Privacy Policy
Effective Date: May 1, 2026 • Last Updated & Verified: October 5, 2026
MatchMovie's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
1. Overview & Purpose of MatchMovie
Welcome to MatchMovie. Your privacy is paramount to us. MatchMovie is an entertainment web and mobile application designed to help individuals, couples, and friend groups agree on what movie to watch through an interactive card-swiping interface and collaborative room matching.
This Privacy Policy explains how MatchMovie collects, accesses, uses, stores, shares, and protects personal information across our web platform hosted at https://matchmovie.sadik.work and our native Android mobile application (package name com.sadikwork.matchmovie) distributed on the Google Play Store.
By accessing or using MatchMovie, you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.
2. Information We Collect
We adhere strictly to the principle of data minimization: we collect only the information strictly necessary to provide and operate the MatchMovie service.
When you sign in using Google Sign-In (OAuth 2.0), we access your primary Google Account email address, your verified email status, your display name, and your profile picture URL. If you sign up using email and password, we store your email address, display name, and securely salted and hashed password credentials. Passwords are encrypted and managed via Supabase Auth; we never have access to your plaintext password.
To provide personalized film recommendations, we store:
- Your preferred film genres (e.g. Action, Sci-Fi, Comedy, Romance).
- Your preferred cinema industries (e.g. Hollywood, Bollywood, Korean).
- Your preferred language selection.
- Wishlist: Titles you have swiped right on or saved to watch.
- Watched List: Titles you have marked as already seen.
- Skipped List: Titles you have swiped left on, so we avoid showing them repeatedly in your swipe deck.
When you create or join a shared matching room using a 6-digit room PIN, we record your room membership, your display name, and your avatar so other participants can identify you. We aggregate swiped titles among room participants in real time to compute consensus picks (“Common”, “Unwatched”, and “Pick For Us”).
We automatically collect basic technical diagnostic logs, including your device type, operating system version, browser type, and anonymous error logs strictly to troubleshoot application crashes, prevent abuse, and maintain server reliability.
3. Google User Data Disclosures & Limited Use Compliance
MatchMovie provides optional Google Sign-In to allow users to authenticate quickly and securely without needing to remember a separate password. This section details our precise handling of Google user data in full compliance with the Google API Services User Data Policy.
openid: Used to verify your identity and generate a secure user session token.https://www.googleapis.com/auth/userinfo.email: Used to access your primary Google email address to uniquely identify your account and send essential transactional notices (such as password resets or critical account notices).https://www.googleapis.com/auth/userinfo.profile: Used to access your public profile name and profile picture URL so that you appear with your name and avatar when collaborating in shared movie-matching rooms.- To establish, authenticate, and maintain your user session.
- To populate your user profile with your name and avatar for display inside shared movie rooms.
- To store and synchronize your movie wishlists and ratings across your devices.
- NO SALE OF DATA: We do NOT sell, lease, rent, or trade Google user data to any third party, broker, or advertiser.
- NO ADVERTISING: We do NOT use or disclose Google user data for serving advertisements, retargeting, or interest-based profiling.
- NO AI / ML MODEL TRAINING: We do NOT use, transfer, or disclose Google user data to train, retrain, or improve generalized machine learning (ML) or artificial intelligence (AI) models.
- NO UNAPPROVED TRANSFERS: We do NOT transfer Google user data to any third parties, except to our core cloud database provider (Supabase Inc.) under strict confidentiality agreements strictly to store your encrypted data.
- NO HUMAN ACCESS: Human personnel are strictly prohibited from reading Google user data, except with your explicit prior written consent for technical troubleshooting or when legally required by subpoena.
“MatchMovie's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.”
4. How We Use Your Information (Purpose of Processing)
We process your personal information exclusively for the following purposes:
- Authentication & Session Management: To verify your identity, maintain your login state, and secure your account.
- Film Recommendation Deck: To rank movie suggestions matching your configured genres, languages, and cinema industries.
- Multiplayer Room Matching: To calculate overlapping interests in shared rooms and generate the consensus “Pick For Us” pick.
- Cross-Device Synchronization: To allow you to access your Wishlist and Watched history whether on the web or on the Android app.
- Security & Abuse Prevention: To detect malicious bot traffic, prevent spam, and protect our infrastructure.
5. Third-Party Service Providers
MatchMovie relies on a limited number of industry-standard third-party providers to deliver application infrastructure and movie data. All third-party providers process data under strict confidentiality and security terms:
Provides OAuth 2.0 authentication services and Android app distribution via the Google Play Store.
Google Privacy PolicyProvides secure cloud PostgreSQL database storage, authentication, Row-Level Security (RLS), and WebSocket real-time synchronization.
Supabase Privacy PolicySupplies movie catalog information, posters, trailers, synopses, and cast data. This product uses the TMDB API but is not endorsed or certified by TMDB.
TMDB Privacy PolicyProvides Content Delivery Network (CDN), SSL/TLS encryption, and DDoS security mitigation.
Cloudflare Privacy Policy6. Data Storage, Retention & Security Measures
We deploy robust organizational and technical safeguards to secure your data:
- Encryption in Transit: All communications between your browser or mobile app and our backend servers are encrypted using modern Transport Layer Security (HTTPS / TLS 1.3).
- Encryption at Rest: All user records, database volumes, and backups are stored with AES-256 encryption at rest on Supabase enterprise servers.
- Row-Level Security (RLS): Our database employs granular PostgreSQL Row-Level Security rules. Users can only query and mutate their own lists and authorized shared room sessions.
- Token Security: User session JWT tokens are stored securely in browser localStorage or secure Android application sandbox storage.
7. Data Retention & Account Deletion (Google Play & GDPR Compliant)
In full compliance with Google Play Store developer guidelines, Google Cloud OAuth requirements, and global regulations (GDPR / CCPA), we provide straightforward, accessible mechanisms to delete your data or revoke your account permissions at any time.
You can remove any movie from your Wishlist or Watched list at any moment directly inside the app or web interface with a single tap.
To permanently delete your MatchMovie account, your Google-provided user data, your movie lists, and all room associations:
Request Account Deletion - MatchMovieUpon request, all user credentials, profile information, Google user identifiers, wishlists, watched records, room history, and skipped items are permanently and irreversibly purged from our active Supabase production databases within 30 calendar days. Database backup snapshots overwrite automatically on rolling 30-day retention cycles.
8. How to Revoke MatchMovie's Access to Your Google Account
If you signed in using Google and wish to revoke MatchMovie's access to your Google Account, you can do so directly at any time through Google's account security dashboard:
- Visit your Google Account Permissions page at: https://myaccount.google.com/permissions
- Find MatchMovie in the list of third-party apps with account access.
- Click on MatchMovie and select “Remove Access”.
Once removed, MatchMovie will no longer be able to access your Google profile or email, and your active session will be invalidated upon next authentication check.
9. Cookies & Local Storage
MatchMovie does not use third-party advertising cookies or cross-site tracking pixels. We only use browser localStorage strictly for functional purposes:
- Supabase Authentication Token: To preserve your login session between browser page refreshes.
- UI State: Remembering non-sensitive local preferences such as dark mode and theme styling.
10. Children's Privacy (COPPA Compliance)
MatchMovie is not directed to individuals under the age of 13 (or 16 in certain European Union jurisdictions). We do not knowingly solicit, collect, or maintain personal data from children under 13.
If we discover that a child under 13 has provided personal information without parental consent, we will promptly delete all associated records from our servers. Parents or guardians may contact us at support@sadik.work for immediate assistance.
11. Your Privacy Rights (GDPR & CCPA/CPRA)
Depending on your jurisdiction (including the European Economic Area, United Kingdom, and California), you have fundamental legal rights regarding your personal data:
You can exercise any of these rights by emailing support@sadik.work. We respond to all verified requests within 30 days free of charge.
12. Contact Information & Data Protection Officer
If you have any questions, feedback, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:
Ready to find your next favorite movie with friends?