Privacy Policy

Last updated: 26 May 2026

GoFilm HK ("we", "us") respects your privacy. This policy explains what data the app handles and how. It is governed by the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.

How you can use GoFilm HK

You can use GoFilm HK in two ways:

• Without signing in (guest mode): browse cinemas, films, and showtimes. We don't ask for your name or email. Your saved cinemas and watchlist are kept on your device only.
• With an account: sign in with your email address or with Apple. This lets you sync your saved cinemas and watchlist across devices, set up alerts when films release or get new showtimes, and optionally receive a weekly email digest.

Accounts are entirely optional. The app is fully usable without one.

What we collect when you sign in

If you create an account, we store:

• Your email address — to authenticate you and to send you alerts and digests if you've opted in. Stored encrypted at rest.
• Your Apple user identifier (if you sign in with Apple) — a stable identifier Apple provides so we can recognise you on future sign-ins. We never receive your real Apple ID or password.
• Sign-in activity timestamps — when you most recently signed in. Used for security and account management.
• Your saved cinemas, watchlist, and alert preferences — the things you've added in the app, so they sync across your devices.
• Your email opt-in preference — whether you've chosen to receive the weekly digest.

We don't ask for your name, location, payment details, or any other personal information.

What we collect when the app talks to our server

When the app fetches cinema and film data, our server logs the standard information any web server records: your IP address, the time of the request, and the URL path. We use these logs solely to monitor for errors and abuse. They're retained for 30 days and then deleted.

Optional location use

If you grant the app permission to use your location, it's used only to sort cinemas by distance from you. Your location stays on your device. It is never transmitted to our server or to anyone else.

What we don't do

• We don't sell or share your data with anyone.
• We don't show advertisements.
• We don't use third-party analytics, crash reporting, or marketing SDKs.
• We don't track you across other apps or websites.
• We don't profile you for advertising purposes.
• We don't send marketing emails unless you've opted in to the weekly digest.

Who we share data with

We share data only as needed to run the service:

• Resend delivers our transactional emails (sign-in codes and, if you've opted in, the weekly digest). Your email address is passed to Resend for delivery. Resend's privacy policy is at resend.com/legal/privacy-policy.
• Apple handles Sign in with Apple. If you use Apple to sign in, Apple shares an identifier with us so we can recognise your account. Apple's privacy policy is at apple.com/legal/privacy.

We don't share data with anyone else.

Your rights under PDPO

You have the right to:

• Access the personal data we hold about you. The app's Account screen has a "Download my data" option that gives you everything in one file.
• Correct any inaccurate data — update your email or preferences in the app.
• Delete your account and all associated data. The app's Account screen has a "Delete account" option that removes everything immediately.

If you can't accomplish what you need within the app, email us at the address below and we'll help.

Data retention

• If you delete your account, your data is removed immediately.
• If your account is inactive but not deleted, we keep your data so the app continues to work when you next sign in.
• Server logs are retained for 30 days, then deleted.
• Sign-in codes (the 6-digit codes emailed to you) expire after 10 minutes and are deleted shortly after.

Where your data is stored

Our server is in the European Union. Personal data in your account (email address) is stored encrypted at rest. Sign-in codes and Apple identifiers are stored in standard form because they're either short-lived or already opaque identifiers.

Children

GoFilm HK is not directed at children under 13 and we don't knowingly collect data from them. If you believe a child has signed up, email us and we'll delete the account.

Changes

We'll update this page if our data handling changes. The date at the top reflects the most recent revision. If we make material changes, we'll notify signed-in users by email.

Contact

If you have questions about this policy, or want to exercise any of your PDPO rights, email contact@balsham.cloud.

Governing law

This policy and the app's data handling are governed by the laws of the Hong Kong Special Administrative Region, including the Personal Data (Privacy) Ordinance (Cap. 486).