Privacy Policy
Movie Night: Swipe & Match (“the app”) helps couples, families and friends agree on what to watch: everyone swipes through the same movies and series, and the titles everyone likes become matches. The app is built to need as little about you as possible. There is no sign-up, no email address, no phone number, no ads and no analytics.
“We” means TroySoft, the publisher of the app. We are responsible for the personal data described here (the data controller).
- What we collect
- On your device
- What we don’t do
- Who processes data
- Deleting your data
- Your rights
- Children
What we collect, and why
Everything below is stored on our server so your groups, swipes and matches work across phones.
| Data | Why | How long |
|---|---|---|
| Anonymous account | When you first open the app, the server creates a random user ID and device ID. It keeps a one-way hash of a random device secret, your phone’s platform (iOS or Android), the app version and when you were last active. This signs you in without a sign-up. | Until you delete your account. If you never linked Google or Apple, the account is deleted automatically after 180 days without use. |
| Your profile | The nickname and avatar you choose (avatars are drawings from the app), your age group (13–15 or 16+), the app language and your country. Your group sees your nickname and avatar. The language is used for the app and for notifications. The country picks which age ratings apply; it is suggested from your phone’s region setting and you can change it in Settings. | Until you delete your account. |
| Child profiles | The name, avatar and age group (0–6, 7–9, 10–12 or 13–15) a parent enters for a child. No birth date. This lets a child swipe on the parent’s phone and keeps titles within the child’s age. | Until the parent or the group admin removes the profile, or the parent deletes their account. |
| Favourite genres | Titles in these genres appear a little earlier in your deck. | Until you change them or delete your account. |
| Groups | Group name, type (couple or family), country, members and invite codes, to run your groups and invitations. | Invite codes expire after 10 minutes. A group stays until it is deleted, or until its last adult leaves. |
| Swipes and matches | Your likes, passes and “seen it” marks, the titles you have seen, the matches, and the titles your group chose or watched. They are used to find matches and to stop showing titles you have already seen. Other members never see your individual swipes: a match only shows how many people liked a title. | Swipes are deleted 30 days after a Movie Night ends. Matches and chosen titles stay until the group is deleted. Your “seen” list stays until you delete your account. |
| Push token | A token from your phone’s notification service, so we can tell you when there is a match, when someone starts a Movie Night, and when everyone has finished swiping. | Replaced when your phone issues a new one. Removed when it stops working or when you delete your account. |
| Google or Apple sign-in (optional) | Only if you link one in Settings: the unique ID of that Google or Apple account, so you can restore your account on a new phone. We don’t store your email address or name. For Apple we also keep a token that is used only to cancel the Apple sign-in when you delete your account. | Until you delete your account. |
| Server logs | Your IP address, the time and the request your app made, with tokens and secrets removed. Used for security, to stop abuse and to fix errors. | 14 days. |
We use this data to provide the app you asked for (performing our agreement with you) and, for server logs, for our legitimate interest in keeping the service secure. Notifications are sent only if you allow them in your phone’s settings.
What stays on your device
- The device secret that signs you in, kept in the iOS Keychain or the Android Keystore.
- App settings, such as your language, and your answer to the age question.
- The camera picture when you scan an invite QR code. The code is read on your phone, and the picture is never uploaded.
What we don’t do
- No ads, and no advertising ID.
- No analytics or tracking tools. We don’t track you across other apps or websites.
- We don’t sell your data or share it for marketing.
- We don’t ask for your email, phone number, real name or birth date, and the app doesn’t access your contacts, photos, location or microphone.
- The camera is used only to scan invite QR codes, and only while the scanner is open.
- We never show other members how you swiped.
Who processes data for us
- Our server, in a data centre in the European Union, stores the data listed above.
- Firebase Cloud Messaging (Google) delivers notifications. It receives your push token and the notification text, such as a nickname and a movie title. On iPhone it hands them to the Apple Push Notification service. See Firebase’s privacy information and Apple’s privacy policy.
- Google Sign-In and Sign in with Apple, only if you link them. Their own policies apply: Google, Apple.
- TMDB (The Movie Database) provides the movie and series information. Posters load from TMDB’s image server, so TMDB sees your IP address, as with any image on the web. No account data is sent to TMDB. If TMDB is slow, the poster comes from our server instead. See TMDB’s privacy policy.
- Google ML Kit reads QR codes on your phone. The image stays on the device, but ML Kit may send Google basic information about how the scanner performs, such as the device model. See the ML Kit terms.
- Rating links in the app open IMDb, Rotten Tomatoes, Metacritic or TMDB in a browser view. Those sites’ own policies apply there.
Some of these providers process data outside your country, for example in the United States, under their own safeguards for international transfers.
How long we keep it
The table above gives the period for each item. In short: account data stays until you delete your account, swipes are removed 30 days after a Movie Night ends, unused anonymous accounts are removed after 180 days, and server logs after 14 days. Database backups are kept for 14 days, so deleted data also disappears from backups within 14 days.
Deleting your data
In the app, open Settings → Delete account and type the confirmation word. This deletes, right away, your account, your profile, the child profiles you manage, your swipes and your group memberships. Groups where you are the only adult are deleted. If you are the admin of a group with other adults, the adult who joined first becomes the admin. A linked Apple sign-in is cancelled at Apple too.
You can also leave a group, or remove a child profile you added, from the group’s screen in the Groups tab.
No longer have the app? See how to delete your account by email.
Your rights
Depending on where you live (for example under the GDPR in the EU, the UK GDPR, the KVKK in Türkiye, or the CCPA in California), you can ask us to tell you what data we hold about you, to give you a copy, to correct it, to delete it, or to stop or limit using it. You can also complain to your data protection authority.
You can do most of this yourself in Settings. To ask us, write to support@troysoft.com.tr. Because we don’t know your name or email address, tell us how to find your account: the Google or Apple account you linked, or your nickname, your group names and when you last used the app. We answer within 30 days.
We don’t sell personal information and don’t share it for cross-context behavioural advertising.
Children
The app is for people aged 13 and over. It asks your age before anything else, and people under 13 cannot create an account. Children under 13 can only take part as a child profile that a parent creates on the parent’s own phone. For these we store only the name, avatar and age group the parent enters, and the parent can edit or delete the profile at any time. If you think a child under 13 has created an account, contact us and we will delete it.
Security
All traffic between the app and our server is encrypted (HTTPS). The server stores only a hash of your device secret, sign-ins use short-lived tokens, and tokens and secrets are removed from logs. Requests are rate-limited to stop abuse.
Changes
If we change this policy, we update the date at the top. If a change matters for how your data is used, we will also tell you in the app.
Contact
TroySoft · support@troysoft.com.tr