Privacy Policy

Last updated: 1 October 2026

This policy explains which data is processed when you use the Animiyum app and the animiyum.com website, why it is processed, and what rights you have over it.

1. Data controller

The service is operated by Mophus Limited. You can reach us at destek@mophus.com on any privacy-related matter.

• Legal name: Mophus Limited
• Country of incorporation: England and Wales · Company registration number: 17403348
• Registered address: 8/A Greenwood Grove, Mophus Office, Marcham, Abingdon, England, OX13 6FR
• Email: destek@mophus.com

2. Data we process

We only process the data needed to provide the service:

• Account details: name, email address, email verification status and an irreversible hash of your password. Your password is never stored in plain text anywhere.
• Verification and recovery: instead of the one-time code itself, a secure verification hash, the type of operation, its validity period, the number of attempts, plus an irreversible hash of the session and IP address to prevent abuse.
• Profiles and change history: the profile names you create, the avatars you choose, the kids-profile flag, and the previous values of account/profile name and avatar changes.
• Viewing data: the content, series, season and episode you watch; your playback position in seconds, total duration, progress timestamp, lists and likes. Detailed progress history can only be viewed by authorised administrators for support and security purposes.
• Device information: device name, operating system, app version and active session details; kept so that we can show you your sessions and protect your account.
• Watch together: the chat messages you write in rooms and your display name in the room.
• Community content: your messages, replies, comments and spoiler tags in public chat, along with the name shown next to them.
• Reports and requests: the comment, chat message or content you report; the reason you select, your description, the processing status, and your requests and complaints.
• Membership and payment: your plan, the start and end dates of your membership, the subscription status, the date on which you accepted the terms before purchase together with the plan concerned, and your customer and subscription IDs at Stripe. Payment details such as the card number, expiry date and security code are entered directly with Stripe; Animiyum does not see or store them.
• Administrator action logs: the type and time of an action an authorised staff member carried out on your account or profiles, and the administrator who performed it. Staff access to data is restricted by role controls and audit logging.
• Technical logs: server logs such as IP address and request time; kept to detect abuse and malfunctions.

3. Purposes of processing and legal basis

Account and viewing data are processed for the performance of the contract between us: without them, no account can be created and you cannot resume where you left off.

Device, report, moderation and technical logs are based on our legitimate interest in keeping the service and the community safe, preventing abuse and resolving support requests.

Membership and payment data are processed for the performance of the contract in order to provide, renew and cancel the membership; for billing and accounting, on the basis of legal obligations under tax law; and for fraud prevention, on the basis of legitimate interest.

If any non-essential processing is to take place, your explicit consent will be requested separately.

4. Advertising and tracking

The app may show sponsored and promotional content (images, text or short videos). This content comes only from Animiyum's own server; no third-party ad code runs in the app. Views and taps are stored only as totals, using a single-use token that contains no personal data. If you tap an ad, the advertiser's website opens in your browser, where that site's own terms apply. No ads are shown on kids' profiles.

The mobile app does not use an advertising identifier (IDFA / GAID) and no third-party tracking is carried out for advertising purposes.

Advertising may be shown on the website; in that case the relevant provider may use its own cookies, and you can change your cookie preference on the site at any time.

On Premium plans that include ad-free viewing, no sponsored or advertising content is shown.

5. Sharing and international transfers

Your data is not sold. It is shared only in the following cases:

• With the infrastructure providers that run the service (server hosting, email delivery), only to the extent needed to provide the service.
• The data controller, Mophus Limited, is a company established in England and Wales, and the infrastructure running the service is located outside Türkiye; your data is therefore processed and stored abroad. Using the service requires this transfer.
• If you buy a paid membership, with our payment service provider Stripe: your name, email address, the plan you bought and your account number, in order to collect payment, issue invoices and prevent fraud. Stripe also processes payment data as an independent controller under its own privacy policy (stripe.com/privacy) and may store it outside Turkey.
• With the competent authorities where legally required.

6. Retention periods

Your account, profile and viewing data are kept for as long as your account remains open. When you delete your account, your profiles, name/avatar history, detailed viewing history and community content are deleted.

Limited security and administrator action logs are retained to the extent necessary for a legal obligation, a security incident or the establishment of a right, and are deleted or disassociated from your identity once they are no longer needed.

When you delete your account, your subscription is cancelled and your membership record on the site is deleted. Payment and invoice records remain with Stripe and in our accounting records for the statutory retention period; their link to your account is removed.

Expired verification and recovery records are cleared out regularly. Watch together chat messages are kept for no more than 30 days after the room closes. In permanent rooms, which do not close, chat messages are deleted 30 days after they are written.

7. Exercising your rights

Under KVKK (the Turkish Personal Data Protection Law) and the GDPR, you have the right to access, rectify and erase your data and to object to its processing.

You can delete your account yourself from within the app via Settings → Account → Delete account; deletion covers your profiles, name/avatar history, lists, detailed viewing history and community content.

For any other request you can write to destek@mophus.com; you will receive a response within 30 days at the latest.

8. Children's privacy

The service is not directed at users under the age of 13, and we do not knowingly collect data from this age group. Adult content is not shown on kids profiles.

If we become aware that we are processing a child's data, we delete it; if you notice such a case, please let us know.

9. Security

All traffic is encrypted with TLS, passwords are stored only as hashes, and session keys are held in your device's secure operating system storage.

No system is flawless; if you discover a security vulnerability, we kindly ask you to report it to destek@mophus.com.

10. Changes

If this policy is updated, the date above will change, and you will be notified within the app of any significant changes.