Privacy Policy

Who we are

Zova ("we", "us") operates the Zova web app and related services at zova.stream (and associated hosting domains). For privacy questions, see Support.

What we collect

• Account data — email, display name, and authentication identifiers from Firebase Auth (including if you sign in with Google or similar providers).
• Library & tracking — watch history, episode progress, watchlist / Want to Watch, not-interested marks, and imports you upload (e.g. TV Time, Letterboxd, Trakt, Reelgood).
• Taste & feedback — ratings, emotion tags, preference signals, onboarding answers, Tune interactions, and related taste-profile artifacts we derive to power recommendations.
• Preferences — streaming services, notification settings, content safety / kids-related settings, and display preferences.
• Social (optional) — friend connections, pair / watch-together session metadata, and activity you choose to share at the visibility you select.
• Usage & product telemetry — events needed to operate the product (e.g. feed impressions, feature usage, error and cost telemetry for reliability). We use this to improve recommendations and stability, not to sell ads against your watch history.
• Product analytics & session recording — we use a product-analytics service to understand how the app is actually used: pages viewed, clicks and other interactions, performance measurements, and milestones such as completing onboarding or receiving a feed. Once you sign in, these are linked to your account identifier so we can tell whether the product works over time rather than only within one visit. This includes session recordings — a replay of how pages rendered and how you moved through them, so we can find broken layouts and confusing flows. Text you type into fields is masked and is not recorded. Diagnostic messages your browser logs are captured alongside the recording. We do not record your screen outside Zova, your camera, or your microphone.
• AI interaction content — when you use Ask Zova or similar features, your prompts and tool results may be processed by our AI providers to generate a response. Recommendations may include AI-generated explanations; they can be wrong.
• Technical data — IP address, device/browser type, and similar logs processed by our hosting and security providers as part of delivering the service.

How we use data

• Provide personalized recommendations, Up Next / calendar, and search.
• Maintain your cross-service library and progress.
• Send notifications you opt into (e.g. new episodes for titles you track).
• Improve models, ranking quality, and product reliability.
• Secure the service, prevent abuse, and comply with law.

We do not sell your personal information. We do not use your private watch history to build advertising profiles for third parties.

Processors & third parties

We rely on infrastructure and content partners, including:

• Google Firebase / Google Cloud — authentication, database, hosting, and related backend services.
• Google AI / Gemini (and related AI APIs) — generative features such as Ask Zova and certain explanation or enrichment paths.
• TMDB and other metadata/availability providers— catalog metadata, images, and where-to-watch information (subject to those providers' terms).
• PostHog— product analytics and session recording (see "What we collect"). Processed on PostHog's United States infrastructure.
• Sentry — error and performance monitoring, so we can find and fix crashes.
• Optional integrations you connect — e.g. Trakt OAuth, when you choose to link them.

These parties process data only as needed to provide their services to us. Content posters and metadata may be loaded from third-party CDNs.

Retention

We keep account and library data while your account is active. Derived artifacts (taste vectors, digests, feed caches) are regenerated or expire as the product operates. If you delete your account, we delete personal data we control as described below, subject to limited residual copies in backups or logs that roll off on normal retention schedules.

Your controls

• Agreement — we store which Terms and Privacy versions you accepted, and when, under your account settings.
• Export — download a machine-readable copy of your personal data from Settings → Account(you'll confirm what is included before download).
• Delete — permanently delete your account and associated personal data from the same Settings section (multi-step confirmation).
• Notifications — manage preferences in Settings; browser or OS permission dialogs may also apply for push if enabled.
• Connected services — disconnect integrations (e.g. Trakt) from Settings when available.

Depending on where you live, you may have additional rights (access, correction, erasure, portability, restriction, objection). Use export/delete in-product first, or contact us via Support.

Children

Zova is not directed at children under 13 (or the minimum age in your jurisdiction). In-app "kids around" / content-safety settings help households choose suitable titles; they are not a substitute for parental supervision or a child account product.

Cookies & local storage

We use essential storage for authentication session, preferences, and performance (e.g. local feed cache). Our product-analytics service also stores identifiers in your browser so repeat visits are recognised as the same session and person. We do not run third-party advertising cookies. Blocking essential storage may break sign-in or basic app functions.

International transfers

Infrastructure may process data in the United States and other regions where our providers operate. If you use Zova from elsewhere, you understand your data may be processed outside your country subject to provider safeguards.

Changes

We will update this page when our practices change in a material way. Continued use after the updated date constitutes acceptance of the revised notice where permitted by law.