Privacy Policy

Last updated: 2026-09-24

Moodflix is operated by Adburner Media Solutions Pvt. Ltd. ("we", "us"). This policy explains what personal data we process, why, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP). Moodflix is an 18+ service.

1. Data we collect

Account — name, email, password (hashed), your 18+ self-declaration. If you sign in with Google: your Google account ID and its verified email. If you sign in with a phone number: that number, verified with a one-time code. If you use the app as a guest: an anonymous account tied to this installation, with no consents, no analytics and no notifications.
Usage — episodes watched, watch progress, likes, follows, watchlist, ratings and comments you post, coin balance and an append-only coin/ad-reward ledger.
Device & advertising — an identifier for this installation, the app version, Android version and phone maker; the Android Advertising ID, used by our advertising partner (Google AdMob) and — only if you agree to ads measurement — by Meta (section 6).
Notifications — the push token of this device, your notification choices, your time zone and a record of the notifications we send (details in section 3).
Payouts — if you withdraw referral earnings: the UPI ID or bank account you give us and, where tax rules require it, your PAN.
Paid passes — the selected plan, quoted price, order and payment/refund references, status, access period and billing state. For Cashfree checkout we collect the mobile number you enter and share it with Cashfree for processing the payment.
Crash reports and analytics — only with your consent.
Support — the content of any report, appeal or grievance you submit.

2. Why we use it (purposes)

To provide the service — stream content, run the free coin economy, remember your progress.
To send the notifications described in section 3.
To show ads. Non-personalised by default; personalised only with your consent.
To process paid passes, verify payments, deliver access, reconcile refunds and report applicable alternative transactions to Google Play.
Analytics to improve the app — only with your consent.
To measure how well our ads on Meta (Facebook, Instagram) bring people to the app — only with your consent.
Safety, fraud prevention (for example, several accounts claiming referral rewards from one device), grievance redressal, and legal/regulatory compliance.
To pay out referral earnings you withdraw.

3. Notifications

What we collect. The push token that Firebase Cloud Messaging gives this device; whether notifications, and each notification category, are switched on (the app reports this when it opens and, for signed-in adults whose phone can receive notifications, in a weekly background check); your time zone; the notification choices you make, when you made them and the version of the notice you saw; the reminders you ask for (such as "Yaad dilana", "Free hote hi batao" and premiere reminders); and a record of each notification we send — what it was about, when, to which device, and whether it was delivered.

What we send, and on what basis.

Security notices, always. Other account notices (payouts, referral credits, appeal outcomes), new episodes of series you follow and the reminders you asked for — unless you switch them off.
Only with your consent, category by category: reminders (the next episode, a series you left unfinished, your streak), new-series recommendations, offers and coin events, and replies to your comments.
To choose and time the notifications you consented to, we use your watch progress and, only if you allow reminders, your usual viewing hour, learned from when you watch.
On our own initiative we send at most 2 notifications a day (reminders you asked for and security notices are extra), and never during your quiet hours (by default 23:00–08:00, your time).
If you ignore several notifications in a row we automatically send fewer; after more, they only go to the in-app inbox until you next open the app.
Whether you opened a notification is recorded only with your analytics consent.

Your choices. Settings → Notifications in the app (each category, and quiet hours) and Android's own notification settings. Withdrawing a consent stops those notifications from then on. Accounts that have not declared 18+ get no push notifications at all — only account notices in the in-app inbox — and we keep no push token for them.

सूचनाएँ — संक्षेप में। हम इस फ़ोन का push token, सूचनाएँ चालू या बंद होने की स्थिति, आपका time zone, आपकी चुनी हुई सूचना-सेटिंग और हर भेजी गई सूचना का रिकॉर्ड रखते हैं। सुरक्षा सूचनाएँ हमेशा आती हैं; खाते की सूचनाएँ, आपकी follow की हुई series के नए episode और आपके माँगे हुए reminder तब तक आते हैं जब तक आप इन्हें बंद न करें। बाकी सूचनाएँ (reminders, नई series, offers, comment के जवाब) सिर्फ़ आपकी सहमति से। हम अपनी तरफ़ से दिन में 2 से ज़्यादा सूचनाएँ नहीं भेजते और आपके quiet hours (default रात 11 से सुबह 8) में कभी नहीं। App में Settings → Notifications से कभी भी बदलें या सहमति वापस लें। 18+ की घोषणा न करने वाले खातों को push नहीं भेजे जाते।

4. Legal basis & consent

Under DPDP there is no "legitimate interest" basis — analytics, personalised advertising, measuring our Meta ads and each notification category that needs consent (section 3) require your explicit, purpose-specific consent, which you give in-app and can withdraw at any time (Settings → Privacy & Consent, Settings → Notifications), as easily as you gave it. Essential processing needed to run the service continues while your account exists.

5. Children

Moodflix is for adults (18+). We do not knowingly process the data of anyone under 18. Where a user is identified as a minor, behavioural tracking, targeted advertising and push notifications are disabled entirely (DPDP s.9(3)) regardless of any consent.

6. Sharing

We share the Advertising ID and app-activity signals with Google AdMob for advertising. Our service providers process data only on our instructions: Google Firebase delivers notifications (it receives the push token and the notification text) and handles sign-in with Google or a phone number; payouts you request are sent by us or through a licensed payment provider, which receives the payout details. We do not sell your personal data.

Paid checkout (added 7 October 2026). Depending on the payment option you select, Google Play, Cashfree, PhonePe, Paytm or Razorpay processes the payment. The chosen provider receives the order, amount and account/device details needed for checkout and fraud checks; Cashfree also receives the phone number entered in its checkout flow. Applicable alternative payments and refunds are reported to Google Play. The provider and your selected bank/UPI app handle payment authorization. MoodFlix's backend does not store your UPI PIN, OTP or full card number. One-time passes do not create an automatic renewal mandate.

Meta ads measurement. Only if you turn on "Meta ads ka asar naapna" (Settings → Privacy & Consent), the Meta SDK in the app sends Meta (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.) your device's Advertising ID and these events: the app being opened (which is how an install is matched to an ad), an account being created, an episode starting, and coins being spent to unlock an episode (the episode number and the coin amount), together with the technical details the SDK adds (device model, Android and app version, IP address). Meta uses them to tell us which of our ads led to installs and to optimise our campaigns, under its own terms and Privacy Policy. It is never switched on for guests or for anyone identified as a minor. Turning it off stops the SDK straight away; what was already sent is kept by Meta under its policy, and you can also reset your Advertising ID in Android settings.

7. Retention

We keep your data while your account is active. On deletion we erase your personal data, except records we are required to retain for legal, tax, or fraud-prevention reasons (e.g. the coin/ad-reward ledger), which are disclosed to you at the time of deletion.

Payment, refund and reporting records may remain after account deletion for reconciliation, financial recordkeeping and applicable retention obligations. Access is restricted; retained records are not used to send marketing messages.
Notification records: 30 days. Notification opens (only with analytics consent): 120 days.
A minimal delivery log (which device received which notification, when, and whether it was delivered): 365 days, with restricted access, for grievances and legal compliance. It is kept until its year is up even if you delete your account.
The push token is removed when you sign out, when a session ends after 90 days without use, when you switch notifications off, or when Firebase reports it is no longer valid.

8. Your rights

Access and correct your data.
Withdraw consent (Settings → Privacy & Consent; notifications: Settings → Notifications).
Erase your account and data — in-app (Profile → Delete Account) or at /delete-account.
Grievance redressal — see /grievance.

9. Contact

Data protection	Contact form — filed as a ticket, acknowledged within 24 hours
Grievance Officer	Rohit Gaur — File a grievance — filed as a ticket, acknowledged within 24 hours
Phone	+91 87370 68737
Address	Adburner Media Solutions Pvt. Ltd., Anand Vihar, Kanpur, Uttar Pradesh - 208001

10. Changes

We will update this page and the "last updated" date when this policy changes.