Legal
Sinoonim ("Sinoonim," "we," "us," or "our") helps you keep track of what to watch and know the moment it's available to stream in Malaysia. Sinoonim is built and operated by Hadam Project, based in Malaysia. This policy explains what information we collect when you use the Sinoonim app or sinoonim.com, why we collect it, who we share it with, and the choices you have — including how to delete your account entirely from inside the app.
When you create an account with an email address, we collect your email address and the username and password you choose. Your password is handled entirely by our authentication provider, Supabase — we never see it or store it in plain text.
You can also sign in with Apple or Google instead. In that case we receive only what you agree to share on that provider's sign-in screen:
We never receive your Apple ID or Google password, and we can't access anything else in those accounts.
Your display name, profile photo, short bio, and the genres you pick during onboarding — all of which you can edit or clear at any time from your Account screen. If you change your profile photo, the app asks for permission to open your photo library, and only the single image you pick is uploaded. We never scan or access the rest of your photos.
Everything you actively add to the app: watchlist items, ratings and written reviews, replies and likes on reviews, Ultimate Ranked comparisons and rankings, titles you mark as "haven't seen," custom lists, the badges you earn, and who you follow. This is the core of what makes Sinoonim useful, so we keep it for as long as your account exists.
Share cards (the images you can generate to share a ranking or review) are created on your device and handed straight to your phone's share sheet. We don't receive or store them.
A random device identifier that the app generates itself and stores on your device, so your watchlist works even before you create an account. It isn't your phone's hardware ID or advertising ID, and it can't identify you across other apps. When you sign in, your anonymous watchlist is linked to your account.
If you enable notifications, we also store a push-notification token issued by Apple's or Google's notification service, used only to deliver the alerts you've asked for. Like most online services, our servers also process standard technical data such as your IP address and app version when the app talks to them, which we use for security and troubleshooting.
The app and the website keep a few counts in aggregate: for example, how many times a featured film's card was shown or tapped, how many reminders were set for a film, and whether its trailer was played. Each count is sent as a simple event ("this card was seen") along with the kind of screen it happened on (the iPhone app, a phone browser, or a desktop browser). Nothing that identifies you is attached to or stored with these counts — no account, device identifier, IP address, or cookie — so they can't be traced back to you. We use them to see what works and, for featured films, to give the film's distributor a summary of the totals.
We don't collect your precise location, your contacts, payment or financial details (Sinoonim has no paid features at this time), or any government ID, health, or other sensitive-category information. We don't track you across other companies' apps or websites, and we don't use your device's advertising identifier.
We do not use your information to serve you ads, we do not build advertising profiles, and we do not sell your personal information.
Some films are shown as Featured (or Sponsored when a fee is involved) at the request of their distributors. They are clearly labelled, look the same to everyone, and are not chosen using your personal information, reviews, ratings, or watchlist. Featuring a film never changes ratings, reviews, or rankings. Distributors receive only the anonymous totals described above, never who you are.
Your username, display name, avatar, bio, and badges are always visible to other users, the same way they'd appear on any social profile. Your watchlist, your Ultimate Ranked list, and your custom lists are visible to people who follow you by default — you can turn any of these off individually from Permissions in the app at any time. Reviews you write, and replies and likes you leave on reviews, are always public. When you reply to, like, or follow someone, they'll see it on their Activity page and may get a notification about it. Your email address is never shown to other users.
If you're signed in with an email on file, Sinoonim can email you when something on your watchlist becomes available to stream, and when a featured film on your watchlist opens in cinemas (that email names the distributor who featured it, and nothing about you is shared with them). You're always in control of this:
The app asks for permission to send push notifications only once — the first time you add something to your watchlist, post a review, or follow someone. If you allow them, we send:
You can switch each kind off individually from Permissions in the app — watchlist alerts for streaming and for cinemas, replies, new followers, and likes — or turn all notifications off in your device's Settings. Replies, likes, and follows are also listed on your Activity page in the app and on sinoonim.com for 30 days, whether or not you allow push notifications. We never email you about them.
We'll still send essential account emails (like verifying your address or resetting your password) when you ask for them. We don't send marketing email, and we don't share your email address with anyone for their own marketing purposes.
On sinoonim.com, we use Google Analytics to understand overall traffic — which pages get visited, on what kind of device — the same way most websites do. Google Analytics sets its own cookies in your browser to tell returning visits apart. This is aggregate usage data, not tied to your Sinoonim account, and Google Analytics is not active in the native app at all. We don't use tracking cookies for advertising, and we don't share this data with ad networks.
In the iPhone app and on the website we also keep the anonymous usage counts described under Information we collect. They are not tied to your account and use no cookies or advertising identifiers, and they are not shared with ad networks or data brokers. We don't use them to track you across other companies' apps or websites.
The web app also stores a small amount of technical data in your browser's local storage (like your device identifier and sign-in session) so your watchlist keeps working between visits — this is functional, not tracking, and stays on your own device.
We keep your account information and content for as long as your account is active. If you delete your account (see below), your data is removed immediately and permanently — we don't keep a shadow copy "just in case." Aggregate, de-identified analytics may persist after that, since it was never tied back to you individually.
If you use Sinoonim without an account, your watchlist and any notification token are stored against your random device identifier until you either sign in (which links them to your account) or delete the app, which discards the identifier. You can also ask us to remove them by contacting us with the details below.
You can access and correct almost everything we hold about you directly in the app — your profile, your bio, your genre preferences, and every review, list, or ranking you've created. Beyond that:
Deleting your account is a real, in-app action, not a support request. Go to Account → Delete account, confirm once, and your account — along with every review, reply, like, watchlist item, ranking, list, badge, and follow connection — is permanently deleted. This also revokes your sign-in credential itself, so it can't be used to access Sinoonim again.
This action can't be undone, and there's no recovery window — we designed it this way deliberately, so "delete my account" actually means it.
If you signed in with Apple or Google, you can additionally stop those providers from sharing anything with us in the future from your Apple ID settings (Sign in with Apple) or your Google Account's "Third-party apps" page.
If you're in Malaysia, these rights are also protected under the Personal Data Protection Act 2010 (PDPA). Wherever you are, if you'd like a copy of your data, want us to correct or delete something you can't reach in the app, have a question about how we've handled your data, or want help with any of the above, contact us using the details at the bottom of this page. We'll respond within 30 days.
We rely on established, reputable providers (Supabase, Render) that encrypt data in transit and at rest, and we limit access to your information to what each part of the service actually needs to function. That said, no method of transmission or storage is completely secure, and we can't guarantee absolute security.
Sinoonim is built for a Malaysian audience, but the infrastructure we rely on (our database and server hosting) may process and store data outside Malaysia, including in Singapore and the United States. By using Sinoonim, you understand your information may be transferred to, and processed in, countries other than your own, where it is protected by the safeguards described in this policy.
Sinoonim is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we'll delete it.
If we make a material change to this policy — for example, if we introduce a paid Pro tier and start processing payment information — we'll update the "Last updated" date above and, where the change is significant, let you know directly in the app or by email before it takes effect.
Questions about this policy, or about your own data? Reach us at hadam.project@gmail.com.