Last updated: 19 October 2026
Consumed is an app run by its administrator. Anyone can create an account. It is not a business, shows no ads and sells nothing. This page explains what the app stores, who can see it and how to have it removed.
The member rules say what members may share and how to report a problem. The terms of use say what you agree to by using Consumed.
What we store
- Your account: email address, username, display name, avatar, and a scrambled (hashed) password. If you sign in with Google or Apple, we store your Google or Apple account ID instead of a password.
- Your record: the titles you add, their status, progress, ratings, notes, dates and hours, your goals, and the proposals you send and receive.
- Connections you choose to make: when you link Plex, Steam, PlayStation, Xbox (Microsoft), Nintendo, Audible (Amazon), Audiobookshelf, AniList or MyAnimeList, we keep what that service gives us to read your library again later (for example a Plex sign-in token, a PlayStation or Xbox refresh token, a Nintendo session token, or the encrypted device sign-in that Audible hands us). For Xbox, Nintendo and Audible you sign in on that service's own page, and Consumed only receives a one-time sign-in code. We never see or store the passwords for those services. Audible also lists Consumed as a device on your Amazon account until you disconnect it. Your AniList sign-in token is stored so we can keep your library in sync, and it is deleted the moment you disconnect AniList or delete your account. Disconnecting Xbox, Nintendo or Audible removes what we kept for it.
- Your recommendation log: what What Next showed you and what you did with it (started, skipped, proposed, cleared or dropped it, plus any rating or hours). It is used to improve your own suggestions, is private to you, and is deleted after 180 days.
- Your taste questionnaire answers: the comparisons and preferences you give on the Taste tab. They are private to you and used only for your own suggestions and taste summary.
- A short technical record of AI failures: the time, which feature it was (Why this, Taste or the year recap) and what kind of failure it was. It never includes what you asked, what the AI wrote, or which member it happened to, and is kept for 90 days.
- Your friends: who you are friends with, friend requests you sent or received, and whether your profile is Friends only or open to everyone with an account. All of it is deleted with your account.
- Feedback you send: the message, the page it came from and any screenshot you attach.
- A record of any action the administrator takes on your account (a warning, a removed bio or photo, closing it). Deleted with your account.
- A sign-in cookie that keeps you logged in. There are no advertising or analytics cookies.
- Your phone's notification address, while notifications are on.
- Copies of cover images, kept for a while so pages load faster.
Who can see it
- Your friends can always see your library, ratings, profile and activity. That is how group picks, proposals and taste comparisons work.
- Other members can see the same only if you open your profile to everyone with an account. A new account starts as Friends only, and you can change that in Settings. While your profile is Friends only, other members see just your username, photo and bio, so they can send you a friend request. Your email address, connected accounts, recommendation log and taste questionnaire answers are never shown to other members.
- Members you block. If you block a member, neither of you sees the other anywhere in Consumed, your friendship ends and open proposals between you are cancelled. They are not told. You can unblock them in Settings; that does not restore the friendship.
- The administrator can read feedback you send and can see the stored data when maintaining the app. If you report a member or a proposal, only the administrator reads the report, together with a copy of what you reported. The member you report is not told who reported them.
- Nobody else. Anyone can create an account, but a person with an account who is not your friend sees only what your profile settings allow.
Services the app talks to
- Title information (covers, genres, runtimes, ratings, and the Rotten Tomatoes and Metacritic scores) comes from TMDB, IGDB, HowLongToBeat, AniList, MyAnimeList, Goodreads, Open Library, Audible and similar catalogues. Only the title being looked up is sent, never your account details.
- Covers: our server fetches each cover from the image host of the catalogue that holds it (TMDB, IGDB, Open Library and the Internet Archive, AniList, Amazon's image host for Audible and Goodreads, and GraphicAudio) and shows it to you from our own address, so your device does not contact those image hosts. They see our server's address, not yours. Only the cover's address is sent, and our server keeps a copy for a while.
- Imports and sync talk to the service you connected (Plex, Steam, PlayStation, Xbox, Nintendo, Audible, Audiobookshelf, AniList, MyAnimeList, Google Sheets) using your own connection, only to read your library.
- Written explanations ("Why this?", the taste summary and the year recap) are generated by an AI service (Z.ai, GLM model). When you use them, a summary of your own record (titles, ratings, genres) is sent to that service to write the text. Z.ai may use the text it receives to improve its services, under Z.ai's own terms. Generated text is always labelled.
- The assistant: text you type or speak to the assistant is sent to the AI provider to work out what to do, and it is not stored by Consumed. What you say is turned into text on the phone when the phone supports on-device recognition. Otherwise the phone's own speech service turns it into text, and that service may send the audio to its provider. Consumed itself never receives, stores or sends the audio.
- Cloudflare carries the connection to the app. Google handles "Sign in with Google" and sends password-reset and feedback emails. Apple handles "Sign in with Apple".
- Typeface: the website pages load their typeface from Google Fonts, so your device contacts Google's font host when a page opens.
- Notifications: when you turn one on, its words go through Expo's push service and then Apple or Google to reach your phone. Titles are left out unless you turn them on.
Where it is kept
On a private server run by the administrator in the United Arab Emirates. Backups are taken daily and kept for up to a month, with an encrypted off-site copy.
Removing your data
Delete your account yourself from Settings, Delete account on the website (in the phone app: You, Settings, Delete account), or ask the administrator at [email protected] to do it. Your account, record, connections and feedback are deleted at once; copies in backups expire within 30 days.
If the administrator closes your account for breaking the member rules, your data is kept so it can be reopened. Ask the administrator to delete it and it is deleted as above.
Children
Consumed is not meant for anyone under 13.
Changes
If this page changes in a way that matters, members will see a notice in the app. Changes to the terms of use are listed on that page.