MovieWhiz

Privacy Policy

Last updated: September 3, 2026

This Privacy Policy describes how MovieWhiz (“we”, “us”, or “our”) collects, uses, and shares information when you use the MovieWhiz mobile app and website (together, the “Service”).

You can play MovieWhiz without an account. Guests are identified by a device identifier we generate, and nothing in this policy about accounts applies to them.

1. Information We Collect

  • Account data. When you sign up, we collect your email address, display name, and authentication identifiers provided by our auth provider (Supabase). If you sign in with Apple and choose to hide your email, we receive only Apple’s private relay address and never your real one.
  • Gameplay data. Challenges you play and create, answers you submit, scores, streaks, credit balance and transactions, likes, reports you file, and the creators you block.
  • Device & usage data. Device model, OS version, app version, language, and product analytics (screens opened, purchases started, sign-ins abandoned). Analytics are processed by PostHog and can be turned off in the app under Settings → Usage Analytics.
  • Advertising data. We show ads through Google AdMob. To do so, AdMob accesses your device’s advertising identifier (the IDFA on iOS, the Advertising ID on Android) and receives coarse technical information about the ad request. On iOS we ask for your permission first through Apple’s App Tracking Transparency prompt; if you decline, ads still appear but are not personalised. See “Advertising” below.
  • Purchase data. If you buy coins or the one-time Plus unlock, our payments provider (RevenueCat, together with Apple or Google) processes the transaction and shares non-sensitive receipt data with us. We do not receive or store your payment card details.
  • Content you create. The prompts you write for AI image generation and the challenges you publish. Published challenges are public: other players see the image, the answer and your display name.
  • Push notification token. Only if you switch notifications on. It is an identifier for the app on your device, issued by Expo, and we store it against your account so we can send you a notification — a screening opening, for example. We use it for nothing else, it is never shared with advertisers, and switching notifications off stops us using it. Deleting your account deletes it.

2. How We Use Information

  • Operate, maintain, and improve the Service.
  • Generate quiz content and personalize challenges.
  • Authenticate users and prevent fraud or abuse.
  • Communicate service announcements and respond to support requests.
  • Comply with legal obligations.

3. AI-Generated Content

MovieWhiz uses third-party AI providers — Google (Vertex AI), with OpenAI as a fallback — to generate level images. Prompts are sent server-side through our own API and are not linked to your account identifiers when sent to these providers. We do not send your email, password, or payment information to any AI provider.

The prompt you wrote and the image it produced are stored by us. If you publish the challenge, the image becomes visible to other players. Providers apply their own safety filters before an image is returned; a refused prompt produces no challenge and costs you no credits.

4. Advertising

Free players see an interstitial ad periodically and can choose to watch a rewarded video in exchange for credits. Ads are served by Google AdMob, which acts as an independent controller of the data it collects for this purpose. How Google uses that data is described in Google’s advertising policies.

Personalised advertising, and how to stop it. On iOS, ads are only personalised if you allow tracking at the App Tracking Transparency prompt; you can change that decision at any time under Settings → Privacy & Security → Tracking. On Android, you can reset or delete your Advertising ID in the system settings. Under California law, sharing an advertising identifier for personalised advertising counts as “sharing for cross-context behavioural advertising” — declining the prompt on iOS, or deleting the Advertising ID on Android, is how you opt out. MovieWhiz Plus — a one-time unlock, not a subscription — removes interstitial ads entirely.

5. Sharing of Information

We share information only with:

  • Service providers who help us run the Service. Named, because “service providers” on its own tells you nothing: Supabase (authentication), Google Cloud and Vertex AI plus OpenAI (AI generation), Google AdMob (advertising), RevenueCat with Apple and Google (payments), PostHog (product analytics), Expo (push notifications, only if you turn them on), and our hosting and object-storage providers. TMDB supplies the film metadata and reference imagery; we send them no information about you.
  • Other users, when you publish a challenge or appear on a leaderboard. A published challenge shows its image, its answer and your display name.
  • Authorities, when required by law or to protect the rights, safety, or property of MovieWhiz or others.

We do not sell your personal information.

6. Data Retention

We keep account and gameplay data for as long as your account is active. When you delete your account we act immediately rather than on a schedule: your sign-in is removed and your username, email address, name and avatar are erased at once. What we keep is de-identified — the challenges you published stay playable for other people, and gameplay records (scores, sessions, leaderboard history) are retained without your name or any contact detail attached, so that other players’ games and the leaderboards do not break. We may also retain limited records where we are required to for legal, security or fraud-prevention reasons.

How to delete your account, and what exactly goes, is set out on our support page.

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights from the app’s Settings screen or by emailing us at moviewhiz@shushuo.dev. Deletion can also be requested from our support page without installing the app. Two controls are in the app itself: analytics can be turned off under Settings → Usage Analytics, and personalised advertising is controlled by your device’s tracking settings as described above.

8. Children

MovieWhiz is not directed to children under 13 (or the minimum age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Security

We use industry-standard safeguards including encryption in transit, scoped access controls, and regular security review. No system is perfectly secure, so we cannot guarantee absolute security of your data.

10. International Transfers

Your information may be processed in countries other than the one in which you reside. We rely on appropriate safeguards (such as standard contractual clauses) where required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date above and, for material changes, notify you in the app or by email.

12. Contact

Questions about this policy? Email moviewhiz@shushuo.dev.