Privacy Policy
Last updated: 22 July 2026
This policy covers the Rate iOS app and the Flare web app, made by Hit Space LTD ("we", "us").
What we collect
- Account: your email address, name, and crew grade.
- Calculations: your shoots and days. They live on your device; cloud features (backup, sharing) also store them on our servers.
- Subscriptions: payment is processed by Apple. We use RevenueCat to manage subscription status and receive transaction records, never your card details.
- Analytics: product analytics (PostHog, processed in the EU) and crash reports (Sentry), including device type, OS version and app version.
We do not collect your location.
Who we share it with
Firebase (authentication and data storage), RevenueCat (subscriptions), PostHog (analytics), Sentry (error reporting), Apple (payments) and Resend (Flare emails) process data on our behalf under their own privacy policies. Beyond that, we disclose information only if the law requires it or as part of a sale or merger of the business.
Flare
Flare alerts are matched using your crew grade, and we record when a flare has been shown in your app. When you respond to a flare, a copy of your contact card at that moment (name, grade, photo, phone, email, diary service, profile links) is shared with the production user who posted it. Later profile changes do not update responses you have already sent, and production users can change only your booking status, never your details.
For production accounts we collect your name, email and production company, verify accounts against APA member domains and vouches (vouch records are kept), and store the flares you post and any moderation records. Vouch invitations are sent by email; recipients can opt out.
Your data
Delete your account any time in the app’s settings: your account and calculation data are deleted from our systems. Responses you have sent via Flare remain with that production’s records; ask us to remove one. Apple and RevenueCat keep transaction records for financial and legal purposes, and you can ask us to delete analytics data linked to you.
The Application is not for children under 13. If a child has given us information, contact us and we will delete it.
We are a UK company: your data is handled under UK data protection law, with safeguards where providers process it outside the UK. We use encryption in transit; no system is perfectly secure.
Changes
We may update this policy. Continued use of the Application after changes are posted constitutes acceptance.