EN , English. Choose language
Get the appGet it

Privacy policy

Last updated:

1. Who we are and who this policy applies to

Atenny is a social network for logging the films, series, books and games you have watched, read or played, with ratings, reviews and progress tracking. This policy explains how we handle personal data in the Atenny app (Android and iOS), on the atenny.com website and in the services connected to them.

The data controller, meaning whoever decides how the data is handled, is Atenny. We follow Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) and the Brazilian Internet Civil Framework (Marco Civil da Internet, Law No. 12,965/2014).

To talk about your data, including with our data protection officer (DPO), write to contact@atenny.com.

2. What data we collect

Data you give us when you create and use your account:

  • email and password. Your password is never stored as you type it: we keep only a hash (argon2id), which cannot be turned back into the password;
  • first and last name, username (@), date of birth, profile photo, pronouns, bio, up to three links and nationality, if you choose to fill them in;
  • the language of the app and of the titles, and your region (used to show where to watch);
  • sign-up preferences: the types of titles and the genres you like.

Signing in with Google or Apple: if you choose this option, we receive from Google or Apple an identifier for your account, your email (and whether it was verified) and, for Apple, the name you decide to share. We do not receive your password for those services.

What you create on Atenny:

  • your shelf: the titles you logged and the status of each one (want to watch, in progress, finished, dropped, etc.), ratings, dates, progress (pages, episodes, play time and platform), diary, goals, favorites and book quotes (public or private);
  • reviews, comments, reactions ("like" and "helpful"), reposts, lists and likes on lists;
  • contributions to the catalog: titles and corrections you propose, images you upload and your votes when reviewing other people's proposals;
  • relationships with other people: who you follow, who follows you, follow requests, blocks and reports you make;
  • your privacy and notification settings.

Data generated by your use: the history of changes to your shelf, experience points (XP), level, badges, activities shown in the feed, notifications, and technical session data (for example, the device or browser reported by the app and the dates you signed in). We also process the IP address of each connection to protect the service against abuse, such as repeated sign-in attempts.

On your phone: the app stores on the device itself your preferences (theme, language), your sign-in data, in secure storage, and a temporary copy of images. It only asks for access to your photos or camera when you choose a profile photo, and to the microphone when you use dictation to write a review. Dictation uses your phone's own speech recognition (Google or Apple): the audio does not go through our servers, only the text you decide to post. Photos you upload are saved again without metadata (such as the location where they were taken).

On the website: atenny.com does not use cookies, analytics tools or ads. It only stores in your browser the language you choose (see section 11).

We do not collect sensitive personal data (such as racial origin, religion, health or sexual orientation). Please do not post this kind of information about yourself or other people.

3. Why we use your data and on what legal basis

We only process data under one of the legal bases in article 7 of the LGPD:

  • To provide the service you asked for (performance of a contract, art. 7, V): creating and keeping your account, signing you in, storing your shelf, showing your profile and content according to your settings, building the feed, Explore and notifications, calculating XP, level and badges, publishing approved contributions, generating your data export and sending service emails (confirmation codes, password recovery, notices about account deletion and about your export).
  • To keep Atenny safe and healthy (legitimate interest, art. 7, IX): preventing fraud, spam and abuse, enforcing usage limits, reviewing reports, moderating content, suggesting people and titles and improving the service. Always respecting your expectations and rights, and never using your data for advertising.
  • To comply with the law (legal obligation, art. 7, II): keeping access logs for the period required by the Marco Civil da Internet and responding to orders from competent authorities.
  • To defend rights (art. 7, VI): in judicial, administrative or arbitration proceedings.
  • With your consent (art. 7, I): access to the camera, photos and microphone, which your phone asks for at the time and which you can withdraw at any time in the device settings.

Your date of birth is used to confirm the minimum age to use Atenny. It is never shown to other people.

4. What other people see

Atenny is a social network, so part of what you do is meant to be seen. You decide how much:

  • Never shown to other people: your email, your date of birth, your settings, the quotes you marked as private and the reports you made.
  • Public profile (default): anyone on Atenny can see your name, @, photo, pronouns, bio, links, nationality, level, badges, library stats, shelf, favorites, goals, public quotes, reviews and public lists.
  • Private profile: your name, @ and photo remain visible so people can ask to follow you, but your shelf, reviews and the rest of your content only appear to people you accept.
  • Lists: each list can be public, followers only or private.
  • Feed: what you finish, start or rate is shown to your accepted followers. Titles you marked as seen before joining Atenny do not go to the feed.
  • Explore: public profiles may appear in the Explore tab, which shows content from everyone. You can turn off "Show me in Explore" in your privacy settings. Private profiles never appear there.
  • Contributions: while they are under review, other people who review the catalog see your proposal with your @ and name.

If you block someone, that person can no longer see your profile and content, and you stop following each other.

5. Who we share data with

We do not sell or rent your data, and we do not show ads. We only share data with those who help us run Atenny, always limited to what is necessary and under confidentiality and security obligations:

  • Hosting and infrastructure: cloud providers where our servers and database are located.
  • File storage (Cloudflare R2): profile photos, catalog images, images uploaded in contributions and your data export files.
  • Email (Resend): sending service emails, such as confirmation codes and account notices.
  • Google and Apple: for sign-in, if you choose to use them, and for distributing the app through their stores, which have their own policies.

The catalog (titles, synopses, covers, cast, where to watch, etc.) comes from public databases and data partners for films, series, books and games, as well as from the community itself. We fetch this information from those sources; we do not send them your personal data.

We may also share data when required by law, by order of a competent authority, to protect people's rights and safety, or in a possible reorganization of the company (such as a merger or sale), in which case this policy continues to apply to your data.

6. International transfer

Some of the providers listed above store or process data outside Brazil (for example, in the United States). In those cases, the transfer follows article 33 of the LGPD, with contractual data protection safeguards compatible with Brazilian law.

7. How long we keep data

We keep your data while your account exists. You can delete items (logged titles, reviews, lists, photo, etc.) whenever you want, and they leave Atenny.

When you ask to delete your account: it disappears for other people right away, all sessions are ended and you have 15 days to change your mind by signing in again. After that period (or earlier, if you choose "Delete now"), we permanently delete the account and everything linked to it: profile, photo, shelf, history, diary, reviews, comments, reactions, lists, followers, blocks, reports made, notifications, XP, badges, contribution proposals and votes, and exports.

What remains after deletion:

  • titles and corrections you proposed that had already been published stay in the catalog, with no link to you;
  • an irreversible code (HMAC) derived from your email, with the dates of the request and of the deletion, so we can answer whether and when an account was deleted without keeping the email itself (art. 37 of the LGPD);
  • access logs (IP, date and time) for the 6 months required by article 15 of the Marco Civil da Internet, and data we must keep by legal obligation or to defend rights, only for as long as necessary.

Export files are available for 7 days and then deleted. Confirmation codes sent by email are valid for a few minutes.

8. Your rights and how to exercise them

Under the LGPD (art. 18), you have the right to:

  • confirm that we process your data and access that data;
  • correct incomplete, inaccurate or outdated data;
  • request anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
  • portability of your data;
  • deletion of data processed based on your consent, and deletion of your account;
  • information about who we share your data with and about the possibility of not giving consent and what that means;
  • withdraw consent at any time;
  • object to processing carried out on another legal basis if it does not comply with the law.

You can do most of this directly in the app:

  • Correct: in Edit profile and in Settings.
  • Download my data: in Settings. We generate a ZIP file with everything in your account (profile, shelf, history, reviews, lists, followers, XP, badges and more) in JSON format, with your photo. The link arrives by email and is valid for 7 days. You can request one export every 24 hours.
  • Delete account: in Settings, confirming with your password (or by signing in again with Google or Apple). See section 7.

For other requests, write to contact@atenny.com from your account's email address. We may ask you to confirm it is you. We reply within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

9. How we protect your data

  • encrypted connections (HTTPS) between the app, the website and our servers;
  • passwords stored only as argon2id hashes, and confirmation codes that expire within minutes and allow a limited number of attempts;
  • limits against repeated sign-in attempts and against abuse;
  • emails encrypted while they wait in the sending queue;
  • private export files, accessible only through a temporary link;
  • access to data restricted to the team members who need it to run the service, and technical logs without passwords, codes or message content.

No system is completely invulnerable. If a security incident occurs that may cause you relevant risk or harm, we will notify you and the ANPD, as required by article 48 of the LGPD.

10. Children and teenagers

Atenny is for people aged 13 and over. The app checks age from the date of birth and does not allow people under 13 to sign up. If you are between 13 and 18, use Atenny with the knowledge and permission of your parents or guardians.

We always process teenagers' data in their best interest (art. 14 of the LGPD). If we learn that an account belongs to someone under 13, we delete it. You can report a profile for this reason in the app, or write to contact@atenny.com.

11. Cookies and storage on your device

We do not use tracking, advertising or analytics cookies, either on the website or in the app.

The website stores in your browser (localStorage) only the language you choose, so it opens in the same language next time. The app stores your preferences and sign-in data on your phone. This is essential for things to work, and you can delete it at any time by clearing your browser's or the app's data.

12. Links and third-party services

Atenny may take you to websites and apps from other companies, such as the streaming services in "where to watch", the app stores or the links people add to their profiles. Those services have their own privacy policies, and we are not responsible for them.

13. Changes to this policy

We may update this policy when Atenny changes or the law requires it. The date of the last update is at the top of the page. If the change is important, we will let you know in the app or by email before it takes effect.

This policy is originally written in Brazilian Portuguese and is also available in English and Spanish. If there is any difference between the versions, the Portuguese version prevails.

14. Contact

Questions, requests about your data or contact with the data protection officer (DPO): contact@atenny.com.

Using Atenny is also governed by the Terms of use.