Privacy Policy

Rewind collects information in a few categories to make the app work and to help us improve it:

Photos & scan data. When you scan tapes, Rewind captures photos of VHS tape labels and sends them to our server for processing. The server extracts tape metadata (titles, years, genres) and generates recommendations. Photos are held only during processing and are not stored afterward. We strip all location data and other metadata (EXIF) from your photos before they leave your device.

Device information. The app automatically generates a random device identifier (a UUID) stored in your iOS Keychain. This identifier is not linked to your name, email, or Apple ID. Along with each request, we receive your device model, iOS version, app version, and network type (Wi-Fi or cellular) to help us diagnose issues and understand which devices to support.

Usage analytics. Rewind collects first-party usage events to understand how people use the app and where things break. This includes actions like scans started, results viewed, tapes added to your collection, tabs visited, features used, and errors encountered. Events include a per-session identifier (which resets each time you open the app) and a timestamp. See the Analytics section below for more detail.

Scan results metadata. When scans are processed on our server, we log information about the scan itself: how many tapes were identified, what titles were found, which reviewers evaluated them, confidence scores, and processing times. This helps us monitor accuracy and service performance.

Rewind uses a custom, first-party analytics system. We do not use any third-party analytics services, advertising SDKs, or cross-app tracking frameworks. We do not collect or use Apple's advertising identifier (IDFA).

Usage events are sent in batches from the app to Rewind's server. These events help us understand which features are working well, where users get stuck, and what errors need fixing. Examples include: scan completion rates, which app screens are visited, onboarding progression, search usage, and error logs. Events are tied to your anonymous device identifier and session ID, not to any personal identity.

We also collect lightweight performance diagnostics via Apple's MetricKit framework, including app launch times and crash reports. These help us fix bugs and keep the app running smoothly.

Analytics collection is not optional. It is a core part of how we maintain and improve Rewind. However, the data we collect is limited to app usage patterns and is never sold, shared with advertisers, or used for cross-app tracking.

Scan history, results, collection data, and want list items are stored in the app's local database. Your taste profile preferences are stored locally. A randomly generated device identifier is stored in the iOS Keychain.

If you sign in, your collection, want list, and watch history sync across your devices via Rewind's servers. Photos attached to scans are stored locally and do not sync.

If you enable notifications, Rewind registers your device with Apple's Push Notification service to notify you when scans complete. Your push notification token is sent to Rewind's server for delivery purposes only.

On your device: You control all locally stored data. Use Settings within the app to clear scan history or collection data. Deleting the app removes all local data including the device identifier.

On our server: Scan metadata and usage events are retained on our server indefinitely to support analytics, service monitoring, and product improvement. Photos are not retained after scan processing completes. Server-side data is associated with your anonymous device identifier, not with any personal identity.

Deletion requests: You can request deletion of all server-side data associated with your device by contacting us at support@heyrewind.app. We will process deletion requests within 30 days.

Rewind's server uses third-party services to process your scan photos and generate recommendations. Photos are sent over encrypted connections for processing and are not retained after results are returned.

Poster images and movie metadata are loaded from The Movie Database (TMDB). No personal data is sent to TMDB.

Rewind's server infrastructure runs on Cloudflare. Cloudflare may process standard connection metadata (IP addresses, request headers) as part of normal network operation.

You have the right to know what data we collect about you and to request its deletion. Because Rewind does not collect names, emails, or other personal identifiers, all server-side data is associated only with your anonymous device identifier. To exercise your rights, contact us at support@heyrewind.app with your device identifier (available in the app's Settings screen).

Rewind is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided data to Rewind, contact us at support@heyrewind.app.