Privacy Policy

1. What Information Do We Collect?

Personal information you provide to us

We collect personal information that you voluntarily provide when you register on the Services, use the App, or contact us. The personal information we collect includes:

• Account information: email address and display name (for named accounts)
• Authentication credentials: hashed and managed by our authentication provider, Supabase — we never store plaintext passwords
• Profile information: country of residence (optional, set in account settings)
• App activity: movies you swiped on, your watchlist contents, and partner connection identifiers

Anonymous users are assigned a random identifier. No email or name is collected unless you create a named account.

Sensitive information: we do not process sensitive personal information.

Payment data

All in-app purchases are processed exclusively by Apple App Store (iOS) or Google Play Store (Android). Jonuma Labs never collects, sees, or stores your payment card number, security code, or banking details. We receive only your subscription status (active / inactive / trial) from RevenueCat, our subscription management provider.

For Apple’s payment privacy practices, see: apple.com/legal/privacy/data/en/apple-pay.
For Google’s payment privacy practices, see: Google Payments Privacy Notice.

Information automatically collected

We automatically collect certain technical information when you use the Services. This includes:

• Log and usage data: IP address, device type, operating system, app version, crash reports, and feature usage events (e.g. date/time of swipes, errors encountered)
• Device identifiers: anonymous device-level identifiers used for diagnostics and analytics

This information is primarily used to maintain the security and operation of the App, and for internal diagnostics and analytics.

Push notifications

We may request permission to send you push notifications regarding your account or the App. You can turn these off at any time in your device’s settings.

All personal information you provide must be true, complete, and accurate. You must notify us of any changes.

2. How Do We Process Your Information?

We process your personal information only when we have a valid legal reason to do so. We process it for the following purposes:

• Account creation and authentication: to create and manage your account and keep it secure
• Core app functionality: to display movie recommendations, record your swipes, and sync your watchlist across sessions and devices
• Partner movie matching: to identify movies that you and a connected partner have both swiped right on
• Subscription management: to verify your subscription status and unlock Premium features accordingly
• Security and fraud prevention: to monitor for and investigate suspicious activity or violations of our Terms
• Service improvement and analytics: to understand how users interact with the App and improve its features
• Legal compliance: to comply with applicable laws, respond to legal requests, and enforce our agreements
• Vital interests: to protect the safety of any person where necessary

We may also process your information for other purposes with your prior explicit consent.

3. What Legal Bases Do We Rely On?

This section applies to users in the EU, EEA, UK, and other jurisdictions requiring a stated legal basis for data processing.

The GDPR and UK GDPR require us to explain the legal bases we rely on to process your personal information:

• Consent: where you have given us permission to use your information for a specific purpose. You can withdraw consent at any time by contacting us at support@mooveenite.com. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Contract performance: where processing is necessary to provide the Services you have requested (account management, watchlist sync, partner matching).
• Legal obligations: where processing is necessary to comply with applicable law, respond to law enforcement, or defend our legal rights.
• Vital interests: where processing is necessary to protect your safety or the safety of a third party.
• Legitimate interests: for purposes such as fraud prevention, security, and service analytics, where our interests are not overridden by your rights.

If you are located in Canada, this section also applies to you.

We process your information based on your express or implied consent, or where permitted by law without consent (e.g. fraud investigations, legal proceedings, safety emergencies, publicly available information, or research approved by an ethics board).

4. When and With Whom Do We Share Your Personal Information?

Sub-processors

• Supabase — database, authentication, and backend infrastructure. Your account data, swipe history, and watchlist are stored on Supabase servers hosted in Portugal (EU).
• RevenueCat — subscription status management. RevenueCat receives an anonymous app user ID and your subscription entitlement state. They do not receive your email or display name unless you contact their support.
• Apple App Store / Google Play Store — in-app purchase processing. See their respective privacy policies for how they handle payment data.

Business transfers

We may share or transfer your information in connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business.

Legal requirements

We may disclose your information where required by law, subpoena, or legal process, or to protect the rights, property, or safety of Jonuma Labs, our users, or others.

5. What Is Our Stance on Third-Party Websites?

The App may contain links to third-party websites or services (for example, links to movie information pages). We are not responsible for the safety or privacy practices of those third parties. Any data you provide to third-party websites is not covered by this Privacy Notice. We recommend reviewing the privacy policies of any third-party sites you visit.

6. How Long Do We Keep Your Information?

We keep your personal information for as long as your account is active or as needed to provide the Services. No purpose in this notice will require us to keep your personal information longer than the period during which you have an account with us.

Anonymous account data that has not been linked to an email address may be deleted after 90 days of inactivity.

When we have no ongoing legitimate need to process your personal information, we will delete or anonymise it. If deletion is not immediately possible (e.g. data stored in backup archives), we will securely isolate it from further processing until deletion is possible.

7. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organisational security measures to protect your personal information, including:

• Encrypted connections (TLS) for all data in transit
• Row-level security (RLS) policies in our database ensuring users can only access their own data
• Authentication credentials stored in hashed form; never in plaintext

Despite these safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise that hackers or other unauthorised third parties will never be able to defeat our security. Transmission of personal information to and from our Services is at your own risk. You should access the Services only within a secure environment.

8. What Are Your Privacy Rights?

Depending on where you are located, you may have rights that allow you greater access to and control over your personal information.

EEA, UK, and Switzerland

Under GDPR and equivalent laws, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data where there is no compelling reason to continue processing it
• Restriction — request that we limit processing of your data in certain circumstances
• Data portability — receive your data in a structured, commonly used, machine-readable format
• Object — object to processing based on legitimate interests or for direct marketing
• Automated decision-making — not to be subject to decisions based solely on automated processing that produce significant effects on you

To exercise these rights, contact us at support@mooveenite.com. We will respond within 30 days. We may need to verify your identity first.

If you believe we are unlawfully processing your personal information, you have the right to complain to your EU Member State data protection authority, the UK ICO, or the Swiss FDPIC. In Portugal, the competent authority is the CNPD.

Withdrawing consent

If we rely on your consent to process your personal information, you have the right to withdraw it at any time by contacting us at support@mooveenite.com. Withdrawal does not affect the lawfulness of processing before withdrawal.

Account information

You can review and change your account information at any time via the Account screen in the App. To delete your account, contact us at support@mooveenite.com. Upon deletion we will deactivate your account and remove it from our active databases. We may retain some information to prevent fraud, troubleshoot problems, or comply with legal requirements.

If you have questions about your privacy rights, email support@mooveenite.com.

9. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature you can activate to signal your preference not to have data about your online activities monitored. No uniform technology standard for recognising and implementing DNT signals has been finalised. We do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard is adopted that we must follow in the future, we will update this notice.

California law requires us to disclose how we respond to web browser DNT signals. Because there is currently no industry or legal standard for recognising or honouring DNT signals, we do not respond to them at this time.

10. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to, correct, or delete the personal information we hold about you, and to withdraw consent to our processing. These rights may be limited in some circumstances by applicable law.

Categories of personal information collected (last 12 months)

We may also collect personal information in the context of receiving help through our customer support channels or responding to your inquiries.

Sources of personal information

We collect the information listed above directly from you (through app usage) and automatically (through server logs and analytics). We receive subscription status from RevenueCat. We do not purchase personal data from third-party data brokers.

How we use and share personal information

See Section 2 for how we use your information and Section 4 for how we share it. We have not sold or shared personal information to third parties for a business or commercial purpose in the past 12 months. We will not sell or share personal information belonging to our users in the future.

Your rights

Under applicable US state laws, you may have the right to:

• Know whether we are processing your personal data
• Access your personal data
• Correct inaccuracies in your personal data
• Request deletion of your personal data
• Obtain a copy of the personal data you previously shared with us
• Non-discrimination for exercising your rights
• Opt out of the sale or sharing of personal data, or profiling for decisions with legal or significant effects (we do not engage in these activities)

How to exercise your rights

Email us at support@mooveenite.com. Under certain laws, you may designate an authorised agent to make a request on your behalf; we may require written proof of authorisation. We will verify your identity before processing your request.

Appeals

If we decline your request, you may appeal by emailing support@mooveenite.com with the subject line “Privacy Rights Appeal.” We will respond in writing with reasons. If your appeal is denied, you may submit a complaint to your state attorney general.

11. Do We Make Updates to This Notice?

Yes. We may update this Privacy Notice from time to time to stay compliant with relevant laws or to reflect changes in our practices. The updated version will be indicated by an updated “Last updated” date at the top of this page. If we make material changes, we may notify you by posting a notice in the App or by sending you a direct notification. We encourage you to review this Privacy Notice periodically.

12. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact us by email at:

Jonuma Labs
support@mooveenite.com

13. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or request its deletion. You may also have the right to withdraw your consent to our processing.

To submit a request, email us at support@mooveenite.com. We will respond within 30 days and may need to verify your identity before fulfilling your request.