This policy explains how Raters collects, uses, shares, retains and protects personal data when you use the Raters mobile application, website and related services.

Raters Group Ltd. (“Raters”, “we”, “us” or “our”) operates the Raters mobile application, the Raters website and related services (together, the “Services”). For purposes of European data protection law, Raters Group Ltd. is the controller of personal data described in this Privacy Policy, except where another party acts as an independent controller under its own privacy notice.

This Privacy Policy applies when you create an account, sign in, rate or review movies and other content, build lists, use social or recommendation features, subscribe to premium functionality, receive notifications, view advertisements, contact support or otherwise interact with the Services.

This Privacy Policy does not apply to third-party websites, applications or services that may be linked from the Services. Those third parties process information under their own privacy policies.

2.1 Account and profile information

When you create or maintain a Raters account, we may collect your name, email address, profile picture or avatar, account credentials or authentication tokens, account settings and preferences. We may also assign an internal Raters user identifier to your account.

2.2 Third-party sign-in identifiers

Depending on the sign-in method you choose, we may receive and store a Facebook User ID, Google account identifier or Apple user identifier. These identifiers help us create, authenticate, link and recover your Raters account. The information actually returned by the sign-in provider depends on your provider settings, the permissions requested by Raters and the permissions you grant.

2.3 User-generated content and activity

We collect content and activity that you choose to submit through the Services, such as ratings, reviews, watchlists, favourites, lists, comments, follows, reactions, profile details and other interactions. Some of this information may be visible to other users depending on the feature and your privacy settings.

2.4 Location information

If you grant device-level permission, Raters may collect approximate or precise location information. Location may be used to enable location-aware features, improve recommendations, localise content, prevent abuse or measure service performance. You can revoke location permission at any time through your device settings. Certain features may not function correctly without location access.

2.5 Device and technical information

We may collect device identifiers, advertising identifiers where permitted, device model, operating system, app version, language, time zone, IP address, mobile network information, browser information, installation identifiers, diagnostic events and security logs. We also store push notification tokens when notifications are enabled.

2.6 Usage and analytics information

We collect information about how you use the Services, including screens viewed, features used, searches, taps, session duration, referral source, installation events, subscription events, ad interactions, errors, crashes and performance data.

2.7 Communications and support information

If you contact us, we may collect your email address, the content of your request, attachments, device or account information you provide, and records of our response.

We collect information in the following ways:

• Directly from you, when you create an account, complete your profile, post content, contact support or change settings.
• Automatically from your device or use of the Services, including through software development kits, logs, cookies and similar technologies.
• From authentication providers such as Facebook, Google and Apple when you choose to use those services.
• From app stores and payment platforms, which may provide transaction status, subscription status, product identifier, country or storefront and limited purchase metadata. We do not receive your full payment card details.
• From analytics, attribution, advertising, crash-reporting and infrastructure providers acting on our behalf or under their own terms.

We may use personal data to:

• Provide, operate and maintain the Services.
• Create, authenticate, link and secure user accounts.
• Personalise recommendations, rankings, feeds and other app experiences.
• Enable ratings, reviews, lists, follows and other social or community features.
• Send service messages, security alerts, account notices and push notifications.
• Provide customer support and respond to requests.
• Process and manage premium subscriptions and entitlements.
• Display, measure and improve advertising where advertisements are enabled.
• Measure installations, engagement, retention, feature performance and marketing effectiveness.
• Detect, investigate and prevent fraud, abuse, spam, security incidents and violations of our terms.
• Debug crashes, improve stability and develop new features.
• Comply with legal obligations, enforce agreements and protect users, Raters and third parties.

Where the GDPR, UK GDPR or similar law applies, we rely on one or more of the following legal bases:

• Contract: processing necessary to provide the account and Services you request, including authentication, core app functionality and subscription access.
• Consent: for optional location access, certain notifications, advertising or tracking choices, and other processing where consent is legally required. You may withdraw consent at any time, without affecting earlier lawful processing.
• Legitimate interests: to improve the Services, understand usage, secure the platform, prevent abuse, communicate about the Services and operate our business, provided those interests are not overridden by your rights.
• Legal obligation: to comply with tax, accounting, consumer protection, law enforcement and other applicable legal requirements.
• Protection of vital interests or legal claims: where necessary to protect a person, establish or defend legal claims, or respond to emergencies.

Where we rely on legitimate interests, we consider the nature of the data, the reasonable expectations of users, the impact of processing and available safeguards.

6.1 Email sign-in

If you register with an email address, we use that address and your authentication credentials to create and secure your account, send account-related messages and support account recovery. Passwords are stored only in protected, non-readable form using appropriate security measures.

6.2 Facebook Login

If you choose Facebook Login, Raters may receive your Facebook User ID, name, profile picture and email address, depending on the permissions granted and information available from Facebook. We use this information to authenticate you, create or link your Raters profile and provide account functionality. Raters does not post to your Facebook profile without a separate action or permission from you. We do not request or use additional Facebook data unless it is necessary for a disclosed feature and separately approved where required.

You may remove Raters from your Facebook settings. You may also request deletion of information received through Facebook using the account deletion methods described below. Raters maintains the data deletion mechanism required by Meta for Platform Data.

6.3 Google Sign-In

If you choose Google Sign-In, we may receive your Google account identifier, name, profile picture and email address, depending on your Google settings and the scopes requested. We use that information to authenticate you and create or link your Raters account.

6.4 Sign in with Apple

If you choose Sign in with Apple, we may receive an Apple user identifier, your name and either your email address or an Apple private relay address, depending on the option you select. Apple may provide your name only during the first authorisation, so we may store it for account functionality.

7.1 Location permissions

Raters requests location only when a feature requires it and only after the operating system presents a permission request. Location permission is optional unless clearly stated for a specific feature. You may change permission settings through iOS or Android at any time.

7.2 Device identifiers

Device and installation identifiers may be used for security, fraud prevention, analytics, attribution, advertising frequency controls, account continuity and troubleshooting. Advertising identifiers are used only in accordance with platform settings, consent requirements and applicable law.

7.3 Push notifications

If you enable notifications, we store a push token associated with your device or app installation. We use it to send service notices, social activity, recommendations, reminders or promotional messages according to your settings. You may disable notifications through the app or device settings.

Raters uses third-party tools to understand use of the Services, measure performance, attribute installations and diagnose technical problems. These providers may process device information, identifiers, IP address, app events, session information, purchase or subscription events, crash logs and related metadata.

8.1 Firebase Analytics and Google Analytics

These services may be used to measure engagement, app events, acquisition sources, audience trends and feature performance. Depending on configuration and consent, data may be associated with an app instance, device or user account.

8.2 Firebase Crashlytics

Crashlytics helps us detect and diagnose crashes and stability issues. Crash reports may include device model, operating system, app version, technical logs, crash traces and installation identifiers.

8.3 Amplitude

Amplitude may be used for product analytics, including understanding user journeys, feature usage, retention and aggregated behavioural trends.

8.4 AppsFlyer

AppsFlyer may be used for mobile attribution and campaign measurement. Depending on consent and platform rules, it may process installation data, advertising identifiers, device information, referral information and in-app events.

The exact data processed by each service depends on the production configuration, consent choices and platform settings.

Raters may display advertisements through Google AdMob. AdMob and its advertising partners may process advertising identifiers, IP address, device information, approximate location inferred from IP, ad impressions, clicks and interaction data to deliver, limit, measure and improve advertisements. Personalised advertising is used only where permitted and, where required, after obtaining consent or platform tracking permission.

On iOS, Raters respects App Tracking Transparency choices. If you decline tracking permission, Raters and its partners do not use restricted identifiers or combine data for cross-company tracking in a manner prohibited by Apple. On Android and in relevant jurisdictions, Raters honours applicable consent and advertising settings.

You may be able to manage advertising choices through the app, your device settings, Google settings or a consent interface presented in the Services. Even where personalised ads are disabled, contextual or non-personalised advertisements may still appear.

Raters offers optional monthly and annual premium subscriptions that expand app functionality. Purchases are processed by Apple through the App Store or by Google through Google Play. Those platforms act under their own terms and privacy policies and handle payment credentials directly.

Raters may receive a product identifier, transaction or purchase token, subscription status, renewal or expiration information, storefront or country, and other limited information needed to validate purchases and provide premium access. Raters does not receive or store your full payment card number.

Subscription management, billing, cancellation and refunds are generally handled through the relevant app store account, subject to the store’s rules.

Ratings, reviews, lists, profile names, avatars and other content you choose to make public may be visible to other users and may appear in feeds, recommendations, search results or shared links. Public content may be copied, indexed or shared by others outside Raters. Consider carefully what you publish.

We may moderate, restrict or remove content to enforce our terms, protect users, comply with law or maintain service integrity. Moderation may involve automated signals and human review.

We may disclose information to the following categories of recipients:

• Infrastructure and hosting providers that store or process information for the Services.
• Authentication providers, where necessary to complete sign-in or account linking.
• Analytics, attribution, crash-reporting and customer-support providers.
• Advertising providers such as Google AdMob and associated partners, subject to consent and platform rules.
• Apple and Google for subscriptions, purchase validation and app distribution.
• Professional advisers, auditors, insurers and corporate service providers.
• Authorities, courts or other parties where disclosure is required by law or reasonably necessary to protect rights, safety and security.
• A buyer, investor, successor or affiliate in connection with a merger, acquisition, financing, reorganisation or sale of assets, subject to appropriate safeguards.

We do not sell personal data for money. Certain privacy laws define “sale,” “sharing” or “targeted advertising” broadly; where those definitions apply, advertising or attribution disclosures may qualify, and we will provide legally required choices.

Raters and its service providers may process information in countries outside your country of residence, including countries outside the European Economic Area. Those countries may have different data protection laws.

Where required, we use recognised safeguards for international transfers, such as adequacy decisions, standard contractual clauses, contractual and technical measures, or another lawful transfer mechanism. You may contact us for information about the safeguards relevant to your data, subject to legal and confidentiality limitations.

We retain personal data for no longer than reasonably necessary for the purposes described in this Privacy Policy. Retention periods vary depending on the type of data, account status, legal requirements, security needs and whether the data is needed to resolve disputes or enforce agreements.

• Account and profile data: generally retained while your account is active and for a limited period after deletion to complete deletion, prevent fraud, resolve disputes or comply with law.
• User content: retained while available through the account; deleted, anonymised or disassociated after account deletion unless retention is legally required or content must remain to preserve another user’s conversation or legal rights.
• Purchase records: retained as required for entitlement management, accounting, tax and fraud prevention.
• Security and technical logs: retained for a limited operational period based on security and diagnostic needs.
• Analytics data: retained according to the configured settings of each analytics provider and, where possible, aggregated or de-identified over time.

Backups may retain residual copies for a limited period until overwritten through the normal backup cycle. Data required by law may be retained for the legally mandated period.

We use administrative, technical and organisational measures intended to protect personal data, such as access controls, encryption in transit where appropriate, secure authentication, logging, monitoring, vendor controls and restricted employee access. No system is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and for promptly notifying us if you suspect unauthorised access. Do not share passwords or authentication codes.

Depending on where you live, you may have the right to:

• Receive information about how your personal data is processed.
• Access personal data held about you.
• Correct inaccurate or incomplete data.
• Request deletion of personal data.
• Restrict or object to certain processing.
• Receive certain data in a portable format.
• Withdraw consent at any time where processing relies on consent.
• Object to direct marketing.
• Lodge a complaint with a competent data protection authority.
• Appeal a refusal of a privacy request where applicable.

To protect users, we may need to verify your identity before completing a request. We may decline or limit a request where permitted by law, including where the request affects the rights of others, is manifestly unfounded or conflicts with a legal obligation.

You may exercise applicable rights by using in-app account controls or contacting [email protected]. We will respond within the period required by applicable law.

You may request deletion of your Raters account and associated personal data through the account settings in the app, where available, or by emailing [email protected] from the email address associated with your account. Your request should identify the account and clearly state that you want the account deleted.

After verification, we will delete or anonymise personal data associated with the account, except where retention is necessary to comply with law, prevent fraud, protect security, resolve disputes, enforce agreements or preserve information that cannot reasonably be separated from the rights of another person.

17.1 Facebook data deletion

Users who signed in with Facebook may also remove Raters through Facebook settings and use the data deletion instructions or callback made available by Raters for Meta Platform Data. Raters will process valid deletion requests for information received from Facebook in accordance with applicable Meta requirements and law.

17.2 Effect of deletion

Account deletion is generally irreversible. You may lose your profile, ratings, reviews, lists, social connections, recommendations and premium entitlements associated with the deleted account. Cancelling a subscription and deleting an account are separate actions; you should also cancel active subscriptions through Apple or Google to prevent future billing.

The Services are not intended for children under the minimum age required to consent to online services in their country, unless the Services are specifically configured and legally permitted for younger users with appropriate parental authorisation. Raters does not knowingly collect personal data from a child in violation of applicable law.

If you believe a child has provided personal data without required permission, contact us at [email protected]. We will investigate and take appropriate action, which may include deleting the account and data.

Where the Services are used by teenagers, some social content may be public. Parents and guardians should discuss safe sharing, account privacy and online interactions with teen users.

The Raters website and certain web-based components may use cookies, local storage, pixels, SDKs and similar technologies to keep users signed in, remember settings, secure the Services, measure usage, attribute campaigns and support advertising. Mobile SDKs may perform similar functions within the app.

Where required, we request consent before using non-essential cookies or similar technologies. Browser and device settings may allow you to block or delete certain technologies, although doing so may affect functionality.

The Services may link to third-party websites, app stores, streaming services, social platforms or other services. Raters is not responsible for their privacy practices, security or content. Review the privacy notice of any third party before providing information.

We may update this Privacy Policy to reflect changes in the Services, technology, legal requirements or business practices. We will post the updated policy and revise the “Last Updated” date. Where required, we will provide additional notice or request renewed consent. Continued use after an update takes effect means the updated policy applies, except where law requires another form of acceptance.

For privacy questions, account deletion requests or requests to exercise your rights, contact:

Raters Group Ltd.
Email: [email protected]

Registered address:

Raters Group Ltd.
1-7 Commercial Road
Paddock Wood
Kent, TN12 6EN
United Kingdom

If you are located in the European Economic Area or United Kingdom, you may also have the right to complain to your local data protection authority. We encourage you to contact us first so we can try to resolve your concern.