When you create a Movas account, we collect the information you voluntarily provide: your display name, email address, date of birth (to verify you are 18 years of age or older), profile photo, country of residence, and any personal bio you choose to write. If you register via Apple Sign-In or Google, we receive a limited profile dataset authorized by you and that provider.

With your permission, Movas may access your device location to enable nearby place discovery, map-based browsing, distance-sorted recommendations, and personalized suggestions. See Section 3 for full details on how location data is handled.

When you recommend a place, write a review, or share a tip, we collect the content of your submission including photos, ratings, notes, and tags. Recommendations you publish are part of your public contribution to the community.

Your interactions with the Food Wheel (selections you make, results generated) and the Thought Blind Box (thoughts you submit, ideas you view) are collected to power these features. See Section 5 for full details.

We automatically collect device model, operating system version, unique device identifiers, IP address, mobile carrier, app version, crash logs, and performance diagnostics to maintain service quality and diagnose technical issues.

We record how you use the Service: features accessed, category browsing patterns, search queries, session frequency and duration. This data informs product improvements and optional personalization.

If you contact our support team, submit a report, or participate in surveys, we retain the content and metadata of those communications for resolution and service improvement purposes.

All payments are processed exclusively by Apple App Store or Google Play. We do not store your payment card details. We receive only anonymized transaction confirmation tokens and purchase entitlement data.

Movas is at its heart a nearby-discovery tool. Location access enables the core value of the app: showing you what's close, what's worth visiting, and where the community has been. That said, location access is entirely optional; you may use much of the app without granting it, including browsing places by manually entered locations or exploring places others have shared.

Movas requests "While Using the App" location access only. We do not request background location access. You may revoke location permission at any time via device settings without losing access to most features.

Location data is used for:

• Displaying places near you on the map and in category browsers
• Sorting recommendations by distance
• Powering nearby-based personalization
• Providing accurate directions when you tap through to external navigation apps

When you recommend a place, the place's location is part of the recommendation. Your own precise location at the time of publishing is not attached to your recommendation — only the location of the place being recommended.

Precise session GPS data is not retained beyond the session as raw coordinates. Aggregated area-level insights derived from usage patterns may be retained for product improvement in anonymized form.

Movas maintains a global database of places across food, coffee, parks, museums, hotels, attractions, restrooms, and other categories, sourced from a combination of curated data, community contributions, and third-party place data providers. Place information includes name, address, category, hours, and general details.

Users may recommend places, write reviews, add tips, upload photos, and share their opinions. These contributions are public by default when published to the community and are visible to other Movas users. Contributions are attributed to your display name.

Your saved places, favorites, visited markers, and personal lists form your private exploration history within the app. This data is visible only to you unless you explicitly choose to share a specific list publicly.

You may delete your recommendations, reviews, and other contributions at any time. Deleted content is removed from public view within 48 hours and from production servers within 30 days.

You are solely responsible for all content you publish or submit through the Service, including recommendations, reviews, photos, tips, community posts, Blind Box thoughts, and comments. By submitting content, you represent and warrant that you own or have all necessary rights to it and that it complies with these Terms and all applicable laws.

By publishing UGC publicly on Movas, you grant us a non-exclusive, worldwide, royalty-free, sublicensable license to host, store, reproduce, display, and distribute your content within the Service and in connection with promoting Movas, subject to your visibility settings. You retain full ownership of all original content you create.

Community-shared UGC is subject to automated screening and human review for compliance with our Community Guidelines. Content that is harmful, misleading (including fake reviews or artificially inflated ratings), harassing, or otherwise prohibited will be removed. Accounts responsible for repeated violations may be suspended or terminated.

You may delete your published UGC at any time. Deleted content is removed from public view within 48 hours, from production servers within 30 days, and from backup archives within 90 days.

Movas uses your saved places, browsing history, category preferences, general location patterns, and engagement signals to personalize what you see: which recommendations surface first, which category tiles feature at the top, which Food Wheel results are more likely, and which community content appears in your feed.

Your interaction data, saved places, and personal preferences are not used to build an advertising profile or shared with third-party advertising networks for behavioral targeting.

You may disable personalized recommendations at any time in Settings > Privacy > Personalization. Movas will then present a non-personalized, editorially curated experience.

Movas uses third-party mapping services and place data providers to render maps and enhance place information. When you use map or place features, relevant location data is transmitted to these providers under data processing agreements. These providers are governed by their own privacy policies.

Mobile analytics SDKs measure app performance and feature engagement, configured with privacy-preserving settings including anonymized event collection and suppression of advertising identifiers absent your consent.

User-uploaded photos are stored on cloud infrastructure and delivered via CDN providers. These providers process delivery metadata as technical intermediaries under data processing agreements.

Apple Sign-In and Google authentication are governed by their own terms and privacy policies. Our use of data from these services is limited to account creation and basic profile population.

We implement TLS 1.2+ encryption for all data in transit, AES-256 encryption for sensitive data at rest, strict role-based access controls, and automated anomaly detection.

Data access is restricted on a need-to-know basis, requires multi-factor authentication, and is comprehensively audit-logged. All personnel with data access receive regular data protection training and sign confidentiality agreements.

We conduct regular security assessments and third-party penetration testing. Report security vulnerabilities responsibly to service@movas.blog.

In the event of a personal data breach posing risk to your rights and freedoms, we will notify relevant supervisory authorities within 72 hours where required by law and inform affected users without undue delay.

Movas serves a global user base and operates cloud infrastructure across multiple regions. Your personal data may be transferred to and processed in countries other than your country of residence, which may have different data protection standards.

For transfers from the EEA, UK, or Switzerland to countries lacking an adequacy decision, we rely on EU Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum (IDTA). Equivalent safeguards apply to other cross-border transfers.

Where applicable national laws impose mandatory data localization requirements, we take reasonable steps to store and process the required data categories within the mandated territory.

For EEA and UK users, Movas acts as the data controller of your personal information under the GDPR and UK GDPR respectively.

We process your data under: (a) contractual necessity (to provide the Service); (b) legal obligation (regulatory compliance); (c) legitimate interests (safety, service improvement, fraud prevention), where not overridden by your rights; and (d) consent (for marketing and optional personalization).

You may lodge a complaint with your national data protection supervisory authority. We encourage you to contact us first to attempt direct resolution.

Brazilian users have rights under the Lei Geral de Proteção de Dados (LGPD) including confirmation, access, correction, anonymization, deletion, portability, and withdrawal of consent.

We process Brazilian users' data based on contract performance, legal obligation, and consent where applicable.

Brazilian users may lodge complaints with the Autoridade Nacional de Proteção de Dados (ANPD) where they believe data processing violates the LGPD.

Movas is designed for users who are 18 years of age or older. We implement date-of-birth verification at registration and apply additional detection measures to accounts suspected of being operated by minors. Confirmed underage accounts are immediately and permanently terminated with all associated data deleted.

If you are a parent or guardian and believe a minor has created a Movas account, contact us immediately at service@movas.blog. We will investigate and, where confirmed, permanently delete the account and all associated data without delay.

All in-app purchases are processed exclusively through Apple App Store or Google Play. Movas does not store your payment card details. We receive only anonymized transaction confirmation tokens and entitlement data.

If Movas offers premium features: access is non-transferable between accounts; non-refundable except as required by applicable law or app store policy; and may be discontinued with reasonable advance notice.

Transaction records are retained for a minimum of seven years to satisfy applicable accounting, tax, and consumer protection requirements.

Material changes are communicated at least 14 days before taking effect via in-app notice, push notification, and/or email to your registered address. Non-material corrections may be made without advance notice.

Continued use of Movas after any revised Policy's effective date constitutes acceptance. If you do not agree, delete your account before the changes take effect.

Prior versions are available upon request at service@movas.blog.