Privacy Policy
Last updated: 7 November 2026
In short: MooveRound keeps only what it needs to run your account and your groups. It has no ads, no tracking and no analytics, and it never sells or shares your data. Other people in your groups can see your name, but never your email. You can delete your account at any time from the app.
1. Who is responsible
MooveRound is run by Alessio Cellucci, who is the data controller for the personal data described here. For any question or request about your data, write to alessiocellucci@proton.me.
2. What we collect
Your account. Your email address, and either a password or the account you sign in with (Apple or Google). Passwords are never stored: only a one-way hash of them is. You can also add a name, surname, username and your work.
Signing in with Apple or Google. If you choose to, we receive from Apple or Google an identifier for your account with them, your email address and, if you share it, your name. If you hide your email with Apple, we receive a private relay address instead. For Apple, we also keep a token that lets us end the connection with Apple when you delete your account.
What you do in groups. The groups you create or join, your role in them, invites and requests to join, calendar events and their tags, who is going to an event, and the work shifts you pick.
Technical data. When the app talks to our server, the server records your IP address, the time and the request made. We use this to keep the service running and secure, for example to limit attempts to guess a password.
On your phone. The app keeps your login on your device, in its secure storage, so you stay signed in.
We don't collect your location, contacts, photos or any data for advertising.
3. What other people can see
People in a group you belong to can see your name, surname, username and role in that group, the events and shifts in the group's calendar, and whether you are going to an event. They cannot see your email address. People outside a group see nothing of it, except that someone holding an invite link can see the group's name, description and picture.
4. Why we use your data
- To provide MooveRound: your account, signing in, your groups and their calendars. This is necessary to provide the service you asked for (Article 6(1)(b) GDPR).
- To keep it secure: preventing abuse, such as password guessing, and fixing problems. This is our legitimate interest in running a safe service (Article 6(1)(f) GDPR).
We don't use your data for advertising, profiling or automated decisions, and we never sell it.
5. Who else handles it
- Contabo GmbH (Germany) hosts our server in the European Union. It processes data only on our behalf.
- Apple and Google, only if you choose to sign in with them. They handle the sign-in under their own privacy policies.
- Apple and Google also deliver the app through the App Store and Google Play, under their own terms.
We only disclose data to anyone else if the law requires it.
6. How long we keep it
- Your account and group data, until you delete your account.
- When you delete your account, your profile, logins, shifts and memberships are deleted at once. Events you created stay in their group's calendar for the other members, without your name. Groups where you were the only person are deleted.
- Database backups, which may still hold deleted data, are kept for up to 14 days.
- Server logs are kept only for a short time and are deleted as they are rotated, normally within a few weeks.
7. Your rights
Under the GDPR you can ask us for a copy of your data, correct it, delete it, move it to another service, restrict how we use it, or object to our use of it. You can edit your profile and delete your account yourself in the app, under Profile. For anything else, write to alessiocellucci@proton.me, and we will answer within one month.
You also have the right to complain to a data protection authority. In Italy this is the Garante per la protezione dei dati personali.
8. Security
All traffic between the app and our server is encrypted. Passwords are stored only as Argon2id hashes, logins expire and can be ended at any time, and access to groups is checked on every request.
9. Children
MooveRound is not meant for children under 14, and we don't knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
10. Changes
If we change this policy, we will update the date at the top. If a change affects how your data is used in an important way, we will tell you in the app before it takes effect.