Privacy Policy
Last updated: July 2026
Your privacy matters. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal data is:
2. Data We Collect
We collect the following categories of personal data:
Account Information
Name, email address, language preference, and selected city.
Activity Preferences
Your interests, fitness level, equipment availability, and activity history to personalize recommendations.
Usage Data
How you interact with our platform, including proposals viewed, accepted, or declined.
Contacts (Optional)
If you choose to add contacts for group activities, we store those connections.
Device Information
Push notification tokens for delivering activity suggestions to your device.
3. Why We Process Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide personalized activity recommendations | Contract performance (Art. 6(1)(b)) |
| Manage your account and authentication | Contract performance (Art. 6(1)(b)) |
| Improve our service based on usage patterns | Legitimate interest (Art. 6(1)(f)) |
| Platform analytics (Google Analytics) | Consent (Art. 6(1)(a)) |
| Advertising and conversion tracking (Meta Pixel) | Consent (Art. 6(1)(a)) |
| Send service-related emails (e.g., account deletion) | Contract performance (Art. 6(1)(b)) |
| Deliver push notifications for activity suggestions | Contract performance (Art. 6(1)(b)) |
4. Data Retention
We retain your personal data only as long as necessary:
- Active account: Data is retained while your account is active.
- After account deletion request: We keep your data for 30 days to allow recovery, then permanently delete it.
5. Your Rights Under GDPR
You have the following rights regarding your personal data:
✓ Right to Access
Request a copy of all data we hold about you.
✓ Right to Rectification
Correct any inaccurate personal data.
✓ Right to Erasure
Request deletion of your account and data.
✓ Right to Data Portability
Export your data in a machine-readable format.
✓ Right to Withdraw Consent
Withdraw consent for analytics at any time.
✓ Right to Object
Object to processing based on our legitimate interests, including the venue listings in our directory.
✓ Right to Restriction
Ask us to restrict processing of your data in certain circumstances.
✓ Right to Lodge Complaint
File a complaint with your local data protection authority.
6. How to Exercise Your Rights
You can exercise most rights directly in the platform:
- Export your data: Go to Profile → Export My Data
- Delete your account: Go to Profile → Delete Account
- Update your information: Go to Profile → Edit Name
For other requests, contact us at admin@movent.ai. We will respond within 30 days.
7. Cookies & Analytics
Our platform uses cookies and similar device storage for:
- Essential cookies: Required for keeping you signed in and remembering your preferences (no consent needed).
- Analytics cookies: Google Analytics to understand how visitors use the platform (consent required).
- Marketing cookies: Meta Pixel for measuring the performance of our advertising on Facebook and Instagram, and showing relevant ads to similar audiences (consent required).
You can manage your cookie preferences using our consent banner or anytime via Profile → Privacy preferences. You can also adjust settings in your browser.
About Meta Pixel: When you consent, the Meta Pixel sends Meta (Facebook) limited information about your interaction with the platform — page views and a conversion signal when you complete registration. Meta uses this to attribute ad performance and build similar audiences. Your IP address is processed by Meta. You can opt out anytime by changing your cookie preferences or by adjusting your Meta ad settings.
8. Data Security
We implement appropriate security measures to protect your data:
- Encrypted data transmission (HTTPS/TLS)
- Secure cloud infrastructure
- Access controls and authentication
- Regular security reviews
9. Third-Party Services
We use the following third-party services:
| Service | Purpose | Location |
|---|---|---|
| Google Analytics | Platform analytics | EU/US |
| Meta (Facebook) Pixel | Advertising conversion tracking and audience building | EU/US |
| Sentry | Error tracking and monitoring | EU/US |
| AI Services (Mistral AI) | Semantic search and personalized activity recommendations | EU (France) |
| Google Firebase | Push notifications | EU/US |
| Cloud hosting (Hetzner) | Platform hosting | EU |
| GetStream (Stream Chat) | In-app chat for hangouts and group plans (message content, display name, avatar) | EU/US |
| Microsoft Azure (Blob Storage) | Storage of images and uploaded media (including profile pictures) | EU |
| CARTO | Map tiles for the in-app map (your device requests tiles for the map area you view) | EU/US |
| Zoho Mail | Transactional email (verification codes, account notices) | EU |
AI Processing Note: Chat messages and anonymized preference data (activity interests, age range, fitness level) are processed by AI services to provide personalized recommendations. Personal identifiers and sensitive health data (emotions, disabilities) are excluded before processing. AI services do not use your data for model training.
Data transfers outside the EU are covered by Standard Contractual Clauses (SCCs).
10. Business Listings & Venue Data
Movent operates a local-discovery directory. Some venue and business listings are created from publicly available information BEFORE any owner claims them, so people can find places in Vienna.
Legal Basis
Our legitimate interest in operating a comprehensive local-discovery directory (GDPR Art. 6(1)(f)).
Data & Source
Business contact and location details, opening hours, photos, and category/attribute data, taken from publicly accessible sources — the venue's own website, public business listings, and Google. Where a venue is operated by a sole trader, this may include the owner's personal data.
Recipients
Shown to Movent's users; processed by our service providers (hosting, maps, analytics) under data-processing agreements.
Retention
Kept while the venue is publicly relevant; hidden from discovery on a removal request.
Your Rights as a Venue or Owner
You can access, correct, delete, restrict, or object to this processing at any time — claim and manage your listing at business.movent.ai, or email admin@movent.ai.
Claiming a Listing
When you verify a business email and claim a listing, we create a business account (an Organization) for you and process your email to operate that account. The legal basis for the account is contract (GDPR Art. 6(1)(b)) — not consent.
Automated Processing
Listings are ranked and recommended algorithmically. This has no legal or similarly significant effect on anyone.
You can lodge a complaint about the processing of venue data with the Austrian Data Protection Authority (see the Contact section).
11. Children's Privacy
Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or in-platform notification. The "Last updated" date at the top indicates when this policy was last revised.
13. Contact Us
If you have questions about this privacy policy or your personal data, contact us:
Email: admin@movent.ai
Address: Vienna, Austria
You also have the right to lodge a complaint with the Austrian Data Protection Authority: