Phile Privacy Policy

Effective date: November 1, 2026

1. Overview

Phile helps you save the movies, shows, books, music, podcasts, places and other things people recommend to you, and remember who told you about them. This Privacy Policy explains what information Never Brunch LLC (“Never Brunch,” “Phile,” “we,” “us” or “our”) collects when you use the Phile app, our website at phile.app and related services (together, the “Services”), how we use and share it, and the choices you have.

Never Brunch LLC is a Colorado limited liability company based in Commerce City, Colorado. By using the Services you agree to this Privacy Policy. If you do not agree, please do not use the Services.

The short version

We do not sell your personal information, and we do not use it for advertising.
You can start without signing up. We create a guest account that backs up your Philes; you need a full account to share them.
With an account, your Philes sync across your devices and you can send and receive recommendations.
Our app analytics count how features are used. They do not include what you save, what you write or who you share with, and you can turn them off.
You can delete your account and your data at any time, in the app.

2. Information we collect

Information you give us

Account information. If you create an account: your name, email address and password, or the details we receive when you choose Sign in with Apple or Continue with Google. From Apple we receive your name and email address, or Apple’s private relay address if you choose to hide yours. From Google we receive your name, email address and profile picture; the first time you sign in with Google, that picture becomes your Phile photo unless you already have one. We store passwords in hashed form.
Guest accounts. If you choose “Skip for now,” we create a guest account with a random identifier and no name or email address, so your Philes are backed up. If you later sign up or sign in, the guest account becomes, or is merged into, that account.
Profile information. Your display name and optional profile photo.
Your Philes and how you organize them. The movies, TV shows, books, music, podcasts, places and other items you save (“Philes”); your folders, including custom folders, goals and ranked lists; tags, favorites, completed status, the dates you finish things, and your sort and display choices.
Notes and the people who recommended things. Notes you write on a Phile, the names of people you record as having recommended it, any comment you type on their behalf, and any photo you add for them. This may include information about other people, including people who don’t use Phile. Please add only what you would be comfortable with them seeing, and only photos you have the right to use.
Recommendations you send and receive. The Philes you send, who you send them to or the shared link you create, any note you include, and each recommendation’s status (unread, read, in History, sent).
Imports. If you import from Goodreads, Letterboxd or Libby, or paste a list from your notes, we process the file or text on our servers to find each item. A Goodreads export can include your reviews and private notes, which become notes on the imported Philes if you choose. We keep an import’s rows for 30 days after it finishes so you can review or undo it, then delete them. The Philes it created stay in your account.
Links you add. When you add an item by pasting a web link, our server fetches that page to read its title and image.
Support and feedback. Your name, email address and the content of messages you send to support@phile.app or through App Feedback in Settings. App Feedback also attaches your app version, device model, iOS version, language and Phile account number.

Information we collect automatically

Usage analytics. Google Firebase Analytics counts how app features are used, for example how often people open Stats or send a recommendation. The events record which feature was used, not the titles of what you save, your notes or who you share with. They are tied to an identifier Firebase creates for the app on your device, not to your name or email address. Google may estimate a city or region from your IP address for these reports. You can turn analytics off in Settings.
Days you open Phile. When you are signed in, the app tells our servers once a day that you opened it. We keep only your account and that date, and use it only for totals, such as how many people use Phile each day and each month. Nothing is kept while analytics are turned off, and turning them off deletes what was kept.
Crash reports. Firebase Crashlytics collects your device model, operating system and app version, and diagnostic details when the app crashes.
Device and connection information. Our servers receive your IP address and app version with each request, and our hosting provider keeps them in short-term logs.
Notifications. If you turn notifications on, we store your device’s push token so we can deliver them.
Location. Only if you allow it, the app uses your device’s approximate location (to about 1 kilometer) to show places near you when you search, and how far away they are. It is sent with that search through our servers to Google, and we do not store it. You can turn location access off in your device settings.
Photos. When you choose a photo, you pick it in Apple’s photo picker. Phile receives only the photo you pick and cannot see the rest of your library. Phile does not access your contacts or camera.
Purchase information. If you subscribe to Phile Premium, Apple processes the payment. We and RevenueCat, the service that manages our subscriptions, receive your subscription status, plan, purchase and renewal dates and transaction identifiers, linked to your Phile account. We never receive your payment card number.
Our website. phile.app uses only the cookies needed to keep you signed in, for example on the import page. It has no analytics or advertising cookies. We count how often shared links are opened on the website, as a plain total: nothing about the visitor, such as a cookie or IP address, is kept with it.

Information from others

Other Phile users. When someone sends you a recommendation, or you open a link someone shared, we receive it for you along with the sender’s name, photo and note.
Media and place databases. When you search for or save an item, we retrieve public details such as titles, artwork, descriptions, ratings, release dates, cast, trailers and place details from the sources listed in Section 6.

Sensitive information. We do not ask for sensitive personal information. However, the things you save and the notes you write can reveal personal details about you, such as your interests, beliefs or health. We treat everything in your account as personal information and use it only as this policy describes.

3. How we use information

We use personal information to:

Provide the Services. Create and secure your account, save and sync your Philes, show your Inbox, History and Sent lists, deliver recommendations to the people you choose, calculate your Stats and goals, run your imports, and provide search, trailers and maps.
Process subscriptions. Confirm your Premium status and unlock Premium features.
Communicate with you. Send the notifications you have turned on (such as new recommendations, new connections, releases of things you saved and new albums from artists you saved), reply to support requests, and send service emails such as password resets and notices about your account or changes to our terms and policies.
Keep Phile safe. Detect and prevent spam, abuse, fraud and security incidents, enforce our Terms of Service, and handle blocks and reports.
Improve Phile. Understand, in aggregate, which features are used, and find and fix crashes and bugs.
Improve import matching. When you confirm or change a match during an import, that choice is counted together with other people’s to suggest better matches to future importers. Other users never see who made a choice.
Comply with law. Meet legal obligations and respond to lawful requests.

We may create aggregated or de-identified information that does not identify you, and use it for any purpose. We will not try to re-identify it.

4. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising. We share it only in these situations:

With people you choose. When you send a recommendation, the recipient sees the Phile, your name and photo, and any note you include. Section 5 explains connections and shared links.
With service providers that host, store and process information for us under contract, listed in Section 6. They may use it only to provide their services to us.
With Apple and Google when you use Sign in with Apple, Continue with Google, App Store subscriptions or push notifications, as described in Section 6.
For legal and safety reasons, if we believe in good faith that disclosure is necessary to comply with law or legal process, respond to lawful requests from authorities, enforce our terms, protect the rights, property or safety of Phile, our users or others, or detect and prevent fraud or abuse.
In a business transfer, such as a merger, financing, acquisition, bankruptcy or sale of some or all of our assets. We will give notice before your personal information becomes subject to a different privacy policy.
With your consent or at your direction.

Content you share is out of our control. Once you send a recommendation or share a link, the recipient can save, copy or forward it. We cannot control what others do with information you share with them.

5. Recommendations, Inbox, connections and shared links

Sharing is central to Phile, so here is exactly how it works. Guests cannot send or receive recommendations until they create an account.

Sending. You can send a Phile to people you are connected with, or create a shared link. Recipients see the Phile, your name and photo, and any note you include. What you send appears in your Sent list; removing it from Sent does not take it back from recipients.
Shared links. Anyone who opens a shared link on the web sees the item, its cover and your first name. Your note and photo are shown only when they open it in the Phile app with an account.
Connections. Phile has no directory, and we never look people up by email address or phone number. You become connected with someone only when one of you sends the other a recommendation and the other saves it or chooses to connect. Connected people see each other’s name and photo and can send to each other directly.
Receiving. Recommendations sent to you appear in your Inbox. You can save one to a folder, mark it read or unread, move it to History or delete it. When you save one, Phile records the sender as the person who recommended it.
Notes. Your notes on your Philes are visible only to you. The note you write when sending a recommendation is visible to its recipients.
Blocking and reporting. You can block someone from a recommendation they sent or from People in Settings. A blocked person can no longer send you recommendations or connect with you. You can also report a recommendation. A report is kept in our records with a copy of the recommendation, its note and both accounts, so we can review it and act under our Terms of Service.
No public profiles. Phile is not a social network. Your Philes are private and are seen by others only when you send or share them.

6. Service providers and data sources

Service providers process information for us under contract, only to provide their services to us.

Provider	What it does for Phile	What it receives
Fly.io	Runs our servers, in the United States	Everything the app and website send our servers, including your IP address
Neon	Hosts our database, in the United States	Your account and everything stored in it
Backblaze	Stores our backups and server logs, in the United States	Copies of our database, encrypted before we send them, and our server logs, which include IP addresses
Google Firebase	App analytics and crash reports	An app identifier, which features are used, device details and crash diagnostics
RevenueCat	Manages Premium subscriptions	Your Phile account ID and your App Store subscription transactions
Mailgun	Sends our emails	Your email address and the message, such as a password reset
Apple	Sign in with Apple, App Store billing and push notifications	Sign-in identifiers, subscription status, your push token and the notification text
Google	Continue with Google	The name, email address and profile picture you authorize
Google Workspace	Our email, including support@phile.app and copyright@phile.app	The messages you send us

Data sources. Most lookups go through our servers, so these services see our servers, not you. The exceptions are Apple’s book and podcast searches and some lookups of items you have saved, which the app calls directly, and artwork, which the app loads from TMDB’s and Apple’s image servers, so they see your IP address.

Source	What it provides	What it receives
The Movie Database (TMDB)	Movie and TV titles, artwork, descriptions, cast, release dates and scores	Search terms and item identifiers, through our servers
Apple (iTunes Store, Apple Books, Apple Podcasts, Apple Music)	Books, audiobooks, podcasts and music	Search terms and item identifiers. Book and podcast searches, and some lookups of saved items, go directly from your device, so Apple also sees your IP address
Google Places	Place search, details and photos	Search terms, place identifiers and, if you allow it, your approximate location, through our servers
Open Library and Hardcover	Book details such as page counts and series	An ISBN, or the book’s title and author, through our servers
YouTube	Trailers and music videos, played inside Phile	Searches for music videos, through our servers, and what YouTube collects when a video plays, such as your IP address

Subscriptions. Phile Premium is sold through the Apple App Store. Apple processes your payment, handles billing and refunds, and manages your subscription under its own terms and privacy policy.

Maps, store links and other sites. When you open a place in Google Maps, open a store page, or follow any link out of Phile, that company’s own policies apply. Some links to Apple’s stores are affiliate links: Apple can tell the visit came from Phile, and we may earn a commission on a purchase.

Third-party content. Titles, artwork, ratings and similar information shown in Phile belong to their respective owners. Phile is not endorsed or certified by them. Phile uses YouTube API Services, Google Maps Platform and Google Firebase. Google’s Privacy Policy (policies.google.com/privacy) and its page on how Google uses information from sites and apps that use its services (policies.google.com/technologies/partner-sites) describe how Google handles what those services receive.

7. Analytics, cookies, notifications and email

App analytics. We use Firebase Analytics only to learn, in aggregate, which parts of Phile are used, so we know what to improve. Events name the feature, never the titles you save, your notes or the people you share with. We do not use your device’s advertising identifier, we do not ask to track you, and we do not follow your activity across other companies’ apps or websites. You can turn analytics off at any time in Settings. Crash reports from Firebase Crashlytics are sent when the app crashes.

Website cookies. phile.app sets only the cookies needed to keep you signed in. It does not use analytics or advertising cookies, and because it does no tracking, a Do Not Track signal changes nothing.

Notifications. If you turn on notifications, we send the alerts you choose, such as new recommendations, new connections, releases of things you saved and new albums from artists you saved. You can change each kind in Phile’s Settings, or turn notifications off in your device settings.

Email. We send service emails only, such as password resets and notices about your account or changes to our terms and policies. We do not send marketing emails. If we ever do, each will include a way to unsubscribe.

8. Retention, deletion and security

How long we keep things. We keep your account and what you save for as long as your account exists. The rows of an import are deleted 30 days after it finishes. The days you opened Phile are deleted after 13 months. Server logs are deleted within 30 days. Abuse reports, and what we did about them, are kept in our records for up to 3 years, or longer where the law requires it. If we close an account for breaking our Terms of Service, we keep a scrambled form (a hash) of its email address and Apple or Google sign-in, so it can’t be used to sign up again; we can’t turn it back into the address. Records of Premium purchases stay in our email for as long as tax and record-keeping rules require.

Deleting your account. Use Settings › Profile › Delete Account, or Settings › Delete My Data if you are using a guest account, or email support@phile.app. Deletion is immediate and removes your account, Philes, folders, goals, tags, notes, People and their photos, imports, notification settings and devices, and any blocks you made or that name you. Recommendations you sent are removed from recipients’ Inboxes. If a recipient already saved one, their copy, with your name and note, stays in their account. Reports you made or that concern you remain in our records, as described above, and records of your Premium purchases remain in our email.

Guest accounts. A guest account has no password, so if you delete the app, you can no longer reach it. Use Settings › Delete My Data before deleting the app if you want its data removed.

Backups. Copies of our database are kept for up to 30 days, so deleted data is gone from backups within 30 days.

Subscriptions. Deleting your account or the app does not cancel Premium; manage your subscription in your Apple Account settings. Apple and RevenueCat keep purchase records under their own policies and tax rules.

Security. We use reasonable administrative, technical and physical safeguards, including encryption in transit and at rest. No system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and tell us right away at support@phile.app if you suspect unauthorized access. Where required by law, we will notify you of a data breach.

Where data is processed. We store and process your information in the United States, and our service providers do so primarily in the United States.

9. Your choices and privacy rights

Choices available to everyone

See and edit your profile, Philes, folders, tags, notes and People in the app.
Turn analytics off in Settings.
Choose which notifications you get in Settings, or turn them off in your device settings.
Turn location access on or off in your device settings.
Leave folders out of your Stats.
Request a copy of your data by emailing support@phile.app.
Block people or report recommendations.
Delete your account and data at any time (Section 8).

US state privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas and other states with privacy laws), you may have the right to know what personal information we collect, use and disclose; to access and receive a copy of it; to correct it; to delete it; to opt out of its sale or sharing and of targeted advertising or profiling; and not to be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioral advertising, as those terms are defined by law, and we do not use or disclose sensitive personal information for purposes other than those the law permits. To make a request, email support@phile.app with the subject line “Privacy Request.” We may need to verify your identity, and you may ask an authorized agent to make a request for you. We respond within 45 days and may extend that once by 45 days where the law allows. If we deny your request, you may appeal by replying to our response and, if you are not satisfied, contact your state attorney general. California residents may also ask about disclosures to third parties for their direct marketing purposes (“Shine the Light”); we make none.

Where Phile is offered. Phile is offered only to users in the United States. If you use the Services from elsewhere, your information is transferred to and processed in the United States.

10. Children, changes to this policy, and contact

Children. Phile is not directed to children, and you must be at least 13 years old to use it. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it and close the account. If you believe a child has given us personal information, contact us at support@phile.app.

Changes to this policy. We may update this policy from time to time. We will post the new version here with a new effective date. If we make material changes, we will notify you by email or in the app before they take effect, and where the law requires it we will ask for your consent. If you keep using the Services after the effective date, you accept the updated policy.

Contact us.

Never Brunch LLC
12951 E. 107th Ave
Commerce City, CO 80022
USA

Email: support@phile.app
Website: phile.app/privacy