Privacy Policy

Effective date: June 13, 2026

This Privacy Policy explains how Tract Entertainment LLC ("we," "us," or "our") collects, uses, and protects information when you use the Horizon mobile application and related services (the "Service"). We've written it in plain language. If anything is unclear, contact us at bcusick@tractentertainment.com.

1. Summary (App Store Privacy Label Aligned)

Here is a quick overview that mirrors Apple's "privacy nutrition label" categories:

• Data used to track you across apps — None. We do not track you across other companies' apps or websites. No App Tracking Transparency (ATT) prompt is needed.

• Data linked to you — Email address; name; username; user content (reviews, ratings, comments, Club posts, direct messages); social graph (follows); photos you upload (avatar/header); push notification token.

• Data not linked to you — Hashed (SHA-256) contact emails used only for one-time friend matching, then discarded.

• Third-party analytics SDKs — None.

• Advertising SDKs / ad identifiers — None.

• Sale of personal data — We do not sell your data.

Details follow below.

2. Information We Collect

2.1 Information You Provide

• Account information. When you sign up with email/password or Sign in with Apple, we collect your email address, name, and username. (With Sign in with Apple, you may choose to hide your email; in that case Apple provides us a private relay address.)

• User content. Reviews, ratings, comments, Club posts, and direct messages you create.

• Photos. Avatar and header images you upload.

• Profile details. Anything else you add to your profile.

2.2 Information Created Through Use

• Social graph. The accounts you follow and that follow you.

• Club membership and activity. The Clubs you join and the posts you make in them.

2.3 Device & Technical Information

• Push notification token. If you enable notifications, we store your Apple Push Notification service (APNs) device token so we can deliver notifications. You can disable notifications at any time in your device settings.

2.4 Contacts — Optional "Find Friends" (Important)

The find-friends feature is entirely optional and is designed to protect your contacts' privacy:

• We ask for permission before accessing your contacts.

• The email addresses in your contacts are hashed on your device using SHA-256 before anything is sent. A hash is a one-way scramble that cannot be reversed back into the original email.

• Only those hashes are sent to our server, where a matching function compares them against hashes of existing Horizon accounts to find people you may know.

• Your raw contacts — names, phone numbers, and email addresses — never leave your device.

• The hashes are used for matching and are not used to build advertising profiles.

2.5 What We Do Not Collect

• We do not use third-party analytics SDKs.

• We do not use advertising SDKs or collect advertising identifiers.

• We do not track you across other apps or websites.

• If you optionally connect Apple Music, we import only the artists you follow or favorite — we do not access or import your songs, playlists, or listening history.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you;

• Operate core features — tracking, ratings, reviews, comments, Clubs, follows, and direct messages;

• Display your public content to other users as the relevant feature intends;

• Deliver direct messages between participants;

• Send push notifications you've enabled;

• Power the optional find-friends matching described above;

• Personalize recommendations and catalog content;

• Keep the Service safe — including moderating content, reviewing reports, and enforcing our Community Guidelines (see our Terms of Service);

• Maintain, debug, and improve the Service;

• Comply with legal obligations and enforce our agreements.

We do not use your information for cross-app advertising or to build advertising profiles.

4. Third-Party Services

Horizon relies on a small set of third parties. Catalog and metadata providers receive no personal information about you — we query them server-side for entertainment data only.

• Supabase — Backend, authentication, database, and hosting (our processor). Receives your personal data: Yes — stores your account and content on our behalf.

• Apple (Sign in with Apple, APNs) — Authentication and push notification delivery. Receives your personal data: Yes — as part of those services.

• TMDB — Movie/TV metadata, cast/crew, images. Receives your personal data: No.

• JustWatch (via TMDB) — Streaming availability. Receives your personal data: No.

• Apple Music Catalog API — Music metadata; optional import of your followed/favorited artists. No personal data; if you connect Apple Music, only your chosen artist preferences are used.

• IGDB / Twitch — Video-game metadata. Receives your personal data: No.

We use Supabase as a data processor to store and serve your data on our behalf. We do not share your personal information with the metadata providers above.

5. No Sale of Personal Data

We do not sell your personal data, and we do not share it with third parties for their own advertising or marketing. We have no advertising or analytics SDKs in the app.

6. How We Share Information

We share information only in these limited circumstances:

• With other users, when you choose to make content public (reviews, comments, Club posts, your profile, your follows) or when you send a direct message to another user.

• With service providers (such as Supabase) that process data on our behalf under our instructions.

• For legal reasons, when we believe in good faith that disclosure is necessary to comply with the law, enforce our Terms, or protect the rights, safety, or property of our users or the public.

• In a business transfer, such as a merger or acquisition, in which case we will notify you of any change in how your data is handled.

7. Data Storage & Security

Your data is stored on our backend infrastructure (Supabase). We use industry-standard safeguards — including encrypted connections (TLS) in transit and access controls such as row-level security — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any incident.

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

8. Account Deletion & Your Data Rights

8.1 Delete Your Account Anytime

You can delete your account directly in the app under Settings. When you do:

• Your authentication user is deleted;

• Data you own is cascaded and removed;

• Certain authored public content — such as direct-message bodies and Club ownership — is anonymized rather than erased, so shared conversations and Clubs others rely on remain intact.

8.2 Your Rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you;

• Correct inaccurate data (much of which you can edit directly in the app);

• Delete your data (via in-app account deletion);

• Object to or restrict certain processing;

• Port your data.

To exercise any right that isn't available directly in the app, email us at bcusick@tractentertainment.com. We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising these rights.

9. Children's Privacy

Horizon is not intended for children under 13, and you must be at least 13 to use it. We do not knowingly collect personal information from anyone under 13. If we learn that we have collected such information, we will delete it and terminate the account. If you believe a child under 13 has provided us information, contact us at bcusick@tractentertainment.com.

10. Push Notifications

If you enable notifications, we store your APNs device token to deliver alerts about activity relevant to you (such as follows, comments, messages, and Club activity). You can turn notifications off at any time in your device's Settings, which stops further notifications.

11. International Users

We operate the Service from, and store data in infrastructure that may be located in, jurisdictions that may differ from yours. By using the Service, you understand your information may be processed in those locations. We take steps to ensure your data is handled in accordance with this Policy wherever it is processed.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective date" above and, where appropriate, notify you within the app or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

Questions, requests, or concerns about your privacy? Contact us at:

Tract Entertainment LLC

Email: bcusick@tractentertainment.com

Website: https://www.tractentertainment.com