Privacy Policy

Data Controller (GDPR Requirement)

Moviqo AI
Legal Entity: [To be provided]
Address: [To be provided]
Country: [To be provided]
Email: app.support@moviqo.ai

We are not required to appoint a Data Protection Officer under GDPR.

For any data protection questions, contact us at: app.support@moviqo.ai

Table of Contents

1. Types of personal information we collect
2. How we use your information
3. Legal bases for processing your data (GDPR)
4. Sharing of your personal information
5. Your privacy rights
6. Children's privacy
7. International data transfers
8. Changes to this Privacy Policy
9. California residents' privacy rights (CCPA)
10. U.S. residents' state-specific rights
11. Data retention
12. "Do Not Track" signals
13. Contact us

1. Types of Personal Information We Collect

In short: We collect information you provide, information from third-party partners, and information automatically transmitted by your device. This includes data for account management, analytics, payments, app functionality, and security.

1.1. Information You Provide Directly

Depending on how you use Moviqo AI, you may provide:

1. email address
2. username
3. password or authentication credentials
4. payment-related data (managed by platform providers such as Apple/Google)
5. preferences and inputs related to your learning path
6. communication history (support messages, feedback)
7. user-generated content entered into the AI chat (GDPR requirement)

We use this information to create accounts, provide core functionality, personalize the Service, respond to support requests, and ensure proper operation.

If you choose not to provide required information (such as account credentials), some features of the Service may not be available.

1.2. Information From Third Parties

We work with selected partners that provide essential operational tools:

1. Apple App Store / Google Play Store - distribution, payment processing, crash logs
2. Amplitude - analytics related to engagement, retention, product performance
3. Firebase / Google Cloud - hosting, authentication, crash reporting
4. RevenueCat - subscription validation
5. Email and communication providers - sending transactional messages
6. Push notification service providers

These providers may process data in the United States or other countries. Transfers are safeguarded through Standard Contractual Clauses.

They process data under their own privacy policies and are contractually restricted from using it beyond their service purpose.

We will inform you whenever we receive personal information about you from third parties, as required by GDPR.

1.3. Information Collected Automatically

1.3.1. Device & Technical Data

Automatically transmitted data may include:

1. device model, OS version, hardware characteristics
2. IP address
3. language, region, and timezone
4. internet provider or mobile carrier
5. app activity logs, crash reports, performance metrics

1.3.2. Transaction Information

Purchases are securely handled by Apple/Google. Moviqo AI does not store full payment card numbers.

We may receive limited metadata such as:

1. purchase status
2. product type
3. transaction amount
4. transaction date/time

1.3.3. Cookies & Tracking Technologies

Moviqo AI mobile app does not use cookies directly.

Our website may use:

1. essential cookies (required for operation)
2. performance cookies (analytics)
3. marketing cookies (only with consent)

If cookies requiring consent are used, you will be asked to provide consent via a cookie banner. You may withdraw cookie consent at any time using your browser settings or the cookie consent tool (if available).

1.4. Purposes Linked to Each Data Category (GDPR Requirement)

1. Account data: account creation, authentication, service access
2. Learning preferences: personalization
3. Device data: performance monitoring, debugging
4. Analytics: product improvement
5. Transaction metadata: purchase validation and support
6. Communication data: support and feedback
7. User input to the AI model: generating responses (not used for marketing unless explicit consent is obtained)

1.5. Sources of Personal Data

We collect data from:

1. you directly
2. your device automatically
3. third-party service providers (e.g., app stores, analytics platforms)

2. How We Use Your Information

We use your information to:

1. provide and maintain functionality
2. manage user accounts and authentication
3. deliver customer support
4. send essential administrative messages
5. process in-app purchases and refunds
6. request feedback
7. send optional push notifications or emails (with consent where required)
8. analyze usage and trends
9. develop new features
10. comply with legal obligations
11. prevent fraud, abuse, and violations

Withdrawing Consent (GDPR Requirement)

You may withdraw consent by:

1. disabling email marketing via unsubscribe link
2. disabling push notifications in device settings
3. contacting us at app.support@moviqo.ai

We do not use personal data for automated decision-making.

3. Legal Bases for Processing Your Personal Data (GDPR)

If you reside in the EEA or UK, we process your data under:

3.1. Consent

Used for:

1. marketing
2. optional features

You may withdraw consent anytime.

3.2. Performance of a Contract

Necessary for:

1. account creation
2. access to the app
3. payment processing
4. support
5. delivering the Services

3.3. Legitimate Interests

Used for:

1. analytics and product improvement
2. security and fraud prevention
3. service-related communication

3.4. Legal Obligations

Used to:

1. respond to legal requests
2. maintain financial records
3. comply with regulatory requirements

4. Sharing of Your Personal Information

We share data only with:

1. service providers (hosting, analytics, payment validation, messaging, support tools)
2. legal authorities when required
3. business transaction parties (mergers, acquisitions etc.)

A full list or categories of processors is available upon request (GDPR Art. 28 requirement).

5. Your Privacy Rights

In short: You may access, update, correct, delete, or restrict your personal data.

You may request:

1. access
2. correction
3. deletion
4. restriction of processing
5. withdrawal of consent
6. data portability - the right to receive your personal data in a structured, commonly used, and machine-readable format.

You also have the right to:

7. object to the processing of your personal data when it is based on our legitimate interests;
8. request the restriction of processing in certain circumstances (e.g., if you contest the accuracy of the data);
9. not be subject to a decision based solely on automated processing, including profiling.

To exercise your rights, contact us at: app.support@moviqo.ai

We respond to all requests within one month. This period may be extended by two further months if necessary, taking into account the complexity and number of requests.

Requests are generally free of charge unless they are manifestly unfounded or excessive.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights under GDPR have been violated. You may also lodge a complaint with your local Data Protection Authority or with the supervisory authority in the EU member state of your residence or workplace.

6. Children's Privacy

Moviqo AI is intended for users aged 6+.

We do not knowingly collect more data from children than necessary for functionality.

Parents may request:

1. access
2. deletion
3. restriction

For users located in the EEA or UK, if the user is under the relevant age of digital consent (13-16 depending on the country), parental consent may be required for certain processing activities.

Email: app.support@moviqo.ai

7. International Data Transfers

We may transfer your data internationally.

For EEA/UK users, transfers rely on:

1. Standard Contractual Clauses (SCCs)
2. Adequacy Decisions

These mechanisms ensure appropriate levels of protection.

Transfers to the United States (e.g., Amplitude) are based on Standard Contractual Clauses combined with supplementary security measures.

You may request a copy of the applicable Standard Contractual Clauses by contacting us at app.support@moviqo.ai.

8. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

1. changes in our practices
2. new features
3. legal requirements

Significant updates may be communicated via:

1. in-app alerts
2. website notice
3. email

Continued use of Moviqo AI signifies acceptance of the updated policy.

9. California Residents' Privacy Rights

California residents may request:

1. disclosure of collected data
2. deletion
3. opt-out of sale (Moviqo does not sell data)

We do not discriminate based on privacy rights.

Submit requests to: app.support@moviqo.ai

10. U.S. Residents' Privacy Rights

Some U.S. states grant additional rights, including:

1. confirm whether data is processed
2. access and portability
3. opt-out of targeted advertising
4. appeal denied requests

Appeals: subject: "Data Rights Appeal - Moviqo AI"

11. Data Retention

We retain your personal information only as long as necessary for:

1. providing the Services
2. legal compliance
3. dispute resolution
4. enforcing agreements

Retention periods:

1. Account data: until account deletion
2. Analytics data (device data, usage logs): up to 24 months
3. Transaction metadata: 5 years (legal requirement)
4. Communication records: up to 24 months
5. User-generated content (AI chat history): up to 12 months unless manually deleted
6. Cookies: depending on cookie type (session or persistent)

Data is securely deleted or anonymized after expiry.

Security Measures (GDPR Art. 32 Requirement)

We implement:

1. encryption in transit and at rest
2. pseudonymization where applicable
3. access controls
4. secure data storage
5. regular security audits
6. minimization of stored data

However, no system is completely secure.

12. "Do Not Track" Signals

Moviqo AI does not currently respond to "Do Not Track" browser signals.

Third-party providers may follow their own DNT rules.

13. Contact Us

For questions, GDPR requests, or privacy concerns:

app.support@moviqo.ai