Privacy Policy

Last updated: August 21, 2026

Overview

Chitrax("we", "us") is a movie and TV discovery app. This policy explains what information we collect through the Chitrax website and mobile app, how we use it, and the choices you have — including deleting your account and all associated data at any time.

Information we collect

Account information. When you sign up, we collect the details needed to create your account: your name, and either an email address or phone number (used to send a one-time verification code) and a password. If you sign in with Google, we receive your name, email address, and profile picture from Google instead of a password.

Watchlist and favourites. Titles you add to your watchlist or favourites are stored against your account so they sync across sessions and devices.

Usage for recommendations. We use the titles you save to generate personalized recommendations. We don't track your browsing activity beyond what you explicitly save.

How we use third-party services

Movie and TV metadata, posters, cast information, and trailers are provided by The Movie Database (TMDB). Streaming availability and ratings data are supplemented by Watchmode and OMDb. These lookups are made by our servers, not directly from your device.

One-time verification codes are delivered by Twilio (SMS) or Resend (email). These providers receive only the phone number or email address and code needed to deliver that message. If you choose Google Sign-In, Google acts as your identity provider for that login.

We do not use advertising networks or third-party analytics/tracking SDKs, and we do not sell your data to anyone.

How your data is stored

Passwords are never stored in plain text — only a salted hash. Sessions are authenticated with short-lived access tokens; on the web app, a longer-lived refresh token is stored in an httpOnly cookie your browser sends automatically and JavaScript cannot read. On the mobile app, tokens are stored in your device's secure keychain (iOS Keychain / Android Keystore).

Your choices and account deletion

You can edit your profile, change your password, and link or unlink a phone number or email address at any time from Settings.

You can permanently delete your account from Settings → Danger zone. This immediately and irreversibly deletes your watchlist, favourites, active sessions, and account record — there is no recovery period.

Children's privacy

Chitrax is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page. Continued use of Chitrax after a change means you accept the updated policy.

Contact

Questions about this policy or your data? Email us at nagarjuna@chitrax.in.