Privacy Policy — Movi

1. Controller

Jonas Pundt Brookstraße 15, 49692 Cappeln Email: jonas@jopu.dev

2. Data We Process

We process the following personal data:

• Account data: email address, name (optional), sign-in method (Apple or email) • Location data: your approximate location, if you grant access, used to calculate distances to places • Usage data: places and events you save or mark as favorites; places and events you submit • Device data: Apple refresh token when signing in with Apple (required for account deletion per Apple guidelines) • Pseudonymous usage statistics: which app features are used, linked to a random device identifier (can be turned off, see section 7)

3. Purposes and Legal Basis

We process your data for the following purposes:

• Providing the app and your account (Art. 6(1)(b) GDPR – contract performance) • Personalizing your discovery feed based on saved places and events (Art. 6(1)(b) GDPR) • Location-based sorting of results, if you grant access (Art. 6(1)(b) GDPR) • Moderating submitted content (Art. 6(1)(f) GDPR – legitimate interest)

4. Data Sharing

Your data is not sold or shared with third parties for advertising. We use the following service providers to operate the app:

• Supabase Inc. (database infrastructure and authentication, EU servers) • Apple Inc. (Sign in with Apple; only if you choose this sign-in method) • PostHog Inc. (pseudonymous usage statistics, EU servers; can be turned off, see section 7)

5. Retention

Your data is stored for as long as your account is active. Upon account deletion, all personal data is promptly deleted. Submitted places and events are anonymized (account association removed) and may continue to appear in the app.

6. Your Rights

You have the right to access, correct, delete, restrict processing of, and port your data. You can delete your account and all associated data at any time in the app under Profile → Delete account. For further requests, contact: jonas@jopu.dev

You also have the right to lodge a complaint with the competent data protection supervisory authority.

7. Cookies and Tracking

The app does not use cookies. There is no advertising or cross-app tracking, and no advertising identifiers (IDFA) are read. Saved places and events are used exclusively to improve your own feed.

To improve the product we collect pseudonymous usage statistics using PostHog (PostHog Inc., processed on servers in the EU/Frankfurt). We record only events such as “feed opened”, “mood selected”, “item opened”, “saved” or “directions opened” – each with a random device identifier, not with your name or email address. If you are signed in, your user ID is associated as well. The legal basis is our legitimate interest in a working and comprehensible app (Art. 6(1)(f) GDPR).

You can object at any time: Profile → Settings → turn off “Usage data”. From that point on, no further events are transmitted.

Notifications (event reminders, “Were you there?” prompts, Saturday saved places) are scheduled exclusively on your device. No data is transferred to us or third parties for this, and no push identifiers are stored. You can turn them off at any time in the app under Profile → Settings → “Notifications” or in iOS Settings.

8. Changes to This Privacy Policy

We reserve the right to update this privacy policy. You will be notified of material changes within the app. The current version is always available in the app.