Privacy Policy
Last updated: October 29, 2026
This Privacy Policy describes how Move ("we", "us") collects, uses, and shares information when you use the Move mobile application (the "App").
1. Information we collect
1.1 Account information
Email address, nickname, display name, password (stored as a bcrypt hash), avatar URL.
1.2 User content
Photos, videos ("Moves"), text notes, comments, likes, follows, listings in Marketplace, messages between users, car profile data (make, model, year, photos, specs).
1.3 Device information
Device type, OS version, app version, IP address (for rate-limiting and abuse prevention), push token (if you opt in to notifications).
1.4 Usage analytics
Which screens you open and which actions you take in the App (for example: opened a post, wrote a comment, added a car, a request to our server failed), together with app version, device type and a pseudonymous identifier tied to your account. We use this to understand how the App is used and where people get stuck.
We do not record your screen, and we do not send the contents of what you write: no message text, no search queries, no post descriptions, no VIN. Where length matters for us, we send the number of characters, not the text itself.
1.5 Crash reports
When the App crashes or a request fails, we receive a technical report: error message, stack trace, app and OS version.
1.6 Permissions you grant
- Camera — to take photos and videos for car content.
- Photo library — to upload existing photos and videos.
- Microphone — to record sound in videos, Moves and voice messages.
- Location — only when you use a feature that needs it: posts, cars and listings near you, attaching a location to a post or listing, or sending your location in a chat. Live location in a chat is shared only until you stop it or the time you chose runs out. We do not track location in the background.
- Notifications — to deliver push notifications.
2. How we use information
- To operate the App: feeds, search, messaging, marketplace.
- To understand how the App is used, fix errors and improve it (analytics and crash reports).
- To moderate content and respond to reports of abuse.
- To send transactional email (password reset, account deletion confirmations).
- To prevent fraud, spam, and violations of our Terms of Service.
3. Sharing
We do not sell personal data. We share data only with service providers required to operate the App:
- Cloudflare R2 — image and video storage.
- Resend — transactional email delivery.
- Hosting provider — runs our backend servers.
- PostHog (EU region) — product analytics: which screens and actions are used in the App.
- Sentry — crash and error reports.
- Google Maps Platform — map display and place search when you attach a location. Your search text is sent to Google only at that moment, to return suggestions.
We may disclose information when required by law or to protect rights and safety.
4. Public content
Posts, photos, Moves, listings, comments, your profile (nickname, avatar, cars) are public by default and visible to all users. Direct messages are private and visible only to participants.
5. Car profile content (24-hour rule)
Content posted to a car profile becomes part of that car's permanent history. You can delete such content within 24 hours of posting. After 24 hours, the content can only be archived (hidden) but not deleted, and will transfer with the car if it changes ownership in the App.
6. Account deletion
You can delete your account in Settings → Delete Account. Your account is soft-deleted for 30 days, during which you can restore it by signing in. After 30 days:
- Your personal data — email, name, username, photo, bio, location, sign-in methods and devices — and your personal posts are deleted.
- Your cars and everything on their profiles stay, so the car's history is preserved; the owner is shown as a deleted account.
- Comments, likes and messages you sent stay where they are, shown as coming from a deleted account.
- Your analytics profile and its events are deleted from PostHog as well.
7. Children
Move is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has registered, contact us at [email protected].
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or export your data. Contact [email protected] to exercise these rights.
9. Security
We use HTTPS for all traffic, hashed passwords, JWT-based authentication with revocation, and access controls on storage. No system is 100% secure; we encourage strong unique passwords.
10. Changes
We may update this Policy. Material changes will be communicated via the App or email. Continued use after changes means you accept them.