Privacy Policy

2026-09-20

This policy explains what data is processed when you use the Cinemova mobile app and cinemova.app. In short: we collect what is needed to run your account and taste profile, we never sell data, we use no ad networks, and we never store your location coordinates.

Who is responsible

Cinemova is operated by an independent developer. For any question or data request: ulasisbl@gmail.com

What we collect

Account: email address, username, first and last name, profile photo or the avatar you pick, short bio, app language. If you sign in with Google, Google only verifies your identity; your password never reaches us.

Content and activity: titles you mark as watched/favorite/watchlist, your lists, duel choices, follow relationships, community memberships, messages you send.

City (optional): only the NAME of a city and country. If you choose to use device location, the coordinates are turned into a city name in your phone's memory only; they are never sent to the server, stored or logged. You can remove your city at any time or hide it from others in Settings.

Notifications: your device push token, so we can deliver notifications.

Usage measurement: screen name, time spent on screen, event names (e.g. "title added"), session id, a random id generated on your device, platform and app version. Message content, free text and location coordinates are NOT measured. No third-party analytics SDK is used; records stay on our own server.

Error reports: when the app hits an unexpected error we record the error message, technical stack trace, the screen you were on and the app version.

Technical: IP address and request details in server logs (for security and abuse prevention).

Why we process it

To create and keep your account signed in; to build matches and recommendations; to run messaging and communities; to deliver notifications; to prevent abuse; to find and fix bugs and understand which features are used.

Legal bases: performance of a contract (providing the service), legitimate interest (security, debugging, product improvement) and your consent for optional data (location, notification permission).

Who we share it with

We do not sell your data and we do not share it for advertising. Only providers needed to run the service are used:

TMDB — movie and TV data. This product uses the TMDB API but is not endorsed or certified by TMDB. Google — Sign in with Google (authentication). Firebase Cloud Messaging — notification delivery. Resend — verification and password reset emails. Hosting: the app server and database are hosted in Germany (Frankfurt).

We may disclose data to authorities where legally required, to the extent the law requires.

What others see

If your profile is public, your name, username, bio, lists and (if you leave it visible) your city are visible to other users. If you make your account private, only followers you approve can see them. City visibility can also be turned off in Settings › Privacy.

How long we keep it

Account and content data are kept until you delete your account. Usage measurement records are deleted automatically after 180 days, error reports after 30 days. Database backups are kept for 14 days; traces of a deleted account disappear from backups within 14 days at the latest.

Your rights

Under GDPR and Turkish data protection law (KVKK) you may access, correct, delete or export your data, and object to processing. Send your request to ulasisbl@gmail.com; it is answered within 30 days at the latest. You may also complain to your supervisory authority.

Deleting your account

In the app: Profile › Settings › Account Settings › Delete Account. Deletion is permanent; your profile, lists, messages and follow relationships are removed. If you cannot access the app, follow the steps on the account deletion page.

Children

Cinemova is not directed at children under 13 and does not knowingly collect their data. If we become aware of such an account we delete it.

Security

Connections are encrypted with TLS, passwords are stored irreversibly, and changing your password invalidates sessions on other devices. No system is 100% secure; if a breach is detected, affected users are informed.

Changes

This policy may be updated. Significant changes are announced in the app. The date at the top shows the last update.