Privacy Policy

Privacy Policy

Last updated: September 19, 2026

This Privacy Policy explains what information Tract Entertainment LLC ("we," "us," or "our") collects when you use the Horizon mobile app, the Horizon share-link site at share.tractentertainment.com, and related services (together, the "Service"), how we use it, who we share it with, and the choices you have. If anything here is unclear, email us at bcusick@tractentertainment.com.

1. The Short Version

QuestionAnswerDo you sell my data?No. We do not sell or rent your personal information, and we do not share it for targeted advertising.Do you track me across other apps or websites?No. Horizon contains no advertising SDKs, no third-party analytics SDKs, and does not use Apple's advertising identifier.Who stores my data?Our backend provider, Supabase, on servers in the United States.Does anything I type go to an AI company?Only if you use Horizon AI, a Horizon Pro feature. Some questions are answered on your device or by Apple; others are sent, with the parts of your Horizon data needed to answer them, to a third-party AI model provider (Section 6).Can I delete my account?Yes, at any time, in the app (Settings → Account & Privacy → Delete Account).Can I turn off usage analytics?Yes — Settings → "Share usage data."

2. Information We Collect

2.1 Account information

  • Anonymous start. When you tap to join, we ask for your name and confirm you are 13 or older (Section 10), then create an account for you without an email or password so you can try the app right away. This account has a random identifier and is real — what you add during setup (titles, ratings, a username) is saved to it.

  • Converting your account. At the end of setup you secure the same account with an email address and password, or with Sign in with Apple. With Sign in with Apple you can choose to hide your email, in which case Apple gives us a private relay address.

  • Unfinished accounts. If an anonymous account is never converted, we automatically delete it and everything in it 30 days after it was created.

  • Profile. Your username, display name, profile photo and header image, and anything else you add to your profile (for example, favorites you choose to show).

2.2 Age assurance

We do not collect your date of birth. On iOS 26 and later, the app may ask iOS whether your Apple Account is in the "13 or older" age range (Apple's Declared Age Range feature); iOS answers only with the range, and you can decline to share it. Otherwise, you confirm that you are 13 or older by checking a box. We store that you confirmed you are 13+, how it was confirmed (iOS or self-declared), and when. Some accounts created before September 2026 also have a birth year on file from our earlier sign-up form.

2.3 Your library and activity

  • Tracking data: titles on your Horizon (watchlist), your diary (what you watched, listened to, or played, and when), ratings, reviews, rewatches, favorite artists, and lists (including "smart lists" built from rules you set).

  • Notes you write about titles, including optional timestamps and episode or track scopes. Each note is private or public; public notes are visible to other Horizon Pro subscribers who have not blocked you or been blocked by you.

  • Sessions: when you start and stop a watching, listening, or play session, and notes you add during it.

  • Streaks: we calculate weekly activity streaks from your diary, and record any week covered by a Pro streak shield.

  • Saved filters, pinned lists, sky/theme choices, content-type and streaming-service preferences, and game platforms you select.

  • Imports: if you import a Letterboxd export, your device reads the file and sends its rows (titles, dates, ratings) to us to match against our catalog. We keep a summary of each import (counts of matched and unmatched rows).

2.4 Social features and communications

  • Follows, blocks, and mutes.

  • Posts, reviews, comments, replies, reposts, likes, and @mentions.

  • Clubs you create or join and what you post in them, and events you create or are invited to.

  • Direct messages, including text, replies, and shared titles. Messages are stored on our servers and are not end-to-end encrypted.

  • Common Ground, a two-person swiping game: the round's settings and card deck, your swipes, and matches. Your partner sees your progress (how many cards you have swiped) and the titles you both liked — never the titles you passed on. While you both have a round open, the app shows live presence ("Rae is here") through a real-time channel.

  • Referrals: if you invite someone with your invite code, we record who invited whom.

  • Reports you file and moderation decisions about your content or account.

2.5 Horizon Pro (subscriptions)

Purchases are handled entirely by Apple. We never receive your payment card or billing details. We receive and store the subscription information needed to unlock Pro: the product you bought, when it started, when it expires, and Apple's original transaction ID. Your in-app purchases are tagged with your Horizon account ID so Apple's subscription notifications (renewals, expirations, refunds, billing problems) can be matched to your account.

2.6 Horizon AI

See Section 6 for exactly what is processed and by whom. We keep daily totals of requests and model usage across all users for cost control. We do not save your Horizon AI conversations: each time you open the chat it starts fresh, and our server logs record timing and token counts, not the text of your questions or answers.

2.7 Contacts ("Find Friends") — optional

If you choose to find friends from your contacts, iOS asks your permission first. Your device then takes the email addresses in your contacts and converts each one into a SHA-256 hash (a one-way code that cannot be turned back into the email) on your device. Only those hashes are sent to us. Our server compares them against a protected, keyed version of existing members' email hashes and returns matching Horizon accounts. The hashes are used only for that comparison and are not stored. Names, phone numbers, and raw email addresses from your contacts never leave your device.

2.8 Apple Music — optional

If you connect Apple Music, you authorize Horizon through Apple, and your device sends us an Apple Music user token. We use it to read your library artists, the artists you have "loved," and your recently played tracks and heavy rotation — from which we keep only the list of artists, to suggest artists and surface their upcoming releases. We do not store your songs, playlists, or play history. The token is encrypted at rest and is used to refresh this artist list about once a week. You can disconnect at any time in Settings, which deletes the connection.

2.9 Photos you upload

Profile photos, header images, and images for Clubs, lists, and events are stored in our cloud storage and are publicly accessible by link. Before upload, iOS's on-device Sensitive Content Analysis may check the image. After upload, images may be automatically scanned by our image-moderation provider (Section 7) to detect sexual or other prohibited content.

2.10 Device information

  • Push notification token, if you allow notifications, and the device platform.

  • App settings stored on your device (for example, your analytics choice and cached content so the app opens instantly).

2.11 Usage analytics and diagnostics (first-party)

Unless you turn it off, the app records usage events — for example, which screens and features you use, onboarding steps, and whether a search was answered on the device — together with your account ID, a per-launch session ID, and the app version. Search and Horizon AI events record the length of what you typed, never the text. The app also sends crash and performance diagnostics from Apple's MetricKit through the same pipeline. All of this goes only to our own database; no third-party analytics service receives it. Turn it off any time in Settings → "Share usage data" (this setting applies to the device you change it on).

2.12 Information that stays on your device

  • Flight Plan: the flights you create — airports, departure dates, and lineups — are saved only on your device. We ask for no location permission; airport data ships inside the app. Your device asks our server only which catalog titles fit a length of time.

  • Widgets and Live Activities read from data the app shares with them on your device.

  • Horizon AI's on-device tier (Section 6.1).

2.13 What we do not collect

We do not collect your precise or approximate location, your date of birth, advertising identifiers, browsing history, or health or financial data, and we do not access your camera, microphone, or calendar.

3. How We Use Your Information

  • To create, secure, and run your account, including converting an anonymous account and removing abandoned ones;

  • To provide the features you use — tracking, diary, ratings, reviews, lists, notes, sessions, streaks, Clubs, events, messages, Common Ground, and Horizon AI;

  • To show your public content and activity to other members as each feature intends;

  • To personalize recommendations, rankings, and your home and discovery pages;

  • To send notifications you have allowed (for example, release reminders, replies, follows, messages, matches, and monthly or yearly recaps);

  • To provide and verify Horizon Pro, including renewals, trials, and refunds reported by Apple;

  • To keep the Service safe — spam filtering, image scanning, reviewing reports, and enforcing our Terms of Service;

  • To understand usage, fix bugs, and improve performance;

  • To comply with the law and enforce our agreements.

We do not use your information for cross-app advertising, and we do not build advertising profiles.

Legal bases (for users in the EEA, UK, and similar regions): performance of our contract with you (running the Service), our legitimate interests (safety, analytics, improving the Service — which you can object to, for example by turning off usage data), your consent (contacts, Apple Music, notifications, Horizon AI questions sent to an AI provider), and legal obligations.

4. What Other People Can See

  • Public by default: your username, display name, photos, followers and following, and your posts, reviews, ratings, comments, reposts, and diary activity, which may appear in other members' feeds and on share pages.

  • Lists and events can be public or private, as you choose. Smart lists are always private.

  • Notes are private or public (visible to other Pro subscribers), per note.

  • Direct messages are visible to the people in the conversation.

  • Share links: when you share something, share.tractentertainment.com shows a public preview (for example, a title, poster, username, or list name) to anyone with the link.

  • Horizon AI can mention your public ratings and reviews to people who follow you when they ask about their friends' activity.

5. Third Parties We Work With

We share personal information only with service providers that process it on our behalf, under contract and our instructions:

ProviderWhat it doesWhat it receivesSupabaseDatabase, authentication, file storage, server functions, and real-time features (US region)All account and app data described aboveAppleSign in with Apple, push notifications (APNs), App Store subscriptions and notifications, Declared Age Range, Apple Music, Apple Intelligence and Private Cloud ComputeThe data needed for each service (for example, your push token and the notification content, or your Horizon AI question)AI model provider — currently Google (Gemini API). If we change providers (for example to Groq, or OpenRouter, which routes requests to model hosts such as Groq), we will update this listGenerates Horizon AI answersYour Horizon AI question and the related data in Section 6.2SightengineAutomated moderation of uploaded imagesUploaded imagesVercelHosts the share-link preview siteRequests to share links; the public preview content

Catalog providers — TMDB (and JustWatch data provided through TMDB), IGDB/Twitch, and the Apple Music catalog — supply movie, TV, game, and music information. We query them from our servers for catalog data only and send them no information about you (the one exception being your own Apple Music token, which goes to Apple when you connect Apple Music). Trailers and "Where to watch" links open third-party sites and apps, whose own privacy policies apply.

We may also disclose information when required by law or to protect the rights, safety, or property of our users or the public, and as part of a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.

6. Horizon AI in Detail

Horizon AI is a chat assistant included with Horizon Pro. Each question is sent to the simplest tier that can answer it:

6.1 On your device (iOS 26 and later, with Apple Intelligence on)

Apple's on-device model sorts your question and answers questions about how to use Horizon. This tier does not send your question anywhere.

6.2 Apple Private Cloud Compute (iOS 27 and later, where available)

Simple factual questions about a single title or person may be answered by Apple's Private Cloud Compute, using information from our catalog. Apple states that data sent to Private Cloud Compute is used only to fulfill the request and is not stored or made accessible to Apple.

6.3 Our server and an AI model provider

Everything else — recommendations, questions about your own library or your friends, follow-ups, and anything the first two tiers cannot answer — is handled by our server, which sends to the AI model provider named in Section 5: - your question and the earlier messages in the current chat; - the Horizon data the assistant looks up to answer it, which can include your watchlist, diary, ratings, favorite artists, top genres, and streaming services; - if you ask about friends, the names, usernames, ratings, and public reviews of people you follow on the titles concerned; - catalog information and short excerpts of public community reviews.

We do not send the provider your email address. The provider processes each request under its own API terms and privacy policy, which may allow it to keep request data for a limited period (for example, for abuse monitoring).

Please don't put sensitive personal information into Horizon AI. Answers are generated automatically and can be wrong (see our Terms of Service).

7. Moderation and Safety

To keep Horizon safe we use automated spam filters (which can hide posts until reviewed), on-device and server-side image checks, and human review of reports. When content is reported — including a direct message — our moderators can review it and the surrounding context. We keep moderation records to enforce our rules and prevent repeat abuse.

8. Retention

  • Your account and content: kept while your account exists, until you delete them or your account.

  • Anonymous accounts never converted: deleted automatically 30 days after creation.

  • Contact hashes: not stored.

  • Horizon AI conversations: not stored. Aggregate daily usage totals are kept without user identifiers.

  • Usage analytics and diagnostics: kept to understand usage over time. When you delete your account, they are disconnected from you (the link to your account is removed).

  • Security audit logs: deleted after 90 days.

  • Push tokens, Apple Music connections, notes, sessions, streak shields, saved filters, and subscription details: deleted with your account (or, for Apple Music, when you disconnect).

  • Backups maintained by our hosting provider may keep copies for a limited period before they are overwritten.

  • We may keep information longer where the law requires it or to resolve disputes, prevent fraud or abuse, or enforce our Terms.

9. Deleting Your Account and Your Rights

9.1 Delete your account

Go to Settings → Account & Privacy → Delete Account. We then permanently delete your login, profile, uploaded photos, and the data that belongs to your account — including your library, diary, ratings, reviews, comments, notes, lists, sessions, follows, notifications, one-to-one conversations, and push tokens. A few things are handled differently so that other people's experience doesn't break: messages you sent in group conversations, Clubs you created, and invitations you sent remain but are no longer linked to you, and reports you filed stay attached to the moderation case without your identity. Usage analytics are de-identified as described above.

Deleting your account does not cancel a Horizon Pro subscription. Cancel it in your Apple ID settings (Settings → [your name] → Subscriptions) so you are not charged again.

9.2 Your rights

Depending on where you live (including under the GDPR, UK GDPR, and California and other U.S. state privacy laws), you may have the right to: - know and access the personal information we hold about you; - correct it (much of it you can edit in the app); - delete it; - receive a portable copy; - object to or restrict certain processing, and withdraw consent at any time (for example, by disconnecting Apple Music, turning off notifications or usage data, or not using Horizon AI); - opt out of the sale or sharing of personal information for targeted advertising — we do neither; - not be discriminated against for exercising these rights.

To make a request, email bcusick@tractentertainment.com from the address on your account (or tell us your username). We may need to verify your identity, and you may use an authorized agent where the law allows. We will respond within the time required by applicable law. If you are in the EEA or UK, you may also complain to your local data protection authority.

10. Children

Horizon is not for children under 13, and you must be 13 or older to create an account. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete the account and its information. If you believe a child under 13 is using Horizon, contact us at bcusick@tractentertainment.com. Some countries set a higher minimum age for using online services without a parent's consent; if that applies to you, you may use Horizon only with that consent.

11. Security

We use encryption in transit (TLS), access controls including database row-level security, encryption of sensitive tokens at rest, and server-side checks on paid features. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you of a breach where the law requires.

12. International Users

We are based in the United States, and your information is stored and processed in the United States, where data protection laws may differ from those where you live. By using the Service you understand that your information will be processed there, and we handle it as this Policy describes wherever it is processed.

13. Push Notifications

If you allow notifications, we store your device's push token to send alerts about activity relevant to you. You can change notification types in the app or turn them off in iOS Settings. Rich notifications may download images such as posters or avatars to display them.

14. Changes to This Policy

We may update this Policy from time to time. We will change the "Last updated" date above and, for material changes, tell you in the app or by email before they take effect.

15. Contact Us

Tract Entertainment LLC Email: bcusick@tractentertainment.com Website: https://www.tractentertainment.com