Frilms privacy

Frilms is a movie app for finding something to watch with your friends. Here's what it keeps and why.

Secure on-device Face ID only

Frilms signs you in with Face ID on an iPhone, or your fingerprint or screen lock on Android. Your phone checks your face or fingerprint itself, and it never leaves the phone: Frilms never sees it, and neither does Adam. Your phone makes a key just for Frilms and keeps it. Frilms stores only the public half, which can't sign anyone in by itself. With iCloud Keychain or Google Password Manager on, the key goes to your other devices, locked so only they can open it.

Sign in with Apple

On an iPhone, Frilms signs you in with your Apple account. Apple gives Frilms an ID for you and an email address: yours, or a private relay address if you pick Hide My Email. Frilms keeps both with your account, shows the email nowhere and never writes to it. Delete your account and Frilms tells Apple to forget it too.

What Frilms stores

• Your first name, your color, and your photo or the paper character you pick, so the people you link with know it's you. A photo is kept small, and only the one you use leaves your phone.
• Your answers: what you want to see, what you passed on, your stars and your top 10.
• Who you're linked with. The film you pick for tonight stays on your phone.
• Your passkey, the key you sign in with by Face ID, fingerprint or screen lock. Only its public half: your face and your fingerprint never leave your phone.
• For keeping you signed in: when your session started, your IP address, and your browser type or, in the iPhone app, the app and iOS versions.
• A copy of your lists and your people on your phone, so Frilms still opens when the server is down, and your settings. In the iPhone app, your sign-in stays in this phone's Keychain.
• If you turn on match alerts: your phone's alert address. Google or Apple carries the alert to your phone. Turn them off, or sign out, and the address is gone.
• If you join the waitlist in the iPhone app, Frilms keeps your first name, an ID from Apple and, if you ask to hear when you're in, your phone's alert address. No email. Once you're in, the alert address is gone.
• Where you watch, if you pick your services in the deck's filter, so the deck leans to films you can stream.
• Films you've seen and want to watch again, if you mark them.
• Films you send to people you're linked with, and when they saw them.
• What you send with Tell Adam: your note, the screen you were on, the film if there was one, your phone and browser type, the app's version, and how many films you've answered and people you're linked with. Adam's answers are kept with it.
• Golden tickets you send, with the name and character you gave the person, if you gave them.

Who sees what

You can link with more than one person. Each friend or partner you link with sees your name, the films you gave five stars and your top 10. Films you gave four stars or fewer stay private. They see your yes only on a film they said yes to or gave five stars as well. That's a match. Your other yeses help their deck bring those films up sooner. Frilms doesn't show them which films those are, but the list does reach their phone, so someone digging into the app's code could find it. The same goes for a yes on a film your friend has already seen: it helps their deck ask whether they'd watch it again, without saying it was you. They never see your no. Nobody you aren't linked with sees anything, except that anyone with your golden ticket's link sees your name, your face and how many films you've said yes to. A film you send shows up for that person with your name on it. If you lose your phone, someone you're linked with can send you a sign-in link. It works once, for 24 hours, and never on their own phone.

A film you've seen and want to watch again counts like a yes: a friend sees it only when it's a match with them, and never your stars below five.

Tell Adam

Adam reads every note. A note can become a task in Frilms' private to-do list on GitHub, with your first name on it, so it gets fixed. Adam uses Claude, an AI assistant, to sort notes and draft answers; he reads and sends every answer himself. If he thanks you in the credits, it's your first name only, and you can say no. Delete your account and your notes and his answers are deleted from Frilms; to have a GitHub task or a thank-you taken down too, write to hello@frilms.com.

Bring your ratings

Your IMDb, Letterboxd or Netflix file is read on your phone. Frilms saves only the films it knows. The file itself never leaves your phone.

Analytics

Frilms uses PostHog to see how the app gets used, like which screens open and which buttons get tapped. PostHog gets your IP address, which it turns into a rough location. No screen recordings. In the iPhone app, PostHog gets a random number made on your phone and the iOS and app versions, never your name.

The demo

The demo, in the iPhone app's Settings, is pretend and stays on your phone. Nothing from it goes to Frilms' server, and PostHog only counts the demo's own steps, like when it starts and ends.

Movie data

Titles, years, runtimes, directors, genres, posters, overviews and TMDB's own score come from TMDB, and where to watch from JustWatch. The Rotten Tomatoes and Metacritic scores come from Wikidata, as of the date shown with them. Posters load straight from TMDB. Links to IMDb, Rotten Tomatoes, Metacritic, Letterboxd, JustWatch and the streaming services take you to those sites, which have their own policies.

Trailers

Trailers play in YouTube's own player. By playing one, you agree to YouTube's Terms of Service (https://www.youtube.com/t/terms), and Google's Privacy Policy covers what YouTube collects (https://policies.google.com/privacy).

Where it lives

Frilms runs on Vercel. Your data is in a Neon database in the US.

What Frilms never does

No ads. No selling or sharing your data. No contacts, and Frilms only emails you if you write to hello@frilms.com first.

Delete everything

In Frilms, tap your face at the top right, then Settings, then Delete my account. Your account, lists, links and passkey go right away. To take the passkey off your phone too: on an iPhone, Settings, then Passwords; on Android, Google Password Manager. With Sign in with Apple, Apple drops Frilms from your Apple account too.

Questions

Email hello@frilms.com.

30 October 2026