Privacy
Policy

Muvibro ('we', 'our', or 'us') is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect when you use the Muvibro mobile application ('App'), how we use it, with whom we share it, and what rights you have regarding your data. This Policy is an information notice; you are not asked to agree to it. If you use the App as an anonymous guest (without registering an account), this Policy also applies to the personal data processed during that use.

We collect the following categories of information:

• Anonymous session identifier: When you use the App without registering, Supabase assigns a temporary anonymous identifier to your session. This identifier allows us to deliver AI recommendations and maintain your in-app state during the session. No name, email, or other directly identifying information is associated with this identifier unless you later create or sign in to an account.
• Account credentials: email address, username, and a securely hashed password when you register manually.
• Social authentication data: an authentication token and basic profile information (name, email) provided by Apple Sign-In or Google Sign-In. We do not receive or store your Apple or Google account password.
• Preference data: your mood selection, preferred movie genre, duration, production type (e.g., Hollywood, independent), and release year range that you input when requesting a recommendation.
• Activity data: the movie recommendations generated for your sessions, your star ratings for recommended films, and your personal watchlist. If you use the film quiz or your Watched list, this also includes the films you mark as watched or not watched, and the ratings from 1 to 10 that you give to films you have watched. If you remove a film from the Watched list or delete your quiz marks, we may keep a small record that contains only the film and the time, without a rating, so that the film stays hidden from the list. If you report a quiz question, we store your account ID, the question, the reason you choose from a fixed list (you cannot enter free text) and the time of the report. We do not store your answers to quiz questions, your quiz score or the quiz session itself in our database.
• Crash and diagnostic data: error reports and performance metrics collected automatically via Firebase Crashlytics to help us identify and fix bugs. When you are signed in, these reports are associated with your random account identifier (user ID), not with your name or email address.
• Usage analytics: event data (e.g., screens visited, features used) collected via Firebase Analytics to help us improve the App. Events are associated with identifiers generated by Firebase for your app installation; we do not send your name, email address or account ID as an analytics identifier. Events include, for example, when you open a notification (only its type and destination screen from a fixed list), when you open the notification settings shortcut, and when the in-app rating prompt is requested or the 'rate the app' button is tapped; they do not contain the text of notifications or ratings. In the film quiz and the Watched list, events include, for example, that you opened the quiz or the Watched list, the type of each question, whether your answer was correct and how long it took, how many films you marked, the rating you gave, whether you left the quiz before finishing, and whether you were signed in or using the App as a guest. They do not contain film titles, film or question identifiers, or your name, email address or account ID.
• Push notification tokens: a device token collected via Firebase Cloud Messaging (FCM) when you grant notification permissions, used solely to deliver notifications from Muvibro.
• Remote configuration data: feature flags and configuration values retrieved from Firebase Remote Config to adjust App behavior without requiring an update.
• Purchase and credit data: your credit balance, transaction history, and purchase receipts processed via RevenueCat through the Apple App Store or Google Play.
• Agreement records: when you accept the Terms of Use, we record which document and version you accepted, the date and time (our server time and the time reported by your device), the screen and sign-in method you used, the language, your app version and platform, and your account identifier. When the Privacy Policy is shown to you, we record in the same way that it was shown; we do not ask you to accept it.

We use collected information for the following purposes:

• To create and authenticate your account and enable access to the App.
• To generate personalized AI-powered movie recommendations by sending your stated mood and preferences to our backend service.
• To store your recommendation history and ratings in our database so that the App can improve its suggestions over time and, if you use the film quiz, can choose some of the quiz films from the films we have recommended to you earlier.
• To manage your in-app credit balance, process credit purchases through RevenueCat, link purchases to your account and identify customers when we handle support requests (for which we use your user ID, email address and username).
• To send you push notifications about new features, account updates, or promotions. You may opt out at any time through your device settings.
• To monitor App stability, diagnose crashes, and improve performance using Firebase Crashlytics data.
• To understand how users interact with the App through analytics and to make informed product decisions.
• To adjust App features and content remotely via Firebase Remote Config.
• To provide AI-powered movie recommendations and local favorites and history functionality (up to 30 items each) to anonymous (guest) users without requiring account registration.
• To link your anonymous session data to your registered account if you choose to create an account or sign in during the same session, preserving any preferences or state accumulated as a guest.
• To keep a record of the version of the Terms of Use you accepted and when, so that we can show what was agreed if a dispute arises.
• To record the films you mark as watched or not watched and the ratings you give; to avoid recommending films you have already marked as watched; to choose some of the films in the quiz from the films we have recommended to you earlier (leaving out films you have rated, marked or added to a watchlist); to take the genres and similarity of films you rate highly into account in your recommendations; to show the films, with their images, in your Watched list and, if you use it, in a personal list of your highest-rated films that only you can see; and to review reports about inaccurate quiz questions and switch off questions that several users report.

We rely on the following third-party providers to operate the App. Each provider's own privacy policy governs their handling of data.

• Supabase (supabase.com): Provides our backend database and user authentication infrastructure. Your account information and recommendation history are stored on Supabase-managed servers protected by row-level security.
• Firebase Crashlytics (Google LLC): Automatically collects crash reports and stack traces when the App encounters an error, associated with your random account identifier when you are signed in. Used solely for debugging.
• Firebase Analytics (Google LLC): Collects usage events and associates them with identifiers generated for your app installation. On iOS it does not use the Apple Advertising Identifier (IDFA) by default. We do not send your name, email address or account ID to it.
• Firebase Cloud Messaging (Google LLC): Manages delivery of push notifications to your device using a device-specific push token.
• Firebase Remote Config (Google LLC): Delivers configuration settings that allow us to adjust App behavior remotely without an app update.
• RevenueCat (revenuecat.com): Validates in-app purchase receipts, manages your credit balance, and provides purchase analytics. To link purchases to your account and to help us identify customers when we handle support requests, we send RevenueCat your user ID, email address and username. RevenueCat may also collect your device type, app version and purchase history, which is linked to your user ID.
• Apple Inc.: Processes App Store in-app purchases and provides Sign In with Apple authentication. Apple's privacy policy applies to all data it processes.
• Google LLC: Processes Google Play in-app purchases and provides Google Sign-In authentication. Google's privacy policy applies to all data it processes.
• AI Service Providers: We use one or more third-party AI services to generate movie recommendations. Your stated mood and preference data is sent to these providers solely to generate your recommendation. If you have rated enough films, a short summary of the film genres you tend to like or dislike (genre names only) may be included in the request. We do not send the titles of films you watched or rated, your ratings or your account ID. The AI providers used may change without prior notice. We do not share personally identifiable information such as your name or email with AI providers.
• External Links: The App may contain links to third-party websites and applications. Once you leave the App through such links, any data you share is governed by that third party's privacy policy. Muvibro is not responsible for the privacy practices or content of these third parties; we encourage you to review the privacy policy of each site you visit.

Firebase Analytics, which we use for understanding App usage patterns, does not use Apple's Advertising Identifier (IDFA) by default. We do not engage in cross-app or cross-site tracking for advertising purposes. We do not use your data to serve targeted advertisements within the App or on third-party platforms.

Your account data and recommendation history are stored on Supabase-managed servers with row-level security enabled, ensuring that each user can only access their own data. All data is transmitted using TLS (Transport Layer Security) encryption. Passwords are hashed using industry-standard algorithms and are never stored in plain text. While we implement reasonable safeguards, no method of internet transmission or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials. Anonymous sessions: Data associated with an anonymous session identifier is stored in Supabase with the same row-level security protections as registered accounts. Because no email or personal identifier is attached, anonymous session data cannot be attributed to you unless you link the session to an account.

Credit packages are purchased through the Apple App Store or Google Play, processed via RevenueCat. Muvibro does not collect or store your payment card details; all financial transactions are handled directly by Apple or Google. Credits are non-refundable except where required by applicable consumer protection law. If you believe a purchase was made in error, please contact Apple Support or Google Play Support directly. Unused credits remain associated with your account and do not expire as long as your account is active.

We retain your personal data for as long as your account is active and as necessary to provide the service. You may permanently delete your account at any time through the Settings screen within the App, or by visiting https://muvibro.com/delete-account and following the email confirmation steps. Upon account deletion (via either method), your personal data — including account credentials, preference history, and activity data (including the films you marked as watched or not watched, your ratings, and your reports about quiz questions) — will be permanently removed from our servers within 30 days, except where retention is required by applicable law. If you sign back in to the App during this 30-day period, the App will offer you the option to cancel the deletion request, and your account is restored only if you choose to cancel; signing in alone does not cancel the request. Analytics data held by Firebase is not linked to your account ID and is retained according to Firebase's retention settings and its own policies; deleting your account does not delete it. Anonymous (guest) sessions: If you use the App as a guest without registering, anonymous session data is retained for up to 90 days of inactivity and then automatically deleted. If you create or sign in to a registered account, your anonymous session data will be merged into your account and subject to the account retention policy described above.

You can remove films from your Watched list one by one, or delete all your quiz marks, in the App. This also removes the films from your list of highest-rated films. The marks you made in the quiz or in the list are then deleted. If the list also shows films you rated earlier through recommendations, we hide them from the list and stop using those ratings for your recommendations; to do this we keep a small record that contains only the film and the time, without a rating, until you delete your account. Your earlier recommendations and the ratings you gave them stay in your recommendation history; we do not delete them after a fixed period. They are deleted when your account is deleted. Deleting your quiz marks does not delete them, and the quiz may still choose some of its films from them. Reports about quiz questions are kept until you delete your account.

Depending on your jurisdiction, you may have certain rights regarding your personal data. Users in Turkey may exercise rights under the Personal Data Protection Law (KVKK, Law No. 6698), Article 11, including: (a) the right to learn whether your personal data is being processed; (b) the right to request information about how your data is processed; (c) the right to learn the purpose of processing and whether data is used accordingly; (d) the right to know the third parties to whom data is transferred domestically or abroad; (e) the right to request correction of incomplete or inaccurate data; (f) the right to request deletion or destruction of personal data; (g) the right to request notification of corrections or deletions to third parties; (h) the right to object to any adverse outcome arising from automated processing; (i) the right to claim compensation for damages due to unlawful processing. Users in the European Economic Area may also exercise rights under the GDPR, including the right to data portability. To exercise any of these rights, please contact us at the address below.

Muvibro is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us and we will promptly delete that information.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We publish the current text on this page and change the 'Last Update' date at the top. Your continued use of the App does not mean that you agree to this Policy; it is an information notice.