← Back to Home

Privacy Policy

Last updated: October 5, 2026

This Privacy Policy describes how personal data of users of the Movib application is collected, used and protected.

1. Data Controller

The Data Controller is: Movib

Contact email: movibapp@gmail.com

2. Types of Data Collected

  • Registration data: Email address, username and password (encrypted).
  • User Generated Content (UGC): Favourite movies and series, personal rankings, chat messages, comments, and the posts, replies and polls you publish in Community.
  • Uploaded images: Photos you attach to posts and replies are stored in an archive reachable through a direct link. GIFs are not uploaded: we display the address provided by GIPHY.
  • Support data: Information voluntarily submitted through feedback or reporting forms inside the app.
  • Purchase data: Subscription status and transaction history (handled anonymously through digital receipts; we never process credit card data directly).
  • Technical data: IP address, device identifiers and system logs.
  • Usage data (Analytics): Information about how the user navigates inside the app (screens visited, time spent and moods picked on the Home screen), associated with the account through an identifier. It is used exclusively to improve Movib and to understand how users experience the app; it is never sold or used for advertising. This collection can be turned off in the profile settings.
  • Website statistics: When you visit movib.app we anonymously record the visit and any taps on the buttons to download the app, together with the page language, the type of device (iPhone, Android or computer), the site you came from and your country. We don't use cookies, we don't store anything on your device and we don't record your IP address or any other data that identifies you. They are used only to understand whether the website works.
  • Access data: The date of your last access to the app and the days on which it was opened, associated with the account. We use them to run the account (for example, to avoid sending you notifications while you are already using the app) and to measure how many people use the service, based on our legitimate interest. They are not turned off by the usage statistics setting.
  • Telegram link: if you link your account to claim the bonus, we store your Telegram ID and a count of the days on which you take part in the group. They are used only to verify your participation and to grant the Premium extension. We do not store the content of your messages, only their length, and we have no access to your phone number.

3. Purposes of Processing

Data is processed for the following purposes:

  • Account management and delivery of social features (chat, comments, lists).
  • Unlocking Premium features through subscriptions.
  • Customer support and handling abuse reports.
  • Cybersecurity and fraud prevention.
  • Statistical analysis and usage monitoring to improve the user experience and fix technical bugs.
  • Verifying membership of the Telegram group and granting the related Premium extensions.

4. Third-Party Services

The app uses the following third-party providers for technical operation:

  • Supabase: Database management and user authentication.
  • Resend: Delivery of technical and support email communications.
  • RevenueCat: In-app subscription management and analytics.
  • Apple App Store / Google Play Store: Payment processing.
  • Google Analytics for Firebase: Analytics service provided by Google. It receives the screens visited, some technical data about the device and an identifier associated with the account. Google is a US company: see section 6.
  • Google Crashlytics: Crash reporting service provided by Google. In the event of a failure it receives the technical details of the error, the device model, the username and an identifier associated with the account.
  • GIPHY: Search for GIFs to use in posts. When you search for a GIF, the text you type is sent to GIPHY.

5. User Rights (GDPR)

The user has the right to access their data and request modification or deletion. Users can permanently delete their account and all associated data directly from the App settings or by sending an email to the Data Controller.

6. Transfers outside the European Union and retention

Some of the providers listed above are based in the United States, so data may be transferred outside the European Economic Area. Transfers rely on the safeguards set out in the GDPR, in particular the EU-US Data Privacy Framework and standard contractual clauses. Usage data is retained by Google for 2 months (event data) and 14 months (user-associated data); account data remains for as long as the account exists and is deleted upon its removal.