Privacy Policy

Last updated 10 November 2026

This policy explains what information the Totme app and totme.com collect, why, and the choices you have. Totme is run by XYT Labs Ltd, a company registered in Nicosia, Cyprus (“we”, “us”). We are the controller of your personal data. Questions go to support@totme.com.

What we collect

Your account

When you sign in with Apple, Google or an email address, we receive your email address and a unique account ID. If you use Sign in with Apple and choose to hide your email, we only see Apple’s relay address. You can watch films without an account.

Totme shares its sign-in system with HolyFeed, another app run by XYT Labs Ltd. If you use the same email in both apps, the sign-in is shared, but each app keeps its own profile and activity, and neither app shows your activity in the other.

Your profile

The name, username and profile picture you choose. A picture you upload from your photo library is stored on our servers.

What you do in the app

• Films you watch, like, save, share or add to playlists, and how far you watch them.
• The topics you pick, the shows you follow and your answers in Recall.
• Comments you post, messages you send to friends, friend requests, and people you block or report.
• Your notification settings.

Your device

A push notification token if you turn notifications on, your device model and operating system version, and crash reports when the app fails.

Purchases

Totme Plus is bought through Apple. We never see your card details. Apple and our purchase provider tell us whether your subscription is active, its plan and its renewal date.

Why we use it

• To run the app: your feed, your profile, Recall, your shows, playlists, comments and messages.
• To choose which films to show you next, based on what you watch and the topics you pick.
• To keep Totme safe: filtering comments, acting on reports and enforcing blocks.
• To send the notifications you turned on, such as new episodes and replies, and your sign-in codes by email.
• To fix crashes and improve the app, using crash reports and usage counts.
• To show ads to people without Totme Plus, and to handle subscriptions.

Under the GDPR our legal bases are: performing our agreement with you (running your account and the features you use), our legitimate interests (safety, fixing problems and improving Totme), your consent (notifications, and personalised ads where the law requires consent), and legal obligations.

Who we share it with

We do not sell your personal data. We share it only with the services that run Totme for us:

• Supabase, which hosts our database, accounts and uploaded pictures.
• Cloudflare, which stores and delivers the films.
• Apple and RevenueCat, which handle subscriptions and purchase records.
• Google AdMob, which shows ads to people without Totme Plus.
• Sentry, which receives crash reports. We send them without your name or email.
• Resend, which delivers our emails, such as sign-in codes.
• Apple and Google push services, which deliver notifications.
• Vercel, which hosts this website.

Other people on Totme see your name, username, picture, public comments and shared films. Your messages are seen only by the people you send them to.

We may also disclose information when the law requires it, or to protect someone’s safety.

Ads

If you do not have Totme Plus, you may see a full-screen ad between films. Ads come from Google AdMob. In the EU, the UK and similar places, Google asks for your consent before personalised ads are shown, and you can change that choice at any time. Totme does not ask iOS for permission to track you across other companies’ apps.

How long we keep it

We keep your data while your account exists. When you delete your account, we delete your profile, activity, comments, messages and uploaded pictures within 30 days, apart from records we must keep by law, such as purchase records. Crash reports are kept for up to 90 days.

Your rights

You can see and edit your profile in the app, and delete your account at any time (see Delete account). Depending on where you live, you may also have the right to access a copy of your data, correct it, restrict or object to how we use it, move it to another service, and withdraw consent. Email support@totme.com and we will reply within 30 days. If you are in the EU, you can also complain to your data protection authority, or to the Commissioner for Personal Data Protection in Cyprus.

International transfers

Our service providers may process data outside your country, including in the United States. Where data leaves the EU or the UK, we rely on the European Commission’s standard contractual clauses or an equivalent safeguard.

Security

Data is encrypted in transit, and access to our systems is limited to the people who need it to run Totme.

Children

Totme is for people aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child under 13 has an account, email support@totme.com and we will delete it.

Changes

When we change this policy we update the date at the top, and we tell you in the app if the change is significant.