Privacy Policy
Movie Night: Swipe & Match (“the app”) helps couples, families and friends agree on what to watch: everyone swipes through the same movies and series, and the titles everyone likes become matches. The app is built to need as little about you as possible. There is no sign-up, no email address, no phone number, no ads and no analytics.
“We” means TroySoft, the publisher of the app. We are responsible for the personal data described here (the data controller).
- What we collect
- On your device
- Trailers and YouTube
- What we don’t do
- Who processes data
- Deleting your data
- Your rights
- Children
What we collect, and why
Everything below is stored on our server so your groups, swipes and matches work across phones.
| Data | Why | How long |
|---|---|---|
| Anonymous account | When you first open the app, the server creates a random user ID and device ID. It keeps a one-way hash of a random device secret, your phone’s platform (iOS or Android), the app version and when you were last active. This signs you in without a sign-up. | Until you delete your account. If you never linked Google or Apple, the account is deleted automatically after 180 days without use. |
| Your profile | The nickname and avatar you choose (avatars are drawings from the app), your age group (13–15 or 16+), the app language and your country. Your group sees your nickname and avatar. The language is used for the app and for notifications. The country picks which age ratings apply; it is suggested from your phone’s region setting and you can change it in Settings. | Until you delete your account. |
| Child profiles | The name, avatar and age group (0–6, 7–9, 10–12 or 13–15) a parent enters for a child. No birth date. This lets a child swipe on the parent’s phone and keeps titles within the child’s age. | Until the parent or the group admin removes the profile, or the parent deletes their account. |
| Favourite genres | Titles in these genres appear a little earlier in your deck. | Until you change them or delete your account. |
| Groups | Group name, type (couple or family), country, members and invite codes, to run your groups and invitations. | Invite codes expire after 10 minutes. A group stays until it is deleted, or until its last adult leaves. |
| Swipes and matches | Your likes, passes and “seen it” marks, the titles you have seen, the matches, and the titles your group chose or watched. They are used to find matches and to stop showing titles you have already seen. Other members never see your individual swipes: a match only shows how many people liked a title. | Swipes are deleted 30 days after a Movie Night ends. Matches and chosen titles stay until the group is deleted. Your “seen” list stays until you delete your account. |
| Your Feed | The titles you like, add to your watchlist, hide (“Not interested”) or mark as seen in the Feed, and which titles the Feed has already shown you. They are used to build your Feed: to leave out titles you have already reacted to, to show genres you like more often, and to show titles again only after a while. Titles on your watchlist also come a little earlier in your groups’ Movie Nights; nobody sees whose watchlist they came from. Your Feed lists are visible only to you. A title marked as seen in the Feed is also on your “seen” list, and the other way round. | Your likes, watchlist, hidden and seen titles stay until you remove them or delete your account. The record of which titles the Feed showed you is deleted after 30 days. |
| Push token | A token from your phone’s notification service, so we can tell you when there is a match, when someone starts a Movie Night, and when everyone has finished swiping. | Replaced when your phone issues a new one. Removed when it stops working or when you delete your account. |
| Google or Apple sign-in (optional) | Only if you link one in Settings: the unique ID of that Google or Apple account, so you can restore your account on a new phone. We don’t store your email address or name. For Apple we also keep a token that is used only to cancel the Apple sign-in when you delete your account. | Until you delete your account. |
| Server logs | Your IP address, the time and the request your app made, with tokens and secrets removed. Used for security, to stop abuse and to fix errors. | 14 days. |
We use this data to provide the app you asked for (performing our agreement with you) and, for server logs, for our legitimate interest in keeping the service secure. Notifications are sent only if you allow them in your phone’s settings.
What stays on your device
- The device secret that signs you in, kept in the iOS Keychain or the Android Keystore.
- App settings, such as your language, your Feed setting (all titles, movies only or series only) and your answer to the age question.
- The camera picture when you scan an invite QR code. The code is read on your phone, and the picture is never uploaded.
Trailers and YouTube
The app plays trailers with YouTube’s embedded player, which is part of the YouTube API Services. It uses YouTube’s privacy-enhanced mode (youtube-nocookie.com).
- When a trailer loads. On a title’s details, only when you tap play. In the Feed, a trailer starts by itself, without sound, when you move to a title’s trailer page; if your phone’s reduce-motion setting is on, it starts only when you tap play. Nothing is loaded from YouTube before that.
- Our website. To play a trailer, the app opens a small page on our website (movienight.applib.co), and that page loads YouTube’s player. YouTube requires embedded players to come from a website, so this page is needed for the trailer to play. Like any web request, it gives our web server your IP address, the time, and the page address, which includes the trailer’s YouTube video ID. We use this only to deliver the page and keep the service secure, and delete the logs after 14 days. The page sends no app data, such as your account or nickname, to YouTube.
- What YouTube receives. When the player loads, your phone connects to YouTube (Google) directly. YouTube receives your IP address, information about your device and its web view, which video is played and how you use the player. YouTube may store and read information on your device, such as cookies, local storage or similar technologies. Google handles this data under the Google Privacy Policy, and the YouTube Terms of Service apply to the player.
- What we get from YouTube. Only whether the trailer is playing or muted, so the app can show the right buttons. We don’t store it, and we don’t receive or keep any other information from YouTube about you.
- Watch on YouTube. This button opens the trailer on youtube.com in a browser view. YouTube’s own terms and policies apply there.
What we don’t do
- No ads, and no advertising ID.
- No analytics or tracking tools. We don’t track you across other apps or websites. The YouTube player that plays trailers is run by Google under its own policy (see Trailers and YouTube).
- We don’t sell your data or share it for marketing.
- We don’t ask for your email, phone number, real name or birth date, and the app doesn’t access your contacts, photos, location or microphone.
- The camera is used only to scan invite QR codes, and only while the scanner is open.
- We never show other members how you swiped.
Who processes data for us
- Our server, in a data centre in the European Union, stores the data listed above.
- YouTube (Google) plays trailers through the YouTube API Services. See Trailers and YouTube and the Google Privacy Policy.
- Firebase Cloud Messaging (Google) delivers notifications. It receives your push token and the notification text, such as a nickname and a movie title. On iPhone it hands them to the Apple Push Notification service. See Firebase’s privacy information and Apple’s privacy policy.
- Google Sign-In and Sign in with Apple, only if you link them. Their own policies apply: Google, Apple.
- TMDB (The Movie Database) provides the movie and series information. Posters load from TMDB’s image server, so TMDB sees your IP address, as with any image on the web. No account data is sent to TMDB. If TMDB is slow, the poster comes from our server instead. See TMDB’s privacy policy.
- Google ML Kit reads QR codes on your phone. The image stays on the device, but ML Kit may send Google basic information about how the scanner performs, such as the device model. See the ML Kit terms.
- Rating links in the app open IMDb, Rotten Tomatoes, Metacritic or TMDB in a browser view, and “Watch on YouTube” opens YouTube. Those sites’ own policies apply there.
Some of these providers process data outside your country, for example in the United States, under their own safeguards for international transfers.
How long we keep it
The table above gives the period for each item. In short: account data stays until you delete your account, swipes are removed 30 days after a Movie Night ends, unused anonymous accounts are removed after 180 days, and server logs and our website’s logs after 14 days. Database backups are kept for 14 days, so deleted data also disappears from backups within 14 days.
Deleting your data
In the app, open Settings → Delete account and type the confirmation word. This deletes, right away, your account, your profile, the child profiles you manage, your swipes, your Feed lists and your group memberships. Groups where you are the only adult are deleted. If you are the admin of a group with other adults, the adult who joined first becomes the admin. A linked Apple sign-in is cancelled at Apple too.
You can also leave a group, or remove a child profile you added, from the group’s screen in the Groups tab.
No longer have the app? See how to delete your account by email.
Your rights
Depending on where you live (for example under the GDPR in the EU, the UK GDPR, the KVKK in Türkiye, or the CCPA in California), you can ask us to tell you what data we hold about you, to give you a copy, to correct it, to delete it, or to stop or limit using it. You can also complain to your data protection authority.
You can do most of this yourself in Settings. To ask us, write to support@troysoft.com.tr. Because we don’t know your name or email address, tell us how to find your account: the Google or Apple account you linked, or your nickname, your group names and when you last used the app. We answer within 30 days.
We don’t sell personal information and don’t share it for cross-context behavioural advertising.
Children
The app is for people aged 13 and over. It asks your age before anything else, and people under 13 cannot create an account. Children under 13 can only take part as a child profile that a parent creates on the parent’s own phone. For these we store only the name, avatar and age group the parent enters, and the parent can edit or delete the profile at any time. If you think a child under 13 has created an account, contact us and we will delete it.
Security
All traffic between the app and our server is encrypted (HTTPS). The server stores only a hash of your device secret, sign-ins use short-lived tokens, and tokens and secrets are removed from logs. Requests are rate-limited to stop abuse.
Changes
If we change this policy, we update the date at the top. If a change matters for how your data is used, we will also tell you in the app.
Contact
TroySoft · support@troysoft.com.tr