Privacy Policy

1. Controller

Data controller: the developer of the MovieForUs app. Contact: support@movieforus.com.

2. What we collect

• Account: if you sign in with Apple or Google, the email address that account shares with us (Apple’s relay address if you choose “Hide My Email”), your name and an identifier for that account; your password never reaches us. For accounts made with an email and password, your email address and password (stored hashed by our authentication provider; we cannot see it). With Sign in with Apple we keep a token Apple issues, so that the link with Apple can be revoked when you delete your account. Continuing as a guest creates only an account identifier.
• Profile: display name, profile photo, date of birth, height, smoking and drinking habits, a quote from a favourite film, your gender and matching preferences (genders you are interested in and an age range).
• Film taste: your first-run survey answers, the films you swipe (liked or passed), your watchlist and ratings, and the film lists you create (their names and the films in them).
• Location: if you allow it, your device’s precise location and the city derived from it.
• Matches and messages: who you matched with, the state of each match, messages you send and receive, shared rooms and the films swiped in them.
• Safety records: reports you file and reports about you, people you block, your acceptances of the terms of use, and the results of the automatic checks on your profile photos.
• Device: a push notification token for your device.
• Usage data: what you do in the app: the screens you open; the films you open, heart, rate, add to lists and swipe, and which section you opened a film from; your matches and what you do with them; that you sent a message (not what it said); your use of shared rooms; how many results a search found (not what you searched for); and changes to your settings. Along with these, the app version, device model, operating system version, app language, a randomly generated device number and your account identifier.
• Technical logs: your IP address and request details may be recorded in our service providers’ logs when you connect.

We show no ads, do not track you across other apps and websites, do not use your advertising identifier, and do not sell personal data. The only analysis we do is the usage analytics described below, to improve the app.

3. Why we process it

• To provide the service: managing your account, showing your profile, suggesting matches based on film taste, and running messaging and shared rooms.
• Location-based matching (consent): to calculate distance so that you are matched only with people within 300 km (1000 km in fan clubs). You can withdraw location permission in your device settings at any time; matching then stops working.
• Special category data (explicit consent): your gender and the genders you are interested in may reveal information about your sex life or orientation. We use them only to suggest matches.
• Notifications (consent): to tell you about new matches and messages. You can turn them off in your device settings.
• Improving the app (legitimate interest): analysing usage data to understand which features are used and how much, where people struggle and which changes work. Because the Terms of Use describe it, it does not start before you accept them; what you do before that (signing up, for instance) is held on your device. You do not have to allow it to use the app: turn off “Share usage data” under Profile → Settings → Privacy and no more usage data is sent from that device.
• Community safety (legitimate interest and legal obligation): checking profile photos automatically before anyone else can see them, reviewing reports, removing content that breaks the rules, preventing abuse and responding to lawful requests. The automatic check looks for nudity, sexual content, violence and self-harm; a photo that fails it is deleted and cannot be used on your profile. You can contest the decision by writing to us, and a person will review it.

4. Who can see your information

• People you match with: your display name, photo, age, height, smoking and drinking habits, film quote, gender, a rounded approximate distance between you, films you both liked, your compatibility score and the fan clubs you are in. Your date of birth and exact location are never shown.
• Fan clubs: the 5 answers you give when you join a club are stored. Only you and the people you match with can see which clubs you are in; someone you matched with through a club also sees the questions you answered alike. You can leave a club at any time, and your answers are deleted when you do.
• People in the same room: your display name, emoji and profile photo. A room can only be entered by someone you send the code to; a room opened from a match belongs to those two people alone.
• People who could match with you and open a film’s page: if you have hearted that film, your photo can appear there blurred, inside a small circle among at most two, next to a count. Your name, age, distance and the other films you like are not shown, and only people who pass your matching filters (age range, gender preference, 300 km) mutually can see it. You can turn this off in the app under Profile → Settings → Privacy, “My photo on film pages”; with it off your photo is again shown only to your matches and the people in your rooms, and your matching is unaffected.
• If you pass a match or block someone, their access to your photo ends.
• Moderators: only what relates to a report under review or to a contested photo check.
• Public authorities: only where the law requires it.

5. Service providers and international transfers

We rely on the providers below, whose servers may be located outside Türkiye.

• Supabase: database, authentication, photo storage and realtime infrastructure. Server region: Frankfurt, Germany (European Union).
• Expo (650 Industries, USA): delivering push notifications and app updates. While doing so, Expo may analyse technical data such as your device’s IP address and crash reports, in aggregate, to improve its own service; for that use Expo is subject to its own privacy policy.
• OpenAI (USA): the automatic check of profile photos. A photo you upload is sent only for that check. OpenAI does not use data sent through its API to train models, and may keep it for up to 30 days to monitor abuse.
• Amplitude (Amplitude, Inc., USA; the data is kept on its servers in the European Union): usage analytics. Your name, email address, photos, message content, search text, location, IP address, gender and matching preferences are not sent to it; it knows you only by your account identifier.
• Apple: Sign in with Apple, delivering notifications to iOS devices and looking up a city name from a location.
• Google (USA): Sign in with Google. Google shares the email address, name and identifier of the account you sign in with.
• TMDB (The Movie Database): film information and images, requested directly from your device; TMDB can see your IP address and film searches.
• YouTube: trailers open on YouTube, where YouTube’s own privacy policy applies.

6. How long we keep it

• We keep your data for as long as your account exists.
• When you delete your account in the app (Profile → Account → Delete my account), your profile, photos and their check records, film taste, watchlist, film lists, swipes, matches, messages and push token are deleted immediately and permanently.
• Usage analytics records are kept at Amplitude. When you delete your account, Amplitude is automatically asked to delete them and completes the deletion within 30 days. If anything goes wrong, write to support@movieforus.com.
• For community safety, reports about a person may be kept for up to 2 years after that person’s account is deleted.
• Copies in our providers’ backups and technical logs are removed at the end of their retention cycles.

7. How we protect it

All connections between the app and our servers are encrypted. Row-level access rules open each piece of data only to the people who need to see it. Photos are kept in private storage and shown through short-lived signed links.

8. Your rights

You can access, correct or delete your data, object to processing, and ask who it has been shared with. You can delete your account and data at any time from within the app.

For any other request, write to support@movieforus.com; we reply within 30 days.

9. If you are in the European Union, the EEA or the United Kingdom

The EU General Data Protection Regulation (GDPR), or the UK GDPR, applies to your data as well. What follows adds to the sections above.

• Legal bases: running your account, profile, matching, messages and shared rooms is the performance of our contract with you (Art. 6(1)(b)). Location and notifications rest on your consent (Art. 6(1)(a)), which you can withdraw in your device settings at any time. Your gender and the genders you are interested in, which may reveal your sexual orientation, rest on the explicit consent you give by entering them (Art. 9(2)(a)); you can remove them by deleting your account. Photo checks, handling reports and preventing abuse rest on our legitimate interest in a safe community (Art. 6(1)(f)) and on legal obligations (Art. 6(1)(c)). Usage analytics rests on our legitimate interest in improving the app (Art. 6(1)(f)); you can object at any time with the “Share usage data” switch in Settings.
• Your rights: you can ask to access your data and receive a copy in a portable format, to have it corrected or erased, to restrict its processing, to object to it, and to withdraw any consent you gave at any time; withdrawing consent does not affect processing before it. Most of this you can do in the app yourself; for the rest, write to support@movieforus.com. We answer within one month.
• Automated decisions: the automatic photo check decides whether a photo can be shown. You can ask for a person to review the decision, give your view and contest it.
• Where your data is: your profile, messages and usage analytics records are kept in the European Union (Supabase in Frankfurt, Amplitude on its EU servers). The providers outside the EU listed in section 5 (OpenAI, Expo, Google, Apple) receive only what is described there; transfers to them rely on the European Commission’s Standard Contractual Clauses in their data processing terms or, where the provider is certified, on the EU–US Data Privacy Framework.
• Complaints: you can complain to the data protection authority where you live or work; in the United Kingdom that is the Information Commissioner’s Office (ico.org.uk). If you write to us first at support@movieforus.com, we will try to put things right.

10. Children

MovieForUs is not for anyone under 18. We close accounts we find belong to someone under 18.

11. Changes

We may update this policy. We will let you know in the app about significant changes; the current version is always on this page.