Skip to content

Privacy

Effective September 28, 2026. Moovo is made by NullDaily LLC ("we"). The short version: your movies and what you watch never reach us. This page explains the little we do handle. For a plain-language overview of privacy, security and how updates are verified, see Trust.

Your media never leaves your server

Moovo is self-hosted. The media server runs on hardware chosen by the person who hosts it, and the apps talk to that server directly. We don't host, receive, index or see anyone's media, libraries, watch history, chats, reactions or ratings. Those live on the host's server and are governed by the host.

Inside your server

What happens on a Moovo server stays on that server. The person who runs it (the owner) and anyone they make an admin can see what's watched there, who is on it and who is connected to whom, because they administer it; the app says so in its privacy settings. Other people on the same server only see you if you connect with them, and you choose what they see. None of it is sent to this website.

What this website handles

  • Downloads and updates. When the app checks for updates it sends its platform, version and channel (stable/beta). Installers are served from our download host, dl.moovo.nulldaily.com. We don't use these requests to identify you.
  • Accounts (optional). Only needed for the Supporter plan, the Supporter badge and linking apps. We store your email, and your name and profile picture if you sign in with Apple, Google or GitHub.
  • Entitlements. What you've unlocked (the Supporter plan, the Supporter badge), where it came from (web, App Store, Google Play) and when it renews or ends.
  • Linked apps. For each app you link: a device name, platform, app version and when its license was last renewed, so you can see and revoke them.
  • Payments. Stripe processes web payments and donations; App Store and Google Play purchases go through Apple and Google, with RevenueCat keeping them in sync. We receive what's needed to grant access (such as a customer or transaction id, product, amount and dates), never your full card details.
  • The Supporter waitlist. Your email, used only to tell you when the Supporter plan opens.
  • Security. We briefly use IP addresses to rate-limit sign-in and linking so nobody can hammer them. We don't build profiles from them.
  • Website errors. If a page on this site breaks, an error report goes to Sentry: the error, where in our code it happened and the page's path. No IP address, account, cookies, headers or form contents.

Crash reports from the apps

The Moovo apps send a crash report when something goes wrong, so we can fix it. It's on by default and you can turn it off anytime in Settings → Privacy → Send crash reports; that stops reports right away.

  • What's sent: the error, where in the app's code it happened, the app version, and the operating system and computer type (for example "macOS 15, arm64").
  • What's removed first, on your computer: server addresses and hostnames, file and folder paths, movie and show titles, names, usernames, emails, chat and other text you typed, tokens and web addresses' query strings. We don't attach screenshots, screen recordings or your IP address, and we don't identify you or your device.
  • Hard crashes: if the app stops outright, Windows or macOS also produces a low-level crash snapshot. Sentry turns it into a stack trace and doesn't keep the snapshot, and folder names in it (such as your user folder) are removed by Sentry's data scrubbing before anything is stored.
  • What isn't sent at all: anything while crash reports are off, and no usage tracking or performance data either way.

The media server doesn't send us anything unless its owner turns on usage stats (below). A host can turn on error reports to their own Sentry account; that's between them and Sentry.

Usage stats (opt-in)

A Moovo server can share a few anonymous numbers with us so we know how many homes use Moovo and which features matter. It's off by default, and only the server's owner can turn it on, in Admin → Settings or on the one-time card in Admin → Overview. When it's on, the server sends one small report at most once a day.

  • What's sent: a random install id made once when stats are first used (not derived from anything about you or the server), the server's version, operating system, CPU architecture and whether it runs in Docker; the number of people and of titles as ranges (for example "2-5" people); the last 7 days' activity as ranges: active people, watch parties started and finished, movie nights, downloads finished and reactions sent; the app versions and platforms in use, with how many devices run each; and which features are on (for example connections, a paired Travel Box, Radarr or Sonarr, email).
  • What's never sent: names, usernames, movie and show titles, file paths, IP addresses, emails or user ids.
  • On our side: we don't store IP addresses; we use them briefly in memory to limit abuse. Each report is kept for up to 400 days, then only totals remain.
  • See it and stop it: the owner can see exactly what would be sent in Admin → Settings → What we send. Turning it off stops sending right away.

Cookies

We set one essential cookie when you sign in, to keep you signed in. No advertising or analytics cookies, no third-party trackers.

Who helps us

We rely on a few service providers to run this site: hosting, file delivery and email delivery (Cloudflare), a database (Supabase Postgres), payments (Stripe), purchase syncing (RevenueCat), error reports (Sentry) and, if you use them, sign-in with Apple, Google or GitHub. They process data on our behalf under their own privacy terms.

Your choices

  • Delete your account anytime from your account page. This removes your account, entitlements and linked apps and cancels web subscriptions.
  • Get a copy or ask a question by writing to privacy@nulldaily.com.
  • Depending on where you live (for example the EU, UK or California) you may have additional rights to access, correct, delete or port your data, or object to processing. Email us and we'll help.

Kids

This website isn't aimed at children under 13 and we don't knowingly collect their data. Kids can enjoy movie night through a host's server without any account here.

Changes

If we change this policy in a meaningful way we'll update the date at the top and, for account holders, let you know by email.