Last updated September 15, 2026
MovieSpaces is operated by Olaoluwa Kayode, an individual based in the State of Texas, United States. For users in the European Economic Area and the United Kingdom, Olaoluwa Kayode is the "data controller" for the personal data described in this policy. This policy explains what we collect, why, who we share it with, and the rights you have over it. Questions or requests: support@moviespaces.org.
Account information: your email address, display name, username, and profile photo. You can sign in with an email address and password, handled through Supabase Auth, which stores your password in hashed form we never see. If you sign in with Apple or Google instead, we receive your email address and name from that provider (Apple lets you hide your real email) — never your password. Content you create: Spaces you host or join, group chat messages, direct messages, hangout notes, and the theater memberships you select. Your friend connections and the block and report records you create. Device location, only if you grant permission, used to find nearby theaters and show distances — we use it in the moment and don't build a location history. A push notification token, only if you grant permission, so we can send booking updates, reminders, and new-message alerts. Technical data collected automatically when the app talks to our servers: IP address, device and operating system type, app version, and timestamps, kept in server logs. Diagnostics: crash reports and error traces, including the device model, OS version, and app state at the time of the error, collected through Sentry so we can fix bugs.
We don't collect payment or financial information — MovieSpaces takes no payments. We don't collect precise contact lists, health data, biometrics, or government identifiers. We don't use advertising SDKs, we don't track you across other companies' apps or websites, and we don't build advertising profiles. We never sell your personal information.
To run the app's core features: creating and joining Spaces, group and direct messaging, RSVPs, showtime reminders, nearby-theater search, the CineMind daily puzzle and its leaderboards, and keeping your profile in sync across devices. To keep the service safe: reviewing reports, enforcing blocks, preventing spam and abuse, and rate-limiting requests. To fix problems: diagnosing crashes and errors. To communicate with you: account emails such as sign-up confirmation and password resets, and push notifications you've opted into. We don't use your data for advertising or automated decision-making that produces legal or similarly significant effects.
If you're in the EEA or UK, we process your personal data on these bases. Performance of a contract: providing the account, Spaces, messaging, and other features you asked for. Consent: device location, push notifications, and photo library access — each requested through your device's permission prompt, and each revocable at any time in your device settings, with no effect on processing that already happened. Legitimate interests: keeping the service secure and abuse-free, fixing bugs, and understanding crashes — balanced against your rights and limited to what's necessary. Legal obligation: retaining or disclosing information where the law requires it.
Other users: people in a Space can see your display name, username, profile photo, and RSVP status. Group chat messages are visible to everyone in that Space. Direct messages are visible only to you and the person you're messaging. CineMind leaderboards show your display name and score to other players. Service providers who process data only on our instructions and only to run the app: Supabase (accounts, database, chat storage, profile photo storage), Render (API hosting and server logs), Sentry (crash and error reporting), Resend (transactional email such as password resets), Expo (push notification delivery), Google Places (theater search — a search query and, if permitted, approximate location), OMDb (movie and TV information — title searches only, no personal data), and Apple and Google (only if you choose to sign in with them). Legal and safety: we may disclose information if required by law or valid legal process, or where we believe in good faith it's necessary to protect someone's safety or investigate abuse. Business transfer: if the app is ever transferred to someone else, your information may transfer with it, and this policy will continue to apply until you're told otherwise. We do not sell your personal information and we don't share it for cross-context behavioral advertising.
Our infrastructure providers store and process data on servers in the United States. If you use MovieSpaces from the EEA, the UK, or elsewhere outside the US, your information will be transferred to and processed in the US, which may have different data protection laws than your country. Where required, our providers rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism to protect that data.
Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; delete your data; restrict or object to certain processing; receive your data in a portable, machine-readable format; and withdraw consent you previously gave, at any time. Many of these you can exercise directly in the app — edit your profile from the Profile tab, revoke location or notification permissions in your device settings, and delete everything from Profile → Settings → Delete Account. For anything else, email support@moviespaces.org and we'll respond within 30 days. You won't be charged or treated differently for exercising these rights. If you're in the EEA or UK and think we've handled your data improperly, you also have the right to complain to your local data protection authority.
If you're a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we collect and how we use and disclose it (described throughout this policy), the right to delete it, the right to correct inaccurate information, and the right to opt out of its sale or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of — and we have not sold or shared personal information in the preceding twelve months. We don't knowingly collect or sell the personal information of anyone under 16. Exercise any of these rights in the app or by emailing support@moviespaces.org; we may need to verify your identity through the email address on your account before acting. You may use an authorized agent, who will need written permission from you. We will not deny you service, charge you a different price, or provide a lesser quality of service for exercising your rights. The categories we collect map to the CCPA's categories as follows: identifiers (email, name, username, user ID, IP address), internet or network activity (app interactions and error logs), geolocation data (only with permission), and audio/visual data (a profile photo, only if you upload one). We collect these for the business purposes described in "How We Use It."
You can permanently delete your account at any time from Profile → Settings → Delete Account inside the app — no email required and no waiting period. You can also request deletion by emailing support@moviespaces.org from your account's email address. Deleting your account removes your profile, your chat messages, your friend connections, and your push notification token, and deletes any Spaces you host — those disappear for their other members too, exactly as if you'd deleted each Space manually. Spaces you only joined stay intact for the remaining members; you're simply removed from them. Deletion takes effect immediately and cannot be undone. Backups and server logs may retain some data for up to 30 days before they cycle out, and we may keep the minimum records needed to comply with a legal obligation or to enforce a prior ban.
We keep your account data for as long as your account exists. Server logs containing IP addresses are retained for a short period for security and debugging and then rotated out. Crash and error reports are retained by Sentry for up to 90 days. Reports you file about content or users are kept while we review them and for a period afterward so we can identify repeat offenders. Cancelled Spaces remain visible to their members for reference unless the host deletes them.
All traffic between the app and our servers is encrypted in transit with HTTPS. Passwords are hashed by Supabase Auth and are never visible to us. Access to the database is restricted by row-level security rules so that, for example, direct messages are readable only by the two people in the conversation. No system is perfectly secure, and we can't guarantee absolute security — but if a breach affects your personal data, we'll notify you and any relevant regulator as required by law.
If you report a Space or a chat message, we store the report — who filed it, what was reported, and any reason given — so we can review and act on it. Reports are not visible to other users, and we don't tell the reported person who filed the report. Blocking another user hides their content from you and doesn't notify them.
MovieSpaces is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has created an account, email support@moviespaces.org and we'll delete the account and its data promptly.
We may update this Privacy Policy as MovieSpaces changes. When we do, we'll update the "Last updated" date at the top. If a change materially affects how we use your personal data, we'll give you notice in the app or by email before it takes effect.
Questions about this policy, or want to exercise any of the rights above? Email support@moviespaces.org and we'll respond within 30 days.