Privacy Policy

• Account management — Create, authenticate, and maintain your account.
• Core functionality — Track watched movies, store ratings, manage your watchlist.
• Social features — Friend requests, circles, event planning, and chat coordination.
• Personalized recommendations — On-device ML model and TMDB genre-based recommendations using your rating history.
• Push notifications — Friend requests, circle invitations, event updates, chat messages, and poll reminders.
• Nearby cinema search — Find cinemas near you using GPS location (with your permission).
• Content localization — Adjust movie listings by your detected or selected region and language.
• Advertising — Display banner, interstitial, and rewarded video ads to non-premium users.
• In-app purchases — Manage premium subscriptions via RevenueCat.
• Gamification — CineManiac Score, daily login rewards, and shop items.
• Activity feed — Share your movie ratings and watchlist actions with friends (generated server-side).

• ✓ All data is transmitted over HTTPS/TLS.
• ✓ API keys are obfuscated in the compiled binary using the envied package.
• ✓ Firestore Security Rules enforce access control — only owners can write; reads are scoped to participants.
• ✓ Firebase Storage rules enforce file ownership — users can only write to their own profile image path.
• ✓ Apple Sign-In uses a SHA-256 nonce to prevent replay attacks.
• ✓ RevenueCat webhook requests are validated using time-constant secret comparison to prevent timing attacks.
• ✓ Passwords are managed entirely by Firebase Authentication — we never store or access your password.

CineManiac is not directed at children under the age of 13 (or the minimum age required in your jurisdiction, which may be higher — for example, 16 in some EU member states). We do not knowingly collect personal information from children below the applicable minimum age. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

• Right to access — View your data in-app: profile, movies, friends, and settings.
• Right to rectification — Edit your profile, display name, bio, and other settings at any time.
• Right to deletion — Delete your account in Settings → Danger Zone. See Section 4 for retention details.
• Right to data portability — Contact us to request a copy of your data.
• Right to withdraw consent — Manage notification preferences, revoke location permission, and opt out of ad tracking via the ATT prompt (iOS) or device settings (Android).
• Right to object — Opt out of personalized advertising via your device's advertising settings or the iOS ATT prompt.

CineManiac is a native mobile app and does not use web cookies. We use SharedPreferences (a platform key-value store) to store the following data locally on your device:

• Language and locale preference
• Region preference
• Search history (up to 10 recent queries)
• Password reset cooldown timestamps
• On-device ML model weights (personalized recommendations)
• UI onboarding dismissal flags
• Location permission prompt status

This data remains on your device until you uninstall the app.

Your data is primarily stored on Firebase / Google Cloud infrastructure in the europe-west1 region. However, by using CineManiac, your data may be transferred to and processed in the United States and other countries where Google (Firebase, AdMob, Places), Apple, RevenueCat, and TMDB operate their servers.

These transfers are made under appropriate safeguards as required by applicable data protection law, including the standard contractual clauses provided by these services.

For privacy inquiries, data access or deletion requests, or any questions about this policy, please reach out: