Privacy Policy

This is the privacy policy for mnite (“the app”), a movie-discovery and group-decision app developed by Marton Biro. The app is available on the Apple App Store and Google Play.

If you have any questions about this policy or want your data deleted, contact: info@mnite.app.

The terms governing your use of the app, including subscriptions, are in our Terms of Service.

1. What we collect

When you use mnite, the following data is stored on our servers:

Account information — email address and a hashed password you provide at sign-up, plus an optional first name, username, and profile photo, all shown to other group members. If you add a profile photo, the image you choose is uploaded to and stored on our servers.
Taste data — the ratings you give to movies, which movies you save for later, and which movies you mark as watched.
Group activity — the groups you create or join, who else is in them, and the choices you make in shared “Feeling Lucky” sessions (lobby joins, picks, results).
Reviews and replies — the text you write, whether you marked it as a spoiler, the reaction you gave the movie, and when you posted or edited it. These are public to everyone who uses mnite and are shown under your username and profile photo.
Moderation data — the reports you make about reviews or replies (the reason and any detail you add), the users you block, the threads you mute, when you agreed to the community rules, and whether your community features have been warned about or restricted because many members blocked you. Reports are not shown to the person you reported.
Device push token — an anonymous identifier issued by Apple Push Notification service / Firebase Cloud Messaging so we can deliver push notifications to your device. We do not receive your phone number or contacts.
Session metadata — a per-install identifier used to enforce that a single account is only signed in on one device at a time, plus standard technical metadata (sign-in time, app version) that comes with using a backend service.
Crash & diagnostic data — when the app crashes or hits an error in a released build, Firebase Crashlytics records a crash report (stack trace, device model, operating-system version, and app version) tagged with your account’s pseudonymous user ID, so we can reproduce and fix the bug. This is not collected in development builds.

We do not collect: your location, contacts, your photo library (beyond the single image you pick as a profile photo), microphone, calendar, health data, advertising identifiers, payment information, or browsing history outside the app.

2. How we use it

Your data is used only to operate the app’s features:

Sign you in and keep your account secure.
Show you personalised recommendations on the For You tab based on your taste ratings.
Learn from your taste to improve recommendations — we analyse the movies you rate, save, and mark as watched to build a taste profile, and we compare taste profiles across users (especially the members of a group you belong to) so we can suggest films that people with similar taste have enjoyed. Within a group this may surface aggregate hints such as “3 of you love this director,” but never another member’s individual rating on a specific film. This is done with our own algorithms and is not used to train external AI models.
Power group features — letting people in your group see your first name, your “Feeling Lucky” picks, and shared decisions.
Show your reviews and replies to other users, and keep them safe: rejecting posts that contain blocked language, hiding content between people who have blocked each other, counting how many members have blocked an account so we can warn or restrict it, and looking at reports so we can remove content or delete accounts that break our Terms of Service. Each report is emailed to us with the reported text and the usernames involved.
Send push notifications related to your account and groups (group invitations, accepted invites, “Feeling Lucky” lobbies starting, replies to reviews you wrote or replied to, new reviews from people in your groups, and similar in-app events). Separately, if you leave “Reminders & tips” on in the app's settings, we may send occasional reminder pushes, such as a prompt to review a movie you recently rated; you can turn these off at any time. Each type of review notification has its own switch in the app's settings. We do not send advertising.
Diagnose bugs and improve the app. Crash reports from Firebase Crashlytics and short-lived server logs help us find and fix problems; they may include technical metadata but are used only for debugging, not to profile users.

We do not sell your data, share it with advertisers, or use it to train AI models.

3. Third parties we rely on

mnite is built on a small number of trusted third-party services. Your data is stored or processed by:

Resend — sends our emails: the welcome email to your address, and internal alerts to us about reports and restrictions (which include the reported text and the usernames involved). Resend privacy policy.
Supabase — hosts our authentication system and database (account, taste, group, and session data). Supabase privacy policy.
Firebase Cloud Messaging (Google) — delivers push notifications. We send your push token and the message payload; Google does not see your account email through this service. Firebase privacy information.
Firebase Crashlytics (Google) — receives crash and diagnostic reports (stack trace, device model, OS version, app version, and your pseudonymous user ID) when the app crashes, so we can fix bugs. Firebase privacy information.
Apple App Store Connect / Google Play Console — distribute the app and provide each platform’s standard crash and usage metrics if you opted in at the OS level. If you request a refund on a subscription, we may share data about how you used the paid features with Apple so it can decide the request. Apple privacy policy · Google Play privacy policy.
The Movie Database (TMDB) — provides movie metadata (titles, posters, descriptions). The app fetches movie data from TMDB; we do not send TMDB any information about you.

Aside from Firebase Crashlytics' crash diagnostics, we do not use third-party analytics, advertising, or attribution SDKs.

4. Movie data and third-party content

All movie titles, descriptions, artwork, posters, cast/crew information, and related metadata shown in mnite are supplied by The Movie Database (TMDB) and belong to TMDB and the respective studios, distributors, and rights holders. mnite does not own this content and does not claim any intellectual property rights in it — it is displayed solely to help you discover and discuss movies. This product uses the TMDB API but is not endorsed or certified by TMDB. If you are a rights holder and have a concern about content displayed in the app, contact us at info@mnite.app.

5. Where data is stored

Data is stored on Supabase and Google Cloud infrastructure in the regions those providers operate. Transfers between your device and our backend use HTTPS/TLS.

6. How long we keep it

Account, taste, and group data — kept for as long as your account exists.
Reviews and replies — kept until you delete them. If your account is deleted, they stay in the app de-identified, as described in section 7.
Reports, blocks and mutes — kept while they are relevant to moderation. When your account is deleted, your blocks and mutes are deleted, and any free-text detail you added to reports is erased. The fact that a report was made (which item, which reason) is kept, attached to your de-identified account, as moderation history. The same goes for any warning or restriction on your account.
Device push tokens — replaced whenever your device issues a new one; old tokens are removed when they are reported invalid by Apple/Firebase.
Crash reports — retained by Firebase Crashlytics for up to 90 days, then automatically deleted.
Server logs — kept for a short rolling window for debugging (typically less than 30 days) and then discarded.

7. Your rights

You can:

Access the data on your account by signing in to the app — your profile, taste ratings, saved movies, and groups are all visible inside the app.
Delete your account from within the app (in your profile settings), or by emailing info@mnite.app from the address associated with your account. Either way, we will permanently delete or de-identify your personal data — your profile (name, username, photo, email), group memberships, push tokens, and session records — within 30 days. Your movie ratings, saves, and watched history are de-identified (detached from your name, email, and account) but may be kept in aggregate so recommendations keep working for other members; once de-identified they can no longer be traced back to you. Reviews and replies you wrote are not deleted with your account: we remove your name, username and profile photo from them and show them as written by “@deleted_user”, but the text stays as you wrote it, and it may still reveal something about you. If you want that text gone, delete your reviews and replies in the app before deleting your account, or email us and we will remove them. The same applies if we delete your account for breaking our Terms of Service.
Withdraw push notification consent by turning off notifications for mnite in iOS Settings → Notifications.
Ask questions or raise complaints at the same email address. If you are in the EU/UK and you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

8. Children

mnite is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect data from children. If you believe a child has created an account, email info@mnite.app and we will delete it.

9. Security

We use industry-standard practices: passwords are hashed by Supabase Auth, all transport is encrypted with TLS, and Supabase Row Level Security policies limit each user to reading and writing only their own rows (with explicit exceptions for shared group data that you have chosen to participate in).

10. Changes to this policy

If we make material changes to this policy, we will post the new version at the same URL and update the “Last updated” date. For material changes that affect existing users, we will also notify you in-app or by email before the change takes effect.

11. Contact

Marton Biro

Email: info@mnite.app