Privacy, in plain English.

1What we collect.

We collect only what's needed to run the planner and keep your account working:

• Account data — your name, email address, and the password you chose (stored as a one-way hash, never as plain text).
• Move data — the details you give the planner: move date, old and new postcodes, rooms, boxes, task notes.
• Device data — basic technical info like device type, OS version, and app version, used to diagnose crashes.
• Billing data — if you subscribe, our payment provider (Stripe) stores your card details. We never see or store your card number.

2Why we collect it.

To generate your moving plan, sync it between your devices, send you reminders when you've asked for them, and handle billing. That's the complete list of purposes. We do not use your data for advertising, profiling, or model training.

3Who we share it with.

Only the small number of service providers we need to run the app:

• Stripe — payments. Handles card data directly; we only ever see a masked reference.
• Supabase — our database and authentication host, based in the EU.
• Sentry — crash diagnostics. Receives anonymised error traces with any personal data scrubbed.

We do not share your data with advertisers, removals companies, estate agents, or anyone else. We do not run third-party tracking pixels on our site.

4How long we keep it.

For as long as your account is active. If you delete your account, we remove your personal data from our production database within 30 days. Anonymised usage statistics (for example, "X users completed Y tasks this week") may be kept longer, because they can no longer be tied to you.

Legal records — invoices, for instance — are kept for 6 years where tax law requires it.

5Your rights.

Under UK GDPR you have the right to:

• See a copy of the data we hold about you.
• Correct anything that's wrong.
• Delete your account and all the personal data tied to it.
• Export your plan and move data in a portable format (JSON).
• Object to any processing you think is unfair.

You can exercise all of these from Settings → Data inside the app. You can also email hello@digitalhighrise.dev and we'll action it manually.

6Children.

Movemark is not aimed at children under 13, and we don't knowingly collect data from them. If you believe a child has signed up, let us know and we'll remove the account.

7Cookies.

The Movemark website uses one first-party cookie to remember your login when you return. That's the whole cookie story. No analytics cookies, no advertising cookies, no "we value your privacy" modal with 300 third parties hidden behind a "Legitimate interest" toggle.

8Security.

We use industry-standard encryption in transit (TLS 1.3) and at rest (AES-256). Passwords are hashed with bcrypt. Access to production data is limited to a small number of engineers who use hardware keys for authentication.

No system is perfectly secure. If a breach ever affects your data, we will tell you within 72 hours, in plain English, and explain what we're doing about it.

9Changes to this policy.

If we make a material change, we'll email everyone with an account at least 14 days before it takes effect. The current version will always be at this URL, with the "last updated" date near the top.

10Contact.

Movemark Ltd, registered in England & Wales. Data-protection queries: hello@digitalhighrise.dev. You also have the right to complain to the Information Commissioner's Office if you think we've mishandled your data.