Privacy Policy

Mova is an AI-powered messenger that helps people communicate across different languages. When you send a message, Mova can automatically translate it so that you and the people you talk to can understand each other, even when you do not share a common language.

This Privacy Policy explains what information Mova collects, why we collect it, how we use and store it, who we may share it with, and the choices and rights you have. It applies to the Mova mobile apps and related services available at getmova.io.

Please read this policy together with our Terms of Service.

Mova is currently operated by an individual (a natural person acting as a sole operator), who is the data controller for the personal data described in this policy.

• Service: Mova
• Website: getmova.io
• Controller: the individual operator of Mova (full identity available on request)
• Contact: support@getmova.io

Because Mova is not yet incorporated as a company, the operator acts as the data controller in a personal capacity. We will provide the controller's full identity on request. Once Mova is established as a legal entity, this page will be updated with the company details, including any registration number and registered address.

Depending on how you use Mova, we may collect the following categories of information:

• Account information — your phone number, username, display name, profile photo and preferred language, and — if you choose to add one — an email address (used for login alerts and two-factor codes).
• Optional profile details — information you choose to add, such as your date of birth (age) and gender.
• Contacts — if you turn on contact discovery, phone numbers from your address book are matched (as irreversible hashes where technically possible) to help you find people you already know. You can decline this.
• Authentication and session data — information needed to sign you in and keep your session secure.
• Messages and translations — the messages you send and receive and the translations generated for them.
• Voice, audio and video messages — if you use those features.
• Media and attachments — photos, files and other content you choose to send.
• Location you choose to share — if you send a location or start live location in a chat, the precise coordinates you share. This is optional and user-initiated, and is separate from the approximate country/region we derive from your IP address for security.
• Technical data — app version, device model, operating system version and technical logs.
• Device, connection and approximate location data — your IP address, an approximate country/region derived from it, device and session identifiers, and security signals used to protect your account (for example, to flag unusual sign-ins).
• Voice profile data — if you create a voice profile, a voice model derived from your voice recording. This is biometric data, processed only with your explicit consent (see “AI translation providers” below).
• Crash reports — if you have given consent to crash and diagnostics reporting.
• Moderation and report data — reports you submit and information related to handling them.
• Feedback on translations — when you rate, correct or regenerate a translation.
• Subscription and payment status — whether you have an active subscription. We do not collect or store full payment card data; payments are handled by the app stores or payment providers.
• Acquisition / referral source — how you arrived at Mova (for example, Product Hunt, an invitation from another user, an ad campaign or organic discovery), recorded once when you register, so we can understand which channels bring new users.
• Account-deletion feedback — if, when deleting your account, you choose to tell us why you are leaving, we keep your optional reason. It is submitted without your account identifiers so we cannot link it back to you.

To provide a working messenger, Mova stores your messages and their translations on our servers. We do this so that we can provide chat history, deliver messages reliably, synchronize your conversations across devices, generate translations, support safety features, respond to your support requests, and handle reports and moderation.

Because Mova provides automatic translation, Mova processes the content of your messages in order to translate them. Message content may be processed by the external AI providers that Mova uses to generate translations (see AI translation providers below).

Mova may use external artificial intelligence, machine-translation, speech-to-text, text-to-speech and infrastructure providers to process content and deliver features such as translation and voice messaging.

• These providers process data only to provide the requested service to Mova, and according to their agreements with us.
• Automatic translations may be inaccurate, incomplete, or may not fully convey tone or meaning.
• You should verify the original message before relying on a translation for any important decision.

The main providers (subprocessors) Mova relies on are:

• Google (United States / EU) — automatic translation of message text and images, via Google Gemini models accessed through the OpenRouter gateway.
• OpenRouter (United States) — AI gateway that routes translation requests to the model above.
• OpenAI (United States) — image generation and translation-quality checks for message text.
• Deepgram (United States) — speech-to-text for voice messages and calls.
• ElevenLabs (United States) — text-to-speech, speech-to-text (as a fallback), and, where you enable it, voice-profile generation.
• seven.io (Germany) — sending SMS one-time verification codes.
• RevenueCat (United States) — managing subscription and purchase status (when in-app subscriptions are enabled).
• Google Firebase / Apple Push Notification service — delivering push notifications.
• Hosting and infrastructure providers — running our servers, database and file storage.

Because Mova translates your messages, the content of your messages may be sent to the translation providers above to provide those features. This list may change as the service develops, and this page will be updated accordingly.

Koko AI is Mova's internal and future system for improving translation quality. Production translations are currently generated through external AI providers; Koko AI is being developed to help us evaluate and improve translation quality over time.

If you give separate, explicit consent, Mova may use de-identified translation data to improve translations and to train and evaluate Mova and Koko AI models. This data may include:

• original message text and translated text;
• transcripts of voice messages and call audio, and their translations;
• source language, target language and language pair;
• translation feedback and regeneration events.

This training data is separated from direct account identifiers. It is intended not to include your phone number, email, real name, contacts, media, geolocation, raw IP address, user agent or private moderation notes.

If you consent, Mova may collect crash reports and technical diagnostics to help us find and fix problems. These reports may include:

• app version, device model and operating system version;
• stack traces and timestamps related to the error.

Crash and diagnostic reports are designed not to include your message text, contacts, media or location, unless something is explicitly needed and disclosed to you. You can disable crash reporting at any time in your settings.

Where the GDPR applies, we rely on the following legal bases to process your information:

• Performance of a contract — to provide your account, messaging, translation and subscriptions.
• Consent — for Koko AI training, crash reporting, and optional marketing if it is ever introduced.
• Legitimate interests — for security, fraud prevention, abuse prevention and service improvement.
• Legal obligation — to respond to valid legal requests and comply with applicable law.
• Your request — to act on requests such as data export or deletion.

• provide messaging and automatic translation;
• create and maintain your account;
• synchronize chat history across your devices;
• improve the safety of the service;
• handle reports and moderation;
• improve translation quality where you have given consent;
• debug, maintain and develop the app;
• process subscriptions and related billing status.

We may share information in the following limited circumstances:

• With external AI providers used to generate translations and related features.
• With hosting, database and storage providers that run our infrastructure.
• Product analytics and crash diagnostics are processed by us on our own systems where enabled and consented; we do not currently share them with third-party analytics or crash-reporting providers.
• With App Store / Google Play and payment systems for subscriptions.
• With legal authorities when we are legally required to do so.
• With other users, only as part of the normal functioning of the app (for example, delivering your messages to the people you talk to).

• Account data is retained while your account is active.
• Messages and translations are retained while they are needed for chat history and the functioning of the service, unless deleted or anonymized in line with this policy.
• SMS verification codes are stored only briefly (minutes) and are removed once used or expired.
• Sign-in sessions are kept until they expire or you log out; security and sign-in history and technical/diagnostic logs are kept for a limited period (generally up to 180 days) and then deleted.
• If you delete your account, your account and profile data are deleted or anonymized within a reasonable period — up to 30 days where applicable.
• Reports and moderation records may be retained longer for safety, legal and abuse-prevention purposes.
• Backups may persist for a limited time (typically up to 30 days) before being overwritten.

Exact retention periods may evolve as the service develops, and this policy will be updated accordingly.

• You can delete your account from the app settings.
• When you delete your account, your active sessions are invalidated.
• Your profile and account data are deleted or anonymized.
• Some records may be retained where necessary for legal, security, fraud-prevention, moderation or dispute-resolution reasons.

You can request an export of your data from the app settings. An export may include:

• your account information;
• your messages and translations;
• your settings and consents;
• reports you have made and users you have blocked.

Internal moderation notes and the data of other users are not included beyond what is necessary for the export to be meaningful.

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• request deletion of your data;
• request restriction of processing;
• data portability;
• object to certain processing;
• withdraw consent where processing is based on consent;
• lodge a complaint with your supervisory authority.

To exercise these rights, use the tools in the app where available, or contact us at support@getmova.io.

We take reasonable measures to protect your information, including:

• encrypted transport using HTTPS/TLS;
• access controls limiting who can reach data;
• audit logs of sensitive operations;
• limited internal access on a need-to-know basis;
• backups to help recover from failures.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Mova is intended for users aged 16 or older. If the law in your country requires parental or guardian consent for someone of your age to use a service like Mova, you must have that consent before using the app. Users under the required age should not use Mova.

Some of the providers we use are located outside the European Economic Area (EEA), primarily in the United States. The main categories, and where they process data, are:

• Google — text and image translation (Gemini). United States, with data centres in both the US and the EU.
• ElevenLabs — text-to-speech and voice-profile generation. United States.
• Deepgram — speech-to-text. United States.
• OpenAI / OpenRouter — AI gateway, image features and translation-quality checks. United States.
• RevenueCat — subscription status. United States.
• Apple Push Notification service / Google Firebase Cloud Messaging — push notifications. United States.
• seven.io (SMS codes) and our hosting provider process data within the EU / Germany.

For transfers to the United States, Mova relies on the safeguards required by Chapter V of the GDPR. Where a provider is self-certified under the EU–US Data Privacy Framework, we rely on that Framework; and in all cases we rely on the European Commission's Standard Contractual Clauses (SCC) as a baseline, together with additional technical and organizational measures where needed. A named, always-current list of our subprocessors is published at getmova.io/subprocessors. Contact us for more information about these transfers.

We may update this Privacy Policy from time to time. When we make material changes, we may announce them in the app or on this website. The version number and "Last updated" date at the top of this page indicate the current version.

If you have any questions about this Privacy Policy or how Mova handles your data, contact us: