Privacy policy

Version 1.4: 8 October 2026

This policy describes how Kanap collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is the publisher of the Kanap application. For any question regarding your data : privacy@kanap.tv.

2. Data we collect

When you use the Kanap application, we collect :

• Account data : first name, last name, username, email address, and a phone number if you provide one, it is optional and is used to connect you with your contacts.
• Usage data : programmes viewed, searches, ratings, preferences, interactions, in order to personalize your recommendations.
• Written reviews and comments : the text you publish about a title, or in reply to someone, is stored and displayed under your username. Depending on where you publish it, it is visible to your friends or to the whole community.
• Technical data : device type, operating system, technical identifiers required for operation and notifications, error and performance logs.
• Approximate location : our audience measurement tool derives an approximate location from your IP address, city, postal code and coordinates accurate to roughly ten kilometres. The app does not access your device's location and never asks you for that permission. The region the service actually uses is the one you declare.
• Contacts : with your explicit permission, the numbers in your address book are matched (in normalized form) to find your friends already on Kanap.
• Profiles of your guests and family: if you create, for Duo mode or Family mode, a profile for someone who watches with you, we store their first name (or the name you give the profile) and the genres they love or rule out. For a child under 16, you may enter their year of birth, and nothing else: no full date, no photo, no contact details. These profiles are entered by you, have no account and are visible to you alone. Our audience measurement tool only receives counts from them (number of profiles, how many are children), never a name, a year or an age. The year is used to adapt the suggested titles to the age of the youngest viewer; that age, without any name, is recorded with each set of suggestions in our recommendation engine logs (§ 6). The year stops being used on 1 January after their 16th birthday (we always assume the youngest possible age). It stays stored until you next save their profile, which the app asks you to do if it lacks tastes, and is then erased. It is also erased when you delete the profile or your account.
• Imported viewing history : if you link Netflix, Prime Video or Letterboxd, the list of titles you have watched there. This import is optional, and we never ask you for the platform's password : you sign in on its official page, displayed in a window inside the app. In most cases the history is read directly on your device and only the list of titles is sent to us. When that mode is unavailable, Netflix falls back to a mode where your account's session cookie is sent to our servers to fetch the same history there : it is then encrypted, kept solely to refresh your import, and erased as soon as you unlink the platform or delete your account. For Letterboxd, it is an export file that you send us yourself.
• Profile photo : if you add one, the image you provide (camera or gallery).
• Video messages : if you record a video review, the video (image and sound, including your face and voice) is collected. You choose its visibility (your friends or the community). The audio is automatically transcribed to text, for accessibility and moderation.
• Your feedback : if you answer the “Help us improve Kanap” form, your response (including the free-text part) reaches us through our audience measurement tool, linked to your account.

Visits to the kanap.tv website: browsing this website is measured separately, with no account and no sign-in. We record the page viewed, the website or search engine that brought you there, the language, the device type and the browser, along with an approximate country and city derived from your IP address. No cookie is stored: the technical identifier that links together the pages of a single visit is kept by your browser for the open tab only, and disappears as soon as you close it. This measurement does not follow you from one website to another, builds no profile, and is not matched with your account if you later create one.

3. Purposes

Your data is used to : provide the recommendation service, personalize suggestions based on your ratings and your viewing history (including the history you import), adapt suggestions to the age of the youngest viewer when a child's profile takes part (Duo and Family modes), enable social features (team, sharing, written reviews, comments and video reviews), send the notifications you have enabled, measure usage of the app and collect your feedback in order to improve it.

4. Legal basis

Depending on the case, processing is based on the performance of the contract (provision of the service), your consent (contacts, notifications, importing your viewing history, audience measurement inside the app) and our legitimate interest (security, improvement, measuring visits to the kanap.tv website as described in § 2). The profiles of your guests and family fall under the performance of the service you request. Family mode is meant for parents, or for people acting with their agreement.

5. Third-party tools

• PostHog (audience measurement and feedback collection, EU hosting): analysis of how the app is used, and visits to the kanap.tv website (§ 2). Inside the app, this data is not anonymous : once you are signed in, events are linked to your account. PostHog also derives from your IP address the approximate location described in § 2.
• Firebase Cloud Messaging: sending push notifications.
• TMDB: film/series metadata and posters.
• Google (Gemini API): automatic transcription of the audio of your video messages (processing may take place outside the EU).
• Object hosting (EU): storage of video messages and profile photos on servers located in the European Union.

6. Retention period

Your data is kept for as long as your account is active. Closing it, from Settings › Delete my account, is immediate and irreversible.

Deleted at that point : your profile and sign-in credentials, your ratings, your written reviews, your lists, your friends and friend requests, your notifications and the associated push tokens, as well as your links to streaming platforms (session cookie included) and the viewing history you had imported from them. The profiles of your guests and family, years of birth included, are deleted too. Your video messages, files included, and your profile photo are erased from our storage.

Not yet erased automatically, but no longer displayed and no longer tied to an active account : the text of your comments, the people you followed and the friendship link as it stands on your friends' side, your recommendation preferences (dismissed genres, reference titles, pinned favourites), recommendation engine logs (whenever a child's profile takes part, the age assumed for the youngest viewer, never their name), your progress states within the app, and expired TV pairing codes. We also keep moderation and blocking records, without them a suspended account could come back, and, if you accepted the creator licence, the time-stamped proof of that acceptance, IP address included. You can request the erasure of all of this at privacy@kanap.tv ; we act on it within thirty days. Data we are legally required to keep is kept for the period the law provides.

7. Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise them : privacy@kanap.tv. You may also lodge a complaint with the competent supervisory authority (in France, the CNIL, cnil.fr).

8. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration or disclosure. Exchanges with the application are encrypted in transit. Your video messages are kept in a private storage space and are only accessible through temporary signed links. The session cookie that may be sent during an import (§ 2) is encrypted before being stored and is never returned to the app.

9. Changes

This policy is versioned : its number and date appear at the top of the page. It may be updated and supplemented, in particular when the final legal notice is published.