Privacy policy

Version 1.2 — 30 July 2026

This policy describes how Kanap collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is the publisher of the Kanap application. For any question regarding your data : privacy@kanap.tv.

2. Data we collect

When you use the Kanap application, we collect :

• Account data : first name, last name, username, email address, and a phone number if you provide one — it is optional and is used to connect you with your contacts.
• Usage data : programmes viewed, searches, ratings, preferences, interactions, in order to personalize your recommendations.
• Written reviews and comments : the text you publish about a title, or in reply to someone, is stored and displayed under your username. Depending on where you publish it, it is visible to your friends or to the whole community.
• Technical data : device type, operating system, technical identifiers required for operation and notifications, error and performance logs.
• Approximate location : our audience measurement tool derives an approximate location from your IP address — city, postal code and coordinates accurate to roughly ten kilometres. The app does not access your device's location and never asks you for that permission. The region the service actually uses is the one you declare.
• Contacts : with your explicit permission, the numbers in your address book are matched (in normalized form) to find your friends already on Kanap.
• Imported viewing history : if you link Netflix, Prime Video or Letterboxd, the list of titles you have watched there. This import is optional, and we never ask you for the platform's password : you sign in on its official page, displayed in a window inside the app. In most cases the history is read directly on your device and only the list of titles is sent to us. When that mode is unavailable, Netflix falls back to a mode where your account's session cookie is sent to our servers to fetch the same history there : it is then encrypted, kept solely to refresh your import, and erased as soon as you unlink the platform or delete your account. For Letterboxd, it is an export file that you send us yourself.
• Profile photo : if you add one, the image you provide (camera or gallery).
• Video messages : if you record a video review, the video — image and sound, including your face and voice — is collected. You choose its visibility (your friends or the community). The audio is automatically transcribed to text, for accessibility and moderation.
• Your feedback : if you answer the “Help us improve Kanap” form, your response — including the free-text part — reaches us through our audience measurement tool, linked to your account.

3. Purposes

Your data is used to : provide the recommendation service, personalize suggestions based on your ratings and your viewing history — including the history you import —, enable social features (team, sharing, written reviews, comments and video reviews), send the notifications you have enabled, measure usage of the app and collect your feedback in order to improve it.

4. Legal basis

Depending on the case, processing is based on the performance of the contract (provision of the service), your consent (contacts, notifications, importing your viewing history, audience measurement) and our legitimate interest (security, improvement).

5. Third-party tools

• PostHog (audience measurement and feedback collection, EU hosting) — analysis of how the app is used. This data is not anonymous : once you are signed in, events are linked to your account. PostHog also derives from your IP address the approximate location described in § 2.
• Firebase Cloud Messaging — sending push notifications.
• TMDB — film/series metadata and posters.
• Google (Gemini API) — automatic transcription of the audio of your video messages (processing may take place outside the EU).
• Object hosting (EU) — storage of video messages and profile photos on servers located in the European Union.

6. Retention period

Your data is kept for as long as your account is active. Closing it, from Settings › Delete my account, is immediate and irreversible.

Deleted at that point : your profile and sign-in credentials, your ratings, your written reviews, your lists, your friends and friend requests, your notifications and the associated push tokens, as well as your links to streaming platforms — session cookie included — and the viewing history you had imported from them. Your video messages, files included, and your profile photo are erased from our storage.

Not yet erased automatically, but no longer displayed and no longer tied to an active account : the text of your comments, the people you followed and the friendship link as it stands on your friends' side, your recommendation preferences (dismissed genres, reference titles, pinned favourites), recommendation engine logs, your progress states within the app, the first name of the guests you had created for Duo mode, and expired TV pairing codes. We also keep moderation and blocking records — without them a suspended account could come back — and, if you accepted the creator licence, the time-stamped proof of that acceptance, IP address included. You can request the erasure of all of this at privacy@kanap.tv ; we act on it within thirty days. Data we are legally required to keep is kept for the period the law provides.

7. Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise them : privacy@kanap.tv. You may also lodge a complaint with the competent supervisory authority (in France, the CNIL, cnil.fr).

8. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration or disclosure. Exchanges with the application are encrypted in transit. Your video messages are kept in a private storage space and are only accessible through temporary signed links. The session cookie that may be sent during an import (§ 2) is encrypted before being stored and is never returned to the app.

9. Changes

This policy is versioned : its number and date appear at the top of the page. It may be updated and supplemented, in particular when the final legal notice is published.