complaint: lodge a complaint with your local Data Protection Authority (EU) or the Information Commissioner's Office (UK).

California residents (CCPA)

  • Right to know what personal information we collect, use, and disclose.
  • Right to delete your personal information (see account deletion above).
  • Right to opt out of the "sale" or "sharing" of personal information — we do not sell or share your information for advertising purposes.
  • Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at support@telyapp.com. We will respond within 30 days, or within the timeframe required by applicable law.

9. Children's privacy

Tely is not directed to children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has created a Tely account, please contact us at support@telyapp.com and we will promptly delete the account and associated data.

10. International data transfers

Tely's infrastructure relies on US-based service providers (Supabase, Sentry, Expo). If you access Tely from the EU, UK, or other regions with data-export restrictions, your personal information may be transferred to and processed in the United States, which may not provide the same level of data protection as your home country. Where required, we rely on Standard Contractual Clauses (SCCs) and appropriate data-processing agreements with our service providers to safeguard these transfers.

11. Security

We take reasonable technical and organizational measures to protect your information, including:

  • TLS encryption for all data in transit between your device and our servers
  • Password hashing by Supabase Auth — Tely never stores passwords in plaintext
  • Password re-verification required before account deletion
  • Server-side validation and normalization of uploaded images before storage

No system is completely secure. We encourage you to use a strong, unique password and to keep your device software up to date. If you believe your account has been compromised, contact us immediately at support@telyapp.com.

12. App Store and Google Play privacy disclosures

Our App Store App Privacy disclosure and Google Play Data Safety section reflect the data practices described in this policy. Those platform disclosures are reviewed and updated when this policy changes materially.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through a notice in the app or by email to the address on your account at least 30 days before the change takes effect, where practicable. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Tely after the effective date constitutes your acceptance of the updated policy.

14. Contact

For privacy-related questions, requests to exercise your rights, or to report a concern:

  • Email: support@telyapp.com