TL;DR
WeWatch stores your lists locally and in your iCloud. When you generate recommendations on the "For Us" tab, your list, your partner’s list, and your partner’s first name are securely sent through Cloudflare to OpenAI to generate a set of recommendations. OpenAI retains data related to these requests for up to 30 days under their policy. Your recommendations are briefly cached in Cloudflare (24 hours) to prevent duplicate requests and handle timeouts. Limited metadata—like your iCloud identifier for refresh tracking—is stored in Cloudflare and Cloudflare automatically logs standard request metadata (such as IP address, derived location and headers), all of which are deleted automatically within days.
We do not sell your data, share it for advertising, or use it for tracking beyond what’s necessary to operate the app.
1. What We Collect
- Your watchlist data (everything you add) is stored on your device and in your iCloud.
- When generating recommendations on the "For Us" tab, WeWatch sends your complete list (including titles, categories, rankings, start/completion dates, ratings, notes, and URLs), your partner's complete list data, and your partner's first name (so the model can reference them when explaining why an item is recommended) through a secure Cloudflare proxy to OpenAI. OpenAI may generate logs associated with these requests and retain them for up to 30 days for abuse monitoring or application state purposes.
- To manage usage and prevent abuse, two pairs are stored in Cloudflare KV:
- iCloud identifier (or device UUID if iCloud identifier is temporarily unavailable) → number of recommendation refreshes. Automatically deleted 8 days after your last time generating recommendations.
- iCloud identifier → time of last refresh. Automatically deleted 14 days after your last time generating recommendations.
- Cloudflare automatically logs standard request metadata (such as IP address, derived location and headers) for up to 3 days.
2. How It Works
- You and your partner each keep your own lists in iCloud and grant access to one another through iCloud to view each other’s lists.
- When you generate recommendations on the "For Us" tab, you must tap Generate Recommendations the first time. After that, recommendations refresh automatically every 7 days or can be refreshed manually. Each time recommendations are generated, your list, your partner’s list, and your partner’s first name are sent via Cloudflare to OpenAI as described above.
- The generated recommendation set is returned to your device and cached securely in Cloudflare for 24 hours using a unique request ID to handle timeouts, failures, or retries within that window. If you retry within that window and the previous response failed to load correctly in your "For Us" tab, the cached response will be reused instead of making another OpenAI call.
3. Data Retention and Deletion
- Cloudflare
- Standard request logs → deleted after 3 days
- Cached recommendation responses → deleted after 24 hours
- iCloud ID quota/refresh pairs → deleted after 8 and 14 days
- OpenAI
- Data used for generating recommendations → retained by OpenAI for up to 30 days for abuse monitoring, then automatically deleted
- iCloud and device
- You control all data stored there and can delete it anytime.
After you delete your app data (see below), any remaining data in Cloudflare or OpenAI is automatically removed under these timelines.
4. How to Delete Your Data
- On your iPhone: Settings → [Your Name] → iCloud → Manage Storage → WeWatchTogether → Delete Data from iCloud.
- Delete the WeWatch Together app from your device.
This removes your lists from both your device and iCloud. Any temporary data still held by Cloudflare or OpenAI is automatically deleted within their short retention periods.
5. Data Sharing
We do not sell your data or share it for advertising. We share limited data only with essential providers that make the app work:
- Apple – iCloud is used to store your data and connect to your WeWatch partner
- Cloudflare – secure request handling, caching, and rate-limiting
- OpenAI – generating recommendations in the “For Us” tab
No other third parties receive your data.
6. Your Rights
Depending on where you live, you may have rights to access, correct, delete, or object to processing of your data under laws like GDPR or CCPA. To make a request, email [email protected].
7. Security
All data is transmitted over HTTPS and stored via trusted services (Apple iCloud, Cloudflare, OpenAI). No system is perfect, so avoid storing highly sensitive info (e.g. financial or medical).
8. Questions or Feedback
For questions or feedback related to this policy or the app in general, please contact us by email at [email protected].
9. Changes to This Policy
We may update this policy from time to time. The newest version will always show the “Last updated” date above.