Your data in Ranked.

Who operates Ranked

Ribhav Jain operates Ranked from New York City, New York, United States. Ranked is an independent, noncommercial film- and TV-ranking app.

support@rankedmovies.app

Age requirement

Ranked is for people aged 18 and older. People younger than 18 must not create or use an account. If you believe an account belongs to someone under 18, report the profile in the app and choose “Appears to be under 18”, or email support@rankedmovies.app. Name the account by its handle and don’t send more personal information than that. We check the account and delete it if it belongs to someone under 18. That deletion removes the same data as deleting your own account, described below; we keep only a record that the account was deleted and why.

Accounts and profiles

You can sign in with Apple, Google, or email and password in supported versions. Ranked uses your email and account identity to sign you in. Apple or Google provides the account information you authorize, such as your name and email; Ranked does not receive your Apple or Google password. Your email is not displayed as part of your profile. Your name, handle, bio and optional photo help other members recognize you. You can also add your Instagram username. It is public on your profile and links to that Instagram profile; Ranked does not connect to Instagram or read anything from it. Profiles are public on Ranked: your profile, connections, ranked lists and leaderboard place are visible to other members. People who follow you may see more, such as your activity. Blocking someone hides you from them, and them from you.

Profile photos use public image links. Someone with the link can view the image outside Ranked, including after you block them.

Your films, activity and recommendations

Ranked stores your ranked films, scores, reviews, saved films, individual comparisons and social activity to run the app and personalize film discovery. Your rankings are public on Ranked and visible to other members. Your raw comparisons and saved-library record are private to your account, although actions such as saving or ranking a film can appear in social activity. Comparisons contribute to aggregate film scores. Predictions use your film history and currently visible ratings from people with similar tastes; friends’ scores use visible people you follow. Blocked relationships are excluded from those prediction contributions.

You can import a watch history file exported from Letterboxd or Netflix. The file is read on your iPhone and stays there: Ranked does not upload it. To match each entry to a film or show, the app searches TMDB by title. Imported titles, years and any review text from the file are kept only on that device, are not backed up or synced, and are removed when you sign out or delete your account. Nothing is posted or ranked until you place a film yourself.

Progress and retained history

Private progress records support daily goals, streaks, repairs, weekly summaries and rewatch history. Score guessing has been removed from the app. Previously saved guesses can remain in your private history with the film, friend, guess, revealed score and date. Earned streak badges can appear beside your handle to people who follow you and on cards you choose to share.

Your first app-open time each day and time zone help time optional reminders. Ranked also stores signup date, the first observed time zone and whether five distinct decisions were completed on day seven to measure progress. This measures completed decisions, not whether you simply opened the app.

Image exports and public links

You can choose to export a card showing a film placement, top ten, shared disagreement, review or weekly summary. Creating an image alone does not publish a Ranked web page. The app you choose to receive that image may store or share it under its own rules.

If public links are available, creating one publishes a snapshot of the selected card. Anyone with that link can see the card. It can also include a snapshot of your ranking list. Friends included in a public card must be eligible to appear.

Revoke the link to withdraw the card. A card published while your profile was private or friends-only, before every profile became public, still does not add a list that was never published. Account deletion and blocking are checked when our service serves a link. Saved images, screenshots and previews already copied by another service cannot be recalled.

Connections and optional contact discovery

Ranked stores follows, friend-code connections and blocks. A friend’s invite page can copy your invite link to your clipboard when you tap its App Store button. On a new installation Ranked checks only whether the clipboard holds a web link, without reading it, and reads it only if you tap Paste. Only a Ranked invite link or code is used, to connect you with the friend who sent it; nothing else from the clipboard is kept or sent. In versions with contact discovery, being findable by email is on by default for new accounts: signup states that friends with your email in their contacts can find you on Ranked and lets you turn it off on the spot. Accounts created before this default are asked once and stay unfindable unless they agree. You can turn discovery off at any time in Settings, and that choice is remembered. Only an email Ranked can treat as yours can be found: one Apple or Google verified, one belonging to an account that already existed when email discovery was introduced, or one confirmed with an emailed code. Ranked records when you were shown this notice, which version you saw and what you chose. Older versions without this feature do not read your address book. Finding contacts additionally requires an explicit action and iOS permission.

With permission, Ranked reads permitted contact email fields, hashes them on your iPhone and sends the hashes to find accounts that can be found by email. Contact names are not requested. Hashes can identify people; they are not anonymous. The matching service does not save the submitted list of contact hashes or a map of your contacts to Ranked accounts. Provider request logging has a separate retention policy.

Ranked does not offer phone-number matching. Version 2.2 (build 185) also sends the phone numbers stored in permitted contacts when you find friends. The server discards them unread: they are not matched, stored or logged in any form. Later versions send only the email hashes described above. Matches show the member and how many of the people you follow also follow them.

Optional notifications

Local reminders and widgets use account progress on your iPhone. In versions with remote notifications, Ranked stores an installation identifier, account and sign-in session references, a security hash, your notification switches and your iPhone’s time zone, even before you opt into any notification. In versions with watchlist alerts it also stores the watch country you chose in Ranked and any streaming services you picked there.

When you allow notifications in iOS and at least one notification switch is on, Ranked also stores Apple’s push token for your iPhone. The token is linked to your account and used only to deliver your notifications; it is not used for advertising, tracking or analytics. Every kind of notification has its own switch. Replies, likes, new followers and friends who join from your invite are on by default, and so are the two weekly reminders, Weekend pick and Your week, and Now streaming. Friends’ lists and Picks and reminders are off unless you turn them on. Nothing arrives until you also allow notifications in iOS.

Ranked uses your time zone to time delivery. Reminders, weekly notifications and friends’ placements share an allowance of 2 a week and arrive between 6pm and 10:30pm your time. New followers are sent as they happen. Replies, likes and invite joins are limited to 5 a day and wait until 8am if it is late.

Now streaming tells you when a film or show on your watchlist starts streaming in your watch country. Once a day Ranked checks the titles people have saved against streaming listings from JustWatch through TMDB; only title identifiers are sent to TMDB for this, never your account, country or services. Ranked keeps a record of which titles it told you about, so it never tells you about the same one twice, and shows them in Notifications. These notifications come at most once a day, between 6pm and 10:30pm your time, and are not part of the 2 a week. A notification can name a person you follow who placed the title, with their score, when their ranking is visible to you.

When a notification is sent, Apple receives the push token and the notification content, which can include a follower’s or friend’s name, a film or show title, rank or streak information, the first words of a reply and a link into Ranked. Because profiles are public on Ranked, a notification can name the follower, replier or friend it is about. Someone you have blocked, or who has blocked you, is never announced. Your iPhone’s settings control notification previews.

To turn notifications off, change each switch in You → Settings → Notification settings, or turn off notifications for Ranked in iPhone Settings. With every switch off or iOS permission off, the push token is removed the next time Ranked connects. Signing out removes the push token and session reference from this installation; if you sign out without a connection, Ranked finishes removing them the next time it opens online. Turning notifications off or signing out does not erase all registration or delivery history. Disabling server delivery does not itself stop collection by an already enabled build or remove earlier records.

Reports, review and support

Reporting content or a person stores the reason, any details you enter and relevant account or content references. Restricted moderation records may include copies of reported content, an operator’s decision and the reason for that decision. Support messages include the contact information and details you choose to send.

Reviews, replies, activity notes, profile details and profile photos publish as soon as you post them; nothing is held for approval and no text is sent to an AI screening service. Everything you publish remains subject to access controls, blocking, account publishing restrictions and abuse limits. A new profile photo must be a JPEG within size limits, and embedded metadata such as location and camera details is removed on your device before it is uploaded. Content is moderated after publication through reports: an operator can remove a post, reply, review, photo or profile information, or restrict an account. Review records created by the earlier pre-publication review process (retired on 27 September 2026) are kept as audit history and are removed with account deletion.

Ribhav Jain is responsible for daily support and moderation review. For an access, correction or deletion request, identify your account and explain what you need. Account ownership may need to be confirmed before disclosing or changing account information. Do not send passwords, login codes or recovery links.

Bug reports and feature ideas

You can send a bug report or a feature idea from Settings, or by shaking your iPhone. A report stores your text (up to 4,000 characters), whether it is a bug or an idea, and the app version and build. If you attach a screenshot, it is stored privately with the report. Diagnostics are included unless you switch them off before sending: your device model, iOS version, language and region setting, the screen you were on and the app’s most recent log lines. Email addresses, sign-in tokens and long numbers are masked before a report is stored.

Reports are linked to your account and can be read only by you and the operator. They are kept until they are deleted, and deleting your account removes them along with their screenshots.

Usage and diagnostics

Ranked sends limited event counts and timing measurements to its Supabase backend to understand use and fix failures.

Before you sign in, these events carry a random identifier created for this installation of the app. It is not linked to an account, even after you sign up. The events record the sign-up steps you reach, such as seeing the welcome screen, choosing a sign-in method, a confirmation email being sent, Ranked offering to paste an invite link and one being pasted (never the pasted text or code), and sign-up succeeding or failing, with a fixed category for any error and the app version and build. They are kept for 30 days; after that only daily totals without identifiers remain.

Once you are signed in, events are linked to your account. These events include app version and build, fixed action and error categories, screen loading durations and limited activity such as opening the app, switching tabs, ranking, saving, following and replying. Device performance reports can include average launch and hang times and an app-wide scroll-hitch ratio, with the version and time period measured by iOS; a report spanning an update is marked as mixed. These event records exclude review text, email, film titles, search queries, screen contents and raw error details. Authentication provider logs are separate. This event reporting does not use advertising or stable device identifiers; remote notification registration is a separate data use described above.

If you share analytics with app developers in iPhone Settings, iOS gives Ranked reports about crashes and other app failures. Ranked reduces each one on your iPhone before sending it, linked to your account once you are signed in. A crash report contains the kind of failure, the exception type and code, the signal, a broad termination category, the app and iOS versions, and up to 8 positions in Ranked’s own code (or the names of system libraries) where it happened. It never includes error messages, file paths, the device model or anything you typed or viewed. Crash reports follow the same 30-day cleanup as other events.

Raw usage events, crash reports included, are deleted after 30 days. Before that, Ranked turns each day’s events into daily totals and averages, such as how many people opened the app, how long a typical session lasted, how quickly screens loaded and how many notifications were delivered. These daily figures contain no account, device or installation identifiers, no names or handles, no film titles and no text you wrote. They cannot be traced back to an account, and a median, average or percentile is kept only when at least 3 people contributed to it. Ranked keeps these daily figures for up to 2 years to see trends, then deletes them.

For monitored new accounts, first-session measurement records a random session identifier, observed foreground continuity and elapsed time to ten film placements. Relaunching alone does not start another first session. The measurement does not record film names, contacts or screen contents, and gaps in observation are not treated as verified completion.

Successful card exports record a limited account-linked render event. If public links are enabled, page-request and Get Ranked click counts are associated with the published snapshot and a broad source category such as search or social. Page counts can include preview crawlers. They are not unique visitor counts or verified installs. A new account carrying an explicit share identifier can be associated with that snapshot once; this is not proof of an App Store installation or automatic attribution through the App Store. These application counters do not store visitor IP addresses, cookies, device identifiers or raw referrer URLs.

Services used by Ranked

Supabase provides authentication, the app database and storage for profile photos and bug-report screenshots. TMDB provides film information and artwork; catalogue searches and film lookups are sent to TMDB, either directly or through a proxy that Ranked runs on Cloudflare. The proxy forwards each request to TMDB and caches the answer. Its logs record the kind of request, its status and timing, and query strings such as search terms are redacted. Some requests include your chosen language or watch country. Poster images load directly from TMDB. Streaming availability comes from JustWatch through TMDB.

Cloudflare sends every email Ranked sends for your account, through Supabase: sign-up confirmations, sign-in and verification codes, and password recovery. It processes the destination email address and the message to deliver them. Optional email-body previews are disabled. Delivery and security records have their own retention rules.

Ranked uses Slack, a messaging service, to alert its operator about service failures, new reports and new bug reports. These alerts carry only references such as a report’s id, its kind or reason, the app version and counts. They never include your name, handle, email or what you wrote.

Apple iCloud Mail hosts the support inbox and processes the messages and attachments you choose to send.

Trailers play inside Ranked through YouTube’s embedded player. When you play one, YouTube, a Google service, receives the request along with your IP address and device information, and may use cookies or similar identifiers under its own rules. The YouTube Terms of Service and the Google Privacy Policy apply. Ranked does not send YouTube its account ID, email, reviews or scores.

Opening a streaming link or another external website brings you to that service. Its own privacy practices apply. Supabase retains authentication and operational request logs, which can include account references, IP addresses, request information and approximate location. These logs can include requests made before signing in. TMDB’s privacy policy describes retained API searches, usage, IP addresses and general location. Ranked does not send its account ID, email, reviews or scores to TMDB.

This help site is hosted by Cloudflare. It has no app-owned analytics, advertising, account form or contact form. Cloudflare also serves authentication-link fallbacks and, when activated, public sharing pages. Supabase renders public cards and stores publication records. Hosting and security logs are separate from the app’s event records; application-level query redaction does not establish every provider’s retention policy.

How long records remain

Ranked keeps account history to operate and restore your library and progress. Automatic cleanup targets limited launch event, sign-up event, crash report and first-session measurement records older than 30 days. The daily totals and averages made from them, which identify no one, are kept for up to 2 years and then deleted. Recent action, comparison-exposure, weekly-baseline, daily open-hour and daily-supply records are trimmed after 35 days when progress next syncs. Inactive accounts can retain them longer. These are cleanup targets, not guarantees about every record or backup.

Completed-day, guess, rewatch, repair and campaign redemption history have no fixed age limit in the current app. Day-seven cohort records remain until account deletion.

Share-render events and public sharing counters have a 90-day cleanup target; short-term sharing rate-limit counts have a one-day target. Published snapshots remain until revoked or the account is deleted. Revoked snapshots have a 30-day cleanup target. A minimal account and request reference remains until account deletion to prevent a delayed retry from republishing a revoked card. A new-account attribution remains until its account or associated snapshot is removed.

Reports, moderation decisions and retained user-content evidence have no automatic age-based purge in the current implementation. Reports you submitted and moderation records tied to your account are removed with account deletion. Written details in a report submitted by someone else can remain after its account or content reference is removed.

A replaced profile photo is overwritten in place. Private photo originals left by the earlier review process have no automatic age-based purge; account deletion removes the account’s photo objects. Earlier text-review revisions and decisions are also linked to account deletion.

Bug reports and feature ideas, with their screenshots and diagnostics, have no automatic age limit. They are kept until they are deleted, and account deletion removes them.

Support correspondence is stored separately from the app database and handled during the owner’s daily review. Messages and attachments can be removed manually when no longer needed to handle the request. Deleting an app account does not automatically remove email you sent to support, and there is no automatic age-based purge of support mail.

For optional contact discovery, verification and challenge records remain until replacement, opt-out, email change or account deletion; validity expiry alone does not purge them. The record of your discovery choices (notice version and time, your answer to the one-time question, and when you turned discovery off) holds no email or hash and remains until account deletion. Anti-abuse counts remain until account deletion. Some habit notification jobs have a 60-day cleanup target while their maintenance is active. Other notification registration, delivery-budget and delivery-history records have no automatic age purge in the implemented path.

Database backups can contain earlier account records until those backup copies expire under the hosting plan. They do not include the photo files themselves. Authentication, delivery and other provider logs have separate retention settings; the app’s event-cleanup timers do not delete those logs. Device recovery copies also have a separate lifecycle.

Deleting your account

In Ranked, open You → Settings → Privacy → Delete account. Successful deletion removes the active account and its owned lists, reviews, comparisons, private progress and profile photos. Owned public publications, sharing records and private activation/cohort records are also removed, and so are your bug reports and their screenshots. Film scores are recalculated without your votes.

The operator can also delete an account: one that belongs to someone under 18, a repeat copyright infringer’s, or one whose owner asks by email and shows the account is theirs. That deletion removes the same data. If the account used Sign in with Apple, Ranked cannot revoke Apple’s sign-in token without your confirmation in the app; you can stop using your Apple ID with Ranked in iPhone Settings under your name, then Sign-In & Security, then Sign in with Apple.

If remote registration was enabled, deletion clears its account link, push token and session reference and removes account-owned preferences, including the stored time zone, watch country and streaming services, the record of watchlist titles you were told about, and delivery jobs. An installation identifier, revision, security hash, environment, timestamp and revocation state remain to reject delayed registration requests. This retained security record is not certified anonymous.

Some information can remain in another person’s report or private guess history, downloaded or cached copies, or device recovery copies. Deleting your account does not erase other people’s screenshots or independently stored copies.

For help with access, correction or deletion, contact support@rankedmovies.app.

We don’t sell or share your personal information

Ranked does not sell your personal information, and does not share it with anyone for advertising. Ranked shows no ads and does not track you across other companies’ apps or websites. The services named above process information only to run Ranked, and other members see only what this policy describes as visible to them.

Your rights

You can ask to see the personal information Ranked holds about you, to correct it, or to have it deleted. You can make many changes yourself: edit your profile in Settings, and delete your account in You → Settings → Privacy → Delete account. For anything else, email support@rankedmovies.app from the address on your account. We may need to confirm the account is yours before we act. You can also object to a particular use of your information, such as optional measurement, and we will stop it unless we need it to run or secure Ranked. Depending on where you live, you may have further rights, including the right to complain to your local data protection authority.

Ranked uses your information to provide the app you signed up for: your account, your lists and the features you choose to use. It uses limited event and crash measurements because it has a legitimate interest in keeping Ranked working, secure and free of abuse. Contact access and notifications are used only with your permission, which you can withdraw at any time in Settings or in iPhone Settings.