People & privacy

Nobody sees you unless you connect. Not even other people on the same server. Your local time, when you're online, your downloads, your list, ratings and reactions only ever go to people you're connected with, and you choose who among them sees each one. The server enforces this, so a person who isn't allowed to see something never receives it.

How people get connected (invites, requests, introductions) is on Invites, people & circles.

Who sees what

Everything below is in Settings → People & privacy. Each detail has an audience: connections, partner (only a confirmed partner) or nobody.

When a server is updated to 1.1, existing accounts keep seeing what they saw before: the same settings, except downloads start at connections. Change any of them whenever you like.

Clocks and weather

Clocks are a home widget you add, not something every screen shows. Use the small clock button on the home strip (Add a clock, then a pencil to change it) and pick the connections you want (your partner is suggested first). No widget, no clocks.

• A clock only appears if that person shares their city and time with you. If they don't, the app says their time is private.
• Your time zone follows your computer, so your clock is right for others even after a trip. Settings → Your place shows it, with Change to pick one by hand and Use this computer's to go back.
• Your own city is set right next to the sharing setting. It's optional; without it, people who can see your time get a clock without the weather.
• Downloads at a glance ("Maya has it downloaded") ride on the clock card, so they're opt-in too, and still follow the other person's downloads setting.

Following and muting

Once you're connected you follow each other, which puts the other person's ratings, what they finished, additions to their list and movie dates they plan with you in From your people on your home screen (the row only shows when there's something), and their saved reactions in your replays. Their stars stay hidden until you've rated the title too.

Mute someone to stop following them: they leave your feed, your list rows, Catch up and your reaction replays. You stay connected, and they aren't told. Picking them on purpose ("With Mom" on Our List) still shows them. Unmute anytime.

Blocking

Block is for when you don't want contact at all. It disconnects you, cancels any requests and introductions between you, stops their requests and invites, and hides you from each other everywhere, including search.

• If a host invites you both to the same session, the app tells them "Those two can't be in the same session", without saying who blocked whom.
• An admin can't connect you across a block.
• Blocks don't hide anyone from the owner and admins in Admin → People; they still need to run the server.

Watch Together and movie dates

• Nobody is invited by default. The picker is a name field: type a few letters, press Enter to take the top match, or tap a circle to add its members. Only your connections and your circles' members come up.
• The lobby, chat and reactions only go to the people in that session.
• If you invite two people who aren't connected to each other, the app warns you first. They see each other's name and avatar in that session only; nothing carries over.
• Movie dates show each guest's local time only if they share it with you.

Reactions

Reactions you tap during a movie are saved, and replay over the movie when your people watch it later.

• Clear my reactions here: on the title page's Reactions button, or the player's Together menu. It shows how many there are.
• Clear all my reactions: Settings → People & privacy, with the count and a confirmation.
• Hide others' reactions here: turns off other people's replays on one title, just for you.
• Replay reactions from: people I follow, people I've watched this with, or nobody.

Clearing is permanent, and everyone's app drops the cleared reactions right away. Admins can clear reactions per title (Admin → Library → the title → Reactions) or per person (Admin → People → the person → Reactions → Clear).

What the owner and admins can see

Running a server means seeing what happens on it. The owner and admins can see everyone in Admin → People: accounts, devices, what's been watched, circles, and who is connected to whom (with how the connection was made, and whether two people are partners). This is disclosed in Settings → People & privacy: "The server owner can see what's watched on this server."

They can read the server's logs (Admin → Logs), which record who did what and when, and the diagnostics you choose to send them. They can also look at the whole server's year and badges (the Whole server switch on the recap), which is the only place those server-wide numbers show.

What they don't get is a social shortcut. An admin sees your clock, online dot, downloads and activity on their home screen only if you're connected, like anyone else. Your own relationship labels (family, friend, other and your words) are never shown to them. Changes admins make to connections are kept in an audit log for a year.

What the website sees

Nothing from inside your server. Moovo's website never receives your people, connections, settings, what you watch or your reactions. See the privacy policy.

The server itself sends nothing either, unless the owner turns on Share anonymous usage stats in Admin → Settings (off by default). That shares only counts in ranges and which features are on, never names, titles or addresses; see Usage stats.