Privacy Policy

Last updated: July 10, 2026

MoveCollective ApS ("we", "us", or "our") operates the MoveCollective platform, available at movecollective.dk and through our iOS and Android applications (collectively, the "Service"). This Privacy Policy describes how we collect, use, store, and share your personal information, and explains your rights under applicable law including the EU General Data Protection Regulation (GDPR).

By using MoveCollective, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Who we are

MoveCollective ApS
Copenhagen, Denmark
CVR: [insert CVR number after registration]
Contact: hello@movecollective.dk

We are the data controller for personal data collected through the Service.

2. What data we collect and why

Data linked to you (visible or associated with your account)

Name and email address — required to create and manage your account, and to send you essential service communications
Session check-ins — recorded when you enter a session PIN, used to track your attendance and display your activity on community leaderboards
Communities you join — used to show your membership and display you in member lists within those communities
Photos and posts — content you choose to share within communities is visible to other members of those communities
Payment information — if you subscribe to a paid community, payment is processed by Stripe. We do not store your card details.

Data not linked to you (used for platform improvement only)

Profile preferences — your primary sport, fitness level, age range, gender (optional), and neighbourhood, collected during onboarding. Used to match you with relevant communities and to provide anonymised demographic insights to community hosts. Never shown to individual users.
Usage data — which features you use and how you navigate the app, used to improve the platform. This data is aggregated and anonymised.
Crash reports — anonymous technical data used to identify and fix bugs.

3. Legal basis for processing (GDPR)

We process your personal data under the following legal bases:

Contract performance — processing necessary to provide the Service you signed up for (account management, session check-ins, community features)
Legitimate interests — improving the platform, preventing fraud, and ensuring security
Consent — optional profile information (gender) and marketing emails, where you can withdraw consent at any time

4. How we share your data

We do not sell your personal data to anyone, ever.

We do not share your data with advertisers or advertising networks.

We share data only in the following limited circumstances:

Within the platform: your name and activity are visible to other members of communities you have joined
Service providers: we use trusted third-party services to operate the platform (see section 6). These providers process data only on our behalf and under strict data processing agreements
Legal requirements: if required by law, court order, or government authority
Business transfers: if MoveCollective is acquired or merges with another company, your data may be transferred as part of that transaction, with continued protection under this policy

5. Community hosts and your data

Community hosts (people who create and manage communities on MoveCollective) can see aggregated, anonymised insights about their community members — such as total check-ins, gender breakdown, and neighbourhood distribution. Hosts cannot see your individual profile details or contact you directly through the platform.

6. Third-party services we use

Supabase (database and authentication) — data stored in EU data centres. Privacy policy
Vercel (platform hosting) — Privacy policy
Resend (transactional email) — used only to send account-related emails. Privacy policy
Stripe (payment processing, where applicable) — Privacy policy
Anthropic (AI-powered community matching) — search queries you enter in the Discover page are sent to Anthropic's API to find matching communities and events. Anthropic does not retain these queries for training purposes under our API agreement. Privacy policy

7. Data retention

We retain your personal data for as long as your account is active. If you delete your account:

Your profile, check-in history, and content are deleted within 30 days
Anonymised, aggregated data (e.g. total check-in counts used in community statistics) may be retained as it cannot be linked back to you
We may retain certain data for up to 7 years where required by Danish accounting or tax law

8. Your rights under GDPR

As a user in the EU, you have the following rights:

Right of access — request a copy of the personal data we hold about you
Right to rectification — correct inaccurate or incomplete data
Right to erasure — request deletion of your account and personal data
Right to portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interests
Right to restrict processing — request that we limit how we use your data
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting prior processing

To exercise any of these rights, email us at hello@movecollective.dk. We will respond within 30 days. You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) at datatilsynet.dk.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS), encrypted data storage, access controls limiting who can access personal data, and regular security reviews. No method of transmission over the internet is 100% secure, but we take all reasonable measures to protect your information.

10. Cookies and tracking

We use only essential cookies necessary to keep you logged in and maintain your session. We do not use advertising cookies, tracking pixels, or third-party analytics that profile your behaviour across other websites. You can clear cookies through your browser or device settings, but this will log you out of the Service.

11. Children's privacy

MoveCollective is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us immediately at hello@movecollective.dk and we will delete it promptly.

12. International data transfers

Your data is stored and processed within the European Union. Where any third-party service provider processes data outside the EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice in the app at least 14 days before the changes take effect. The "last updated" date at the top of this page will always reflect the most recent version. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact us

For any questions, requests, or complaints regarding this Privacy Policy or how we handle your data:

MoveCollective ApS
Copenhagen, Denmark
hello@movecollective.dk

This policy was last reviewed and approved on July 10, 2026. MoveCollective ApS is registered in Denmark. CVR: [insert after Monday registration].