Privacy Policy

Rewind is made by Overscan Industries, a company in the United States. Overscan Industries is the data controller for the personal data described in this policy.

Email: support@heyrewind.app

Rewind collects information in a few categories to make the app work and to help us improve it:

Photos & scan data. When you scan a shelf, Rewind captures photos of tape and disc spines, covers, and labels and sends them to our server for processing. The server extracts title metadata (titles, years, genres) and generates recommendations. Photos are held only during processing and are not stored afterward. We strip all location data and other metadata (EXIF) from your photos before they leave your device.

Device information. The app generates a device identifier (a UUID). On iOS, it is a random value stored in your iOS Keychain. On Android, it is a one-way hash of the Android device ID (ANDROID_ID) turned into a UUID, stored encrypted on your device and excluded from backups; reinstalling the app on the same device produces the same identifier. Unless you sign in, this identifier is not linked to your name, email, Apple ID, or Google account. Along with each request, we receive your app version and platform (iOS or Android). Usage events also carry your device model, operating system version, app version and build, and network type (Wi-Fi, cellular, or constrained) to help us diagnose issues and understand which devices to support.

Account information. Signing in is optional. If you create an account, we store the email address you sign in with (via Sign in with Apple on iOS, Google, or an emailed sign-in link; Sign in with Apple is not offered on Android), along with a display name if your sign-in provider shares one. Your email is used to operate your account, sync your data across devices, and send the emails described in the Accounts & Email section below.

Usage analytics. Rewind collects first-party usage events to understand how people use the app and where things break. This includes actions like scans started, results viewed, tapes added to your collection, tabs visited, features used, and errors encountered. Events include a per-session identifier (which resets each time you open the app) and a timestamp. See the Analytics section below for more detail.

Scan results metadata. When scans are processed on our server, we log information about the scan itself: how many tapes were identified, what titles were found, which reviewers evaluated them, confidence scores, and processing times. This helps us monitor accuracy and service performance.

Location. The Hunt tab can use your location to find stores near you. This happens only after you grant location permission. The app sends your approximate coordinates to Rewind's server with that store search; on Android, the app requests approximate (balanced-power) accuracy. The coordinates are used to return nearby stores and are not used for advertising.

Purchases. Special Edition is sold through the App Store on iOS and Google Play on Android. Apple or Google processes the payment; Rewind never sees your card details. On iOS, Rewind receives the transaction and subscription status from Apple. On Android, Rewind's server receives from Google the purchase token, order ID, subscription state and dates, plan, and the country or region code of the purchase. The app sends Google a one-way hash of your Rewind account ID and of your device identifier with the purchase, so the purchase can be tied to the right account. Google never receives your account email from Rewind.

Data protection law in the EU, EEA, and UK requires a legal basis for each use of personal data. Ours are:

Running the app. Processing scans, finding nearby stores when you ask, syncing your data, operating your account, and granting and checking purchases use the data needed to provide the service you asked for (performance of a contract).

Keeping the app working and improving it. Usage analytics, crash diagnostics, abuse prevention and rate limiting, and service logs rest on our legitimate interest in a service that works and gets better. You can object to this; see Your Rights. On Android, crash reports are sent to Firebase Crashlytics only with your consent, which you can withdraw under Settings → Crash reports; see Analytics.

Update and digest emails. If you are in the EU, EEA, or UK, we send these only with your consent. You are not added to the list unless you opt in under Settings → Email. You can withdraw at any time in the same place or with the unsubscribe link in every email.

Website analytics. Umami counts site visits without cookies, on our legitimate interest in knowing how the site is used. Microsoft Clarity runs for visitors in Europe only with your consent, given in the cookie banner.

Rewind uses a custom, first-party analytics system. We do not use any third-party analytics services, advertising SDKs, or cross-app tracking frameworks. We do not collect or use Apple's advertising identifier (IDFA) or the Android advertising ID.

Usage events are sent in batches from the app to Rewind's server on both iOS and Android. These events help us understand which features are working well, where users get stuck, and what errors need fixing. Examples include: scan completion rates, which app screens are visited, onboarding progression, search usage, and error logs. Events are tied to your device identifier and session ID and, once you sign in, to your account ID. They are not sold or shared with advertisers.

On iOS, we also collect lightweight performance diagnostics via Apple's MetricKit framework, including app launch times and crash reports. On Android, crash reports are sent to Firebase Crashlytics, a Google service. Crashlytics is off until you accept the data prompt shown before your first scan, and you can turn it off at any time under Settings → Crash reports. It sends crash stack traces and device state with a Crashlytics installation identifier; it does not receive your Rewind user ID or your account email. The app includes no other Firebase or Google analytics SDK. These reports help us fix bugs and keep the app running smoothly.

The app has no switch to turn usage analytics off. Crash reports on Android have their own switch, described above. The data is limited to app usage patterns and is never sold, shared with advertisers, or used for cross-app tracking. If you are in the EU, EEA, or UK, you can object to this processing; see Your Rights.

Our website at heyrewind.app uses two web analytics tools. Umami counts page visits without cookies and runs for every visitor. Microsoft Clarity sets cookies and records sessions of site visits so we can see how pages are used. For visitors in Europe, Clarity runs only after you accept it in the cookie banner. You can change your choice at any time with the “Cookie settings” link in the site footer. Both tools run only on the website, never in the app, and receive no app data.

Scan history, results, collection data, and want list items are stored in the app's local database. Your taste profile and preferences are stored on your device. On iOS, a randomly generated device identifier is stored in the iOS Keychain. On Android, the device identifier is stored encrypted in app-private storage, the app's database and settings live in app-private storage, and Android backups of app data are turned off.

If you sign in, your collection, want list, watch history, scan history, taste profile, and preferences sync across your devices via Rewind's servers.

Photos you attach to items in your collection are stored on Rewind's servers and sync across your devices. They stay there until you delete the photo or your account.

Cover art you submit to the community catalog is stored on Rewind's servers and is visible only to you until a moderator approves it.

Release details you enter for an item (format, distributor, year, catalog number) and the catalog reports you send may be used to correct and extend the Rewind catalog for everyone. We use the release facts only, never your name, email, or notes. A photo you attach to a report is stored on Rewind's servers with that report and deleted 90 days after the report is fixed or closed, or when you delete your account.

If you create an account, we send transactional email as needed to operate it: sign-in links, account notices, and responses to requests you make. These are delivered by Resend, our email service provider.

We may also send occasional product updates and a monthly community digest. You can opt out of these at any time in the app under Settings → Email, or with the unsubscribe link included in every update email. Email addresses hidden with Apple's Hide My Email (private relay) are not added to the update list unless you opt in yourself in Settings.

Deleting your account removes your email address from our systems and from Resend.

On iOS, if you enable notifications, Rewind registers your device with Apple's Push Notification service to notify you when scans complete. Your push notification token is sent to Rewind's server for delivery purposes only. On Android, the scan-finished notification is created on your device; no push token is sent to Rewind's server.

Rewind asks for camera access to scan your shelf, notification permission to tell you when a scan finishes, and location permission for the Hunt tab to find stores near you. Location is optional. Each permission is requested when you first use the feature, and you can change it in your device settings.

On your device: You control all locally stored data. Use Settings within the app to clear scan history or collection data. Deleting the app removes all local app data. On iOS, the device identifier is stored in the Keychain and may survive app deletion and reinstall. On Android, the identifier is derived from the Android device ID, so reinstalling on the same device produces the same identifier. In both cases, you can request removal of the server-side data associated with it (see below).

On our server: Scan photos are deleted when processing finishes. As a fallback, any temporary copy expires automatically within 30 days. Scan metadata and usage events are kept to support analytics, service monitoring, and product improvement; we do not delete them on a fixed schedule. If you have not signed in, server-side data is linked only to your anonymous device identifier and is deleted on request (see below). If you have an account, your data is kept until you delete the item or the account. Deleting your account removes your collection, want list, watch history, scan history, taste profile, saved stores, collection photos, cover-art submissions, and account/profile data from our systems, and deletes your email address from our systems and from our email provider. Usage events and service logs linked to the account are anonymized: the record is kept for service reliability, but it is no longer tied to you. Records of Google Play purchases (purchase token, order ID, region, subscription dates, and device identifier) are kept with the link to your account removed, because they are needed to handle refunds, chargebacks, and subscription disputes.

Deletion requests: You can request deletion of all server-side data associated with your device by contacting us at support@heyrewind.app. We will process deletion requests within 30 days.

Rewind's server sends your scan photos to OpenAI to read the titles in them and to generate recommendations. OpenAI is the only AI provider that processes your photos and the text read from them. Photos travel over encrypted connections, and we do not keep them after results are returned.

Poster images and movie metadata are loaded from The Movie Database (TMDB). No personal data is sent to TMDB.

Rewind's server infrastructure runs on Cloudflare. Cloudflare may process standard connection metadata (IP addresses, request headers) as part of normal network operation.

Account and update emails are sent through Resend, which processes your email address as a service provider on our behalf. Resend holds your address until you unsubscribe from updates or delete your account.

On Android, crash reports are sent to Firebase Crashlytics, a Google service, only after you accept the data prompt shown before your first scan. Crashlytics receives crash stack traces, device state, and a Crashlytics installation identifier. It does not receive your Rewind user ID or your email.

Purchases are processed by Apple (App Store) on iOS and by Google (Google Play) on Android. What each one sends to Rewind is listed under Purchases in What Data Is Collected.

Rewind is operated by Overscan Industries in the United States. Your data is stored and processed in the United States, outside Canada, the EU, the EEA, and the UK.

Rewind's servers and storage run on Cloudflare. Scan photos and the text extracted from them are processed by OpenAI. Email is sent through Resend. On Android, crash reports are processed by Google (Firebase Crashlytics) in the United States, and purchase records come from Google Play. The website's analytics tool Microsoft Clarity also processes site visit data in the United States.

If you are in the EU, EEA, or UK, these are international transfers. Where a provider is certified under the EU-US Data Privacy Framework (and its UK Extension), we rely on that certification. Otherwise we rely on the European Commission's standard contractual clauses, with the UK addendum, in our data processing agreement with the provider. You can ask us at support@heyrewind.app which safeguard applies to a provider.

Information held outside your country is subject to the laws of the country where it is held, including access by courts and authorities there.

You have the right to know what data we hold about you and to ask for its deletion. If you have an account, you can delete it (and the data associated with it, including your email address) from Settings in the app. If you have not signed in, server-side data is linked only to your anonymous device identifier.

If you are in the EU, EEA, UK, or Canada. You can also ask us to give you access to your personal data, to correct data that is inaccurate or incomplete, and to give you a copy in a common, machine-readable format. You can export your collection as a CSV file from Settings at any time.

If you are in the EU, EEA, or UK. You can also ask us to restrict how we use your data, and you can object to processing based on our legitimate interests, including analytics. Where we rely on your consent (update emails, website cookies), you can withdraw it at any time under Settings → Email, with the unsubscribe link in any update email, or with the “Cookie settings” link on the website. Withdrawing does not affect what was done before. Reviewer verdicts are recommendations about films; they have no legal or similarly significant effect on you.

If you are in Canada. You can withdraw your consent to our use of your information. Because Rewind needs the data described above to work, withdrawing consent means we delete your account or the server-side data tied to your device.

To make a request, email support@heyrewind.app with your account email or device identifier (shown in the app's Settings screen). We respond within one month.

If you are not satisfied with our response, you can complain to your local data protection authority. In the UK, that is the Information Commissioner's Office (ICO). In Canada, it is the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information du Québec.

Overscan Industries, the company behind Rewind, has a Privacy Officer responsible for how personal information is handled under this policy.

Contact: Privacy Officer, Overscan Industries, support@heyrewind.app.

Write to this address with questions about this policy, to exercise the rights listed above, or to report a privacy concern.

Rewind is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided data to Rewind, contact us at support@heyrewind.app.