Privacy policy
Effective 4 October 2026
Movd is an iPhone app for tracking your stocks, crypto and cash in one place. It is made by Konstantin Kolesnikov, an individual developer, who is responsible for your data under this policy. Questions and requests: hello@movd.kos.sh.
In short: Movd keeps only what it needs to show you your portfolio, does not track you, shows no ads, and never sells or shares your data for marketing. You can delete everything from the app at any time.
What Movd stores
- Your sign-in. Your email address. If you sign in with Google, also the account details Google shares for sign-in (your Google account id, name and email).
- Your portfolio. The holdings you enter: tickers or coins and their quantities, cash balances with their currency and interest rate, and when you added them.
- Your settings. Your base currency.
- Technical logs. The server records each request it handles (time, requested path, response status and duration) to keep the service running and find faults. These logs do not contain your portfolio.
Movd does not ask for or store your name beyond what Google shares, your contacts, your location, your bank or brokerage logins, or any payment details. It has no advertising and no analytics or tracking tools.
Why
Only to provide the app: to sign you in, to store your portfolio, to value it and to show what moved it. The legal basis is the performance of the service you asked for (Article 6(1)(b) GDPR). Sign-in emails are the only emails Movd sends.
Who processes your data
Movd uses these service providers, each only to run its part of the app:
- Supabase — the database and the sign-in service. Your account and portfolio are stored in its Frankfurt, Germany region.
- Fly.io — runs Movd's server, in Frankfurt, Germany.
- Resend — sends the sign-in emails.
- Google — only if you choose to sign in with Google.
To value your portfolio, Movd's server asks market data providers (Finnhub, EODHD, CoinGecko and the European Central Bank's rates through Frankfurter) for prices of tickers and currencies. These requests contain only the ticker or currency, never your identity or your quantities.
Some of these providers are US companies and may process data outside the European Economic Area; they do so under the safeguards they offer, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long
Your data is kept for as long as you have an account. Settings → Delete account in the app erases your portfolio, settings and sign-in account straight away. Copies may remain in the providers' encrypted backups for a limited period until those backups expire. Server logs are kept for a short time and then discarded.
Your rights
You can ask for a copy of your data, have it corrected or erased, ask for it in a portable format, or object to its use, by writing to hello@movd.kos.sh. You can also complain to your data protection authority.
Security
The app talks to the server only over encrypted connections (HTTPS). Your sign-in session is kept in your iPhone's Keychain. If your data is ever exposed, you will be told without undue delay.
Children
Movd is not meant for children under 16 and does not knowingly collect their data.
Changes
If this policy changes, the new version is published here with a new effective date. Significant changes are announced in the app.