Privacy Policy

Effective date: November 3, 2026

MetaRank ("we", "us") is an app for ranking and sharing the movies, TV, albums, songs, books, restaurants and places you love. This policy explains what we collect, why, who it is shared with, and the choices you have. We do not sell your personal information, we do not show ads, and we do not track you across other companies' apps or websites.

What we collect

Account details — your email address, password (stored only as a secure hash by our authentication provider), username and display name. If you sign in with Apple or Google instead of a password, we receive your name and email address from them; with Apple you can choose to hide your email, and we then receive only a private relay address. For Sign in with Apple we also keep a token that is used only to revoke the app's access when you delete your account.
Profile — a profile photo and bio, if you add them.
What you post — ratings, rankings, reviews and review photos, comments, likes, bookmarks, favourites, the people you follow, people you tag or mention, and messages you send in direct or group chats.
Location — only if you allow it, and only while you use the app. Your device location is used to find restaurants and places near you. We do not store your location history.
Photos you choose to import — when you use "import from photo", the image is sent for processing (see AI features below) and is not stored by us.
Purchases — whether you have MetaRank Premium, when it renews or expires, and the group-suggestion credits you have bought and used. Payment is handled entirely by Apple; we never receive your card or billing details.
Notifications — a push token for your device, if you allow notifications.
Usage needed to run the service — counters for your daily AI allowance, and any reports you file or accounts you block.
Crash and error reports — when the app crashes or something you do fails, we receive the error message and its technical details, the app screens you visited just before, the app version, your device model and iOS version, a random ID for this installation of the app (not an advertising or hardware ID), and your account ID if you are signed in. Our servers record their own failures the same way, along with the account whose request failed.
How the app is used — a few usage events, linked to your account ID: when you open the app, which setup steps you reach, your answer to the AI question, which category and content source a search used and how many results it found (never what you typed), which "Open in" links you tap (such as Spotify or Maps), and which import option you start. Each event also records the app version.

How we use it

To run MetaRank: your rankings and lists, your profile, the feed of people you follow, comments, messages and notifications.
To make recommendations and match scores — only if you turn on AI features (below).
To provide Premium and group-suggestion credits you have bought.
To keep the community safe: reviewing reports, and removing content or accounts that break our Terms of Use.
To find and fix crashes and errors. Crash and error reports are used only for this.
To understand how MetaRank is used — how many people come back after signing up, where people stop during setup, and which features and sources get used — so we can improve it. We look at usage as totals across everyone; it is never used for advertising.

What other people can see

Your username, display name, profile photo, bio, rankings, ratings, reviews, comments, favourites, and who you follow are visible to other MetaRank users. Messages are visible only to the people in that conversation. People you block cannot see your content in their feed, cannot follow you, and cannot comment on your rankings.

AI features and Google Gemini

For You picks, match scores, group suggestions, taste match, the "Your taste" write-up and photo import are generated with Google Gemini, a third-party AI service. We only send data to Gemini if you allow it — we ask when you sign up (or the first time you open this version of the app), and you can change your answer at any time in Profile → Account & Privacy.

When AI features are on, we send Google the titles and scores you have rated; for group suggestions, the usernames and ratings of the group's members; and for photo import, the photo you choose. We never send your email address or password. Google processes this data under the Gemini API Additional Terms of Service and Google's Privacy Policy. If AI features are off, everything else in MetaRank still works.

Service providers we share data with

Supabase (hosted on Amazon Web Services in the United States) — our database, authentication, file storage and server functions. Holds everything described above. Privacy policy
Google Gemini — AI features, only with your permission, as described above.
Google Places — restaurant search, and Google ratings on place pages for Premium members. Receives your search text or the place you open and, if you allow location, your approximate position. Privacy policy
Apple and Google sign-in — if you choose Sign in with Apple or Sign in with Google, that company confirms your identity and shares your name and email address with us. Apple privacy policy · Google privacy policy
Apple and RevenueCat — in-app purchases. RevenueCat receives your MetaRank account ID and your App Store purchase records so we can confirm what you have bought. RevenueCat privacy policy
Expo — delivers push notifications. Receives your device's push token and the notification text. Privacy policy
Google (Gmail) — sends the 6-digit codes that confirm your email address and reset your password, from metarankai@gmail.com. Receives your email address and the code. Privacy policy
Resend — sends us email alerts when the app or our servers fail. An alert can include the crash and error details described above and the usernames of the people affected, and it is sent only to us. Privacy policy
Anthropic — we use Claude, Anthropic's AI assistant, to help investigate crash and error reports. It receives those reports, including the usernames of the people affected. We also use it to summarize weekly usage totals, which contain no personal information. Privacy policy
Content databases — The Movie Database (TMDB), Open Library, MusicBrainz and the Cover Art Archive, Apple's music charts, Wikipedia, and OpenStreetMap (Nominatim). The app looks titles and places up in these services; they receive the search terms, not your account information.

How long we keep it

We keep your information for as long as you have an account. Content you delete is removed straight away. Crash and error reports are deleted after 90 days, and usage events after 13 months. When you delete your account, everything listed under "What we collect" is permanently deleted, including your photos and your purchase records with RevenueCat, and Sign in with Apple's access is revoked; residual copies in our hosting provider's backups are overwritten on their normal rotation. The one exception is safety reports, so that we can still act on them: a report you filed stays with your account removed from it, and a report someone filed about you stays with your account removed from it and a copy of what was reported.

Your choices

Delete your account at any time in Profile → Account & Privacy → Delete account. Deleting your account does not cancel an App Store subscription — cancel that in your Apple ID's subscription settings.
AI features — turn them on or off in Profile → Account & Privacy.
Location and notifications — allow or revoke them in your iPhone's Settings at any time.
Block or report anyone from their profile, or by long-pressing something they wrote.
Access, correct or export your data — edit your profile in the app, or email us and we will respond within 30 days. Depending on where you live (for example the EU, UK or California) you may have additional rights under local law; contact us to exercise them.

Children

MetaRank is not directed at children under 13, and you must be at least 13 to create an account. We do not knowingly collect personal information from children under 13; if you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit, and access to it is restricted by per-user database rules so each account can change only its own information. No system is perfectly secure, but we work to protect your data and will notify you as required by law if a breach affects it.

Changes to this policy

We may update this policy. We will announce significant changes in the app before they take effect.

Contact

Questions or requests: metarankai@gmail.com