Privacy Policy

Effective August 21, 2026

This policy explains how Oceano AI (“Oceano AI,” “we,” or “us”) collects, uses, shares, stores, and deletes information when you use Graded2Day.

Information we collect

If you tap Use My Location, iOS uses your location once to determine your city, and the U.S. Census Bureau geocoder identifies its MSA for local leaderboards. Graded2Day stores only the selected city and MSA; it does not store or send precise coordinates to our servers. You can search for a city instead and decline location permission without losing access to the app. We do not collect contacts, payment-card data, or the contents of your photo library. A photo is uploaded only when you choose it as your profile image.

How we use information

We use information to operate accounts and social features, show your content to the audiences you select, provide catalog search and discovery, provide notifications, prevent spam and abuse, investigate reports, secure the service, provide support, comply with law, improve reliability, measure product use, and, if enabled later, support advertising as described below.

AI-assisted discovery

Graded2Day uses OpenAI’s API to help generate candidate titles for “similar” media recommendations and to choose from a server-generated set of catalog candidates for weekly discovery features. For similar-media requests, we send media metadata such as the media type, title, creator, genre, release year, season number, and catalog market. Weekly curation sends catalog-candidate metadata and recent selection history. We do not send your name, email address, Graded2Day account identifier, profile photo, ratings, notes, lists, or social graph to OpenAI for these features. Model suggestions are checked against the applicable catalog before they are shown as catalog items.

Our OpenAI Responses API requests set store to false. OpenAI states that API data is not used to train its models by default unless the API customer opts in, but it may retain abuse-monitoring logs containing inputs and outputs for up to 30 days unless different data controls apply. See OpenAI’s API data-controls documentation.

Service providers and catalog sources

We use Amazon Web Services for authentication, databases, private file storage, email, backups, and app infrastructure; PostHog for product and website analytics, feature flags, experiments, crash reporting, and the masked signup session replays described above; OpenAI for the AI-assisted discovery described above; Google Mobile Ads and User Messaging Platform only if the currently disabled ads feature is enabled later; Apple Maps and Core Location for city search and the optional one-time location lookup; and the U.S. Census Bureau geocoder to match a city coordinate with its current official MSA. If you choose Google or Apple sign-in, that provider processes the authentication request and shares account identifiers such as your email address with Graded2Day.

Music catalog information comes from Apple Music, podcast and podcast-episode metadata comes from Taddy, and movie and television catalog information comes from The Movie Database (TMDB). Catalog searches and media lookups may send search text, media identifiers, and market information to the applicable catalog provider through our backend; they do not include your Graded2Day account identifier, ratings, notes, lists, or social graph. Taddy search responses are cached and normalized podcast metadata may be retained so saved items can be shown without another provider request; Graded2Day does not request or store podcast audio or transcripts from Taddy. When exact Spotify destination resolution is enabled, our backend may send an ISRC, UPC, or artist name to Spotify; it does not send a Graded2Day user identifier, rating, note, list, social graph, or Spotify account credential. Spotify search links remain available without a Spotify integration. Providers receive technical request information such as IP address as part of normal internet operation. We do not sell personal information.

Advertising

Graded2Day can show clearly labeled native ads through Google Mobile Ads when its server-side ads feature is enabled. That feature is currently disabled. If it is enabled later, ads may appear in the Home feed and eligible music search results. We do not send your Graded2Day posts, ratings, lists, notes, social graph, Apple Music or Taddy catalog searches, Spotify-link lookups, catalog identifiers, artwork, or inferred interests to Google for ad targeting.

If ads are enabled later, Google and its advertising partners may process advertising data, including device and advertising identifiers, IP address, approximate location, ad interactions, performance information, and diagnostics, to deliver, measure, prevent fraud in, and improve ads. Where required, we will use Google’s consent tools to ask for consent and provide privacy choices. This release does not request App Tracking Transparency permission or make an advertising identifier available for personalized advertising. Any future use of that identifier will require the iOS permission first, and declining it will not remove access to Graded2Day. Google’s use of data is also governed by its Privacy Policy and partner-sites information.

Sharing and visibility

Your full name, username, profile, profile pins, lists, ratings, notes, comments, and topic messages may be visible to other Graded2Day users as indicated in the app. Uploaded profile photos are stored in a private bucket and delivered only through an authenticated Graded2Day API request. A private-account photo is available only to the account owner and accepted friends; a public-account photo is available to signed-in users. Reports and block lists are private. We disclose information to service providers acting for us, when needed to protect users or the service, or when required by law.

Retention and deletion

You can remove your profile photo independently in Settings. When the removal succeeds, the active object and all stored object versions are purged; replacing a photo also purges superseded versions. If storage cleanup is interrupted, the database reference is removed first so the photo is no longer available through Graded2Day, and the app reports the error so the request can be retried. You can delete individual notes and comments; their text is irreversibly replaced with “[deleted]” while the author name, timestamp, and reply structure remain.

Masked signup session replays are retained for up to 30 days and can be deleted sooner when needed for privacy or compliance. You can request full account deletion in Settings. The account is locked immediately and cleanup completes within 24 hours. Personal profile data, uploaded files and their stored versions, content, relationships, reactions, notifications, and device tokens are removed. User-uploaded photos are excluded from new backups. Encrypted database backup recovery points may retain deleted records for up to 35 days; they are not available in the live app and expire automatically. We may retain anonymized thread tombstones and moderation or security records for up to 90 days when necessary to protect the service or meet legal obligations.

Your choices

You can edit your profile, remove your profile photo, delete your content, block or unblock users, control notification permission in iOS Settings, and delete your account in Graded2Day Settings. If ads are enabled later and Google requires a privacy-options form, use Settings → Safety & Privacy → Ad privacy choices to review or change those choices. If a future release requests App Tracking Transparency permission, you will also be able to change that permission in iOS Settings. You may contact us to request access, correction, or other privacy assistance available under applicable law.

Security, children, and international processing

We use administrative, technical, and organizational safeguards, but no service can guarantee absolute security. Graded2Day is not directed to children under 13. Information may be processed in the United States and other locations where our providers operate.

Changes and contact

We may update this policy and will post the effective date here. Material changes may also be communicated in the app. Contact Oceano AI at support@graded.today.