1. Who we are and what this covers
CouchCheck is an independent television-tracking service operated by Elias Mansour. This policy covers the CouchCheck iPhone app, this public website, account-based cloud features and communications with support. It explains the current service and clearly identifies Together Mode, which is not yet publicly activated.
CouchCheck helps you discover television and keep track of your viewing. It does not stream video. You can use local guest tracking without an account; account-based features require sign-in and their applicable setup or consent.
2. Information you choose to keep
When you use the app, it stores the shows you follow, their tracking states, your favorites, watched and intentionally unwatched episode states, watch-history timestamps, and preferences such as appearance, layout and timezone. Custom show or episode release-time choices and reminder preferences may also be stored.
The app also keeps downloaded television metadata and artwork caches, local search-history choices and entries when enabled, recovery copies, pending save operations, and records needed to make tracking and Undo reliable. These are not all uploaded to an account: cloud saving uses a narrower set of supported tracking and preference fields.
3. Accounts and email sign-in
An account involves your email address, a unique account identifier, sign-in-provider identities and session information. Supabase provides authentication and account infrastructure. When you request a six-digit email code, Supabase and the configured Resend email service process the recipient address and verification email so you can sign in. Code verification, expiration, resend restrictions and security-related request information are handled as part of authentication.
On supported native clients, authenticated session credentials are stored using the device’s protected SecureStore facility. This is separate from the local tracking journal. A failing secure store is not silently replaced with plaintext credential persistence. Signing out ends the app’s account session; it is not a request to erase your local Library.
5. Local tracking and personal cloud saves
Guest tracking is stored on the device. Signing in does not by itself authorize copying, merging, replacing or uploading an existing guest Library. Personal cloud setup, automatic saving and recovery are separate actions with their own checks and consent.
When cloud saving is set up, Supabase receives supported account-scoped records: show membership and states, favorites, watched and unwatched intentions and timestamps, supported preferences, release-time overrides and reminder choices. Revision, operation and receipt information is used to verify completion, resolve conflicts and retry safely. Automatic saving requires its own opt-in. Turning it off stops new automatic uploads; it does not delete information already saved.
Device-specific Apple Calendar references, native reminder/notification identifiers, permission state, local search history and downloaded catalog metadata are not part of the personal-sync record projection. Local recovery copies and unfinished operations may remain on the device to protect against interrupted work. A cloud account is not a guarantee that every local file or device-specific setting has been backed up.
6. Together Mode and sharing with a partner
Together Mode is being prepared for hosted activation and is not publicly live yet. The intended model connects at most two distinct authenticated accounts after an invitation and explicit acceptance. The invitation is reserved for a verified recipient email using a stored email hash; a code alone is not authorization to join.
An accepted partner can see and change Our Shows and shared episode progress. Shared events include who performed an action and its timestamp, and the connection displays a safe partner identity. Shared progress is independently stored: adding a show does not silently import either person’s private watched history.
A partner does not receive access to the other person’s complete private Library, personal watched history, private favorites or personal settings through Together membership. You can independently choose to share information by another means, such as sending an exported file.
Leaving ends both people’s active access to that partnership. It does not delete either private Library. Shared history is retained rather than automatically destroyed, and unsent changes can remain locally for review; they must not be replayed into another partnership. Reconnecting creates a new partnership. Requests concerning retained shared information can be sent to support, subject to verification and other people’s rights.
7. Notifications, reminders and Apple Calendar
Notification and Calendar access are optional and requested when the related feature needs them. Current episode reminders use local device notification scheduling; the native configuration does not enable remote push notifications. Permission and scheduling identifiers remain device-specific.
Apple Calendar features can add episode events you choose and, with the relevant permission, select or create a calendar and check previously exported events. The scope available depends on the iOS version and installed client. Calendar references are kept locally rather than included in personal cloud saving. We do not use Calendar access to build advertising profiles.
Calendar events may also be stored or synchronized by Apple or your chosen calendar-account provider according to your settings. Account deletion or signing out of CouchCheck should not be assumed to remove events already exported to another calendar. Review those events and permissions separately in the relevant app or iOS Settings.
8. Exports, imports and recovery
Export My Data creates a JSON file containing personal tracking, history, preferences and represented device planning references, then offers the native sharing experience. You choose where it goes. Dismissing a share sheet does not prove that a backup was saved. Files can contain sensitive viewing information; protect them and share them only with intended recipients.
Import My Data selects a file, validates it and prepares a review before an explicitly confirmed, authorized local import. Cloud recovery is a separate account-bound process. Both may prepare durable local recovery copies and rollback information. Neither is permission for an unsolicited cloud upload. Availability can depend on the installed app version and recovery approval.
Files you place in Files, iCloud Drive, email or another destination are controlled by you and that provider. Deleting a CouchCheck account does not retrieve or erase copies outside the service.
9. Television information and external services
TVmaze supplies show, episode, cast and schedule metadata and artwork references. Trakt supplies discovery rankings. Requests to those services, artwork hosts and configured supporting infrastructure can disclose normal network information, including an IP address and requested resource. Search requests can reveal the show names or terms being searched. Metadata and images may be cached on the device.
CouchCheck does not connect your personal Trakt watch history merely to display discovery rankings. Original network or web-channel labels describe metadata associations; they do not establish present-day streaming availability. Following an external link is subject to that destination’s privacy practices.
Credits and the applicable source/license links are provided on the Credits & Attribution page and in the app. Source licensing does not mean CouchCheck owns television artwork or is endorsed by a broadcaster, TVmaze, Trakt, Apple or Google.
10. This website, cookies and logs
This website is designed as a static public information site. It has no advertising SDK, analytics SDK, tracking pixels, newsletter signup, contact form or public web-account system. Marketing pages and invitation pages do not request private Supabase data. Fonts and visual assets are served from the site rather than loaded from third-party marketing services.
The site does not set application cookies or persist invitation codes in localStorage. The appearance control is held in page memory. Your browser, hosting infrastructure or a destination you open can have its own storage and security behavior; we do not claim that no provider can ever set a cookie or keep a log.
Render and network providers may process IP addresses, request paths, user-agent information, timestamps and operational/security logs to deliver and protect the site. Invitation codes appear in invitation URL paths and therefore can be processed in infrastructure requests. Invite pages use no-index instructions and a no-referrer policy, do not send codes to analytics, and do not publicly verify or reveal the inviter or recipient. Share invitation links thoughtfully.
11. How information is used and disclosed
Information is used to provide tracking and requested account features, authenticate users, save and recover data, display accurate television information, support voluntary sharing, respond to help requests, prevent abuse and maintain reliability. Support email contains whatever you decide to send; do not send passwords, verification codes, tokens or unnecessary private backups.
Service providers include Supabase for authentication/database services, Resend for requested authentication email, Render for this website and applicable supporting hosting, and Apple/Google for chosen sign-in and device services. They receive the information needed for their roles. A partner receives the limited shared information described above after consent. Information may also be disclosed when required by law, to respond to valid legal process, protect people or enforce service rules.
CouchCheck does not sell personal information or share it for cross-context behavioral or targeted advertising. The current app and website contain no advertising or marketing trackers. We do not use authentication-provider data for advertising.
12. Security and processing locations
CouchCheck uses account-scoped access controls, secure transport for service requests, protected native session storage and explicit checks around shared membership and recovery. These measures reduce risk; no device, transmission, backup or online service is perfectly secure. This is not end-to-end encryption, and authorized service infrastructure processes account data.
Service providers may process information in the United States and other locations where they operate. The current dedicated CouchCheck database is hosted in a US region. This does not mean every authentication, email, CDN or support operation remains in that single region.
13. Retention and deletion
Local tracking and caches remain until removed through supported app/device controls or affected by device storage, uninstall or recovery behavior. Account records are kept as needed to provide requested features, preserve legitimate history, manage retries and address security, legal or operational needs. There is no promise of indefinite retention or unlimited backups.
Self-service account deletion is not currently operational. You can request account/data deletion through support using the process on our Account Deletion page. We verify authority and explain the available action before treating a request as complete. We do not promise instant deletion, an unimplemented automatic workflow or removal of every provider backup on a fixed schedule.
Some shared, security, receipt or backup information may need to be retained to address legitimate operational/legal needs and the rights of another member. Copies in your own exports, another person’s files or external calendar systems are not automatically removed. We will explain relevant limits when handling a verified request.
14. Your choices and privacy rights
You can review and correct supported tracking inside the app, choose whether to sign in, control cloud-save opt-in, export a personal copy, decline Together invitations, leave a partnership, and manage iOS permissions. Send access, correction, deletion or privacy requests to support. We may need to verify your relationship to an account without asking for your sign-in code or password.
Depending on where you live and which laws apply, you may have rights to know/access, correct or delete personal information, obtain a copy, restrict certain uses, or appeal a decision. California residents can request applicable CCPA/CPRA rights, including freedom from unlawful discrimination for exercising them. Applicability and exceptions depend on law and circumstances; this policy does not assert that every statutory regime applies to this independent service.
We do not sell information or share it for targeted advertising, so there is no advertising sale/share program to opt out of in the current service. We do not use sensitive account information for unrelated inferences or advertising profiles. Browser privacy signals do not enable any trackers here. Requests made by an authorized agent may require proof of authority. We respond in accordance with applicable legal requirements.
15. Children and teenagers
CouchCheck is intended for people aged 13 and older. Users under 18 need permission from a parent or legal guardian. The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact support so we can investigate and take appropriate action. Please do not include unnecessary information about the child in an initial message.
16. Changes and contact
We may update this policy as the service, law or practices change. The effective date identifies the published version. Material changes will be communicated through an appropriate channel when required; future functionality is not silently treated as consent under this policy.
CouchCheck is operated by Elias Mansour. For privacy questions or requests, contact support@sneakertweakers.us. The Support and Account Deletion pages provide practical guidance.
Let’s keep it clear.
Questions about this page? Email support@sneakertweakers.us. Please don’t include a sign-in code, password or access token.
4. Sign in with Apple and Google
If you choose Apple sign-in, Apple supplies an identity credential and the email information you authorize, which may be an Apple private-relay address. The native Apple integration requests email access, not access to your Apple Calendar account or other Apple services as part of sign-in.
Google sign-in uses basic identity information: your Google account identifier, email and available profile information such as a name or profile image supplied through the authentication provider. That information supports sign-in, identity linking and account identification. CouchCheck does not request Gmail messages, Google Drive files, contacts, YouTube history or Google Calendar access through its Google sign-in flow.
Supabase verifies provider credentials and maintains linked identities. Provider information is used to authenticate and identify your CouchCheck account, not for advertising or to train artificial-intelligence models. Connecting a sign-in method is distinct from sharing a Library. Apple, Google and their account systems also process authentication under their own policies.