Cue
Privacy Policy
Cue is a recommendation product, which means the data it holds is a record of your taste. This page says exactly what is collected, who it reaches, and how to delete it.
Last updated 11 August 2026
The short version
- You can use Cue without an account. Most of it works signed out.
- If you make an account, Cue stores your email address and the titles you save or mark as watched. That is the product.
- What you type into the mood search is sent to Anthropic and Voyage AI to be interpreted. It is not used to train their models.
- Cue does not sell your data, and there is no advertising on it.
- You can delete your account and everything attached to it at any time, from your account page.
Who we are
Cue is operated from the United Kingdom. For anything in this policy, including a request to access or delete your data, write to hello@cue.app. For UK GDPR purposes we are the data controller for the personal data described here.
What Cue collects
If you are signed out
- A random identifier in a cookie (
cue_aid). It is a random number and nothing else — no name, no profile. It exists so the daily limit on AI mood searches can be yours rather than shared with every other visitor. See the Cookie Policy. - Your IP address, held only as a counter key for that same limit, and only for the rest of the day. It is not stored alongside anything else about you.
If you have an account
- Your email address and a hashed password, handled by Supabase Auth. We never see your password.
- Your watchlist and watched history — which titles you saved, and which you marked as watched.
- Taste signals — a small record of four kinds of action (saving, completing, and two others) used to understand what you like. This is what future personalisation will be built on.
Either way
- Product analytics — which pages and features are used, via PostHog. This runs only if you accept analytics cookies. It is off until you do.
- Error reports — when something breaks, a stack trace goes to Sentry so we can fix it. Search text is stripped out before it is sent, and we do not record your screen.
Mood search, and the two companies that see it
When you describe an evening in your own words, that sentence is sent to two providers so it can be understood:
- Anthropic — to work out what you actually asked for (a runtime limit, a medium, a mood) and to write the line explaining each recommendation.
- Voyage AI — to turn the sentence into a numerical representation so Cue’s catalogue can be searched by meaning rather than keywords.
Neither provider uses this text to train models, and neither is sent your name, your email or your account identifier — only the sentence. If that is not a trade you want to make, the rest of Cue works without it: browsing, search, title pages, collections and your watchlist never touch either provider.
Why Cue is allowed to hold this
| What | Lawful basis (UK GDPR) |
|---|---|
| Your account, watchlist and history | Performance of a contract — it is the service you signed up for |
| Quota cookie and IP counters | Legitimate interests — preventing abuse and keeping the service available and affordable for everyone |
| Error reports | Legitimate interests — keeping the service working |
| Product analytics | Consent — and only after you give it |
| Mood search text | Performance of a contract — it is the feature you asked to use |
Who Cue shares data with
These are service providers acting on our instructions. Cue does not sell personal data and does not share it for advertising.
| Provider | What it does | What it sees |
|---|---|---|
| Supabase | Database and sign-in | Your email address, hashed password, watchlist and history |
| Vercel | Hosting | Standard server logs, including IP address |
| Anthropic | Understanding your mood search and writing the reason lines | The sentence you typed. Not your name, email or account id |
| Voyage AI | Turning your sentence into a searchable representation | The sentence you typed. Not your name, email or account id |
| PostHog | Product analytics — only with your consent | Pages visited and features used |
| Sentry | Error reporting | Stack traces, with search text stripped out before sending |
| Upstash | Daily limits on AI searches | A counter keyed to your account, cookie id or IP, expiring daily |
| Brevo | Account emails — confirmation and password resets | Your email address |
Some of these providers operate outside the UK. Where they do, transfers are covered by the provider’s standard contractual clauses or an equivalent safeguard.
How long Cue keeps it
- Account data — until you delete your account, at which point it is removed.
- Quota counters — they expire automatically just after midnight UTC each day.
- Error reports — 90 days.
- Analytics — retained by PostHog under their standard retention.
Your rights
Under UK GDPR you can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, object to processing based on legitimate interests, and withdraw consent for analytics at any time (the Cookie Policy explains how).
Deletion and export are self-service: your account page has both, and deletion is immediate and permanent. If you would rather ask a person, write to hello@cue.app.
If you think Cue has handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first.
Children
Cue is not intended for children under 13, and accounts are not knowingly created for them. If you believe a child has an account, write to us and it will be removed.
Changes
If this policy changes in a way that affects you, the date at the top changes and the change is announced in the product before it takes effect.