Legal

Privacy Policy

Last updated: November 13, 2026

BeatLabs FZE LLC ("BeatLabs", "we", "us"), a company registered in Ajman Media City, United Arab Emirates, makes the Spinebox app (the "App") and is the data controller for the information described here.

In short: you can use Spinebox without an account. If you sign in, we store your library so it syncs between your devices, and a small public profile so friends can find you. We show no ads, use no trackers or analytics, and never sell your data.

1. Information we collect

1.1 Without an account

Your library (watched, planned and favourite titles) and episode progress are stored only on your device. Nothing is sent to us.

1.2 Account information

If you sign in with Apple or Google, we receive your email address, your name (if you share it) and a user identifier from the sign-in provider. With Sign in with Apple you can hide your email; we then receive a private relay address. We never receive your password.

1.3 Your library

When you are signed in, your watched list, watchlist, favourites and episode progress are stored in Google Firebase (Cloud Firestore) so they sync across your devices. Each item holds the title's public details (name, year, poster, type) and when you added it.

1.4 Public profile

Signing in creates a profile so other people can find and follow you. These fields are visible to other Spinebox users: your @username, display name, profile photo, the number of followers and people you follow, and your library totals (how many movies, series, books and comics). Who you follow and who follows you is also visible. Your profile photo, if you add one, is stored in Firebase Storage.

1.5 Notifications

If you allow notifications, reminders are scheduled locally on your device. We do not use push tokens or send notifications from our servers.

1.6 What we don't collect

The App contains no advertising, no analytics, no crash-reporting SDK and no third-party trackers. We do not collect your location, contacts or browsing history. This website uses no cookies, analytics or marketing scripts.

2. How we use it

• To sign you in and keep your account secure.
• To sync your library and episode progress across your devices.
• To show your public profile to other users and let them follow you.
• To answer you when you write to us.

We do not sell, rent or share your information for advertising or marketing.

3. Content services

To show titles, posters and details, the App sends your searches and the titles you open to TMDB (movies and series), Google Books (books) and Comic Vine (comics), and loads images from TMDB and trailer thumbnails from YouTube. Like any web request, these services see your IP address. They never receive your library, your account or your profile.

4. Storage and security

Cloud data is stored by Google Firebase, encrypted in transit and at rest, and protected by access rules so that only you can change your library and profile. Local data uses your device's app storage. No method of storage is 100% secure, but we apply reasonable technical and organisational measures.

5. Retention and deletion

• We keep your cloud data while your account exists.
• When you delete your account in the App (Settings → Delete Account), we permanently delete your profile, library, episode progress, follows, profile photo and @username reservation, and remove you from other people's follower lists. The @username becomes available again.
• Data stored only on your device is removed when you delete the App.
• If you can't use the App, you can ask us to delete your account by email — see Account deletion.

6. Your rights

You can see and change your data in the App at any time, export your library (Settings → Data, as JSON or a Letterboxd-compatible CSV), and delete your account. Depending on where you live (for example under the GDPR) you may also have the right to request a copy of your data, correct it, restrict or object to its processing, and complain to your data-protection authority. Write to info@beatlabs.ae and we will answer within 30 days.

7. International transfers

Google Firebase may process data on servers outside your country. Google provides safeguards for these transfers, such as the EU Standard Contractual Clauses.

8. Children

Spinebox is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will delete it.

9. Third-party services

• Firebase Authentication, Cloud Firestore and Firebase Storage (Google LLC) — sign-in, sync and profile photos.
• Sign in with Apple (Apple Inc.) and Google Sign-In (Google LLC) — sign-in.
• TMDB, Google Books (Google LLC) and Comic Vine (Fandom, Inc.) — title information and images.
• YouTube (Google LLC) — trailer thumbnails and links.

Each service follows its own privacy policy.

10. Changes

If we change this policy we will update the date at the top of this page, and tell you in the App when the change is significant.

11. Contact

BeatLabs FZE LLC
AMC — Boulevard-A Building, Ajman Media City
Ajman, United Arab Emirates
info@beatlabs.ae