Privacy Policy
Effective date
This Privacy Policy applies from August 15, 2026.
1. Who controls your data
MoriTech Solutions is the controller responsible for personal data processed through CouchPotato. Contact couchpotato@moritech.solutions for privacy questions or requests. This policy provides information under the EU General Data Protection Regulation (GDPR) and Brazil's Lei Geral de Proteção de Dados (LGPD).
2. Data we collect
We collect the email address used to sign in; security records needed for one-time login codes; movies, series, and episodes you add, watch, or stop; reminder choices; watch dates and rewatch history; and reactions you choose. If you opt in to usage analytics, we record limited event categories such as screen views, result counts, library and watch actions, imports, and failures. These events exclude email, search terms, titles, catalog IDs, and device identifiers. If you enable episode reminders, OneSignal may process a push subscription identifier, the series and episode titles contained in the reminder, IP address, device information, and notification interactions to deliver it. Google AdMob may process advertising identifiers, IP address, device information, consent choices, and ad interactions under Google's policies. The service and its hosting providers may also process basic technical records for delivery, reliability, and security. We do not ask for sensitive personal data or collect payment data.
3. Why we use it and our legal bases
We use account and viewing data to authenticate you, save your library, show statistics, synchronize your experience, provide support, and operate requested features. OneSignal processes push data only after you request a reminder and allow notifications. Optional usage analytics are processed only after your consent and can be disabled in Settings. AdMob requests are made only after Google's consent process says ads may be requested; personalized advertising and related storage depend on the choices and law applicable to you. We may process limited technical and security data for legitimate interests in protecting the service and process data to meet legal obligations where required.
4. Sharing
We do not sell personal data. OneSignal processes the limited device data and reminder message content needed to deliver requested push notifications; it does not receive your CouchPotato account identifier, email, or watch history. Google and its advertising partners process the limited data needed to select, deliver, measure, and protect AdMob advertisements according to your available privacy choices. We do not provide them with your email, CouchPotato watch history, searches, or catalog selections. Data may also be handled by providers that host the app or database, deliver login email, monitor reliability, or provide support, only as needed to perform those services. Catalog data may come from TheTVDB, but your account and watch history are not provided to it. We may disclose data when legally required or necessary to protect rights, safety, and service security.
5. International transfers
Depending on where you and our service providers are located, data may be processed outside your country. When GDPR or LGPD transfer rules apply, we use an available lawful transfer mechanism and appropriate safeguards.
6. Retention and deletion
Account and viewing data are kept while your account exists. Detailed watch history retains the newest 10,000 viewing events per account; older events are deleted automatically. Authentication tokens and app preferences remain on your device until logout, app-data clearing, or uninstall. Schema-limited usage events are written without an account or device identifier and retained with operational logs only as long as reasonably needed to measure and improve the service. OneSignal and Google control retention of push and AdMob data under their published policies and your available choices. Deleting your account removes its email, login-code records, lists, reminders, watch history, and reactions from the active service. Limited records may be retained where law requires it or in protected backups until normal expiry.
7. Your GDPR and LGPD rights
Depending on applicable law, you may ask us to confirm processing; access and receive a copy of your data; correct data; obtain portability; restrict, anonymize, block, or delete data; object to processing; withdraw consent; learn about sharing; and request human review of qualifying automated decisions. CouchPotato does not currently make decisions with legal or similarly significant effects using solely automated processing. You may also complain to your local data-protection authority, including an EU supervisory authority or Brazil's ANPD.
8. How to exercise your rights
Use the Privacy section in Settings to withdraw optional usage-analytics consent or open Ad privacy choices where Google requires an entry point. Use Delete my data in Settings or the public account-deletion page for account deletion. For another privacy request, contact couchpotato@moritech.solutions. We may need to verify that the request belongs to you and will respond within the period required by applicable law.
9. Security
We use access controls, one-time-code authentication, restricted data access, and other reasonable safeguards. No internet service can guarantee absolute security. If a breach creates a legally reportable risk, affected people and authorities will be notified as required.
10. Children
CouchPotato is not directed to children who cannot lawfully consent to data processing in their country. We do not knowingly collect their data without authorization from a parent or guardian where required.
11. Changes
This policy may be updated when the service, providers, or law changes. The effective date will be revised, and material changes will be communicated when required.