Privacy Policy
Version: 2026-10-22.1
Controller and contact
The controller responsible for My Favs is the developer Vinicius Santoros Candido Correa, acting as an individual. For privacy questions and LGPD rights, contact myfavs@viniciussantoro.com.br.
Data and purposes
Free mode stores your personal library on your device without an account. Online catalog requests process search text, title identifiers and language. An account processes your email, internal identifier, sessions, contract acceptance and privacy requests. Authorized cloud synchronization also processes your chosen library, notes, ratings, watch history and photos. When purchase verification is enabled, we process Apple transaction identifiers, an account purchase token, subscription status, expiry and notification identifiers to grant and manage synchronization. Security controls process IP addresses, user-agent information and limited usage counters to prevent abuse, including anonymous catalog access. We do not request location, contacts, advertising identifiers, card details or a password. Avoid sensitive data in free-text fields and photos.
Legal bases
Account access and optional synchronization rely on performance of the service contract (LGPD art. 7, V). Necessary security measures may rely on legitimate interests after assessing necessity and your rights (art. 7, IX). Compliance with legal obligations and exercise of rights use the applicable legal bases (art. 7, II and VI). Accepting the terms and acknowledging this policy are not blanket consent for unrelated processing. Any future feature that relies on consent must ask separately and allow withdrawal.
Providers and international processing
The service uses Vercel for API hosting and private photo storage, PostgreSQL for account data, Resend for access emails, and TMDB for catalog searches and images. Where enabled, Apple handles purchases and subscription management; we verify the transaction and account association, not your card details. Resend receives your email and access message. TMDB receives search text, title identifiers and language, not your account library or email from our API. Direct image requests and external links expose network information to their destination. Providers may process data outside Brazil. Ask the controller for current operators, locations and applicable transfer safeguards. We do not sell your personal data or use your library for targeted advertising.
Retention and deletion
Account data is kept while needed to provide the account service. Deleted entries and previous library versions may remain in sync history and recovery copies until a verified erasure request is fulfilled. Security counters expire according to their protection windows; expiry alone does not guarantee physical erasure. Deletion must cover authentication, library history, recovery data and private cloud photos. Limited retention may be required by law or to exercise rights; the controller must explain any exception. Provider backup expiry and retention details can be requested by email. Signing out or uninstalling does not delete the cloud account. Copies exported by you and offline copies on your other devices remain under your control.
Your rights and requests
You may request confirmation and access, correction, information about sharing, anonymization, blocking or deletion when applicable, portability subject to regulation, review of automated decisions when applicable, objection, and withdrawal of consent where that is the legal basis. Use Privacy and your data to register an account request and receive a reference, or email us without signing in. Identity verification may be necessary; do not send passwords or access codes. For confirmation and access, LGPD provides a simplified immediate response or a complete statement within 15 days. Other requests follow applicable legal deadlines. You may petition ANPD if your rights are not addressed.
Account deletion timeframe
Account deletion is handled within 15 calendar days of receipt. We confirm completion by email and explain any legally retained data or backup expiry. You do not need to send another email after registering in the app.
Security and your choices
The app uses HTTPS, device Keychain credentials, account-level database isolation and private cloud photos with temporary access links. Cloud data is not end-to-end encrypted; authorized operators and providers may access it when necessary. No system is risk-free. Export backup saves the active library, not all authentication or security records; request a complete account access report separately. Keep exported files safe, since notes and photos may be readable. Changes to this policy will be versioned and made available here.