Privacy Policy

Section 1Who we are (data controller)

Marvvi ("Marvvi", "we", "us", "our") is an iOS application operated by:

For the purposes of the EU General Data Protection Regulation (GDPR), Edzilla Dev SRL is the data controller for personal data processed through the Marvvi app and this website. We are not required to appoint a Data Protection Officer, but all privacy requests are handled by our privacy contact above.

Section 2Privacy at a glance

• We collect the minimum needed to run a family account: a parent's sign-in identity, the playlists the parent builds, and the child nicknames the parent types in.
• Children never create accounts and never sign in. There is no chat, no comments, no user-to-user contact, and no way for a child to enter personal information.
• We do not sell, rent, or share personal data for advertising. Marvvi contains no advertising SDKs and no cross-app tracking.
• We use YouTube API Services to let parents search for and play videos. We only ever access public YouTube data via an API key — we never access your YouTube account, history, or subscriptions.
• You can delete your entire account and all associated data from inside the app, at any time, without contacting us.

Section 3Personal data we collect

We collect only the categories listed below. We do not collect precise location, contacts, photos, microphone or camera data, health data, or advertising identifiers.

We never receive your Apple or Google password. If you use Sign in with Apple and choose "Hide My Email", we only ever see Apple's private relay address.

Section 4Why we process it (legal bases)

Where we rely on consent, you may withdraw it at any time; this does not affect the lawfulness of processing carried out before withdrawal.

Section 5Use of YouTube API Services

Marvvi uses YouTube API Services. Specifically, Marvvi integrates:

• the YouTube Data API v3 (endpoints search.list and videos.list), used only when a parent searches for a video or pastes a YouTube link, in order to retrieve public metadata — video title, channel name, thumbnail, and age-restriction status; and
• the YouTube IFrame Player API, used to play videos. All playback happens inside YouTube's official embedded player, served directly by YouTube.

Marvvi never downloads, stores, re-hosts, modifies, or monetises video content. We store only the YouTube video ID and cached public metadata so a playlist can be displayed.

We do not access Authorized Data

Marvvi calls the YouTube Data API using a server API key for public data only. Marvvi does not request any YouTube OAuth scope, does not ask you to log in to YouTube or to a Google account in order to watch videos, and therefore does not access, collect, or store any YouTube "Authorized Data" — meaning we never see your YouTube watch history, search history, subscriptions, playlists, likes, comments, or channel data. No user data is transmitted from Marvvi to the YouTube Data API beyond the search term a parent types.

Section 6Google Sign-In and OAuth

Marvvi offers Google Sign-In as one of two optional ways to create a parent account (the other is Sign in with Apple). This is an identity-only OAuth flow and is entirely separate from YouTube.

• Marvvi requests only the basic OpenID Connect scopes: openid, email, and profile.
• Marvvi requests no YouTube scopes, no Gmail, Drive, Calendar, Contacts, or any other Google service scope.
• The only information we receive is your email address, your basic profile name/picture URL, and a stable Google account identifier — used solely to create and re-authenticate your Marvvi account.

If you sign in with Apple instead, no data is shared with Google for authentication at all.

Section 7Revoking access

You have two independent ways to cut off access:

1. Delete your Marvvi account. In the app, open Settings → Account → Delete Account & Data. This permanently erases your account and all family data from our systems. See Section 12.
2. Revoke Marvvi's access from your Google Account. If you signed in with Google, you can withdraw that authorisation at any time — independently of, and in addition to, deleting your Marvvi account — at:
   https://myaccount.google.com/permissions (also reachable at https://security.google.com/settings/security/permissions).

If you signed in with Apple, the equivalent control is iOS Settings → your name → Sign in with Apple → Marvvi → Stop using Apple ID.

Revoking access at Google or Apple stops future sign-ins. It does not by itself delete data already stored in your Marvvi family account — use the in-app deletion, or email us, for that.

Section 8Data retention

If a video is removed or made private on YouTube, the cached metadata for it stops being refreshed and is removed at the next cache expiry.

Section 9Third parties and sub-processors

We do not sell personal data and we do not share it for advertising. We rely on the following service providers, each bound by a data processing agreement:

We may additionally disclose data where legally required — for example to comply with a valid court order — or in connection with a merger or acquisition, in which case you will be notified before your data becomes subject to a different privacy policy.

Section 10Children's privacy (GDPR Art. 8 & COPPA)

Marvvi is designed to be used by a parent or legal guardian on behalf of a child. Our approach:

• Children do not have accounts. Only an adult can create a Marvvi account, and only an adult can sign in.
• We do not collect personal information directly from children. A child profile contains only what the parent types: a nickname or first name, an emoji avatar, and an approximate age band. We ask for no surname, no date of birth, no photo, no email, no phone number, and no location.
• No child-facing data entry. Kids Mode is a locked, full-screen player with no search field, no keyboard input, no comments, no chat, no social features, no external links, and no in-app purchases reachable by a child.
• No behavioural advertising. Marvvi shows no advertising of its own and includes no advertising or analytics SDKs that profile children.
• Parental consent and control. The parent who creates the account provides consent for any processing relating to their child, and can review, edit, or delete every child profile and all associated data at any time from the parent dashboard.
• Verifiable adult access. Leaving Kids Mode and reaching the parent dashboard requires a hidden gesture plus the parent PIN (or Face ID, if the parent has enabled it).

We comply with the U.S. Children's Online Privacy Protection Act (COPPA) and with Article 8 GDPR. If you believe a child has provided us with personal data beyond what is described above, contact [email protected] and we will delete it promptly.

Note that videos are played through YouTube's embedded player. Google's own practices for embedded playback are governed by the Google Privacy Policy.

Section 11Your rights

Under GDPR (and equivalent laws such as the UK GDPR and the CCPA/CPRA) you have the right to:

• Access — obtain a copy of the personal data we hold about you and your family.
• Rectification — correct inaccurate or incomplete data.
• Erasure — have your data deleted ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — at any time, where processing is based on consent.
• No sale or sharing — we do not sell or share personal information as those terms are defined under U.S. state privacy laws, so there is nothing to opt out of.

Most of these can be exercised directly in the app. For anything else, email [email protected] — we respond within 30 days, free of charge.

If you are in the EU and believe we have mishandled your data, you may lodge a complaint with your local supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

Section 12Deleting your account and data

You can delete everything yourself, from inside the app, without emailing anyone:

1. Open Marvvi and go to the parent dashboard.
2. Tap Settings → Account → Delete Account & Data.
3. Confirm your identity (re-authentication with Apple or Google) and confirm deletion.

This permanently removes your authentication record, family record, all child profiles, all playlists, all watch history, all paired device links, and all consent records. The email address becomes free to use again for a new account. Deletion is immediate and irreversible; encrypted backups are purged within 30 days.

Deleting your account does not cancel an Apple subscription — manage that in iOS Settings → your name → Subscriptions.

Section 13How we protect your data

• All traffic between the app and our servers is encrypted with TLS 1.2+.
• Data is stored on Supabase with Row Level Security, so one family's records are cryptographically inaccessible to any other account.
• The parent PIN is stored only as a salted one-way hash — it can never be read back, by us or anyone else.
• Session tokens are held in the iOS Keychain.
• Access to production data is restricted to the minimum number of people needed to operate the service.

No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours and inform affected users without undue delay.

Section 14International data transfers

Marvvi is operated from the European Union. Some of our sub-processors (Supabase, RevenueCat, Apple, Google) may process data in the United States or other countries outside the EEA. Where that happens, transfers are protected by appropriate safeguards under GDPR Chapter V — principally the European Commission's Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework. You may request a copy of the relevant safeguards by emailing us.

Section 15No advertising, no tracking

• Marvvi displays no advertising.
• Marvvi contains no advertising SDKs, no third-party analytics that build user profiles, and no cross-app tracking. We do not request App Tracking Transparency permission because we do not track.
• We do not use the IDFA or any advertising identifier.
• We never build a profile of a child, and we never use children's data for marketing.
• The marvvi.app website uses no advertising or analytics cookies. Only strictly necessary requests are made to serve the page.

Section 16Changes to this policy

We may update this policy to reflect changes in the app, our providers, or the law. The "Last Updated" date at the top always reflects the current version. If a change materially affects your rights, we will notify you in the app and, where required, ask you to accept the new version before continuing to use Marvvi. Previous versions are available on request.

Section 17Contact us

For any privacy question, data request, or complaint — including GDPR access and erasure requests — contact us. A real person answers, normally within 1–2 business days and always within 30 days.

See also our Terms of Service and our Support page.