Legal · last updated 2026-06-02
Privacy policy
We wrote a plain-language version too. Read how we handle your data. Same facts, less legal.
Who we are
Movecheck is operated by the Movecheck team, based in the Netherlands. Contact: hello@movecheck.me.
Movecheck reads a conversation you upload and names the moves you made in it. You upload screenshots of a conversation; we return a card-by-card reveal of the moves you yourself made. We never analyse or label the other person.
What we collect
The data we process falls into four buckets:
- Screenshots you upload. Image files sent to our storage bucket. Processed once, then deleted.
- Your analysis result. A structured summary containing the moves you made, short quotes from your own messages, and our written interpretation. Held in two copies (see retention below).
- Email address. Only if you choose to save your result by email, or sign up for a waitlist when capacity is full. Optional.
- Technical signals. A salted hash of your IP address. Used only to count free analyses against a monthly limit. No advertising IDs, no cross-site profiling.
- Anonymous product analytics.We measure aggregate, cookieless usage (page views and funnel steps) via PostHog to understand how the product is used. No cookies, no advertising identifiers, and we honour your browser’s Do Not Track signal.
- Anonymous structural data. Numbers and category labels derived from your analysis (move counts, energy mix, time of day). No text, no images, no link back to you. Used for research into communication patterns.
How long we keep it
Every piece of personal data has a defined retention:
- Screenshots: deleted within one hour of upload, typically within minutes, as soon as the analysis is delivered to you. We never store your original images long term.
- Delivery copy of your result (your moves and quoted lines, contact identifiers removed): about 15 minutes. Long enough for the reveal session, then it expires automatically.
- Persisted copy of your result (contact identifiers removed): 14 days, gated by a private link. After 14 days it is deleted automatically.
- Email address: 30 days, then purged by a scheduled job.
- Payment records (for paid tiers): 7 years, as required by accounting law.
- Rate-limit counters: 30 days.
- Anonymous structural data: retained indefinitely, but it carries no path back to you. No name, no email, no IP, no free text.
The result-copy pattern
The reveal needs your own words to feel real, but we don’t want to hold the raw conversation long. Both copies we keep are redacted the same way: your moves, and the lines of yoursthey’re built on, with emails, phone numbers, handles, links and account numbers stripped. The raw conversation transcript and the other person’s words never reach either copy. We keep a short-lived working copy (~15 minutes) and a re-openable copy (14 days); after 14 days it is deleted too.
Legal basis for processing
Under the GDPR, we rely on the following bases:
- Consent (Art. 6(1)(a)). For the upload of your screenshots and the analysis itself; for saving your email; for any opt-in research participation. You can withdraw consent at any time.
- Contract (Art. 6(1)(b)). For paid tiers, to deliver the analysis you bought.
- Legitimate interest (Art. 6(1)(f)). For anonymous structural data used to improve the taxonomy and to detect taxonomy gaps. The data is genuinely anonymous; the legitimate interest is minimal-impact research.
- Legal obligation (Art. 6(1)(c)). For retaining payment records over the legally required window.
Age requirement
Movecheck is for users aged 16 and older. Before your first analysis you confirm your age via a checkbox. We do not collect your date of birth and we do not run automated age verification.
How we analyse your screenshots
We use large language models to read your screenshots and identify the moves you made. The taxonomy of 28 moves and the interpretation framework are human-designed; the language model fits your conversation to that framework.
This is disclosed in line with GDPR Article 22 and the EU AI Act. The analysis is a reflective tool, not an automated decision with legal or similarly significant effect. We do not score you, profile you for marketing, or share your analysis with third parties. You can stop using Movecheck at any time and request erasure (see below).
We never label the other person in your conversation. Their words are processed once during analysis and are never persisted.
EU AI Act classification
Movecheck is a limited-risk AI system under the EU AI Act. We meet the transparency obligations that apply to it, and we have confirmed it sits outside every prohibited and high-risk category.
- Transparency (Art. 50). Before you run anything, you are told that an AI model reads your screenshots and that the reveal is AI-generated. No hidden automation, no system pretending to be a person.
- Not a prohibited practice (Art. 5). Movecheck is not an emotion-recognition system used in the workplace or education; it performs no social scoring, no biometric categorisation, no subliminal or manipulative targeting, and no exploitation of vulnerability. You decide what to upload and why.
- Not high-risk (Annex III). Movecheck makes no decision about your access to employment, education, credit, benefits, housing, law enforcement, migration, or any other regulated outcome. It is a reflective tool, nothing more.
- Human-designed framework. The 28-move taxonomy and the interpretation logic are written by a human. The model maps your words onto that fixed framework; it does not invent categories about you, and it never labels the other person.
- No automated decision with legal effect (GDPR Art. 22). The output carries no legal or similarly significant consequence. You can ignore it, disagree with it, or delete it.
- Human contact. You can reach a human about any analysis at hello@movecheck.me.
Movecheck names patterns in your own messages. It is not a diagnosis, not medical or psychological advice, and not a substitute for a professional.
Right to erasure
You have the right to delete your data at any time (GDPR Art. 17). To exercise it, send a request via the deletion endpoint or email delete@movecheck.me from the email address tied to your result. We will delete your persisted result copy and your email record from our databases within 30 days.
Anonymous structural data cannot be erased because it is not linked to you. It carries no identifier, no email, no fingerprint. By design, there is no path back to a specific person.
Your other rights
- Access (Art. 15). Request a copy of what we hold on you.
- Rectification (Art. 16). Correct inaccurate data.
- Restriction (Art. 18). Pause processing.
- Portability (Art. 20). Receive your data in a machine-readable form.
- Objection (Art. 21). Object to processing based on legitimate interest.
- Complaint. Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.
Data processing records (Art. 30)
We maintain an internal record of processing activities covering categories of data, purposes, retention windows, recipients (storage and payment providers), and applied safeguards. Available on request to supervisory authorities.
Sub-processors
We use the following service providers to deliver Movecheck:
- Vercel · application hosting.
- Cloudflare R2 · short-lived screenshot storage.
- Upstash Redis · result and rate-limit storage.
- Turso · email and payment records storage.
- Anthropic / OpenAI · language model providers (image-in, structured-text-out; no training on your data). Your screenshots and the model’s output may be retained by the provider for a limited period (up to 30 days) for abuse monitoring and safety, then deleted.
- Stripe · payment processing.
- Resend · transactional email.
- Cloudflare Turnstile · bot protection.
- PostHog · anonymous, cookieless product analytics.
All sub-processors are bound by data processing agreements with standard EU contractual clauses where data leaves the EEA.
Data protection officer
We have not appointed a formal DPO. At our scale, GDPR does not require one. Privacy questions go directly to the Movecheck team at hello@movecheck.me.
Changes to this policy
Material changes will be announced on the site at least 14 days before they take effect. Last updated date is at the top of this page.
Still prefer plain English? Read how we handle your data.