Privacy Policy

Last updated: September 23, 2026 · Effective: September 23, 2026

This Privacy Policy explains how This & That Social Media LLC ("This & That," "we," "us," or "our") collects, uses, discloses, stores, and protects information when you use the This & That mobile application, visit thisandthat.app, or otherwise interact with our related services (collectively, the "Service").

This & That is a social discovery and recommendation platform that allows users to rate, rank, review, save, and discover media; create collections; communicate with other users; and discover people with similar tastes.

By using the Service, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you use This & That.

A. Account and Authentication Information

When you create or maintain an account, we may collect:

• Email address
• Username
• Password or authentication credentials
• Date of birth
• Account and user identifiers
• Email-verification status
• Account-security and authentication information

Your date of birth is used in part to determine your age and enforce our minimum-age requirement.

Your date of birth is not displayed to other users. Where applicable, the Service may display your calculated age instead.

B. Profile Information

You may choose to add information to your profile, including:

• Display name
• Profile photo
• Biography
• Home city and state
• Hometown
• College or university
• Profession or professional category
• Favorite genres or media interests
• Social-media links
• Other profile information you choose to provide

This information helps operate social discovery, user profiles, recommendations, and Taste Match features.

C. Location Information

This & That does not request or collect your device's precise GPS location.

Location-related profile information is provided manually by you, such as by selecting a city and state.

We do not use your phone's GPS or device-location permission to determine your profile location.

D. Ratings, Reviews, Rankings, and Other User Content

When you interact with the Service, we may collect content and activity such as:

• Ratings
• Reviews
• Rankings and lists
• Comments
• Collections
• Favorites and likes
• Queue or saved items
• Follows and follower relationships
• Profile content
• Images you upload
• Search activity
• Reports and moderation submissions
• Other content you choose to create or submit

We use this information to provide the Service, calculate rankings and recommendations, operate social features, moderate content, and personalize discovery.

E. Direct Messages

If you use direct messaging, we process:

• The contents of messages you send and receive
• The users participating in the conversation
• Message timestamps
• Information needed to deliver and maintain the conversation

Direct messages are not publicly displayed.

As explained below, authorized moderators may access a reported message and relevant conversation context only after a report involving that message or conversation has been submitted, or where access is otherwise required by applicable law.

F. Taste Match, Recommendations, and Preference Information

A core feature of This & That is helping users compare tastes and discover media and people they may find interesting.

We may use your ratings, rankings, favorites, likes, queue or saved items, media preferences, profile information, follows, and other interactions with the Service to generate features such as:

• Taste profiles
• Taste Match or similarity scores
• Recommended media
• Recommended users
• Personalized discovery results
• Inferences about your entertainment interests and preferences

These features are intended for social discovery and entertainment. They are not used to make decisions concerning credit, employment, housing, insurance, or similarly consequential matters.

G. Push Notification and Device Information

If you enable push notifications, we process information necessary to deliver them, including:

• Firebase Cloud Messaging device token
• App instance or push-registration identifier
• Target user identifier
• Notification title and content necessary to deliver the notification

You may control push notifications through your device settings.

Firebase is currently used for push-notification functionality, not for behavioral advertising.

H. Support and Communications

If you contact us, submit an appeal, report an issue, or request assistance, we may collect:

• Your contact information
• Your username or account information
• The contents of your request
• Screenshots or attachments you provide
• Records of our communications with you

I. Website and Waitlist Information

If you use the This & That website, join a waitlist, or request updates, we may collect information that you voluntarily provide, such as your email address.

We may also use referral or campaign information associated with your visit, such as the referring page or campaign parameters, to understand how people discover This & That.

2. How We Collect Information

We collect information:

• Directly from you when you create an account, complete your profile, submit ratings or content, communicate with other users, contact us, or otherwise use the Service;
• Automatically as necessary to operate features such as push notifications and network communications;
• Through our own backend systems; and
• Through service providers that process information on our behalf.

We also retrieve media metadata from third-party catalog services as explained below.

3. How We Use Information

We use information to:

• Create, authenticate, secure, and maintain accounts;
• Verify email addresses and reset passwords;
• Enforce our minimum-age requirement;
• Operate profiles and social features;
• Provide ratings, reviews, rankings, collections, favorites, and queues;
• Deliver direct messages;
• Generate Taste Match and similarity features;
• Provide personalized media and user recommendations;
• Allow users to search for and discover media and other users;
• Send push notifications and transactional emails;
• Moderate user-generated content;
• Investigate reports and appeals;
• Detect and prevent harassment, abuse, spam, fraud, and security incidents;
• Enforce our Terms of Service and Community Guidelines;
• Protect users and the integrity of the Service;
• Provide customer support;
• Maintain, troubleshoot, and improve the Service;
• Comply with applicable legal obligations; and
• Establish, exercise, or defend legal rights.

We may use aggregated or de-identified information that cannot reasonably identify you for research, service improvement, analytics, and similar legitimate purposes.

4. Profile Visibility and Member-Visible Information

This & That is designed as a social service.

At launch, profiles and social activity are generally visible to logged-in This & That users, rather than being governed by a general public-versus-private profile toggle.

Depending on the feature, logged-in users may be able to see:

• Display name and username
• Profile photo
• Bio
• Calculated age
• Hometown or location information that you have not hidden
• Followers and following
• Ratings and reviews
• Rankings and collections
• Comments
• Activity history
• Queue or saved items
• Likes and favorites
• Other information you choose to make available through your profile

Your date of birth itself is never displayed to other users.

Your email address is not displayed as part of your profile.

This & That does not display precise GPS location.

Available settings may allow you to hide certain age-related and location information.

Users may be searchable by their display name or username. We do not make users searchable by their private account email address.

Because other users can view member-visible information, they may be able to copy, screenshot, or otherwise share information they see. You should avoid including sensitive personal information in your profile, reviews, comments, collections, or other member-visible content.

5. Automated Content Moderation

This & That uses automated systems to help enforce our Community Guidelines and protect users.

User-submitted text and supported images may be screened by an automated moderation service operated by OpenAI when they are submitted.

This screening may include content such as:

• Reviews
• Comments
• Profile or biography text
• Other posted text
• Supported user-uploaded images

OpenAI processes this content on our behalf for the purpose of identifying content that may violate our safety rules or Community Guidelines.

Content identified by automated systems may be prevented from being published, removed, restricted, or referred for further review.

Automated moderation does not guarantee that every violation will be detected, and moderation decisions may also involve human review.

Routine private direct messages are not treated as publicly posted content for this purpose. Reported direct messages are handled as described below.

6. Direct Messages, Reports, and Moderator Access

Direct messages are intended to be private between the users participating in the conversation.

This & That administrators and moderators do not have unrestricted access to browse users' private direct messages.

If a user reports a direct message or conversation, authorized moderators may access:

• The reported message; and
• Relevant surrounding conversation context where reasonably necessary to understand and investigate the report.

Moderator access is used for purposes such as:

• Investigating harassment, threats, abuse, or exploitation;
• Investigating child-safety concerns;
• Reviewing spam, impersonation, or other prohibited conduct;
• Enforcing our Terms of Service or Community Guidelines;
• Protecting users; or
• Complying with applicable law.

We may also preserve or disclose information where required by valid legal process or applicable law.

7. Blocking

Users can block other users.

When a block is in effect, blocked users are prevented from initiating certain interactions, including new direct messages and comments.

Messages or comments created before a block may remain visible.

Blocking and reporting are separate actions. Blocking another user does not automatically create a moderation report.

8. Service Providers and Information Sharing

We use third-party providers to help operate This & That.

We provide these companies only the information reasonably necessary for the services they perform. We require service providers handling personal information on our behalf to protect it consistently with applicable law and the protections described in this Privacy Policy.

Firebase / Google

We use Firebase Cloud Messaging to deliver push notifications.

Firebase may receive information including:

• Device push token
• App instance or registration identifier
• Notification information
• Information necessary to route a notification to the appropriate user

The current mobile app does not use Firebase for advertising tracking.

Amazon Web Services

We use Amazon Web Services, including Amazon S3, to provide infrastructure and store supported user-uploaded media such as profile photos.

AWS may process uploaded files and related storage identifiers in order to host and deliver that content.

Mailjet

We use Mailjet (a Sinch company) to send transactional account emails and, where you have opted in, marketing emails.

Mailjet may process information such as:

• Your email address
• Verification-code emails
• Password-reset emails
• Account-deletion or deletion-reminder emails
• Waitlist and marketing emails you have opted in to receive
• Other transactional message content

OpenAI

We use OpenAI to assist with automated content moderation.

OpenAI may process supported text and images you submit for the limited purpose of screening that content for potential policy or safety violations.

Google Fonts

The application may retrieve font resources through Google's font-delivery infrastructure.

When such a request is made, Google may receive technical network information inherent to the request, such as the requesting IP address.

Other Vendors

We may use additional infrastructure, security, professional, or operational vendors where reasonably necessary to run the Service.

If our material data practices change, we will update this Privacy Policy and our applicable App Store privacy disclosures.

9. Media Catalog Providers

This & That uses third-party media catalog services to provide information about movies, television, music, books, and podcasts.

These services include:

• The Movie Database (TMDB)
• Spotify
• Open Library
• Podcast Index

These services provide catalog information such as titles, artwork, descriptions, media identifiers, and search results.

When necessary to perform a search or retrieve content, This & That may send a catalog search term, title, or media identifier to the applicable catalog provider.

We do not send your This & That account profile, ratings, reviews, direct messages, or other personal account data to these catalog services merely to retrieve catalog information.

10. Sale, Advertising, and Tracking

This & That does not sell your personal information for monetary consideration.

The current mobile application does not use personal information to track you across third-party apps or websites for targeted advertising.

We do not currently use third-party advertising networks to build cross-app advertising profiles about our users.

If these practices materially change in the future, we will update this Privacy Policy and any required consent or App Store disclosures before applying those practices.

11. Legal, Safety, and Enforcement Disclosures

We may disclose or preserve information where reasonably necessary to:

• Comply with applicable law;
• Respond to valid subpoenas, court orders, or other legal process;
• Protect the rights or safety of This & That, our users, or others;
• Investigate fraud, abuse, threats, or security incidents;
• Enforce our Terms of Service or Community Guidelines;
• Respond to emergencies involving danger to a person; or
• Satisfy child-safety reporting or preservation requirements.

Where required by law, this may include reporting apparent child sexual exploitation or related material to the National Center for Missing & Exploited Children (NCMEC) or other appropriate authorities.

12. Corporate Transactions

If This & That is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable law and appropriate confidentiality protections.

13. Data Retention

We retain personal information for as long as reasonably necessary to operate the Service and fulfill the purposes described in this Privacy Policy.

Retention periods may vary depending on the type of information and the reason we maintain it.

Account Deletion

You can request deletion of your account within the This & That app through Settings → Account → Delete Account or through thisandthat.app/delete-account.

Once you confirm an account-deletion request, a 14-day recovery period begins. During that period, you may cancel the deletion request. If you do not cancel, your account and associated personal information are permanently deleted from our active systems after the recovery period, subject to the limited retention described below.

We may send a reminder email before permanent deletion.

Deletion includes personal information and user-generated content associated with the account, including applicable:

• Profile information
• Ratings
• Reviews
• Rankings
• Collections
• Comments
• Favorites and saved items
• Follow relationships
• Images
• Direct messages
• Other account-associated content

Once permanent deletion is completed, your account cannot be restored.

Backup Retention

Our database backups are retained on a rolling basis for up to 7 days.

As a result, information deleted from our live systems may continue to exist temporarily in a secured backup for up to seven additional days before that backup is overwritten or expires.

Backups are maintained for system recovery and are not used to restore a deleted account for ordinary use.

Child-Safety Report Retention

Information or evidence connected to a child-safety report may be separated from ordinary account data and retained for one year, even if the underlying account or content is otherwise deleted.

This information is retained for safety, investigation, reporting, enforcement, and legal-compliance purposes.

Information may be retained longer where applicable law, a valid preservation request, or other legal obligation requires it.

Other Required Retention

We may retain limited records after deletion where reasonably necessary to:

• Comply with applicable law or valid legal process;
• Preserve evidence associated with serious abuse or safety reports;
• Detect or prevent fraud or security incidents;
• Maintain necessary enforcement records; or
• Establish, exercise, or defend legal claims.

Information that has been aggregated or de-identified so that it can no longer reasonably identify you may also be retained.

14. Your Choices and Privacy Rights

You can manage many aspects of your information directly through This & That.

Depending on the feature, you may:

• Edit profile information;
• Hide available age or location information;
• Manage notification preferences;
• Delete content you have posted where the feature permits;
• Block users;
• Report users or content; and
• Delete your account.

You may also contact us regarding your personal information at support@thisandthat.app.

Depending on where you live and applicable law, you may have additional rights regarding personal information, such as rights to request access, correction, or deletion.

We may need to verify your identity before fulfilling certain privacy requests.

We will not unlawfully discriminate against you for exercising privacy rights provided by applicable law.

15. Children and Minimum Age

This & That is not intended for children under 14.

You must be at least 14 years old to create an account.

The registration flow uses the birthday provided during signup to determine whether the age requirement is satisfied. If the birthday indicates that the user is under 14, signup is not permitted.

Our server also enforces this restriction and will not create an account for a user identified as being under the minimum age.

If we learn that personal information was collected from a child in circumstances prohibited by applicable law, we will take appropriate steps to delete the information and terminate the associated account.

If you believe a person under the permitted age is using This & That, contact support@thisandthat.app.

16. Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, misuse, alteration, loss, or disclosure.

These safeguards include measures such as:

• Authentication and access controls;
• Restricted administrative access;
• Secure cloud infrastructure;
• Role-based moderation access; and
• Other technical and organizational protections appropriate to the Service.

No internet-based service or electronic storage system can guarantee absolute security.

You are responsible for protecting your account credentials and should contact us if you believe your account has been compromised.

17. United States Service

At launch, This & That is intended for users in the United States.

Our systems and service providers may process information in the United States and in other jurisdictions where our providers operate.

If the geographic availability of the Service materially changes, we may update our privacy practices and this Policy as appropriate.

18. Third-Party Websites and Services

The Service may include links, media information, artwork, or other material originating from third parties.

This Privacy Policy governs This & That's handling of personal information.

It does not govern the independent privacy practices of third-party websites or services that you choose to visit or interact with directly.

We encourage you to review those third parties' privacy practices where appropriate.

19. Changes to This Privacy Policy

We may update this Privacy Policy when our Service, technology, providers, or legal obligations change.

When we update it, we will revise the "Last updated" date at the top of this page.

If a change materially affects how we collect, use, or disclose personal information, we may provide additional notice through the Service, by email, or by another appropriate method.

Where required by law, we will obtain additional consent before applying materially different data practices.

20. Contact Us

If you have questions, concerns, or requests concerning this Privacy Policy or This & That's privacy practices, contact:

This & That Social Media LLC

Email: support@thisandthat.app

Website: thisandthat.app