Privacy Policy

1. What data we collect

• Account data: name, email, profile picture via Google OAuth.
• Profile data: username, display name, photo.
• Content data: movies rated, watchlist, notes, mood tags.
• Social data: friends, invitations, suggestions.
• Usage data: features used, device and browser.
• Invite source: community or personal invite.

2. How we use your data

• Creating and managing your account (contract).
• Showing your ratings and watchlist (contract).
• Showing friends' activity in your feed (contract).
• Sending in-app notifications (contract).
• Improving the service (legitimate interests).
• Preventing fraud (legitimate interests).
• Legal compliance (legal obligation).

We do not use your data for advertising. We do not sell your data.

3. Who we share data with

• Lovable / Supabase, database hosting.
• Google, OAuth sign-in.
• TMDB, movie data API (no personal data sent).
• Resend, transactional emails (email address only).

No other third parties.

4. How long we keep data

As long as your account is active. Deletion within 30 days of account deletion. Anonymised analytics retained indefinitely.

5. Your rights (UK GDPR)

Access, rectification, erasure, restriction, portability, objection. Contact hi@movienot.com.

6. Data security

HTTPS encryption. Access restricted to authorised personnel. No absolute security guarantee.

7. Children

Not intended for under 13s.

8. Changes

You will be notified via the app or email.

9. Contact

hi@movienot.com, Lemberg Agency, London, UK.