Privacy Policy

The short version

• We store your email address, because your lists live in an account rather than only on one phone.
• We store the things you share into the app — links, post text, and text read from screenshots — because that is the entire function of the app.
• We do not track you, advertise to you, sell or share your data, or build a profile of you.
• Photos, screenshots, and screen recordings never leave your device. The text is read on your phone and only that text is sent.
• You can export everything and delete your account from inside the app, at any time.

Who we are

SortBridge (“we”, “us”) is the data controller for the information described here. For any privacy question, or to exercise any right below, email privacy@sortbridge.app.

What we collect, and why

Your email address

Collected when you create an account, either directly or through Sign in with Apple. If you use Apple’s Hide My Email, we only ever see the relay address Apple gives us, which is fine — we use it solely to identify your account and to send you service email you asked for, such as a sign-in code. We do not send marketing to it.

The content you share into the app

When you share a link, we store the link, the text the platform publishes for it (the caption, post body, or comments), the author’s handle, and the time it was posted. When you share a screenshot or screen recording, we store only the text read from it — the image and video themselves are processed on your device and never uploaded.

We store this because re-reading a post later is how the app improves its results without asking you to share everything again, and because the record of where a recommendation came from is a feature you can see in the app.

Your lists

The items you confirmed, which list they are in, whether you marked them done, and any notes you wrote.

Waitlist signups

If you join the waitlist on this website, we store your email address, which page you submitted from, and the country your request came from, so we can send launch email in sensible batches. We delete the waitlist once everyone on it has been invited, and every email we send from it has an unsubscribe link.

What we deliberately do not collect

No advertising identifiers. No location. No contacts. No device fingerprinting. No third-party analytics or crash-reporting SDKs. No behavioural tracking, inside the app or across other apps and websites. The app’s privacy manifest, which Apple verifies, declares no tracking and no tracking domains.

Who processes it

We use a small number of providers, each for one narrow job. None of them are permitted to use your data for their own purposes.

• Supabase — hosts the database, authentication, and server functions. This is where your account and lists live.
• Anthropic — reads the text of a shared post to work out which titles it mentions. Text is sent for that request and is not used to train models.
• The Movie Database (TMDB) and Google Books — looked up to turn a title into a real record with a cover. We send a title; we do not send anything about you.
• Cloudflare — serves this website and handles the waitlist form.
• Resend — delivers sign-in and service email.

Some of these process data in the United States. Where we transfer personal data out of the UK or EEA, we rely on the providers’ Standard Contractual Clauses.

How long we keep it

Your account data is kept until you delete your account. When you delete it, your captures, lists, and notes are deleted with it — not merely disconnected from your login. Backups roll off within 30 days. Catalog records about books and films are not personal data and are kept, since they describe the book rather than you.

Your rights

You can access and export your data from the Account screen in the app, in CSV, Goodreads, or Letterboxd format. You can delete your account from the same screen. If you are in the UK or EEA you also have the right to correct your data, object to or restrict processing, and complain to a supervisory authority — in the UK, the Information Commissioner’s Office. We would rather you told us first: privacy@sortbridge.app.

Our lawful bases are performance of a contract (running the account and the app) and legitimate interests (keeping the service working and secure).

Children

SortBridge is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.

Security

Everything travels over HTTPS. Each account’s rows are isolated at the database level, so one account cannot read another’s. Keys for the services above are held server-side and never ship inside the app.

Changes

If this policy changes in a way that matters, we will update the date at the top and, for anything significant, tell you in the app before it takes effect.