Privacy Policy

1. Data Controller

The Data Controller is: Movib

Contact email: movibapp@gmail.com

2. Types of Data Collected

• Registration data: Email address, username and password (encrypted).
• User Generated Content (UGC): Favourite films, personal rankings, chat messages, comments, and the posts, replies and polls you publish in Community.
• Uploaded images: Photos you attach to posts and replies are stored in an archive reachable through a direct link. GIFs are not uploaded: we display the address provided by GIPHY.
• Support data: Information voluntarily submitted through feedback or reporting forms inside the app.
• Purchase data: Subscription status and transaction history (handled anonymously through digital receipts; we never process credit card data directly).
• Technical data: IP address, device identifiers and system logs.
• Usage data (Analytics): Information about how the user navigates inside the app (screens visited and time spent), associated with the account through an identifier. This collection can be turned off in the profile settings.
• Telegram link: if you link your account to claim the bonus, we store your Telegram ID and a count of the days on which you take part in the group. They are used only to verify your participation and to grant the Premium extension. We do not store the content of your messages, only their length, and we have no access to your phone number.

3. Purposes of Processing

Data is processed for the following purposes:

• Account management and delivery of social features (chat, comments, lists).
• Unlocking Premium features through subscriptions.
• Customer support and handling abuse reports.
• Cybersecurity and fraud prevention.
• Statistical analysis and usage monitoring to improve the user experience and fix technical bugs.
• Verifying membership of the Telegram group and granting the related Premium extensions.

4. Third-Party Services

The app uses the following third-party providers for technical operation:

• Supabase: Database management and user authentication.
• Resend: Delivery of technical and support email communications.
• RevenueCat: In-app subscription management and analytics.
• Apple App Store / Google Play Store: Payment processing.
• Google Analytics for Firebase: Analytics service provided by Google. It receives the screens visited, some technical data about the device and an identifier associated with the account. Google is a US company: see section 6.
• Google Crashlytics: Crash reporting service provided by Google. In the event of a failure it receives the technical details of the error, the device model, the username and an identifier associated with the account.
• GIPHY: Search for GIFs to use in posts. When you search for a GIF, the text you type is sent to GIPHY.

5. User Rights (GDPR)

The user has the right to access their data and request modification or deletion. Users can permanently delete their account and all associated data directly from the App settings or by sending an email to the Data Controller.

6. Transfers outside the European Union and retention

Some of the providers listed above are based in the United States, so data may be transferred outside the European Economic Area. Transfers rely on the safeguards set out in the GDPR, in particular the EU-US Data Privacy Framework and standard contractual clauses. Usage data is retained by Google for 2 months (event data) and 14 months (user-associated data); account data remains for as long as the account exists and is deleted upon its removal.