Privacy Policy
Last updated: 9 September 2026
The short version
One Row has no account, advertising or analytics. Your library, bookings, reviews and lists are stored in your own iCloud account. The only data stored outside iCloud is a guest invite you deliberately send: enough booking and room information to show the invite page and save that guest’s seat and snacks. It is held temporarily by Cloudflare and deleted automatically after six months.
What data the app stores, and where
The app uses Apple’s CloudKit to store and sync your data:
- Your private iCloud database: holds your library until you choose to share it
- A shared iCloud database: used only if you invite someone else, so you can both see and edit the same library
Both are provided directly by Apple as part of your iCloud account. Except for the guest invites described below, no copy of this data passes through anything we control.
The data the app stores is limited to what you put into it: films you add, bookings, star ratings and written reviews, wishlist items and notes, and the display names you set for yourself and anyone you share with. None of this is linked to an account with us, because there is no account with us. The app identifies people only through Apple’s CloudKit sharing, using whatever Apple ID you and the people you invite are already signed into.
Guest invites
If you invite a guest who doesn’t have the app, the details needed for that one invitation are stored: the film and showtime, your cinema’s name, the guest’s name, who else is attending, who made the booking, the room’s seat layout and current occupants, the available snack list, and that guest’s selected seat and snacks. This lets the page prevent known seat clashes, display the finished ticket, and return the guest’s choices to the booking. It is the only feature that stores anything outside your own iCloud account, and it happens only when you tap “Send invite”.
These invites are held in Cloudflare’s storage, are reachable only by the unguessable link you send, and are deleted automatically after six months. No account or sign-in is involved, nothing about the guest is collected when they open the page, and no other part of your library is included.
Third-party services
The Movie Database (TMDb). When you search for a film, the title you type is sent to TMDb’s API to find matching results and fetch posters, cast, and other film details. No other information about you is sent. TMDb’s own privacy policy governs how they handle that request: themoviedb.org/privacy-policy.
This application uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.
Apple CloudKit. Sync, sharing, and notifications are all provided by Apple’s CloudKit and are governed by Apple’s own privacy practices for your iCloud account: apple.com/legal/privacy.
Your own media server. If you connect a Plex, Jellyfin or Emby server, the app talks to it directly over your own network or account. Nothing about that connection reaches us, and the key or token it uses is stored in your device’s keychain.
We do not use any analytics, advertising, or tracking services of any kind. The app does not collect data for any purpose beyond making its own features work, and nothing you do in the app is used to track you across other apps or websites.
Photos and Calendar
Saving a ticket stub asks for add-only access to Photos, and adding a showtime to your diary asks for write-only access to Calendar. In both cases the app can only put something in. It can never read your photo library or look at your calendar.
Notifications
The app can send you local notifications: a booking confirmation, a reminder before a showtime, or, if you’re sharing a library, a notification when the other person makes a booking. These are generated on your own device from your own data; nothing is sent to us to make this work.
Children’s privacy
This app is not directed at children and does not knowingly collect information from anyone. Since we don’t collect data at all, there’s nothing to distinguish here by age.
Data deletion
Deleting the app or removing its data from iCloud (Settings → your name → iCloud → manage storage) removes the library data held there. Guest invites are separate: they expire automatically within six months and can be removed sooner on request.
Changes to this policy
If this policy changes, the update will be posted here with a new “Last updated” date.
Contact
Questions about this policy: [email protected]