Privacy policy

Last updated: 28 October 2026

Nexisode is an app for following TV series and their upcoming episodes. This policy explains what personal data the app handles, why, and what rights you have.

Who is responsible

I, Andreas Ulvund, am the data controller for the data described here.

What the app handles

• Email address and password. Used to create your account and sign you in. The password is stored only as a hash, so I cannot read it.
• A user ID. A random identifier created with your account. It ties your data to you.
• The shows you follow. The TVmaze ID of each show, and when you followed it.
• The episodes you mark as watched. The TVmaze ID of the episode and of the show, and when you marked it.
• Your sign-in session. Stored in the secure storage on your phone so you stay signed in. It is only used towards the sign-in service and the database.
• Technical data from signing in. The sign-in service may process technical data, such as your IP address, to run and secure your sessions.

What the app does not collect

The app does not collect your name, photo, location or contacts, and it has no analytics, advertising or tracking. What you type in the search field is sent to TVmaze to find shows (see below). I do not receive or store it.

Why, and the legal basis

I use the data to provide the app: to let you sign in and keep your list of followed shows and watched episodes. The legal basis is the General Data Protection Regulation (GDPR) Article 6(1)(b), performing the agreement with you (see the terms of use). Keeping the service secure and running is a legitimate interest (Article 6(1)(f)).

Who receives data

• Supabase (processor). The database and the sign-in service are run by Supabase. The project is hosted in Ireland (EU). Supabase processes the data on my behalf under a data processing agreement, and transfers outside the EEA are covered by the EU standard contractual clauses. See Supabase's privacy notice and data processing addendum.
• Email service (processor). A service I use to send emails from the app, such as verification codes.
• TVmaze. The app fetches show information, episode lists and images directly from TVmaze, from your phone. TVmaze therefore receives your IP address and what you look up (search terms and the shows you open). It does not receive your email address, your account or your lists. TVmaze is itself responsible for this data; see its privacy policy.
• Google Play and the App Store. The store you downloaded the app from processes data about the download under its own terms.

I do not sell your data and I do not share it with anyone else.

How long it is kept

Until you delete your account. Deleting removes the account, the shows you follow, the episodes you have marked and your sign-in sessions. Backups kept by the hosting provider may contain deleted data until they are overwritten, and technical logs the provider keeps for security may remain for a limited time.

Delete your account

In the app: Settings, then Delete account. Without the app: see Delete your account.

Your rights

You have the right to access your data, have it corrected or erased, restrict or object to the processing, and receive a copy of it. Email me at the address above and I will reply within one month. You can also see and delete much of it in the app. You can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the authority in your own country.

Security

Data is sent encrypted (HTTPS). The database is set up so that you can only read and change your own rows.

Changes

I may update this policy. The date at the top shows the latest version.