Privacy Policy

Who is responsible for your data

Upflix is developed and run by Douglas Alves, an individual based in Brazil, who is the controller of the personal data processed in the Upflix app (iPhone, iPad and Android) and on the upflix.net website. For any privacy matter, including as the data protection contact required by Brazil's LGPD, email [email protected].

What data we process

When you use the app, with or without an account

• Device identifiers: the advertising identifier (IDFA on iPhone, Advertising ID on Android) when available, and app identifiers generated by Firebase.
• Usage data: screens opened, features used and ad interactions, collected in aggregate by Firebase Analytics.
• Diagnostics: crash and performance reports, via Firebase Crashlytics.
• On-device preferences: catalog country, chosen streaming services and app settings.

If you create an account

Signing in is optional and done with Sign in with Apple or Sign in with Google. We receive an account identifier from the provider and, depending on your choice when signing in, your email address (Apple lets you hide it). We store your lists — shows you follow and your watchlist — and preferences in Google Firebase (Firestore), linked to your account, to sync them across your devices.

In-app purchases

Purchases (such as removing ads) are processed by Apple or Google. We never receive your card details. To unlock what you bought, our server receives the transaction identifier and checks with the store that the purchase or subscription is valid.

Notifications and Roulette Duo

If you allow notifications, your device creates a notification token that Firebase Cloud Messaging uses to send alerts about new releases and episodes. In Roulette Duo, the token and your language are sent to our server only to notify the other person in the pair; we do not store that token on our server.

Location

If you allow it, the app uses your device location to identify your country and show the right catalog. You can deny or revoke this permission and choose your country manually.

Smart Verdict and title analyses

Smart Verdict uses Apple Intelligence and is processed on your device. For some movie and show analyses, our server sends OpenAI only public information about the title (name, year, cast, directors, genres) and the requested language — none of your personal data.

On the upflix.net website

The website does not use advertising cookies or analytics tools. It only stores the language you picked in your browser. The site is delivered by Cloudflare, which processes technical connection data such as your IP address for security and performance.

How we use data and our legal bases

• Running the app and syncing your account (lists, preferences, purchases): performance of our contract with you.
• Sending notifications and using location: your consent, given through your device permissions, which you can withdraw at any time.
• Personalized ads and cross-app tracking: your consent (on iPhone, through the App Tracking Transparency prompt).
• Non-personalized ads, usage analytics, crash fixing and security: our legitimate interest in keeping the app free, stable and secure, balanced against your rights.
• Complying with legal obligations and lawful requests from authorities.

Who we share data with

We do not sell personal data. We share data only with providers that help us run Upflix, each with its own privacy policy:

• Google — Firebase (Analytics, Crashlytics, Cloud Messaging, In-App Messaging and Firestore), AdMob, Sign in with Google, YouTube (trailers) and Google Play. Google Privacy Policy · how Google uses data from partner apps.
• Ad partners through AdMob: Meta Audience Network and, on Android, AdColony, Pangle, Liftoff (Vungle) and Mintegral, which may receive the advertising identifier and technical device data to show and measure ads.
• Apple — Sign in with Apple, in-app purchases and Apple Intelligence. Apple Privacy Policy.
• Cloudflare — website delivery and security. Cloudflare Privacy Policy.
• OpenAI — public title information only, no personal data.

We may also disclose data when required by law or to protect rights, the safety of users and the service itself.

Ads and tracking

Upflix is free and supported by ads. On iPhone, the app asks for your permission to track; if you decline, you still see ads, just without personalization based on other apps and websites. You can change this anytime in Settings › Privacy & Security › Tracking. On Android, you can reset or delete your Advertising ID in Settings › Google › Ads. If you buy ad removal, you no longer see ads.

International transfers

The providers above store and process data on servers outside Brazil, mainly in the United States. These transfers are made with providers that apply contractual and security safeguards consistent with applicable data protection laws.

How long we keep data

• Account lists and preferences: for as long as the account exists. When you delete your account in the app, we delete this data and revoke Sign in with Apple access.
• Analytics and crash reports: for Firebase's retention period — for analytics, the period configured in Google Analytics for Firebase, which ranges from 2 to 14 months.
• Website technical data: for the period of Cloudflare's security logs.
• We may keep data longer when the law requires it.

Your rights

Depending on where you live, you can ask us to confirm whether we process your data, to access, correct, delete or port it, to restrict or object to processing, and to withdraw consent. Brazilian users have these rights under the LGPD (art. 18); users in the EU and UK have equivalent rights under the GDPR and UK GDPR.

To delete your account and lists, use the delete account option in the app. For other requests, email [email protected]; we reply within 15 days and may ask for information to confirm the request is yours. You can also complain to your data protection authority (in Brazil, the ANPD).

United States: in some states, showing personalized ads may be considered "sharing" of personal data; you can opt out by declining tracking or turning off ad personalization on your device.

Security

We use encrypted connections (HTTPS), providers with recognized security practices, and limit access to data to what is necessary. No system is completely immune to failures; if a relevant incident occurs, we will notify you and the authorities as the law requires.

Children

Upflix is not intended for children under 13 and we do not knowingly collect data from children of that age. If you are a parent or guardian and believe a child has given us data, email [email protected] and we will delete it.

Changes to this policy

We may update this policy to reflect changes in the app or in the law. The date at the top shows the version in force; for significant changes, we will let you know in the app.

Contact

Privacy questions or requests: [email protected]. See also our Terms of Service.