Privacy Policy

Last updated: June 6, 2026

Effective date: June 6, 2026

1. Overview

This Privacy Policy describes how Hey Oscar Inc. ("Oscar", "we", "our") collects, uses, discloses, and protects your personal information when you use the Oscar mobile application (the "Application").

Oscar is a mood-based film and television series recommendation companion, primarily intended for audiences in Quebec and Canada. We are committed to protecting your privacy in accordance with Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

By using the Application, you consent to the practices described in this policy.

2. Privacy Officer

In accordance with Law 25, we have designated a person responsible for the protection of personal information within our organization:

• Title: Privacy Officer, Hey Oscar Inc.
• Email: demandeaoscar@gmail.com
• Mailing address: Montreal, Quebec, Canada

You may contact this person for any questions, access requests, correction requests, or complaints regarding your personal information.

3. Information We Collect

3.1 Information You Provide

Account information

• email address;
• display name;
• authentication identifier (including via Apple or Google);
• profile photo (optional).

Personalization information

• preferred genres;
• selected or favourite films and series;
• onboarding questionnaire responses;
• emotional and mood preferences;
• viewing platforms used;
• personal list ("My List");
• liked or disliked films or series;
• recommendation history.

Contextual information

• declared mood;
• available time;
• session-specific temporary preferences.

Content you generate

• messages exchanged with Oscar Chat;
• open-ended responses, notes, or comments voluntarily submitted.

3.2 Automatically Collected Information

• Usage data: in-app interactions, recommendations viewed, features used, language.
• Technical data: device type, operating system, technical identifiers, diagnostic data and crash reports. Sentry is used for crash reporting and diagnostics.

3.3 Information from Third Parties

• When you sign in via Apple or Google, we receive the basic information authorized by those services (identifier, email address).

We do not collect precise location data, contacts, photos, or microphone access unless explicitly indicated in the Application.

4. Purposes of Collection

We use your personal information for the following purposes:

• Creating and managing your account;
• Personalizing your film and series recommendations based on your mood and preferences;
• Maintaining your personal list and Application state;
• Improving and debugging the Application;
• Ensuring security and preventing fraud;
• Communicating with you about the service;
• Fulfilling our legal obligations.

We collect only the information necessary for these purposes.

5. Basis of Consent

We collect and use your personal information based on your consent, which you grant by creating an account and using the Application. You may withdraw your consent at any time (see section 9), which may limit your access to certain features.

6. Disclosure to Third Parties and Service Providers

We do not sell your personal information. We do, however, engage third-party service providers who act as subcontractors on our behalf:

Each provider has access only to the information necessary to perform its task and is bound by confidentiality and security obligations.

Subscription purchases (Oscar+) are processed by the Apple App Store or Google Play. We do not receive your full payment information (card number, etc.); this data is managed directly by the relevant platform.

7. Transfer of Information Outside Quebec

Some of our providers (notably Supabase, TMDB, and Sentry) host or process data outside Quebec, primarily in the United States.

In accordance with Law 25, before transferring your information outside Quebec, we conduct a privacy impact assessment to ensure that your information receives adequate protection. By using the Application, you acknowledge that your information may be processed abroad and may be subject to local laws.

8. Automated Processing and Recommendations

Oscar uses an internally developed recommendation and ranking algorithm. This algorithm matches your responses (mood, genres, preferences, selected films) with keywords and combines them with TMDB metadata and ratings to suggest relevant films and series. It does not use any third-party artificial intelligence service and does not analyze any data beyond what you provide in the Application.

The Oscar Chat feature (conversational companion) relies on this same internal algorithm. Messages you exchange with Oscar are processed according to rules and keywords defined by us; they are not transmitted to an external artificial intelligence service. Your messages may be retained to support the operation and improvement of the feature.

These recommendations are provided for entertainment purposes and do not result in any decision producing a legal effect or significantly affecting you. You may request information about the data used to generate a recommendation by contacting our Privacy Officer (section 2).

9. Your Rights

In accordance with Law 25 and PIPEDA, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate, incomplete, or ambiguous information;
• Withdraw your consent to the processing of your information;
• Request deletion of your account and your information;
• Obtain your information in a structured, commonly used technological format (portability);
• File a complaint with the Commission d'accès à l'information du Québec (CAI).

To exercise these rights, contact our Privacy Officer (section 2). We will respond within the timeframes required by law (generally 30 days).

10. Retention of Information

We retain your personal information for as long as your account is active or as necessary for the purposes described. When information is no longer needed, we destroy or anonymize it securely. Accounts inactive for more than 24 months are anonymized. Account deletion results in the destruction of personal information within 30 days.

11. Security

We implement reasonable security measures — technical, physical, and administrative — to protect your information, including encryption in transit, secure authentication, and restricted access. No system is infallible; we cannot guarantee absolute security.

In the event of a privacy incident presenting a risk of serious harm, we will notify you and the Commission d'accès à l'information in accordance with Law 25.

12. Cookies and Tracking Technologies

The Application may use local storage technologies and technical identifiers to ensure its operation and measure its use. Oscar uses Sentry for diagnostics and crash detection. Oscar does not display advertising.

13. Family Profiles and Minors

Oscar allows the creation of family profiles so that each household member receives recommendations tailored to their unique profile. To protect children's privacy, we apply the following model:

• The account holder must be at least 14 years old. Account creation is reserved for persons aged 14 and over.
• Profiles for children under 14 are created and managed by a parent or guardian within their own account. Children under 14 do not create accounts independently.
• By creating a profile for a child, the parent or guardian consents to the collection and use of that profile's information for the purpose of personalizing recommendations, in accordance with this policy.

We limit the collection of information relating to minor profiles to what is strictly necessary for the operation of recommendations. In accordance with Law 25, the privacy settings of a minor's profile are set to the highest level of protection by default, and we do not use a minor's information for marketing purposes.

The parent or guardian may at any time access, modify, or delete a child's profile and associated information by contacting our Privacy Officer (section 2) or directly within the Application.

We do not knowingly collect information from a child under 14 outside the parent-managed profile model. If you believe a child has provided us with information without parental supervision, please contact us so we can delete it.

14. Third-Party Data Sources

Film and series data is sourced from The Movie Database (TMDB). Oscar uses the TMDB API but is neither endorsed nor certified by TMDB.

15. Changes to This Policy

We may update this policy from time to time. Any significant changes will be communicated to you within the Application or by email. The "last updated" date at the top of the document indicates the version in effect.

16. Contact Us

For any questions regarding this policy or your personal information:

• Privacy Officer: Hey Oscar Inc.
• Email: demandeaoscar@gmail.com
• Address: Montreal, Quebec, Canada

You may also file a complaint with the Commission d'accès à l'information du Québec: www.cai.gouv.qc.ca