Last updated: October 17, 2026
LaterRex is built with privacy as a core value. We collect as little data as possible, and we never sell your information or share it with advertisers or data brokers.
Where your library lives: LaterRex stores your library on our own servers rather than in your private iCloud. That is what syncs it across your devices and powers the web app at app.laterrex.com. The sections below explain exactly what that means, what we store, and the promises we make about it.
LaterRex is operated by LaterRex OOD (ЛейтърРекс ООД), a limited liability company registered in Bulgaria (UIC 208801938), with its registered seat at Iliya Enchev 20, Plovdiv, Bulgaria. LaterRex OOD is the data controller responsible for your personal data. For any privacy-related questions, contact us at [email protected].
LaterRex uses Sign in with Apple, and the web app at app.laterrex.com also offers Sign in with Google. When you sign in, we receive a unique user identifier from Apple or Google and create a LaterRex account for you on our servers. Along with that identifier, we store a fingerprint of each sign-in session (never the session token itself), the kind of device it's on ("iPhone", "iPad", or "web"), and the cryptographic keys iOS uses to prove that requests come from a genuine copy of the app (Apple's App Attest). We do not receive or store your Apple ID or Google password.
With Sign in with Apple you may choose to share or hide your email address. Sign in with Google shares the email address on your Google account, and whether Google has verified it. Either way, we never store your email address itself. We keep only a scrambled fingerprint of it (an HMAC hash) that lets us recognize the same email if you sign in again, but can't be reversed back into the address. When the address is verified, that fingerprint is also how a first sign-in with one provider finds a LaterRex account you already made with the other using the same address, so you end up with one account rather than two. If you use Apple's private relay, we never see your real email at all.
On the web, the Sign in with Apple and Sign in with Google buttons load from Apple's and Google's own servers when a page that offers them opens, such as the sign-in screen, so Apple or Google can see that you opened that page. What they collect there is covered by their own privacy policies.
Your personal library is everything you track in LaterRex: the media you save, your watch and read progress, episode history, your completion journal, tags, the people you credit for recommendations, custom posters, and your settings.
Your library is stored on LaterRex's own servers, which sync it across your devices and power the web experience. Earlier versions of the app kept it in your private iCloud account instead (Apple's CloudKit). When you update, your library moves across to our servers and the app stops using iCloud for it.
Custom posters can be an image you pick from your own photo library. If you choose one, that image is resized on your device and stored with your library on our servers. We never read your photo library. You pick one image at a time using Apple's own picker, and nothing else is accessed.
An earlier version of this policy said we couldn't read your library even if we wanted to. That was true while it lived only in iCloud. Now that it lives on our servers it's no longer technically true, so here is the promise we make instead:
Some features involve data that is visible to other LaterRex users:
This data is stored on LaterRex's own servers. Earlier versions of the app stored it in Apple's CloudKit public database instead; we deleted that copy on October 11, 2026. We access public data to provide social features and to moderate reviews for inappropriate content.
Your activity shows in the feeds of your friends and the people who follow you, and on your profile for anyone who can open it. You can control this in the app's privacy settings: turn off Show Activity, make your profile private so it drops out of search and only people you're connected with can open it, stop people from following you or sending friend requests, or block specific users.
Under the GDPR, we process your data on the following bases:
LaterRex may request the following permissions, all of which are optional:
You can revoke any of these permissions at any time in iOS Settings.
No third-party analytics or tracking. LaterRex uses no analytics frameworks, tracking pixels, advertising identifiers, or third-party SDKs that collect data, and we never track you across other apps or websites. Our own server keeps a few basics so the service works and so we can see how it's used: each time the app opens while you're signed in, it reports its version, how many items it holds and whether notifications are turned on for LaterRex, and we record whether you've seen or dismissed in-app announcements. If you buy LaterRex Pro, the app also tells our server which plan you have (monthly, yearly or lifetime). Apple takes the payment, so we never see your payment details. We use these to keep things working, like spotting a library that didn't sync, and as overall numbers, like how many people were active this week or how many chose each plan.
Apple assigns your device a token so our server can reach it: to deliver alerts like friend requests, recommendations and asks if you enable notifications, and to tell the app quietly when your library changed on another device. An alert's text, such as a friend's username and a title, passes through Apple's push service on its way to you. Release-day and new-episode reminders are scheduled on your device and don't involve our server. We do not use the token for advertising or tracking. You can disable notifications at any time in iOS Settings.
If you opt in to sharing diagnostics with app developers (via iOS Settings > Privacy & Security > Analytics), Apple may send us crash reports when something goes wrong. These contain technical information like device model, OS version, and crash logs. They do not contain personal data. This is controlled entirely by your iOS settings and you can turn it off at any time.
LaterRex gets media information (titles, posters, descriptions) from services like TMDB, Hardcover, IGDB and Apple Music through our own server, so these providers never learn who you are; they receive only what a lookup needs, like a search term. A few requests go straight from your device to the provider instead: music and podcast search, artwork and previews come from Apple, a podcast's description can come from its publisher's feed, and a Steam import shows Steam profile pictures. Those providers see a request from your device, as any website would, but we never send them your LaterRex identity. (Our server itself also stores your account and library data, as described above; the media providers never receive any of it.)
Our backend, database, and file storage run on Cloudflare, which collects standard aggregate analytics (request counts, response status codes, countries) as part of its infrastructure, and adds a small script to our websites that helps tell people from bots. Our servers also keep technical logs of requests and errors, which can include your account ID or a search you made, so we can keep the service running and fix problems; Cloudflare keeps these for up to a week. We use your IP address to limit abuse, such as repeated sign-in attempts, and keep it apart from your account.
Our own code sets no cookies; Cloudflare's bot check may set one of its own. The web app keeps your sign-in session in your browser's local storage, along with a few preferences such as your theme and which announcements you've seen, and keeps an unsent review as a draft until you close the tab. Signing out removes the session. laterrex.com itself stores nothing in your browser.
Your library is kept on our servers for as long as you use the app. Public data (reviews, ratings, profile) is kept until you delete it or delete your account. When you delete your account, everything we store about you is deleted with it, including the server copy of your library, with these exceptions:
Your data is processed through our backend and data storage on Cloudflare. Notifications pass through Apple's push service, and signing in goes through Apple or Google. Earlier versions of the app also used Apple's iCloud (CloudKit): we deleted the public copy on October 11, 2026, and any private copy an earlier version left stays in your own iCloud account. Apple, Cloudflare and Google are US-based companies that participate in the EU-US Data Privacy Framework and use Standard Contractual Clauses to ensure adequate data protection for transfers outside the EU.
You can delete your account at any time from the app's settings, or from Settings in the web app. This permanently removes your public data (profile, ratings, reviews, social connections), your account and the copy of your library on our servers, and local data, with the few exceptions listed under Data Retention. When you delete your account in the iPhone app, we also ask Apple to revoke LaterRex's Sign in with Apple access. If you delete it on the web, or that request doesn't go through, you can remove LaterRex yourself under Sign in with Apple in your Apple account settings. Sign in with Google gives us no token to revoke, so Google may keep listing LaterRex among the apps connected to your Google Account until you remove it there.
Under the GDPR, you have the right to:
To exercise any of these rights, contact us at [email protected].
LaterRex is not meant for children under 13, and we do not knowingly collect personal information from them. In the EU, if you are under the age at which your country lets you agree to online services yourself (between 13 and 16; 14 in Bulgaria), you need a parent's or guardian's permission to use LaterRex.
If we make meaningful changes to this policy, we'll update this page and the date above.
Questions? Reach us at [email protected].