Flicit is a private movie journal. This policy explains what information the app handles and why. The app has no sign-in: it never requires an email address, a phone number or your Apple Account. An email address is only ever optional, in two places: the launch waitlist on our website, flicit.top (section 9), and the feedback form in the app, if you want a reply (section 7).
1. Content on this device
Flicit stores the movie records you create, including tickets, posters, ratings, notes, places, companions, reminders, and your avatar and display name. This content is personal by default and is saved on this device unless you choose another option below.
2. Where it is stored
Your private records are stored on your device by default. If you turn on iCloud sync in Settings, eligible records are synchronized through the iCloud/CloudKit private database for your Apple Account. Flicitʼs servers do not keep a public copy of your ticket text or private library.
3. Anonymous technical identity
When you install Flicit, the app generates an installation identifier in the on-device Keychain and uses it to create an anonymous session with the Flicit backend. That session is used to verify subscriptions and AI allowance. It is not a social account, and it is not linked to an email address, phone number, or Apple Account.
4. App Store purchases
When you buy or restore, Flicit sends the App Storeʼs signed transaction (JWS) to the Flicit backend so the purchase can be verified and your allowance recorded. The backend stores transaction identifiers and an allowance ledger. It does not store your ticket content.
Gifts are optional. If your subscription lets you give one, Flicit’s backend stores the gift code in sealed form, when it expires and, if you choose to add one, the name you sign it with; whoever redeems the code sees that name and nothing else about you. When a code is redeemed, the backend records which anonymous subscription record gave it and which one redeemed it, so that a gift is counted once and shown on the right subscription. The gift itself is completed with an App Store offer code. A gift nobody redeems is deleted 90 days after it ends, and a redeemed one after 400 days, except a lifetime gift, which is kept for as long as it is held.
5. AI ticket recognition
AI recognition is optional and asks for your permission before the first photo leaves your device. If you allow it and then photograph or select a ticket image, that image is uploaded to the Flicit backend, which sends it to a third-party AI model service to read the movie information. The Flicit backend calls DeepSeek directly to process the image and return the recognition result. Only the photos you choose are sent — never your library, notes, places or companions.
Images are used to complete recognition and to help prevent abuse. Afterwards they are kept only as long as operating the service requires, and they are never published. You can withdraw permission at any time in Settings → Data.
6. App Attest
To help prevent forged sessions and allowance abuse, Flicit may use Apple App Attest so the backend can verify that a request came from this app on a genuine Apple device.
7. Other service data
To provide movie search, discovery, remote configuration, and basic app operations, Flicit may send limited request data to its backend, such as a movie query. This is not used as a public copy of your private library.
Feedback is optional. When you send feedback from Settings, Flicit sends its backend what you wrote, the topic you chose, the app’s version and language and, unless you switch them off, the device details listed on the form: device model, system version, region, plan, whether iCloud sync is on, the size of your library as a range, text size and the Reduce Motion setting. If you add an email address so that we can reply, it is stored with your message.
If iCloud sync runs into trouble, you can choose to send a sync report. It holds how many items of each kind are synced, waiting or failed, the error codes, whether your iCloud account is available to the app, the kind of network connection and the device details above. It holds no titles, notes, places, companions or photos, no record names and no account identifiers. Nothing is sent until you tap Send, and the form lists what goes.
Feedback and sync reports are not stored with your anonymous session, an installation identifier or an IP address; the session only shows that the request came from the app and limits how many can be sent in a day. We read them to fix problems, to reply when you ask us to and to decide what to build. A reply address is deleted 90 days after we close your message, and the message itself after 365 days. To have one deleted sooner, email help@flicit.top.
8. Sharing
Flicit does not publish your ticket records, places, companions, attachments, or notes unless you deliberately choose a sharing feature. You can keep the app entirely private.
9. Website launch waitlist
Before launch, flicit.top offers a waitlist. If you choose to join, we store the email address you enter and mark it as registered (we do not verify it), together with: the time you signed up, recorded by our server in UTC; the page language, the page and the button you used; the first page you opened during this visit, the domain of the website that sent you (not the full address of that page) and any utm_source, utm_medium, utm_campaign, utm_term and utm_content tags on that first page; your browserʼs time zone and user agent; and the approximate country, region, city and time zone that Cloudflare infers from your network connection. We never ask your browser for your precise location.
To remember where a visit began, the site keeps that first page, the referring domain and the utm_ tags in your browserʼs session storage for the current tab. They stay on your device, are no longer used after 30 minutes without viewing a page, are cleared when the tab is closed, and are sent only if you submit the form. No cookie or lasting identifier is used for this.
The form uses Cloudflare Turnstile to keep out automated sign-ups. Turnstile loads only when you open the form, and Cloudflare processes your IP address and browser signals to run the check. Your IP address is also used briefly to limit repeated attempts; it is not stored in the waitlist. The waitlist is hosted on Cloudflare (Workers and D1).
We use this information only to email you when Flicit is available and to understand which pages and links bring sign-ups. We donʼt send a confirmation email when you sign up. We keep your sign-up until the launch announcement has been sent and the list is no longer needed, or until you ask us to remove it: email help@flicit.top from the address you signed up with.
10. Your choices
Export: go to Settings → Data → Export Data. You can export text only, or include local images in a ZIP file.
Delete local data: go to Settings → Data → Delete Local Data and Reset. This removes tickets, images, collections, reminders, and the anonymous session on this device. It does not cancel an App Store subscription. Subscriptions stay with your Apple Account and are managed in the App Store. After a reset, use Restore Purchases on the subscription page if you want purchased benefits again. This reset does not delete copies already synced to iCloud. If iCloud sync is on, other devices may still download those copies.
11. Children
Flicit is not directed at children under 13. We do not knowingly collect personal information from children.
12. We do not sell your data
Flicit does not sell or rent your personal information, and does not share it with third parties for advertising.
13. Changes to this policy
When this policy changes, the updated version and date will be posted on this page. Continued use of Flicit after an update means the revised policy applies.
14. Contact
For privacy questions, data requests, or help with the app, email help@flicit.top. Tapping the address opens a new help email in your mail app.