Privacy Policy

Data Controller

The data controller responsible for processing your personal data is:

MisPelis
Email: contacto@mispelis.app

If you have any questions or concerns about how we process your personal data, you can contact us using the email address above or through ourcontact section.

Data Protection Officer (DPO)

For users in the European Union and other jurisdictions that require a Data Protection Officer, you can contact our DPO for any privacy-related inquiries or concerns:

Data Protection Officer
Email: contacto@mispelis.app
Subject: "Data Protection Officer Inquiry"

Our DPO is available to assist you with questions about how we process your personal data, to help you exercise your privacy rights, and to address any concerns you may have about our data protection practices.

Information We Collect

"MisPelis" is an application that minimizes data collection. All information, such as watched movies or preferences, is stored exclusively locally on the user's device when no account is created. We have no access to that information.

Categories of Personal Data Collected:

• User Account Information: If you create an account, we store your username/email address, language preferences, and account creation date.
• Content Preferences: Information about watched movies, favorite movies, and viewing preferences that you choose to store in your account.
• Device Information: Through third-party services (AdMob, Firebase Analytics, Meta), anonymous device identifiers may be collected for advertising and analytics purposes. You can opt-out of this data collection in the app settings.
• Location Data: If you enable location services, precise location data may be collected for location-based features. This is optional and can be disabled.
• Reviews: If you post reviews, we store their text, the rating and your public name (alias). See theReviews section for details.

We do not collect sensitive personal information such as health information, financial information, or biometric data.

Why We Process Your Data

We process your personal data for the following purposes:

• Service Provision: To provide and maintain our application services, including account management and content synchronization across your devices.
• User Experience: To personalize your experience by remembering your preferences, watched movies, and favorite content.
• Analytics: To understand how users interact with our app and improve our services (through Firebase Analytics, which can be disabled).
• Advertising: To display relevant advertisements through Google AdMob (you can opt-out of personalized ads).
• Legal Compliance: To comply with applicable laws and regulations.

Legal Basis for Processing (GDPR): We process your personal data based on:

• Consent: When you create an account and consent to data processing.
• Legitimate Interest: For analytics and service improvement purposes.
• Contract Performance: To provide the services you have requested.

Reviews

If you have an account, you can post reviews of movies and TV shows. This is what happens to them.

What is published

The review text, the rating (if you add one) and your public name (alias) are published. Anyone can see them, whether or not they have an account. Your email address is never published. If you don't want to be recognized, choose an alias that doesn't reveal your identity.

Where they are stored

Reviews are stored in Supabase, our database provider, on servers located in London (United Kingdom).

Automated moderation

Before a review is published, its text, your alias and the title of the movie or show are sent to Groq, in the United States, which automatically checks them against our community guidelines. Depending on the result, the review is published, rejected (we tell you why, and you can edit it and submit it again) or held for review until we check it ourselves; while it is held, only you can see it. We keep a log of every moderation decision.

If you think a decision is wrong, you can appeal it by writing tocontacto@mispelis.app with the subject line "Review Appeal". We will review the case manually.

Reports and blocking

Any user can report a review. If you report while signed in, the report is linked to your account; if you report without signing in, we store a device identifier to prevent repeated or abusive reports. We review reported reviews manually.

If you block an author, the block is stored only on your device: it never reaches us and the author is not told you blocked them.

How long they are kept

• Reviews: until you delete them or delete your account.
• Moderation logs: 90 days.
• Anonymous reports (made without signing in): 90 days.

Legal basis: Publishing and displaying your reviews is part of the service you request (contract performance). Moderating them and handling reports is based on our legitimate interest in keeping the community safe and complying with the law.

Third-Party Sharing

We do not sell your personal data. However, we may share your personal data with the following third-party service providers to operate our application:

• Google AdMob: We use Google AdMob to display advertisements. AdMob may collect device identifiers and usage data for advertising purposes. You can opt-out of personalized ads in the app settings.Google Privacy Policy
• Firebase Analytics (Google): We use Firebase Analytics to collect anonymous usage statistics. This service can be disabled in app settings.Firebase Privacy Policy
• Meta Pixel: We use the Meta Pixel (on the website) and the Meta SDK (in the app) to understand how many app installs come from our ads on Facebook and Instagram. Meta may receive device identifiers and data about interactions with those ads. On this website, the pixel only runs if you accept cookies, and you can change your choice at any time using the "Cookie settings" link in the footer. In the app, you can limit it from your device's privacy settings (on iOS, under Settings › Privacy & Security › Tracking).Meta Privacy Policy
• Supabase: We use Supabase to host user accounts, synced data and reviews, on servers located in London (United Kingdom).Supabase Privacy Policy
• Groq: We use Groq, in the United States, for optional AI-powered content generation features and to automatically moderate reviews. For moderation, Groq receives the review text, the author's alias and the reviewed title (see theReviews section).Groq Privacy Policy

We require all third-party service providers to protect your personal data and use it only for the purposes specified. We do not share your personal data with any other third parties except as described in this policy or as required by law.

Do We Sell Your Data? No, we do not sell your personal data to third parties.

Do We Share Your Data? We only share data with the third-party service providers listed above as necessary to provide our services. We do not share your personal data for purposes other than those described in this policy.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: We retain your account information (username, email, preferences) until you delete your account or request deletion of your data.
• Content Preferences: Your watched movies, favorites, and preferences are retained until you delete your account or delete them manually from the app.
• Reviews: Kept until you delete them or delete your account. Moderation logs and anonymous reports are deleted after 90 days.
• Analytics Data: Anonymous analytics data may be retained in aggregated form for up to 26 months, after which it is automatically deleted.
• Advertising Data: Advertising-related data collected by third-party services (AdMob) is subject to their respective retention policies.

You can request deletion of your personal data at any time by deleting your account through the app settings or by contacting us at contacto@mispelis.app.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data. Below we describe these rights and how you can exercise them.

Right to Access

You have the right to request access to the personal data we hold about you. This includes the right to know what categories of personal information we collect, use, disclose, and share. You can view most of your data directly in the app through your account settings. To request a copy of all your personal data, please contact us atcontacto@mispelis.app with the subject line "Access Request".

Right to Delete

You have the right to request deletion of your personal data.You can delete your account and all associated data at any time directly from the app:

1. Go to the My Profile tab
2. Tap the Settings icon (top right)
3. Select "Data" → "Delete my account"

You can also request deletion by contacting us atcontacto@mispelis.app with the subject line "Deletion Request". Please note that some data may be retained if required by law or for legitimate business purposes (such as fraud prevention), but we will inform you of any such exceptions.

Right to Correct

You have the right to request correction of inaccurate or incomplete personal data. You can update most of your account information directly in the app settings. For other corrections, please contact us atcontacto@mispelis.app with the subject line "Correction Request". We will correct your data within a reasonable timeframe.

Right to Know About Sale or Sharing

Your Right to Know: You have the right to know whether we sell or share your personal data, and if so, with whom and for what purposes.

We do not sell your personal data. We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Under applicable privacy laws, including the CCPA, we do not engage in the sale of personal information.

We do share limited data with third-party service providers (Google AdMob, Firebase Analytics, Meta) as necessary to provide our services, as described in the "Third-Party Sharing" section above. This sharing is not considered a "sale" under applicable privacy laws. Under California law, "sharing" refers to disclosing personal information to a third party for cross-context behavioral advertising. Install measurement with Meta may be considered "sharing" in this sense; you can opt out of it as described below. Other than that, we do not share data for cross-context behavioral advertising purposes.

Right to Opt-Out of Sale or Sharing

Your Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal data for certain purposes, including cross-context behavioral advertising.

Since we do not sell your personal data, there is no need to opt-out of sale. However, you can control how your data is used for advertising purposes:

• In-App Settings: You can opt-out of personalized ads through the app settings when you first launch the app or at any time in the settings menu.
• Analytics: You can disable Firebase Analytics in the app settings.
• Google AdMob: For Google AdMob, you can manage your ad preferences through Google'sAd Settings.
• Meta: On the website, decline cookies using the "Cookie settings" link in the footer. In the app, limit tracking from your device's privacy settings.
• Email Request: To opt-out of data sharing for any other purpose, please contact us atcontacto@mispelis.app with the subject line "Opt-Out Request".

We will honor your opt-out request within a reasonable timeframe, typically within 15 business days of receiving your request.

GDPR Rights (European Union Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request access to your personal data.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Erasure: You can request deletion of your personal data.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request a copy of your data in a portable format.
• Right to Object: You can object to processing of your data for certain purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country if you believe we have violated your data protection rights. For more information, visit your local data protection authority's website.

To exercise any of these rights, please contact us atcontacto@mispelis.app. We will respond to your request within one month.

CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell. We do not sell your personal data to third parties.
• Right to Know About Sale: You have the right to know whether we sell your personal information. We do not sell your personal information.
• Right to Know About Sharing: You have the right to know whether we share your personal information. We share limited data only with service providers necessary to operate our app, as described in the "Third-Party Sharing" section above.
• Right to Delete: You have the right to request deletion of your personal information. Some exceptions may apply as required by law.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. We do not sell your data, but you can control data sharing as described in the "Right to Opt-Out" section above.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. We will not deny you goods or services, charge you different prices, or provide you a different level or quality of services for exercising your privacy rights.

To exercise your CCPA rights, please contact us atcontacto@mispelis.app with the subject line "CCPA Rights Request". We will respond to your request within 45 days as required by California law.

VCDPA Rights (Virginia Users)

If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (VCDPA):

• Right to Access: You have the right to confirm whether we process your personal data and to access your personal data.
• Right to Correct: You have the right to correct inaccuracies in your personal data.
• Right to Delete: You have the right to delete your personal data that we have obtained or that we maintain.
• Right to Data Portability: You have the right to obtain a copy of your personal data in a portable and readily usable format.
• Right to Opt-Out: You have the right to opt-out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell your personal data, but you can opt-out of targeted advertising as described in the "Right to Opt-Out" section above.

To exercise your VCDPA rights, please contact us atcontacto@mispelis.app with the subject line "VCDPA Rights Request". We will respond to your request within 45 days as required by Virginia law.

LGPD Rights (Brazil Users)

If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD - General Data Protection Law):

• Right to Confirmation: You have the right to confirm the existence of processing of your personal data.
• Right to Access: You have the right to access your personal data.
• Right to Correction: You have the right to request correction of incomplete, inaccurate, or outdated personal data.
• Right to Anonymization, Blocking, or Deletion: You have the right to request anonymization, blocking, or deletion of unnecessary or excessive personal data or data processed in violation of the LGPD.
• Right to Data Portability: You have the right to request the portability of your personal data to another service or product provider.
• Right to Deletion: You have the right to request deletion of personal data processed with your consent, except in cases where retention is permitted or required by law.
• Right to Information: You have the right to obtain information about public and private entities with which we share your personal data.
• Right to Revoke Consent: You have the right to revoke your consent at any time.

To exercise your LGPD rights, please contact us atcontacto@mispelis.app with the subject line "LGPD Rights Request". We will respond to your request within 15 days as required by Brazilian law.

Changes to Our Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by updating the "Last updated" date at the top of this Privacy Policy. Changes to this Privacy Policy are effective when they are posted on this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email:contacto@mispelis.app
Contact Page:Visit our contact section

We will respond to your inquiry as soon as possible, typically within 30 days.