Privacy Policy

Last updated: August 22, 2026

1. Introduction

Welcome to Movo ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") and related services ("Service").

By using Movo, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the App.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Display name
  • Profile picture (optional, from third-party auth providers)
  • Authentication credentials (via Supabase Auth / Firebase Auth)

2.2 Nutrition and Health Data

  • Food scan results (calories, macros, vitamins, health scores)
  • Pantry items (names, quantities, expiry dates)
  • Recipe preferences and dietary restrictions
  • Calorie and macro tracking logs
  • Meal plans and dietary goals
  • Barcode scan results

2.3 Food Photos (Temporary Processing Only)

This is critical to understand: When you use the AI Food Scanner or AI Ingredient Scanner, your food photo is:

  1. Uploaded temporarily to our AI processing server
  2. Analyzed by AI to extract nutrition data
  3. Immediately and permanently deleted after analysis

Your food photos are NEVER stored on our servers, NEVER shared with third parties, and NEVER used for any purpose beyond the immediate analysis.

2.4 Automatically Collected Information

  • Device type and operating system version
  • App usage analytics (features used, session duration)
  • Crash reports (via Firebase Crashlytics)
  • IP address (for authentication and fraud prevention only)

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Process food scans and generate nutrition data
  • Power AI coaching and personalized recommendations
  • Send important service updates and notifications
  • Detect and prevent fraud, abuse, and security issues
  • Comply with legal obligations

4. Data Storage and Security

All your data is stored securely using Supabase, hosted in the EU-WEST-2 (London) region. We implement:

  • End-to-end encryption for data in transit (TLS 1.3)
  • AES-256 encryption for data at rest
  • Row-Level Security (RLS) policies on all database tables
  • Regular security audits and penetration testing
  • Role-based access controls for all internal systems

5. Third-Party Services

We use the following third-party services that may collect information:

  • Supabase — Database, authentication, edge functions, storage (EU-WEST-2)
  • Firebase — Authentication, crash reporting, analytics
  • RevenueCat — In-app purchase management
  • OpenAI / NVIDIA NIM / Google Gemini / Other AI providers — AI analysis (food photos processed ephemerally only)
  • Open Food Facts — Barcode product database (open-source)

Each third-party service has its own privacy policy. We encourage you to review them.

6. Data Sharing

We do NOT sell your personal data. We may share information only:

  • With your explicit consent
  • To comply with legal obligations or respond to lawful requests
  • To protect our rights, privacy, safety, or property
  • In connection with a merger, acquisition, or sale of assets (with notice to you)

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

  • Access — Request a copy of your personal data
  • Rectification — Request correction of inaccurate data
  • Erasure — Request deletion of your personal data
  • Portability — Request transfer of your data to another service
  • Objection — Object to processing of your personal data
  • Restriction — Request restriction of processing

To exercise these rights, contact us at support@movo.ai. You can also delete your data instantly from the app via Settings → Delete All Data, or visit our Delete Data page for full details.

8. Data Retention

  • Account data — Retained while your account is active, deleted within 30 days of account deletion
  • Food photos — Deleted immediately after AI analysis (never stored)
  • Nutrition logs — Retained until you delete them or your account
  • Analytics data — Anonymized after 90 days

9. Children's Privacy

Movo is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: