®Privacy Notice
Effective: 29 October 2026
1. Who we are
FLMPK Ltd is the controller of personal data processed through the FLMPK app and website. FLMPK Ltd is incorporated in England and Wales under company number 17350510.
Contact: [email protected]
FLMPK is ad-free. We do not sell personal data, viewing data or taste data. We do not use personal data for third-party behavioural advertising, and studio payment does not influence recommendation rankings.
2. What this Notice covers
This Notice explains how FLMPK handles personal data when you create or use an account, use film-discovery and recommendation features, manage a subscription entitlement, use the website, contact us, or exercise a legal right.
Apple, Google, streaming services and other third parties process information under their own notices when you use their services. If you choose to load either YouTube video on our website, your browser connects to YouTube and may share your IP address or accept its cookies or similar technology; neither video loads when you simply visit the page.
3. Personal data we handle
Account and authentication data: internal permanent user ID, sign-in and authentication records, verified email address where available, and account status.
Language and territory: the language and territory selected to provide the interface and relevant availability information.
Taste, library and activity data: favourites, likes, dislikes, watched and hidden titles.
Search and recommendation data: filters, Benton controls, recommendation results and the session state needed to deliver them. FLMPK is not designed to use film tastes to infer health, sexuality, religion, political opinions, ethnicity or comparable sensitive traits.
Subscription and entitlement data: store, product, entitlement state, renewal or expiry state, and non-sensitive transaction references made available by Apple, Google or RevenueCat. FLMPK does not receive full payment-card details.
Optional internal analytics: only where you have made the required choice. Core Search and Benton operational metrics are designed not to contain raw searches, title names, Film DNA values, preference values or user identity.
Technical and security data: only the IP address, timestamps, device or app identifiers, app/version information, authentication records, security logs, crash information and diagnostic fields actually generated by the released app, backend, website or active suppliers.
Support, privacy and legal correspondence: messages, records used to verify authority, investigation notes and evidence needed to answer or defend a request or complaint.
4. How and why we use personal data
Provide and secure your account — to register, authenticate and protect the account, prevent abuse and recover access. UK lawful basis: performance of a contract and, for proportionate security work, legitimate interests. Brazil: performance of a contract, legitimate interests where applicable, and compliance with legal obligations where required.
Personalised film discovery — to apply your selected language, territory, filters, Benton controls and saved activity; generate recommendations; and maintain your private library. UK lawful basis: performance of a contract. Brazil: performance of a contract.
FLMPK uses artificial intelligence to help generate Benton film recommendations and explanations from the controls, film preferences and other information you provide.
Subscriptions and entitlements — to recognise purchases, trials, renewals, expiry, cancellation and restored purchases, and to resolve entitlement problems. UK lawful basis: performance of a contract, legal obligation and legal claims where applicable. Brazil: performance of a contract, compliance with legal or regulatory obligations, and regular exercise of rights.
Essential communications — to send or respond to account-verification, password-recovery, security, purchase, support, privacy and legal messages. UK lawful basis: performance of a contract, legitimate interests, legal obligation or legal claims, depending on the message. Brazil: performance of a contract, legitimate interests, compliance with legal obligations or regular exercise of rights.
Optional internal analytics — to understand and improve the Service only after the required consent. UK lawful basis: consent. Brazil: consent. You may withdraw consent at any time without losing the core Service.
Reliability, security and legal compliance — to diagnose faults, protect the Service, investigate incidents, keep required records and establish, exercise or defend legal claims. UK lawful basis: legitimate interests, legal obligation and legal claims as applicable. Brazil: legitimate interests, compliance with legal obligations and regular exercise of rights as applicable.
Support, complaints and data rights — to identify the request, verify identity or authority proportionately, search relevant systems, communicate with you and preserve a defensible record. UK lawful basis: legal obligation, performance of a contract, legitimate interests and legal claims as applicable. Brazil: compliance with legal or regulatory obligations, performance of a contract and regular exercise of rights.
FLMPK does not use recommendations to make decisions that produce legal or similarly significant effects about you. Personalised recommendations may nevertheless involve profiling in the ordinary privacy-law sense because your saved activity and controls are used to predict films you may like.
5. Communications and your choices
FLMPK’s launch service uses essential account-verification and password-recovery email. These are operational messages, not marketing.
Optional analytics must remain off until the required choice has been made. You can withdraw that choice through the available app setting or by contacting [email protected]. Withdrawal stops future optional analytics; it does not affect processing already carried out lawfully.
6. Providers and data sources
FLMPK uses or receives information from the following providers for the current Service:
Apple and Google — app distribution, store billing, platform services and store-account information. They also act under their own terms and privacy notices.
RevenueCat — subscription and entitlement management.
Anthropic — artificial-intelligence processing used to generate Benton recommendations and explanations.
Replit-hosted infrastructure — backend, database and related application infrastructure.
Cloudflare — public-website hosting, content delivery and website security.
YouTube — the FLMPK explainer and Benton walkthrough, only when you choose to load either video.
Watchmode and Wikidata — film metadata and availability data. Queries or identifiers sent to these services must be limited to what is needed for the requested discovery function and must not include FLMPK user identity unless this Notice is updated and a valid basis exists.
7. Sharing
We share personal data only where needed to operate the Service, process or recognise a store subscription, obtain requested film information, protect the Service, comply with law, or establish, exercise or defend legal claims.
We do not sell personal data or share it for third-party behavioural advertising. We do not disclose personal data to studios so that payment can influence recommendation rankings.
We may disclose information where legally required or in connection with a genuine corporate transaction, subject to appropriate confidentiality, security and legal protections.
8. International transfers
FLMPK is a UK company serving users in multiple countries. Some providers may store or access personal data outside the country where you live.
Where UK personal data is transferred internationally, FLMPK will use an adequacy regulation or another lawful safeguard, such as the UK International Data Transfer Agreement or UK Addendum, and complete any required risk assessment. Where Brazilian personal data is transferred internationally, FLMPK will use a mechanism permitted by the LGPD and ANPD rules.
You may ask for information about the safeguard used for a relevant transfer by contacting [email protected].
9. Retention
FLMPK keeps personal data only for as long as needed for the purpose for which it was collected, to operate and secure the Service, to comply with law, or to establish, exercise or defend legal claims.
Account, library and personalisation data is normally kept while the account is active and is then deleted or de-identified, subject to any justified retention.
Subscription and transaction records are kept for the period needed to administer entitlement, meet accounting or legal duties, resolve disputes and prevent fraud.
Optional analytics is kept only for the verified product period and in the privacy-minimised form described above. Consent and withdrawal records are kept only as long as needed to prove and respect the choice.
Support, complaint, rights-request, security and deletion records are kept for the period reasonably needed to manage the matter and demonstrate the outcome.
Data in isolated backups is not returned to ordinary use and expires under the verified backup cycle. If a backup is restored, applicable deletion instructions must be reapplied.
We review these periods and criteria regularly and delete or irreversibly de-identify personal data when the relevant purpose ends, subject to any justified legal, security or claims retention.
10. Account deletion
You can initiate account deletion in the app. You can also use the external Account and Data Deletion page or contact [email protected].
Account deletion and store-subscription cancellation are separate. Deleting the FLMPK account does not cancel an Apple or Google subscription. Cancelling a store subscription does not delete the FLMPK account.
We may ask for proportionate information to verify that you control the account. We will explain what was deleted, any information retained for a lawful reason, the reason and applicable period or criterion, and the status of instructions sent to relevant processors.
11. Your rights
Depending on where you live, you may have rights to:
- obtain confirmation and access to personal data;
- correct inaccurate or incomplete data;
- request deletion, restriction, anonymisation or blocking;
- receive portable data where the legal conditions apply;
- object to processing based on legitimate interests or direct marketing;
- withdraw consent at any time;
- obtain information about recipients and international-transfer safeguards;
- ask for review or information concerning qualifying automated decisions;
- complain to a data-protection authority; and
- not be discriminated against for exercising an applicable US state privacy right.
Rights are subject to legal conditions and exemptions. FLMPK will not require special legal wording. We may verify identity or an authorised representative proportionately and will respond within the period required by applicable law.
UK requests are normally answered within one calendar month. A lawful extension of up to two further months may be used for a complex request or multiple requests, with notice during the first month.
For Brazil, a simplified confirmation or access response must be provided immediately where applicable, and a complete access statement generally within 15 days. Other LGPD rights must be handled within the applicable legal period.
You may exercise a right at [email protected] or through the Privacy Choices page.
12. Children and younger users
FLMPK is a film-discovery service and does not host or stream films. The catalogue may include titles intended for mature audiences. Third-party streaming services control viewing access and their own age classifications, content warnings and parental controls.
FLMPK is not directed to children under 13 and does not knowingly create accounts for them. The minimum account age shown during onboarding and in the relevant app-store listing applies. Where a user has not reached the age of legal majority, a parent or guardian must review and agree to the Terms.
If you believe a child has provided personal data to FLMPK contrary to these rules, contact [email protected]. We will investigate and take appropriate action. This section does not remove any legal duty that applies where the Service is likely to be accessed by children or adolescents.
13. Security
FLMPK uses proportionate technical and organisational measures intended to protect personal data. No service can guarantee absolute security. Please use a strong, unique password and tell us promptly if you believe your account or personal data may have been compromised.
14. Complaints
Contact [email protected] with the subject “Privacy complaint”. You do not need legal wording. We will record and acknowledge the complaint, investigate it without undue delay, keep you informed where the investigation continues, and provide a clear outcome. Where UK data-protection complaint rules apply, we will acknowledge it within 30 days.
UK users may complain to the Information Commissioner’s Office at ico.org.uk. Brazilian users may petition the Autoridade Nacional de Proteção de Dados at gov.br/anpd after using the applicable controller channel. US users may contact the relevant state attorney general or other competent regulator.
15. Changes to this Notice
We may update this Notice when the Service, providers or law changes. We will show the effective date and give appropriate notice of material changes.
FLMPK Ltd
Company number 17350510
Contact: [email protected]