Miru

Privacy Policy

This Privacy Policy describes how Miru Movies ("we", "us", "our") collects, uses, and shares information when you use the Miru Movies mobile application and backend (the "Service") — which helps couples and friends discover and match on movies to watch together.

We take your privacy seriously. This policy is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and applicable privacy laws worldwide.

1. Information We Collect

1.1 Information you provide

• Account information: when you sign in, Firebase Authentication may provide us with your email address, display name, and a unique user identifier. You may also sign in anonymously, in which case only a device-scoped identifier is created.
• Profile preferences: language, region, favourite genres, and similar preferences you set in the app.
• Activity: swipes (like / dislike / skip), watchlist entries, match sessions, and partner links you create (e.g. by sharing an invite code with another user).
• Feedback: any reports, bug descriptions, or suggestions you voluntarily submit.

1.2 Information collected automatically

• Device identifiers: a generated device ID used for anonymous sessions and authentication.
• Technical data: IP address, device model, operating system, app version, language, and timestamps of requests, collected in server logs for security, debugging, and rate-limiting.
• Analytics and crash reports: aggregated usage events and crash diagnostics collected by Firebase Analytics and Firebase Crashlytics on your device. These may include device model, OS version, crash stack traces, and event metadata.

1.3 Information we do not collect

• We do not collect precise geolocation.
• We do not access your contacts, photos, microphone, or camera.
• We do not sell your personal information.

2. How We Use Your Information

We use the information above to:

• Provide core features: authenticate you, generate your personalised movie feed, run match sessions, and sync matches between you and your partner.
• Operate and secure the Service: prevent abuse, apply rate limits, investigate incidents, and debug errors.
• Improve the Service: understand which features are used and which movies resonate with users, via aggregated analytics.
• Communicate with you: respond to feedback or support requests you send us.

Under GDPR, the legal bases we rely on are: performance of a contract (to deliver features you request), legitimate interests (security, analytics, service improvement), and consent where required (e.g. for certain analytics events in applicable regions).

3. Third-Party Services

Miru Movies relies on the following processors. Each handles data under their own privacy terms:

• Google Firebase (Authentication, Realtime Database, Analytics, Crashlytics) — used for sign-in, live match synchronisation, and diagnostics. See Firebase Privacy.
• Google Cloud Platform (Cloud Run, Cloud SQL, Memorystore) — hosts our backend and stores your account data. See Google Cloud Privacy Notice.
• Google Gemini — generates the "hype" narratives shown for movies. Only movie metadata is sent; no personal data is shared.
• TMDB and OMDB — provide movie metadata. We fetch movie information from them; no personal data is shared.

4. Data Sharing and Disclosure

We share your information only in the following circumstances:

• With your partner(s): when you link with another user, certain activity is shared — specifically, the movies you have swiped on within a shared session, so we can compute mutual matches. Your full swipe history outside of shared sessions is not shared.
• With service providers: the processors listed in Section 3, strictly to operate the Service.
• For legal reasons: when required by law, court order, or to protect the rights, safety, or property of our users or the public.
• In a business transfer: if the Service is acquired or merged, your information may transfer to the successor entity, subject to this policy.

We do not sell your personal information and we do not share it with advertisers for cross-context behavioural advertising.

5. Data Retention

We retain your data only for as long as necessary to provide the Service and for legitimate business or legal purposes:

• Account and profile data: until you delete your account.
• Swipes, watchlist, and match history: until you delete your account or remove the item.
• Server logs: up to 90 days.
• Analytics and crash data: subject to Firebase's default retention.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated personal data.
• Export a copy of your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time where we rely on consent.
• Lodge a complaint with your local data protection authority.

California residents additionally have the right to know the categories of personal information collected, request deletion, and opt out of sale/sharing (we do not sell or share for cross-context advertising). You will not be discriminated against for exercising these rights.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. International Data Transfers

Miru Movies is available worldwide. Your data may be processed on servers located outside your country of residence, including in the United States and the European Union, where Google Cloud operates. Where applicable, we rely on Standard Contractual Clauses or equivalent safeguards for international transfers.

8. Security

We use industry-standard technical and organisational measures to protect your data: HTTPS/TLS encryption in transit, encrypted storage at rest, hashed credentials, rate limiting, and access controls. No internet service is perfectly secure, however, and we cannot guarantee absolute security.

9. Children's Privacy

Miru Movies is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective date" above and, where appropriate, notify you in the app. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Miru Movies
Email: [email protected]