Privacy Policy
Last updated: 5 July 2026
Baruk Labs ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This policy explains what we collect, how we use it, and the choices you have. It is written to align with South Africa's Protection of Personal Information Act ("POPIA") and, where applicable, the EU/UK General Data Protection Regulation ("GDPR").
The short version: we collect the little we need to run your account and subscription. We do not collect a record of what you watch, and we never store subtitle text. Filtering happens for you — not for our files.
1. Information we collect
Account information. When you sign up, we collect your email address and, if you sign in with Google, basic profile details provided by Google's login. Authentication is handled through our provider, Supabase.
Subscription information. If you subscribe, your payment is processed by our reseller and Merchant of Record, Paddle.com. Paddle collects and processes your payment details; we receive confirmation of your plan status and limited billing information, but we do not store your full card number.
Waitlist information. If you join a product waitlist, we collect the email address you provide so we can notify you at launch.
Optional Google Drive access. If you choose to sync your subtitle library, we access only the files in your own Google Drive that the feature creates or that you select. We do not read the rest of your Drive.
Technical information. Like most online services, our servers automatically log basic technical data (such as IP address, browser type, and timestamps) for security and reliability.
2. What we deliberately do not collect
To protect both your privacy and content copyright, the Services keep only derived filtering data (such as timing markers and flagged-word data keyed to a title). We do not store subtitle text, and we do not keep a history of the specific shows or movies you watch tied to your identity.
3. How we use your information
- To create and manage your account and profiles;
- To provide, maintain, and improve the filtering Services;
- To process subscriptions and confirm your plan (via Paddle);
- To respond to support requests and send essential service messages;
- To notify you about a waitlisted product, if you asked us to;
- To keep the Services secure and to comply with legal obligations.
4. Legal basis for processing
We process your information where it is necessary to perform our contract with you (providing the Services), where you have given consent (such as waitlist emails), where we have a legitimate interest (such as security and service improvement), and where we must comply with the law.
5. How we share information
We do not sell your personal information. We share it only with service providers who help us operate, under appropriate safeguards:
- Paddle.com — payments and Merchant-of-Record billing;
- Supabase — account authentication and database hosting;
- Google — optional sign-in and optional Drive library sync;
- Subtitle and metadata providers — to retrieve subtitle data you request and optional artwork;
- Our hosting provider — to run the Services.
We may also disclose information if required by law or to protect our rights and users.
6. International transfers
Some of our providers process data outside South Africa. Where personal information is transferred across borders, we rely on providers that offer a comparable level of protection, consistent with POPIA and, where relevant, GDPR safeguards.
7. Retention
We keep personal information only as long as needed to provide the Services and to meet legal, accounting, or reporting requirements. When you close your account, we delete or anonymise your personal information within a reasonable period, except where we must retain it by law.
8. Security
We use reasonable technical and organisational measures to protect your information, including access controls and encryption in transit. No system is perfectly secure, but we work to safeguard your data and to limit what we collect in the first place.
9. Your rights
Subject to applicable law, you have the right to access the personal information we hold about you, to correct or delete it, to object to or restrict certain processing, and to withdraw consent. Under POPIA you also have the right to lodge a complaint with the Information Regulator of South Africa; under GDPR you may complain to your local supervisory authority. To exercise your rights, contact us at [email protected].
10. Children
Our Services are designed to help families, but accounts and subscriptions are intended for adults. We do not knowingly collect personal information directly from children. Parents and guardians are responsible for supervising children's use of the Services within the household.
11. Cookies and local storage
We use a minimal amount of cookies and browser local storage to keep you signed in and to remember your preferences. We do not use them for third-party advertising.
12. Changes to this policy
We may update this policy from time to time. We will change the date above and, for material changes, provide additional notice where appropriate.
13. Contact us
For any privacy question or request, contact our Information Officer at [email protected].
Baruk Labs is a sole proprietorship operated by Herman Myburgh, South Africa, who is also the Information Officer for POPIA purposes. [Business/contact address to be added.]