Explore
DRAFT. This policy is pending legal review and is not yet in force.

Legal

Privacy Policy

Last updated: [PLACEHOLDER: publish date]

Who we are

This policy explains how [PLACEHOLDER: legal entity] ("we", "us") handles your personal data when you use the Movi app. We are the data controller. Registered address: [PLACEHOLDER: registered address]. Registrations: [PLACEHOLDER: ICO registration no. (UK) and/or UAE registration/licence details].

For privacy enquiries, contact us at support@movi.ae.

Scope

Movi launches first in the United Arab Emirates, and is also designed to operate in the United Kingdom. Depending on where you use the service, your data is protected under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and/or the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. [PLACEHOLDER: solicitor to confirm the controlling framework(s), lead establishment, and whether separate regional policies are required.]

Data we collect

Account and identity

When you register for Movi we collect your name, email address, and the credentials needed to authenticate your account. Where identity verification is required, you will be asked to submit identity documents through our KYC partner, Sumsub. We store only your verification status; Sumsub holds the underlying documents.

Ownership verification (UAE listings)

When a seller in the UAE verifies ownership of a property, the verification is performed against the Dubai Land Department's public "Validate Owner and Property" service, and we store a screenshot of the result as evidence. That evidence can include the owner's name and title-deed number, and is held in private storage accessible only for verification purposes.

Buyer profile and preferences

If you use Movi as a buyer, we collect your property preferences and search criteria, including budget, location, property type, and lifestyle answers, to calculate match scores and personalise your feed.

Listing and property data

Sellers and agents provide property information including address, latitude and longitude, area or postcode, and photographs, plus an AI-generated property description produced from the listing details. In the UK this can also include a what3words location reference and a home-report PDF; these features are not offered in the UAE.

Messages and attachments

We store the content of chat messages, offers negotiated in-chat, and any file attachments exchanged between buyers, sellers, and agents within the app.

Appointments

We collect appointment details including the buyer's phone number, any notes added by either party, and feedback provided after a viewing.

Offers

We record the terms of any offers submitted through the app, including offer amounts and any conditions.

Saved properties and personal notes

We store the properties you save, any personal notes you attach to them, and any price-alert thresholds you set.

Usage analytics

We collect first-party analytics to understand how the app is used. This includes action type (e.g. swipe, save), view duration, which images and sections were viewed, distance band from a property, session identifier, per-property analytics, and card-image dwell and decision events. We do not use any third-party analytics trackers.

Device and push-notification data

We collect your Apple Push Notification Service (APNs) token, platform, device model, app version, and locale in order to send you push notifications you have consented to receive.

Uploaded files

We store images you upload (including property photos and your profile avatar) and other files you submit as part of a listing.

How we use your data

Performance of contract: We use your account information, listing data, messages, appointments, and offers to provide the Movi service you have signed up for.

Legitimate interests: We use first-party analytics to improve the product and understand how features are used. We also process data to prevent fraud, detect abuse, and maintain the security of the platform.

Consent: We use your precise location for radius-based property search only where you have granted location permission. We send push notifications only where you have granted notification permission.

Legal obligation: We carry out identity verification as required by applicable anti-fraud and anti-money-laundering obligations.

Sharing and processors

We do not sell your personal data and use no third-party advertising or analytics trackers. We share data only with the following processors, each acting under a data-processing agreement:

  • Supabase (auth, database, storage, realtime). United Kingdom / UAE
  • DigitalOcean Spaces (object storage and CDN). London, United Kingdom
  • Google Maps (geocoding and places autocomplete). United States
  • What3Words (coordinate-to-address conversion, UK market only). United Kingdom
  • Sumsub (KYC identity verification). European Union
  • OpenAI (property-feature summaries for AI-generated listing copy). United States
  • Skyresoft backend (api.skyresoft.co.uk) (geocoding and listing-copy generation). United Kingdom
  • Apple APNs (iOS push notifications). United States
  • SMTP2GO via Supabase Auth (transactional and authentication email)
  • Google reCAPTCHA (spam and abuse prevention on the founding-member form on this website). United States
  • One Digital Nation (delivery of founding-member enquiries submitted through this website). United Kingdom

International transfers

Your data may be processed in the United Kingdom, the UAE, the European Union, and the United States (Google, OpenAI, and Apple). Where data crosses borders we rely on [PLACEHOLDER: confirm transfer mechanism per corridor - UK IDTA / SCCs, and the PDPL cross-border transfer conditions for UAE users] to protect it.

How long we keep your data

We keep personal data only as long as needed for the purposes above or as required by law, after which it is deleted or anonymised. You can delete your account from within the app (Profile → Settings → Delete Account), which removes your account data; some records may be retained where we have a legal obligation to do so.

Your rights

Depending on your location, you have rights under the UAE PDPL and/or UK GDPR to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. To exercise any of these, contact us at support@movi.ae.

Complaints

UK users have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. UAE users may raise concerns with the UAE Data Office. [PLACEHOLDER: solicitor to confirm the competent UAE authority and complaint route.]

Children

Movi is intended for users aged 18 and over. We do not knowingly collect data from children.

Cookies

This website does not use tracking or advertising cookies. The Movi app uses no third-party analytics or advertising trackers.

The founding-member form on this website is protected by Google reCAPTCHA, which sets a third-party cookie and collects device and browser information solely to tell real visitors from automated ones. It is not used for advertising or analytics. Google's Privacy Policy and Terms of Service apply.

Security

We use industry-standard measures (encryption in transit, access controls, and reputable infrastructure providers) to protect your data.

Changes to this policy

We may update this policy; material changes will be notified in the app or on this page, with a revised "last updated" date.

Contact us

Questions about this policy or your data: support@movi.ae.