Privacy Policy

Mosion is the data controller for the personal data described in this policy. If you have any questions about this policy or how we handle your data, contact us at [email protected].

We collect only the data we need to run the cinema and give you a good experience:

• Account details — your first name, last name and email address when you create an account, and a securely hashed password. We never store your password in plain text.
• Purchase and entitlement records — the films you buy or pre-order, the access type (stream or download), the price, currency and transaction reference, and the resulting right to watch. These come from your payment provider, not from your card or bank credentials.
• Viewing and playback data — your playback progress and resume position, so you can pick up where you left off across devices.
• Device and technical data — device and app identifiers used to deliver and protect streams, general device and browser information, IP address, and app version. On the apps we may check device integrity and hardware security level to enforce content protection.
• Support communications — the messages, and any attachments, you send us when you contact support.
• Push notification tokens — if you enable notifications in a mobile or TV app, the push token needed to send you service and release updates.

Most data comes directly from you (when you register, buy a ticket, watch a film, or contact us). Some is generated automatically as you use the service (such as playback progress and device data), and some comes from our payment providers, who confirm your purchases to us.

We use your personal data to:

• Create and manage your account and deliver the films you have bought.
• Process payments and confirm your tickets and entitlements.
• Sync your library and playback position across your devices.
• Protect films and accounts from piracy, fraud and abuse, including through digital rights management (DRM) and stream watermarking.
• Provide customer support and send you important service messages (for example, receipts, security notices, and — if you opt in — new release notifications).
• Operate, secure, troubleshoot and improve the service, and understand in aggregate how Mosion is used.
• Meet our legal, tax and accounting obligations, and enforce our terms.

Where the NDPA or GDPR applies, we rely on: performance of our contract with you (to run your account, sell tickets and deliver films); our legitimate interests (to secure the service, prevent piracy and fraud, and improve Mosion); your consent (for optional features such as push notifications, which you can withdraw at any time); and compliance with legal obligations (such as accounting and responding to lawful requests).

Payments are handled by regulated payment providers, not by Mosion directly. On the web and on iOS, card and bank-transfer payments are processed by Flutterwave. On Android, purchases are made through Google Play Billing. Your full card, bank or Google account credentials are entered with, and held by, those providers under their own security standards and privacy policies — Mosion does not receive or store them. We receive confirmation of your payment and a transaction reference so we can grant access to your film.

We do not sell your personal data. We share it only where needed to run the service, and only with providers bound to protect it:

• Payment providers — Flutterwave and Google Play — to process purchases and confirm entitlements.
• Infrastructure and hosting providers who run our backend and database and host the site and apps.
• Content delivery and streaming-security providers — our CDN, media storage, and our DRM licensing partner (Axinom) — to deliver and protect video.
• Operational tools that help us run reliably, such as error-monitoring and uptime-monitoring services, and the push-notification service used to send app notifications.
• Rights holders and filmmakers, in aggregate and anonymised form only (for example, how many tickets a film sold) — never your personal contact details.
• Authorities or third parties where required by law, or to establish, exercise or defend legal claims, or to protect the rights, safety and property of Mosion, our users and creators.
• A successor entity in the event of a merger, acquisition or reorganisation, subject to this policy.

Some of our providers process data outside Nigeria. Where we transfer personal data internationally, we take steps to ensure it remains protected to a standard consistent with the NDPA and applicable law, including through appropriate contractual safeguards with those providers.

We protect your data with technical and organisational measures, including encryption in transit, hashed passwords, access controls, and monitoring. Every stream is protected with industry-standard DRM (Google Widevine and Apple FairPlay), and streams may carry a session-level watermark to help trace and deter leaks. High-value titles may require a hardware-secure device to play. No method of transmission or storage is completely secure, but we work to protect your data and continually improve our safeguards.

We keep your personal data for as long as your account is active and as long as needed to provide the service, then only as required to meet legal, tax and accounting obligations, resolve disputes and enforce our agreements. Purchase and transaction records are typically retained for the period required by law. When data is no longer needed, we delete or anonymise it.

Subject to applicable law, you have the right to access the personal data we hold about you, correct it, delete it, restrict or object to certain processing, and request a copy in a portable format. You can also withdraw consent for optional features (such as push notifications) at any time, and delete your account. To exercise any of these rights, email [email protected]; we will verify your request and respond within the timeframe required by law. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission or your local supervisory authority.

Mosion is a general-audience service and is not directed at children. We do not knowingly collect personal data from anyone below the age at which they can hold an account or provide valid consent in their country. Some titles carry age ratings and mature content. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.

We may update this policy as Mosion evolves and moves toward full launch. When we make material changes, we will update the date above and, where appropriate, notify you in the app or by email. Your continued use of Mosion after an update means you accept the revised policy.

For any privacy question or request, email [email protected].