Seenit Privacy Policy

Last updated: 20 May 2026

Introduction

Seenit is operated by MSSD Ltd (trading as Mydus) (“we”, “our”, or “us”), a company registered in England and Wales whose registered office is at Flat 9 Dawson Building, 52 Prospect Row, London, E15 1GU, and whose registered number is 13278742. We are committed to protecting and respecting your privacy and to providing clear information about the use of your data. We are the data controller for the personal data we collect through the Seenit mobile application and any related services (together, the “Service”). We are registered with the Information Commissioner’s Office (the ICO) with registration number ZB326033.

If you have any questions or concerns about this Policy, or if you wish to exercise any of the rights set out below, please contact us at help@mydus.co.uk.

How we collect your data

When you use the Service, we collect personal data that you submit to us and personal data generated automatically when you interact with Seenit. We may collect, use, store and transfer the following different kinds of personal data about you: account data, social-graph data, activity data, device data, and communications data.

Personal information you disclose to us

Account data — information you provide to create and use your Seenit account, including your email address, username, display name, and (optionally) an avatar image.
Social-graph data — the follow requests you send, the follow requests you accept, and the resulting list of accounts you follow and accounts that follow you.
Activity data — the films and TV titles you log on Seenit (each log records a reference to the title and the time it was logged).
Information you provide when you interact with us — including free-text information you include in support queries, feedback, or any other direct interaction with us.

All personal information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information so that we hold the most up-to-date information about you.

Information automatically collected

Push-notification data — when you grant push permission, we store an Expo push token associated with your account so we can deliver notifications to your device. You can revoke push permission at any time in your device settings.
Server request metadata — when the Seenit app talks to our backend (Supabase), the network request necessarily carries your IP address, your user-agent string, and the time of the request. Our backend retains this in operational logs for a limited period to operate the Service securely (abuse prevention, rate limiting, and diagnostics). We do not use this data to build a behavioural profile of you, and we do not run any product analytics, screen-tracking, or session-replay tooling.
Crash and error reports — when the app crashes or encounters a runtime error, we send a crash report to Sentry containing a stack trace and limited contextual information (device model, operating-system version, app version). We have disabled Sentry’s IP-address and session-replay features so these reports do not include screen recordings or your network address. Sentry only receives data when something goes wrong; in normal use, nothing is sent.

How we use your data

We use the information we collect or receive for the following purposes:

To create and manage your account. We use your account data to create your unique Seenit account, to authenticate you, and to operate the core social features (follows, feed, logs, notifications). This is necessary to perform our contract with you.
To operate the social graph. When you send a follow request, we make the existence of that request visible to the recipient. When the recipient accepts, your subsequent logs become visible to them in their feed, and theirs to you. We process this data to perform our contract with you.
To deliver notifications. When someone you follow logs a title, or when someone you follow logs a title you have also logged, we send a push notification and create an in-app notification record. This is necessary to perform our contract with you. We rely on Expo Application Services to deliver push messages to Apple Push Notification Service (APNs) and Firebase Cloud Messaging (FCM).
To respond to your inquiries and offer support. We use your account data and any related context to respond to support requests and resolve issues.
To protect our business and our users. We may use your information as part of our efforts to keep the Service safe and secure, including for abuse prevention, rate limiting, and content moderation. We are legally and contractually obliged to ensure the security of the Service.
To enforce our terms and policies in order to protect the Service and its users.
To comply with legal and regulatory requirements, including responding to lawful requests from public authorities.
To improve the Service generally, primarily by reviewing crash and error reports. We do not currently run any product-analytics tooling that tracks individual user behaviour. If we introduce aggregated, non-identifying analytics in future we will update this Policy before doing so.

Where we rely on your consent (for example, push notifications), you may withdraw it at any time. You can disable push notifications in your device settings, or contact us at help@mydus.co.uk to withdraw consent for any other consent-based processing.

Deletion of personal data

You can delete your Seenit account at any time from the Profile → Delete account option within the app. When you do this we will permanently delete your profile, your follow relationships (in both directions), your logs, your notifications, and your stored avatar image. Backups containing residual personal data will be purged on our normal backup-retention cycle, and in any event within 30 days of your deletion request.

You can also request deletion by emailing help@mydus.co.uk.

Disclosure and data processors

We do not sell your personal data. We share personal data only with the third-party service providers we rely on to operate the Service. Each provider acts as a data processor and is only permitted to process your personal data on our instructions and for the purposes described below:

Supabase, Inc. — hosts our database, authentication system, and file storage (for avatar images). All account, social-graph, activity, and notification data is stored with Supabase. Supabase’s privacy policy is available at supabase.com/privacy.
Expo Application Services (650 Industries, Inc.) — we use Expo to deliver push notifications to your device via APNs and FCM. The Expo push token associated with your account is shared with Expo for this purpose. Expo’s privacy policy is available at expo.dev/privacy.
Apple Push Notification Service (Apple Inc.) and Firebase Cloud Messaging (Google LLC) — receive push messages from Expo and deliver them to your device. Their handling of push data is governed by Apple’s and Google’s respective privacy policies.
Sentry (Functional Software, Inc.) — receives crash reports and error logs to help us diagnose bugs. Sentry’s privacy policy is available at sentry.io/privacy.
The Movie Database (TMDB) — when you search for a film or TV show in Seenit, your search query is sent to TMDB to return matching titles and poster images. We do not send TMDB any account-identifying information. TMDB’s privacy policy is available at themoviedb.org/privacy-policy. This product uses the TMDB API but is not endorsed or certified by TMDB.

We may also disclose your personal data where we are required to do so by law, by court order, or by a competent regulatory authority; or where disclosure is necessary to protect the safety, rights, or property of Mydus, our users, or others.

International transfers

Some of our data processors (notably Supabase, Expo, and Sentry) may process personal data outside the United Kingdom and the European Economic Area. Where this occurs, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision) to ensure your personal data continues to receive an essentially equivalent level of protection.

Retention

We will only keep your personal information for as long as is necessary for the purposes set out in this Policy, unless a longer retention period is required or permitted by law. When you delete your account, your personal data is removed from our active systems as described above and from backups within 30 days.

Where we do derive aggregated, non-identifying information from operational logs or crash data, we may retain that aggregated information indefinitely for statistical and product-improvement purposes. Once aggregated in this way it is no longer personal data.

Keeping your personal information secure

We have implemented appropriate technical and organisational security measures designed to protect the security of any personal information we process, including encryption in transit (HTTPS / TLS), encryption at rest for our database and object storage, row-level security policies that restrict access to your personal data to you and to the people you have explicitly connected with on Seenit, and least-privilege access for our administrators.

However, no electronic transmission or storage technology can be guaranteed to be 100% secure, and we cannot guarantee that hackers or other unauthorised third parties will not be able to defeat our security measures. Transmission of personal information to and from the Service is at your own risk, and you should only access the Service within a secure environment.

Your rights

Under UK GDPR you have the following rights in respect of your personal data:

the right of access (a “subject access request”);
the right to rectification of inaccurate or incomplete personal data;
the right to erasure (a “right to be forgotten”);
the right to restrict processing;
the right to data portability; and
the right to object to processing, including for direct marketing.

To exercise any of these rights, please email us at help@mydus.co.uk including your name, the email address associated with your Seenit account, and a description of the request. We will respond within one month.

Making a complaint to a supervisory authority

If you are dissatisfied with how we have handled your personal data, you have the right to file a formal complaint with the Information Commissioner’s Office at ico.org.uk.

Children

Seenit is intended for users aged 17 and over and is not directed at children. We do not knowingly collect personal data from anyone under the age of 17. If you believe a child has provided us with personal data, please contact help@mydus.co.uk and we will delete it.

Changes to this policy

If we change this Policy, we will post the revised policy here with an updated effective date. If we make significant changes we will also notify you in-app or by email before the changes take effect.