Privacy Policy

Last updated: August 1, 2026

1. Introduction

Refract ("we", "our", "us") is a cross-media tracking application developed by Prism. This Privacy Policy explains how we collect, use, and protect your information when you use the Refract mobile application and website (getrefract.app).

2. Information We Collect

Account Information

When you sign up via Google, Apple, or Facebook, we receive from your authentication provider:

We also collect your chosen username during onboarding.

User-Generated Content

AI Features

When you use the Discover feature (AI-powered recommendations), your search queries are sent to Anthropic's Claude API to generate personalized results. These queries are not stored by Anthropic for training purposes.

Feedback and Bug Reports

When you submit feedback or a bug report through the app, we collect your message, your Refract username, your email address, technical information about your device (model, OS version, app version), and any screenshots you attach. These reports are delivered to the tools our team uses to receive and manage them, and are processed to detect duplicates and route them to the right place.

Discord Community Server

We operate a community server on Discord. Our bot reads the content of posts in our public forum channels — suggestions, bug reports and data issues — to detect duplicate reports, classify them, translate them when needed, and reply with links to similar existing ones. Only public forum posts are read: direct messages and all other channels are never read.

Posts are archived so that community feedback isn't lost when threads are cleaned up from the forum, and we keep them for as long as they remain useful as a record of what has been asked for. This content is not used to train any model. To request deletion of your Discord data, contact us using the details in the Contact Us section.

Analytics & Diagnostics

Streaming Availability

Your selected streaming country preferences are stored to display relevant platform availability. This data comes from TMDB/JustWatch and does not involve your personal viewing habits on those platforms.

3. How We Use Your Information

4. Data Sharing

We do not sell your personal information. We share data only with:

5. Data Storage & Security

Your data is stored on secure servers hosted by Replit. Feedback, bug reports and community forum content are additionally processed on a dedicated server hosted by Hetzner in Germany, and archived in the documentation tools our team uses. Access to these systems is restricted to the Refract team. We implement appropriate technical measures to protect your information against unauthorized access, alteration, or destruction.

6. International Data Transfers

Refract is operated by The Prism Labs, established in France. Some of the service providers we work with are located outside the European Economic Area, which means your personal data may be transferred outside the EEA.

Where that is the case, we transfer personal data on the basis of an adequacy decision of the European Commission, a provider's certification under the EU-U.S. Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission, as applicable to each provider. You can request further information about the safeguards applying to a specific transfer by contacting us using the details in the Contact Us section.

7. Your Rights

You can at any time:

8. Children's Privacy

Refract is not intended for children under 15. We do not knowingly collect information from children under 15.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email.

10. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at:

[email protected]