Privacy Policy

This Policy explains how NextEpi processes personal data on the web and in the mobile apps, in line with Brazil's General Data Protection Law (LGPD) and, where applicable, the EU General Data Protection Regulation (GDPR).

NextEpi is intended exclusively for people aged 18 or older.

• Account: email, name and picture provided by the sign-in provider, plus the username and display name you set.
• Use of the service: titles you track, episodes and movies watched, ratings, reviews, collections and settings (language, country, streaming services and notification preferences).
• Device: push notification token, platform, language and app version.
• Payments: subscription status and history. Card data is processed directly by Stripe and is not stored by NextEpi.
• Imports: when you connect Trakt or upload a TV Time file, the imported history and, for Trakt, the access token you granted.
• Contact: messages and feedback you send us.
• Technical data: IP address, request times and routes, used for security, abuse prevention and diagnostics.

Without an account, your list is stored only on your device or browser. It is only sent to our servers when you create an account or sign in.

Some information is visible to anyone with the link to your profile, including people without an account:

• Username and display name
• Reviews and ratings marked as public
• Public collections and their items
• Profile statistics shown on the public page

You control the visibility of reviews and collections in each item's settings. Members of collaborative collections see the items and other members' usernames.

• Provide and sync the service across your devices
• Send notifications about new episodes you chose to follow
• Process the Premium subscription and payments
• Show your public profile and content
• Measure product usage and fix problems
• Show ads on the Free plan
• Protect the platform against abuse and fraud
• Comply with legal obligations

• Performance of contract: to provide the service, the account and the subscription.
• Legitimate interest: for security, abuse prevention and product usage metrics.
• Consent: for push notifications, which you can turn off at any time.
• Legal obligation: to keep records required by law, such as those under Brazil's Internet Civil Framework (Marco Civil da Internet).

We use Google Analytics 4 and Vercel Analytics on the web and Firebase Analytics in the apps to understand how the product is used, for example which screens are viewed and at which step people leave a flow.

The events we send do not include your name, username or email. In the app, collection of the advertising identifier by Firebase Analytics is disabled.

On the Free plan we show ads from partners such as Google AdMob in the app and Google AdSense on the web. These partners may use device identifiers or cookies to serve and measure ads, under their own privacy policies.

You can limit ad personalization in your device or browser settings. Premium subscribers do not see ads.

We do not sell personal data. We share data only with processors that help us provide the service, and only what they need:

• Auth0 (Okta): authentication and accounts.
• Stripe: payments and subscriptions.
• Google (Firebase, Analytics, AdMob and AdSense): usage metrics and ads.
• Expo and Web Push services: notification delivery.
• Resend: transactional email.
• Vercel and Railway: hosting for the website, the API and the database.
• Trakt and TV Time: only when you choose to import your history.

The title catalog is queried from TMDB without sending your personal data.

Some of these processors store data outside Brazil, mainly in the United States. These transfers follow article 33 of the LGPD and rely on contractual clauses and appropriate security measures.

We use encrypted connections, access control and authentication through a specialized provider. No system is completely immune to incidents; if a relevant incident happens, you and the Brazilian data protection authority (ANPD) will be notified as required by law.

We keep your data while your account is active. Technical records are kept for as long as needed for security and for the period required by law.

You can delete your account in the app settings. Deletion is scheduled for 30 days, during which you can restore the account. After that, the account and its data are permanently deleted, including at the sign-in provider and the payment processor, except for what the law requires us to keep.

At any time you can ask us to confirm processing, give you access to, correct, anonymize, port or delete your data, tell you who we share it with, or withdraw consent (LGPD art. 18; GDPR arts. 15 to 21).

To exercise your rights, write to the contact email below. You can also file a complaint with the Brazilian data protection authority (ANPD) or the authority in your country.

NextEpi is not intended for people under 18 and does not knowingly collect data from minors. If we identify an account belonging to a minor, it will be closed and its data deleted.

We use cookies and local browser storage for sign-in, preferences, the offline list, metrics and ads. Details are in the Cookie Policy.

We send emails about your account and subscription, such as deletion confirmations and billing notices. Push notifications are only sent if you allow them and can be turned off in the settings.

We may update this Policy. Relevant changes will be announced in the app or by email. The current version and the last update date are shown on this page.

For privacy and data protection matters, contact our data protection officer at: