Privacy, in plain English.

1What we collect.

We collect only what's needed to run the planner and keep your account working:

• Account data — your name and email address. Most people sign in with a one-tap magic link; if you set a password instead, it's stored as a one-way hash, never as plain text.
• Move data — the details you give the planner: your move date, your old and new addresses, rooms, boxes and their contents, task notes, any photos you attach to boxes or notes, and the names of household members you add or share your move with.
• Location searches — when you look up nearby services or use address autocomplete, the address or area you type is sent to Google to return results. We don't store your search history for advertising.
• Device data — basic technical info like device type, OS version, and app version, used to diagnose crashes.
• Billing & delivery data — if you subscribe, our payment provider (Stripe) stores your card details; we never see or store your card number. If you order printed QR stickers, the delivery name and postal address you enter are passed to our print partner to fulfil the order.

2Why we collect it.

To generate your moving plan, sync it between your devices, send you reminders when you've asked for them, and handle billing. That's the complete list of purposes. We do not use your data for advertising, profiling, or model training.

3Who we share it with.

Only the small number of service providers we need to run the app:

• Stripe — payments. Handles card data directly; we only ever see a masked reference.
• Supabase — our database, file storage, and authentication host, based in the EU.
• Google — powers the nearby-services directory and address autocomplete. Receives the address or area you search so it can return results.
• Prodigi — our print-and-delivery partner. Receives your name and delivery address only when you order printed QR stickers, so it can post them to you.
• RevenueCat — manages subscriptions in the Android app. Receives an anonymous account identifier, not your name or email.
• Sentry — crash diagnostics. Receives anonymised error traces with any personal data scrubbed. Off unless enabled.

We do not share your data with advertisers, removals companies, estate agents, or anyone else. We do not run third-party tracking pixels on our site.

4How long we keep it.

For as long as your account is active. If you delete your account, we remove your personal data from our production database within 30 days. Anonymised usage statistics (for example, "X users completed Y tasks this week") may be kept longer, because they can no longer be tied to you.

Legal records — invoices, for instance — are kept for 6 years where tax law requires it.

5Your rights.

Under UK GDPR you have the right to:

• See a copy of the data we hold about you.
• Correct anything that's wrong.
• Delete your account and all the personal data tied to it.
• Export your plan — your dated tasks to any calendar, and your inventory as a PDF.
• Object to any processing you think is unfair.

You'll find account deletion and exports under Settings inside the app. For a full copy of your data in a portable format, or any other request, email help@movemark.app and we'll action it manually.

6Children.

Movemark is not aimed at children under 13, and we don't knowingly collect data from them. If you believe a child has signed up, let us know and we'll remove the account.

7Cookies.

The Movemark website uses one first-party cookie to remember your login when you return. That's the whole cookie story. No analytics cookies, no advertising cookies, no "we value your privacy" modal with 300 third parties hidden behind a "Legitimate interest" toggle.

8Security.

We use industry-standard encryption in transit (TLS 1.3) and at rest (AES-256). Passwords are hashed with bcrypt. Access to production data is limited to a small number of engineers who use hardware keys for authentication.

No system is perfectly secure. If a breach ever affects your data, we will tell you within 72 hours, in plain English, and explain what we're doing about it.

9Changes to this policy.

If we make a material change, we'll email everyone with an account at least 14 days before it takes effect. The current version will always be at this URL, with the "last updated" date near the top.

10Contact.

Movemark Ltd, registered in England & Wales. Data-protection queries: help@movemark.app. You also have the right to complain to the Information Commissioner's Office if you think we've mishandled your data.