Misro Privacy Policy

Effective date: 10 September 2026

Misro is a film streaming service operated by PT Gloria Viva Nusantara ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Misro Flutter mobile app and its connected streaming service. Websites opened from the app, may use additional technologies described by their operators.

For privacy questions or requests, contact cs@glovinus.com. Our address is Jl. DR Ide Anak Agung Gde Agung Kawasan Mega Kuningan Lot.8.9/9, Jakarta Selatan, Indonesia.

Information we collect and why

Account and profile information: email address, mobile number and country code, username, password credentials, first and last name, country, and any address details you provide. We use this to create and manage your account, authenticate you, verify contact details, recover access, and maintain your profile.
Viewing and service activity: requests to play videos and episodes, content-view records, wishlists, subscription status, and reward or redemption activity where available. We use these to provide streaming access, maintain saved content, administer subscriptions and rewards, and understand content usage. The app can display viewing history associated with your account from the website. Playback resume positions are stored locally on your device.
Payment information: selected plans, amounts, payment methods, transaction references, payment status, and any details or evidence you submit for payment verification. We use this to process and reconcile purchases, activate subscriptions, and resolve payment issues. Payment providers also process information under their own privacy policies.
Device and connection information: IP address, login timestamps, and operating system and browser information available from your connection. We use these to maintain login records and support account security. This version of the Flutter app does not collect advertising identifiers or register device identifiers or push notification tokens.
Approximate location: country, city, and approximate coordinates derived from your IP address. We use these as part of login and security records. IP-derived location is distinct from GPS location accessed through device permissions.
Messages and submitted content: information you send through support, contact, or discussion features, including attachments where available. We use it to respond to requests and operate those features. Forum subjects, messages, names or usernames, and posting times are visible to other signed-in users and administrators. Forum discussions are not private support messages. The Flutter app submits text forum posts; it does not provide an attachment-upload feature.

Information required for an account or transaction must be provided to use that feature. You can choose whether to provide optional information.

Service providers and disclosures

We disclose information as necessary to providers supporting hosting, video delivery, payments, messaging, and other service operations. These include:

Midtrans, when you choose its checkout, receives your first and last name, email address, mobile number, order reference, amount, and selected plan details to process and verify payment. Carrier-billing options send your mobile number, selected plan and amount, operator information, and transaction reference through the payment service at globalmediasolusi.my.id and the applicable telecommunications provider, including Telkomsel where selected. A carrier confirmation flow may also submit the PIN you enter for that transaction. Other payment gateways are shown according to the available checkout methods; the provider you select handles that payment.
geoPlugin for IP-based location lookup; our server sends your IP address to obtain approximate location information.
Hosting and video-delivery services process network requests to provide app content. Email and SMS services process contact details and verification or recovery messages when those functions are used. Misro’s servers are colocated in Indonesia. Service providers receive the information needed to deliver the relevant content, communications, or transaction.

We may disclose information where required by applicable law or a valid legal request, or where necessary to protect users and the service against fraud or misuse.

We do not sell personal information.

Advertising and analytics

The current Flutter app does not bundle third-party advertising, analytics, or crash-reporting SDKs and does not request an advertising identifier. It does not call the backend mobile-banner advertising endpoint. Service-side login, payment, and content-view records described in this policy still apply. External websites opened in your browser may use their own cookies, analytics, or other technologies.

Permissions and your choices

The Android app uses internet access to communicate with Misro and stream content, and network-state access to detect connectivity. It does not request camera, microphone, contacts, SMS-reading, precise-location, shared-storage, or notification permission. Receiving a verification message does not give the app access to your SMS inbox. You can update supported profile details in the app or contact us to request a correction.

The app stores your language preference, onboarding status, and playback resume positions on your device, and caches downloaded images. Its sign-in token is stored using platform-backed secure storage. Clearing the app’s local data removes local preferences and stored app data but does not delete your server-side account.

Security

Account passwords are stored using password hashing. The Flutter app requires an HTTPS API address, and its Android configuration blocks cleartext network traffic. Account API operations require authentication tokens, which the app stores using platform-backed secure storage. Android application backup is disabled. These measures describe the app connection and storage, not a guarantee that every downstream service connection is encrypted. No method of transmission or storage can guarantee absolute security.

Retention

We do not apply a fixed retention period while your account is active. Your account and profile records, viewing history, wishlists, reward records, login records, support and forum communications, and payment and transaction records are kept for as long as your account exists, until you request deletion as described below. Backup copies of our database may persist for a limited operational period after deletion until they are naturally rotated out.

Account and data deletion

You can request deletion of your account and associated personal information without installing the app by visiting misro.id/account-deletion and confirming your account email and password. The current app does not yet provide a dedicated in-app delete-account button; until it does, you may also contact cs@glovinus.com to request deletion, or to access or correct your personal information. We may need to verify your identity before processing a request.

Submitting a deletion request immediately deactivates your account and revokes your login access — it can no longer sign in or be found through the app or website. This deactivates your account rather than erasing your associated viewing history, wishlist, payment, or support/forum records from our database; those records are retained as described in the Retention section above.

If you have an active plan when you delete your account, that access ends immediately along with it. Misro plans are prepaid, non-recurring access periods tied to your account rather than an auto-renewing subscription, so there is no separate charge to cancel and you will not be billed again after deletion. Uninstalling the app or logging out does not delete your account.

Children

Misro is intended for users aged 13 and older. Children under 13 must not create an account or use the service. If you believe a child under 13 has provided personal information to Misro, please contact cs@glovinus.com so we can review the account and address the information concerned.

International processing

Misro hosts its servers in a colocation facility in Indonesia, and processes your information there. We are not aware of any other location where your information is processed by the providers described in this policy. If that changes, we will update this policy accordingly.

Changes and contact

We may update this policy to reflect changes to our service or data practices. We will publish the updated policy with a revised effective date and provide additional notice where required.

For questions, concerns, or privacy requests, contact PT Gloria Viva Nusantara at cs@glovinus.com.