MoFi: Movie Tracker & Diary for iPhone · Effective October 15, 2026
Who we are
MoFi is made by Kozmonos ("we", "us"), the operator responsible for the app and for this policy. Contact for privacy questions and requests: support@kozmonos.com. This policy covers the MoFi app for iPhone and this page.
What MoFi does not collect
- No password: you sign in with your Apple Account or Google account, and MoFi never sees the password.
- No precise location, no contacts and no access to your photos, camera or microphone.
- No advertising: this version of MoFi shows no ads, never starts the advertising SDK it contains, does not ask for or read the advertising identifier (IDFA) and does not track you across other companies' apps or websites.
- No payment details. Apple handles every purchase.
- No search text in our records: searches are passed on to TMDB to find titles and are not stored by us; analytics only record how long a search was and how many results it found.
What MoFi keeps on your device and on our server
- On your iPhone: a copy of your ratings and watchlist in the app's private database, so the app works offline, a cache of movie and TV information from TMDB, and your settings (theme, language).
- On our server (Cloudflare, under your account): your ratings (the title, your score, moods, your written notes and the date you watched), your watchlist, your display name, your friend code, your friends and friend requests, and the groups you create or join with their shared watchlists. It is kept there so your library follows your account to a new phone or to the web app.
- Your account (Google Firebase Authentication): your account id, the e-mail address and name your Apple Account or Google account shares when you sign in (with Sign in with Apple you can choose to hide your e-mail address), and when you signed in. Browsing works without an account; saving a rating or a watchlist entry needs one.
What your friends and groups see
When you add a friend with their friend code, that friend can see your display name and your ratings of titles they look at, including your score, moods and written notes. Members of a group you join see your display name and the titles you add to the group's watchlist. Nobody else can see them. Only your friends can add you to a group. You can remove a friend, leave a group or delete a group you own at any time.
Web app
MoFi also runs in a web browser, where you sign in with the same account and see the same library from our server. The web app sends the same usage information to PostHog and error reports to Sentry as the iPhone app, and PostHog stores an identifier in your browser (local storage and a cookie) to recognise your visits. The web app has no purchases and does not use Google Analytics for Firebase or Crashlytics.
Trailers and movie information
Movie and TV information is fetched from TMDB through our server; posters and images load directly from TMDB, so TMDB receives your IP address. When you play a trailer, it plays in YouTube's embedded player, and Google receives the information YouTube collects under Google's privacy policy. Links to IMDb or a streaming service open outside MoFi and follow that site's policy.
Information we receive
| What | Examples | Service provider | Kept for |
|---|---|---|---|
| Account details | the e-mail address and name from your Apple Account or Google account, and the display name you choose (shown to your friends and groups) | Google Firebase, Cloudflare, RevenueCat | until you delete your account |
| Your library and social features | ratings with scores, moods, written notes and watch dates, your watchlist, friends, friend requests, groups and group watchlists; your scores and library filters (for example a mood or genre) are also sent with usage events | Cloudflare, PostHog | on our server until you delete them or your account; usage events under PostHog's standard retention |
| App usage events | screens and tabs opened, titles opened, rated, added to or removed from the watchlist (the TMDB id and movie or TV), trailers played, search length and result count, sign-in and sign-out, language and theme changes, friend and group actions, the Premium screen shown, bought or closed | PostHog, Google Firebase | under PostHog's and Google Analytics' standard retention; see "Keeping and deleting information" |
| Identifiers | your MoFi account id, used by our server, PostHog, Google Analytics for Firebase and RevenueCat so the same person is recognised across them; identifiers that PostHog and Firebase create for your installation (Firebase also uses Apple's identifier for vendor). None of them is an advertising identifier | Google Firebase, PostHog, RevenueCat, Cloudflare | as long as the information they are attached to |
| Crash and error reports | where the code failed, app version, the actions and values just before it (the usage events above), how long screens and requests took, device model and iOS version, your IP address | Sentry, Google Firebase | Sentry up to 90 days; Crashlytics under Google's standard retention |
| Technical context | device model, iOS version, app version, language, IP address and the approximate location (city, country) derived from it | PostHog, Google Firebase, Sentry | as long as the event or report it is sent with |
| Purchase status | the App Store receipt, whether MoFi Premium is active and which plan, and whether a purchase succeeded | RevenueCat, PostHog | while MoFi Premium is used, and as required for accounting |
We use your account id, not your name or e-mail address, to connect usage information across PostHog, Google Analytics for Firebase and RevenueCat. RevenueCat also receives your e-mail address and name with your account. Usage information is sent as it is, so we can see which features people use and where they get stuck; it is not anonymous.
Why we use it
We use the information above to provide MoFi (your account, keeping your ratings and watchlist on every device, friends, groups, recommendations and Premium), to find and fix crashes and errors, to understand which features help people find and remember what to watch and where they get stuck, to keep the service secure and prevent abuse (for example limiting friend-code guesses), and to know whether Premium is active. We do not use it for advertising, we do not sell it, and we do not combine it with data from other companies to build profiles about you.
Who receives it
We do not sell personal information and we do not share it for advertising. The service providers below process it only on our behalf, under their data processing terms:
- Cloudflare, hosting of our app server and database, and of the MoFi web app: cloudflare.com/privacypolicy
- Google Firebase, sign-in (Firebase Authentication), usage analytics (Google Analytics for Firebase), crash reports (Crashlytics) and app settings (Remote Config): firebase.google.com/support/privacy
- PostHog, product analytics (EU hosting): posthog.com/privacy
- Sentry, crash and error reporting: sentry.io/privacy
- RevenueCat, subscription status: revenuecat.com/privacy
- TMDB (The Movie Database), movie and TV information, posters and images: themoviedb.org/privacy-policy
- Apple, App Store payments and Sign in with Apple: apple.com/legal/privacy
- Google, Google sign-in if you choose it, and the YouTube player when you play a trailer: policies.google.com/privacy
We may also disclose information if the law requires it.
Purchases
MoFi Premium is bought through Apple's App Store. Apple handles the payment and never shares your payment details with us. RevenueCat tells the app whether Premium is active for your account.
Keeping and deleting information
- Your account and everything on our server: in MoFi open Settings, your account, and choose Delete account. This deletes your ratings, notes, watchlist, display name, friend code, friendships, friend requests and the groups you own (with their members and watchlists) from our server, removes what you added to other people's groups, and then deletes your sign-in account. For your security MoFi may ask you to sign in again first. Deleted rows can remain in our hosting provider's point-in-time recovery for up to 30 days before they are gone for good.
- On your device: signing out removes your account's library from the device; deleting MoFi removes everything it stored there.
- Crash reports: deleted from Sentry after at most 90 days.
- Usage information: kept only as long as it helps us run and improve MoFi, under PostHog's and Google's standard retention. We delete it on request (see "Your rights").
- Purchase records: kept by RevenueCat and Apple as long as needed for the subscription and for accounting.
- Support e-mails: kept while we help you and deleted within 12 months, sooner on request.
How we protect information
All transfers are encrypted (HTTPS). Our server accepts a request only with a valid sign-in token for your account, and lets only you, your friends and your group members read what the sections above describe. Access to our service accounts is limited to the people who build MoFi, and we review our providers' settings at least once a year. Data on your iPhone is protected by Apple's built-in security.
Your rights (EU, UK and elsewhere)
You can ask to access, correct or delete information about your use of MoFi, object to its processing, or ask us to restrict it, by writing to support@kozmonos.com. To find your records we may ask for your app version and approximate dates of use. You can also complain to your local data protection authority. Our providers may process data outside your country (for example in the United States); they use the legal safeguards required for such transfers.
Children
MoFi is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has used MoFi and sent us information, contact us and we will delete it.
California
We do not sell or share personal information for cross-context behavioral advertising.
Changes
If we change how MoFi handles information, we will update this page and the date above before the change takes effect, and describe significant changes in the app's update notes.
Contact
Kozmonos · support@kozmonos.com · kozmonos.com