StreamBean

We collect the following categories of personal information:

Account Information: Full name, email address, username, and password (stored securely using industry-standard hashing — never in plain text).

Age Range (Self-Declared): When you create an account, we ask you to self-declare your age range as either "13–17" or "18+". We never collect your date of birth. This range is used solely to determine feature eligibility, including whether your account is age-restricted from certain features such as Bean Rewards giveaway entries (18+ only).

Profile Information: Optional profile photo, bio, and other details you choose to provide.

App Activity Data: Watchlist items, favorite movies and shows, viewing history (started watching, finished watching), reviews, ratings, comments, likes, posts, watch party participation, and social interactions (follows, friend connections).

Search and Recommendation Data: Search queries you submit within the app, which we use to return results and generate personalized recommendations.

User-Generated Content: Posts, status updates, comments, reviews, messages, and media files you choose to share.

Device and Technical Data: Device type, operating system, app version, IP address, browser type, crash logs, and performance data collected for security and app improvement purposes.

Device Tokens for Push Notifications: When you enable push notifications, we collect device tokens from Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) to deliver notifications to your device. These tokens are used solely for delivering notifications and are not shared with advertisers.

Advertising Identifiers: When ads are displayed in the free tier, ad networks such as Google AdMob may collect device advertising identifiers (e.g., Apple's IDFA or Google's AAID) to serve and measure ads. See Section 6 for details and opt-out options.

Usage and Analytics Data: How you interact with the app, which features you use, and general engagement metrics. This data is collected in aggregate or pseudonymous form where possible.

Third-Party API Data: When you connect third-party services (such as IMDb, Letterboxd, or Simkl watchlist imports), we may process information provided by those services to deliver the requested feature. We do not retain third-party credentials.

Approximate Location: We may infer approximate location (country or region level) from your IP address only for purposes such as streaming availability results or analytics. We do not collect precise GPS location.

Subscription Tracking Information: If you track streaming subscriptions within the Wallet feature, you enter service names and costs manually. We do not process payment card data — any Premium subscription payments are handled by Apple or Google, subject to their own privacy policies.

We do not collect phone numbers, contacts, precise GPS location, or sensitive personal information unless you explicitly provide it.

We use the information we collect to:

• Create and manage your account
• Provide and improve the StreamBean app and its features
• Personalize content recommendations based on your favorites, watchlist, and viewing history
• Enable social features including friend connections, social feeds, watch parties, and messaging
• Send service-related communications such as account verification, deletion confirmations, and important policy updates
• Deliver push notifications for show status alerts, social activity, and subscription reminders (when enabled)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Generate aggregated, anonymized analytics to understand how the app is used

We do not use your personal information to make automated decisions that have legal or similarly significant effects on you without human review.

Age data is collected as a self-declared range only. When you register, you indicate whether you are "13–17" or "18+". We do not ask for, store, or process your date of birth.

Teen accounts (ages 13–17) are subject to the following restrictions:

• Bean Rewards giveaway entries are limited to adult members (18+)
• Certain social features may be limited based on applicable law
• Parents or guardians may contact us to request deletion of a teen's account

Accounts for users under 13 are not permitted and will be deleted promptly upon discovery, as described in Section 13.

Your watchlist, favorites, ratings, and viewing history are stored and used to power StreamBean's core features — including personalized recommendations. This data is associated with your account and is retained as long as your account is active. You may delete individual activity items through the app or request full deletion by deleting your account.

Recommendations are generated using your in-app activity combined with publicly available entertainment data from third-party APIs such as TMDB. Recommendation data is not sold or shared with advertisers.

StreamBean includes social features such as a friend social feed, reviews, posts, comments, likes, and follow relationships. Content you post to your social feed is visible to your friends or to the public depending on your privacy settings.

You can control which activity types appear on your social feed through Privacy Settings in your profile. You may set activity to "Friends Only" or "Only Me."

Please be aware that content you share publicly or with friends may be seen and stored by other users. If you delete your account, your publicly shared content will be removed or anonymized so it no longer identifies you where technically feasible, but content that other users have already seen or interacted with may persist in their own records.

StreamBean supports direct messaging between friends and group watch party chat. Messages are stored to enable communication, display message history, and maintain platform safety. Messages are accessible only to the participants in a conversation.

Watch party data, including party details, participant lists, and associated chats, is stored and associated with your account. This data is deleted when you delete your account.

We use cookies and similar technologies (such as local storage and session tokens) to keep you logged in, remember your preferences, and maintain app functionality. These are essential for the app to operate and cannot be disabled without breaking core features.

We may use third-party analytics tools (such as app performance monitoring services) that collect pseudonymous usage data. These tools help us understand crashes, performance issues, and general usage patterns. We do not use analytics tools for behavioral advertising targeting.

We may use advertising SDKs such as Google AdMob or other ad networks that may collect device advertising identifiers and usage data to serve ads. Where applicable, you may opt out of personalized advertising through your device settings (iOS: Settings → Privacy & Security → Apple Advertising; Android: Settings → Google → Ads → Opt out of Ads Personalization). We do not control the data practices of ad networks directly. Please review their privacy policies.

StreamBean may display ads from third-party ad networks or include affiliate links to streaming services. Clicking affiliate links may earn StreamBean a commission at no cost to you. Affiliate link clicks may be tracked by the affiliate provider.

StreamBean does not currently engage in cross-context behavioral advertising using your personal information. If this changes, we will update this Privacy Policy and provide required notices and opt-out mechanisms before doing so.

StreamBean uses the following categories of third-party services. Each has its own privacy policy:

• TMDB (The Movie Database): Used to retrieve movie and TV show metadata, posters, cast information, and trailers. We query TMDB on your behalf when you search or view content.
• OMDb (Open Movie Database): Used to retrieve additional ratings and content information.
• Streaming Availability Providers: We use third-party APIs to retrieve streaming availability data.
• Authentication Providers: We use secure authentication infrastructure to manage account creation and login. Passwords are never stored in plain text.
• App Store Platforms: Apple App Store and Google Play may collect their own usage and payment data subject to their respective privacy policies.
• Ad Networks (e.g., Google AdMob): If ads are served, ad network SDKs may collect device and usage data. See Section 7.
• Email Delivery Services: We use third-party email delivery providers to send account-related emails, notifications, and gift card deliveries. These providers process email addresses and message content solely for delivery purposes.
• Analytics Tools: Used for performance monitoring and crash reporting in pseudonymous form.

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.

Some StreamBean features — such as personalized recommendations, content summaries, and the Watch Decider — are assistance features powered by service providers such as OpenAI. When you use these features, your in-app activity and search queries may be processed by these service providers to generate the requested output.

These providers process data on our behalf under data processing agreements and do not use your data to train their models or for their own independent purposes. The output generated by assistance features is not sold or shared with advertisers.

StreamBean does not sell your personal information to third parties.

StreamBean does not currently share your personal information for cross-context behavioral advertising purposes as defined under California law (CCPA/CPRA).

We share personal information only in the following limited circumstances:

• With service providers who help operate the app (e.g., hosting, analytics, authentication, email delivery, ad networks) under data processing agreements that restrict their use of your information
• To comply with legal obligations, court orders, or lawful government requests
• To protect the safety, rights, or property of StreamBean, its users, or the public
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred and becomes subject to a different privacy policy

If our data sharing practices change in the future — including if we ever enable features that might constitute a "sale" or "share" under California law — we will update this Privacy Policy and provide any legally required notices, choices, and opt-out rights before doing so.

We retain your personal information for as long as your account is active and as needed to provide our services. Specifically:

• Account data is retained until you delete your account
• Activity, watchlist, and social data are retained while your account is active and deleted upon account deletion
• Logs and security records may be retained for up to 90 days for fraud prevention and security purposes, even after account deletion
• Legal hold data may be retained longer if required by law

You may delete your StreamBean account at any time through Profile → Settings → Delete Account. Deletion is permanent and cannot be undone.

When you delete your account, we will delete or anonymize the following personal data:

• Your profile, name, email address, and username
• Your watchlist, favorites, viewing history, and recommendations data
• Your posts, comments, likes, and reviews
• Your messages and watch party data
• Your friend/follower relationships
• Your search and activity history
• Analytics identifiers where technically possible

We will retain only what is legally required, security-related, fraud-prevention-related, or necessary for legitimate business records (such as deletion request logs). Some content you previously shared publicly or with other users may persist in those users' records in anonymized form and may no longer identify you.

We will send an email confirmation to your registered email address when your deletion request is received and when deletion is completed.

You may also submit a data deletion request by emailing support@streambean.app.

As a U.S. user, you may have the following rights depending on your state of residence:

• Right to Know / Access: Request a summary of the personal information we hold about you
• Right to Delete: Request deletion of your personal information (see Section 13)
• Right to Correct: Request correction of inaccurate personal information
• Right to Data Portability: Request a copy or export of your personal data where technically feasible
• Right to Opt Out of Sale/Sharing: StreamBean does not currently sell or share personal information for behavioral advertising. If this changes, we will provide an opt-out mechanism.
• Right to Opt Out of Targeted Advertising: You may opt out of personalized advertising through your device settings (see Section 7). If StreamBean ever directly enables targeted ads, a user-facing opt-out will be provided.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights

To exercise any of these rights, contact us at support@streambean.app or use the account deletion feature in the app. We will respond to verifiable requests within the timeframes required by applicable law (typically 45 days).

StreamBean is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. Our sign-up process requires users to confirm they are at least 13 years old.

If we discover or are notified that a user is under 13, we will promptly delete the account and all associated personal information.

Parent or Guardian Contact: If you are a parent or guardian and believe your child under 13 has created a StreamBean account, please contact us immediately at support@streambean.app with the subject line "Minor Account Deletion Request." We will investigate and delete the account and associated data as required by COPPA. Please include the username or email address associated with the account if known.

We implement reasonable and appropriate technical and organizational measures to protect your personal information, including:

• Passwords are stored using industry-standard cryptographic hashing (never in plain text)
• All data is transmitted using HTTPS/TLS encryption
• Access to user data is restricted to authorized personnel on a need-to-know basis
• Account deletion requests are logged for auditability
• Deleted accounts are prevented from appearing as active users in social features

No system can guarantee 100% security. If you suspect unauthorized access to your account, please contact us immediately at support@streambean.app.

StreamBean is currently intended for users located in the United States. By using StreamBean, you represent that you are located in the United States. We do not knowingly provide services to users outside the United States. If you are not located in the United States, please do not use StreamBean at this time.

This Privacy Policy is written to comply with applicable U.S. federal and state privacy laws. We do not represent that this policy satisfies the requirements of privacy laws in other jurisdictions such as the GDPR.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the "Effective Date" at the top of this policy and, where required, notify you via email or an in-app notice. Your continued use of StreamBean after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.

For questions, requests, or concerns about this Privacy Policy or your personal information, contact us at:

StreamBean Support
Email: support@streambean.app

For account deletion or data access requests, you may also use the in-app Delete Account feature under Profile → Settings → Delete Account.