Privacy policy

Version 1.7: 8 November 2026

This policy describes how Kanap collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is the publisher of the Kanap application. For any question regarding your data: privacy@kanap.tv.

2. Data we collect

When you use the Kanap application, we collect:

• Account data: first name, last name, username, email address, and a phone number if you provide one, it is optional and is used to connect you with your contacts. Added to this are the date, the version and the action (box ticked, or notice shown under the sign-in buttons) by which you accepted the terms of use.
• Usage data: programmes viewed, searches, ratings, preferences, interactions, in order to personalize your recommendations.
• Written reviews and comments: the text you publish about a title, or in reply to someone, is stored and displayed under your username, or under your first and last name for your friends. Depending on where you publish it, it is visible to your friends or to the whole community (see “What others see of you”, section 3).
• Technical data: device type, operating system, technical identifiers required for operation and notifications, error and performance logs.
• Approximate location: our audience measurement tool derives an approximate location from your IP address, city, postal code and coordinates accurate to roughly ten kilometres. The app does not access your device's location and never asks you for that permission. The region the service actually uses is the one you declare.
• Contacts: with your explicit permission, the numbers in your address book are matched (in normalized form) to find your friends already on Kanap.
• Profiles of your guests and family: if you create, for Duo mode or Family mode, a profile for someone who watches with you, we store their first name (or the name you give the profile) and the genres they love or rule out. For a child under 16, you may enter their year of birth, and nothing else: no full date, no photo, no contact details. These profiles are entered by you, have no account and are visible to you alone. Our audience measurement tool only receives counts from them (number of profiles, how many are children), never a name, a year or an age. The year is used to adapt the suggested titles to the age of the youngest viewer; that age, without any name, is recorded with each set of suggestions in our recommendation engine logs (§ 6). The year stops being used on 1 January after their 16th birthday (we always assume the youngest possible age). It stays stored until you next save their profile, which the app asks you to do if it lacks tastes, and is then erased. It is also erased when you delete the profile or your account.
• Imported viewing history: if you link Netflix, Prime Video or Letterboxd, the list of titles you have watched there. This import is optional, and we never ask you for the platform's password: you sign in on its official page, displayed in a window inside the app. In most cases the history is read directly on your device and only the list of titles is sent to us. When that mode is unavailable, Netflix falls back to a mode where your account's session cookie is sent to our servers to fetch the same history there: it is then encrypted, kept solely to refresh your import, and erased as soon as you unlink the platform or delete your account. For Letterboxd, it is an export file that you send us yourself.
• Profile photo: if you add one, the image you provide (camera or gallery).
• Video messages: if you record a video review, the video (image and sound, including your face and voice) is collected. You choose its visibility (your friends or the community). The audio is automatically transcribed to text, for accessibility and moderation.
• Your messages to the team: if you write to us from the app (“Something's wrong”, “A movie or a platform is missing”, “Talk to the team”), we keep your message, linked to your account, with what we need to reply and to understand a problem: the app version, your device model and operating system, the page you write from, the language, the identifier of your audience-measurement session, the search term if you write from a search with no results and, for a reported problem, the app's latest technical errors. Only the Kanap team reads them. The team may also write to you first. The team's messages appear in the app; we let you know by notification or, if you do not receive our notifications, we may do so by email. Your messages and the team's are deleted with your account.

Visits to the kanap.tv website: browsing this website is measured separately, with no account and no sign-in. We record the page viewed, the website or search engine that brought you there, the language, the device type and the browser, along with an approximate country and city derived from your IP address. No cookie is stored: the technical identifier that links together the pages of a single visit is kept by your browser for the open tab only, and disappears as soon as you close it. This measurement does not follow you from one website to another, builds no profile, and is not matched with your account if you later create one.

3. Purposes

Your data is used to: provide the recommendation service, personalize suggestions based on your ratings and your viewing history (including the history you import), adapt suggestions to the age of the youngest viewer when a child's profile takes part (Duo and Family modes), enable social features (team, sharing, written reviews, comments and video reviews), send the notifications you have enabled, measure usage of the app and collect your feedback in order to improve it.

What others see of you:

• Your friends: your first and last name, your photo, your ratings, your reviews and your activity. Members you follow who follow you back also see your first and last name.
• Other members: your username and your photo; your first name followed by the initial of your last name (“Julie M.”) in search, follower and following lists, friend requests and notifications; under your username, the ratings and written reviews you give a title, and your comments. They can also see your follower and following lists, and therefore your friends.
• A member who has your number: if you entered your phone number and they compare their contacts (see “Contacts”), they find you with your first and last name.
• Outside the app: your invitation page (kanap.tv/i/your-username) shows your first name, your photo and up to four titles you loved, your pinned favorites first. Nothing else leaves the app unless you share it yourself: a title link shows your first name, your photo, your rating and your review of that title only, and a review card shows the review you chose to share.

Your email address and phone number are never displayed; a member can only find you by email if they know your full address. Imported titles you have not rated are visible to no one; ratings imported from Letterboxd count as your own. A creator's profile, first and last name included, is public, including on the web. In the app, someone you block no longer sees you, and you no longer see them.

4. Legal basis

Depending on the case, processing is based on the performance of the contract (provision of the service), your consent (contacts, notifications, importing your viewing history, audience measurement inside the app) and our legitimate interest (security, improvement, measuring visits to the kanap.tv website as described in § 2). The profiles of your guests and family fall under the performance of the service you request. Family mode is meant for parents, or for people acting with their agreement.

5. Third-party tools

• PostHog (audience measurement and, for earlier versions of the app, answers to the “Help us improve Kanap” form, EU hosting): analysis of how the app is used, and visits to the kanap.tv website (§ 2). Inside the app, this data is not anonymous: once you are signed in, events are linked to your account. PostHog also derives from your IP address the approximate location described in § 2.
• Firebase Cloud Messaging: sending push notifications.
• Resend and Amazon SES: sending the app's emails (your account, email notifications), including the alert that tells the team about a new message.
• TMDB: film/series metadata and posters.
• Google (Gemini API): automatic transcription of the audio of your video messages (processing may take place outside the EU).
• Object hosting (EU): storage of video messages and profile photos on servers located in the European Union.

6. Retention period

Your data is kept for as long as your account is active. Closing it, from Settings › Delete my account, is immediate and irreversible.

Deleted at that point: your profile and sign-in credentials, the record of your acceptance of the terms of use, your ratings, your written reviews, your lists, your friends and friend requests, your notifications and the associated push tokens, your messages to the team and the team's replies, as well as your links to streaming platforms (session cookie included) and the viewing history you had imported from them. The profiles of your guests and family, years of birth included, are deleted too. Your video messages, files included, and your profile photo are erased from our storage.

Not yet erased automatically, but no longer displayed and no longer tied to an active account: the text of your comments, the people you followed and the friendship link as it stands on your friends' side, your recommendation preferences (dismissed genres, reference titles, pinned favourites), recommendation engine logs (whenever a child's profile takes part, the age assumed for the youngest viewer, never their name), your progress states within the app, and expired TV pairing codes. We also keep moderation and blocking records, without them a suspended account could come back, and, if you accepted the creator licence, the time-stamped proof of that acceptance, IP address included. You can request the erasure of all of this at privacy@kanap.tv ; we act on it within thirty days. Data we are legally required to keep is kept for the period the law provides.

7. Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise them: privacy@kanap.tv. You may also lodge a complaint with the competent supervisory authority (in France, the CNIL, cnil.fr).

8. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration or disclosure. Exchanges with the application are encrypted in transit. Your video messages are kept in a private storage space and are only accessible through temporary signed links. The session cookie that may be sent during an import (§ 2) is encrypted before being stored and is never returned to the app.

9. Changes

This policy is versioned: its number and date appear at the top of the page. It may be updated and supplemented, in particular when the final legal notice is published.