Legal

Privacy Policy

Privacy Policy

Effective June 5, 2026

In short

NextUp (operated by PD Labs) collects the account, profile, and activity data needed to run a social TV-tracking app. We don’t sell your data or track you across other companies’ apps. You control your privacy settings, and you can delete your account and data from the app at any time.

01

Who We Are

NextUp is a TV-tracking app with social features — you can follow shows, track what you’ve watched, write notes and ratings, build lists, and follow other people. NextUp is operated by PD Labs (“NextUp,” “we,” “us,” or “our”), based in the State of Washington, USA. For privacy-law purposes, PD Labs is the data controller of the personal information described in this policy.

This Privacy Policy explains what we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It applies to the NextUp iOS app and the next-up.app website.

02

Information We Collect

Information you provide

  • Account information — your email address, and, if you sign in with email, a password (stored hashed by our authentication provider, never by us in plain text). If you use Sign in with Apple, we receive an Apple-issued identifier and, depending on your choice, your name and a real or Apple-relayed email address.
  • Profile information — your username/handle, display name, optional profile photo, and optional bio.
  • Your content and activity — shows you follow, your watch history, ratings, notes, lists, reactions (likes), and your following/followers relationships.
  • Preferences — genres, streaming providers, watch region, notification settings, and privacy settings.
  • Communications — messages you send us (for example, support requests) and reports you submit about other users or content.

Information collected automatically

  • Usage and product-interaction data — how you navigate and use features, collected via Firebase Analytics to help us understand and improve the app.
  • Diagnostic and crash data — crash reports and error diagnostics, collected via Sentry to keep the app stable.
  • Device and push tokens — a push notification token (and associated device identifiers) so we can deliver the notifications you’ve enabled.
  • Technical/log data — information such as IP address, device type, operating system version, and timestamps, generated when your app or browser connects to our servers.

We do not track you across other companies’ apps and websites, and we do not use the App Tracking Transparency framework to do so. Our app’s privacy declarations are reflected in its App Privacy details on the App Store.

Information from third parties

When you use Sign in with Apple, Apple provides the identifiers described above. We also display TV-show metadata and images from The Movie Database (TMDB); that content is about shows, not about you.

03

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and operate your account and the app.
  • Power social features — public profiles, lists, follows, and reactions — according to your privacy settings.
  • Send the notifications you’ve enabled (e.g. new episodes of shows you follow) and respond to you.
  • Personalize your home feed and recommendations.
  • Keep NextUp safe — review reports, enforce our Terms, and prevent abuse, spam, and fraud.
  • Understand usage and fix problems through analytics and crash diagnostics.
  • Comply with legal obligations and protect our legal rights.
04

How Information Is Shared

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in these ways:

With other users

NextUp is social, so some information is visible to others by design. Your username, display name, photo, and bio are part of your public profile. Lists you mark public, and activity you’ve set to “Everyone” or “Followers,” are visible to other users — including via shareable links such as next-up.app/user/… and next-up.app/lists/…. You control much of this in Privacy settings (see below).

With service providers

We share information with vendors who process it on our behalf, under contracts that require them to protect it and use it only to provide their services to us:

Third parties who process your data
Google Firebase
Authentication, database (Firestore), file storage, push notifications, and product analytics. See Google’s Privacy Policy.
Sentry
Crash reporting and error diagnostics, used only to keep the app stable.
Apple
Sign in with Apple authentication and Apple Push Notification service.
TMDB
Provides show metadata and images. We send show identifiers, not your personal information.

For legal and safety reasons

We may disclose information if required by law, or where we believe in good faith it is necessary to enforce our Terms, investigate fraud, or protect the safety, rights, or property of our users, the public, or us.

Business transfers

If PD Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will require the recipient to honor this Privacy Policy.

05

Your Choices and Controls

  • Privacy settings — make your account private, and set who can see your watch history, library, ratings, and notes (Everyone / Followers / Only Me), in Settings → Privacy.
  • Blocking — block another user to hide your profile from them and theirs from you, and to remove any follow relationship between you.
  • Notifications — turn push notifications on or off per type in the app, or system-wide in iOS Settings.
  • Delete your watch history— clear all watch history from Settings → Data & Privacy, without deleting your account.
  • Delete your account— permanently delete your account and associated data from Settings → Data & Privacy, as described below.
06

Data Retention and Deletion

We keep your personal information for as long as your account is active, and as needed to provide the app. When you delete your account in the app, we permanently delete your profile, username, followed shows, watch history, lists, ratings, notes, reactions, and your follower/following relationships. This cannot be undone.

We may retain limited information after deletion where necessary to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements — for example, records of safety reports, and analytics or diagnostic data held in aggregated or de-identified form that is no longer linked to you. To request deletion if you cannot access the app, email support@next-up.app.

07

Data Security

Your data is stored using Google Firebase / Firestore, and we apply appropriate technical and organizational measures — including encryption in transit, access controls, and app attestation — to protect it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.

08

International Users and Data Transfers

NextUp is operated from the United States, and our service providers may process your information in the United States and other countries. If you access NextUp from outside the U.S., you understand your information will be transferred to and processed in the U.S., where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for these transfers.

09

Your Rights in the EEA and UK (GDPR)

If you are in the European Economic Area or the United Kingdom, you have rights over your personal data, and we process it on these legal bases:

  • Contract — to create your account and provide the features you ask for.
  • Legitimate interests — to keep NextUp secure, prevent abuse, and improve the app, balanced against your rights.
  • Consent — for push notifications and any optional data uses; you can withdraw consent at any time.
  • Legal obligation — where the law requires us to process or retain data.

You have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, use the in-app controls or email support@next-up.app. You also have the right to lodge a complaint with your local data protection authority.

10

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended. In the past 12 months we have collected the categories of personal information described in Information We Collect — identifiers, account and profile information, internet/app activity, and approximate location inferred from IP address — for the purposes described in this policy.

We do not sell or share your personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information beyond what is necessary to provide the app.

You have the right to:

  • Know what personal information we collect and how we use it.
  • Access a copy of your personal information.
  • Delete your personal information.
  • Correct inaccurate personal information.
  • Not be discriminated against for exercising any of these rights.

To exercise these rights, use the in-app controls or email support@next-up.app. We will verify your request through your account.

11

Children’s Privacy

NextUp is not directed to children under 13, and you must be at least 13 to use it. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, email support@next-up.app and we will delete it promptly.

12

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective” date above and, where appropriate, notify you in the app. Your continued use of NextUp after an update means you accept the revised policy.

13

Contact Us

Questions about this policy or your data? We’re happy to help.

NextUp is operated by PD Labs, based in the State of Washington, USA.