Privacy Policy

What we collect

• A device identifier. The app gets the phone's Android ID from Android and immediately keeps only its SHA-256 hash. The Android ID itself is never sent to our server. The hash has one job: keeping your favorites and shared rooms intact after you reinstall the app. Without signing in, it isn't tied to a name or email. It resets when you factory-reset the phone. If you used the app before this change, your old random identifier stays linked to your data.
• A push notification token. So we can notify you when your partner joins the room, or when everyone's swiped their way to a match.
• Your account (only if you sign in with Google). Your Google account ID, name, and profile picture, as Google provides them. We don't store your email or password. The account is linked to your device so that your favorites, rooms, and subscription follow you.
• Purchases (only if you subscribe). Payments are handled by Google Play; we never see your card. We keep the purchase token and the subscription status, term, and plan, so we can switch Filmder Plus on and off.
• Plus features (only with Filmder Plus). Your history of picks, personal and couple statistics, and the streaming services and country you choose for "My services".
• Invitations. Your personal invite code and the fact that a friend joined through it, so the bonus can be credited.
• Movie ratings. Which cards you liked and which you didn't. Stored on the server for the duration of a session, to work out the match.
• Anonymous usage statistics. De-identified usage events (for example, a session started or a movie was picked) and your "watched it — liked it or not" marks, to improve the app and avoid suggesting movies you've already seen.

What we don't collect

• Email, phone number, precise location, photos, contacts.
• Card or payment details — Google Play handles them.
• Advertising identifiers or trackers — there's no advertising in the app.

Who else sees it

• The Movie Database (TMDB) — the source of movie descriptions, posters, and ratings. We request movie cards from it but never send it anything personal.
• Firebase Cloud Messaging (Google) — delivers push notifications. Receives only the device token needed to send them.
• Google Sign-In and Google Play — handle sign-in and payments. They work under Google's own privacy policy.

How long it's kept

Session data lives as long as the room or the session exists, and only as long as it's needed to run them. Everything else lives until you delete your account. We don't sell your data or pass it on to third parties for advertising. You can remove a movie from your favorites right in the app.

Deleting your data

Open Profile in the app and choose "Delete account". We erase everything tied to you and to your devices: your account, favorites, "watched" marks, ratings, rooms, pick history, statistics, invitations, and push tokens. Anonymous usage statistics stay, but are cut off from your device and can no longer be linked to you. Technical server logs aren't edited, but they erase themselves after 14 days. An active subscription must be cancelled in Google Play first. The only thing we keep is a one-way hash of your Google ID if you ever received an invitation bonus. It can't be turned back into your ID and only stops the same bonus from being claimed twice. If you can't open the app, email info@vr9.pro and we'll do the same for you.

Changes

If anything changes, the current version of this policy will always be right here, at this same address, with a new date at the top.

Contact us

Questions — to info@vr9.pro.