Legal

Privacy Policy

Last updated: October 24, 2026

This Privacy Policy explains what personal data Movemory collects, why we collect it, who we share it with, how long we keep it and what rights you have. It applies to the website movemory.com, the web app at app.movemory.com and the Movemory apps for iOS and Android (together, the “Service”).

In short: we collect only what we need to run your account, keep your repertoire in sync and process your subscription. We do not sell your data, we do not show ads and we do not use analytics or tracking cookies. You can export your data and delete your account in the app at any time.

1. Who is responsible for your data

The controller of your personal data is Vladimir Paramonov (Paramonov Vladimir Sergeevich), Individual Entrepreneur, registered in the Republic of Armenia, state registration number 286.1580471, TIN 20285061, registered address: 104 Gevorg Chaush St., Apt. 4, Ajapnyak District, Yerevan 0057, Armenia (“we”, “us”).

For any privacy question or request, write to support@movemory.com.

2. What data we collect and why

Data	Why we use it	Legal basis (GDPR)
Account data: a user ID, the email address and name provided by Apple or Google when you sign in (Apple may give us a private relay address instead of your real email), whether the account is a guest account, and when it was created and last used.	Create and run your account, let you sign in on several devices, contact you about your account or subscription, delete inactive guest accounts.	Performance of a contract (Art. 6(1)(b)).
Your repertoire and training data: openings, moves, comments, line names, training results and progress, review schedule, statistics and app settings.	Provide the core features: store your repertoire, schedule reviews, show statistics, sync between devices, import and export.	Performance of a contract.
Subscription data: your plan, subscription status and dates, store or Paddle customer and subscription IDs, and records of billing events we receive from Paddle, Apple or Google.	Give you access to Pro, process cancellations and refunds, prevent fraud, keep accounting records.	Performance of a contract; legal obligation (Art. 6(1)(c)) for accounting records.
Technical data: IP address, device and browser type, request times and error logs, recorded by our hosting providers when your device connects to the Service.	Deliver the Service, keep it secure, prevent abuse, diagnose errors.	Legitimate interests (Art. 6(1)(f)) in operating a secure and reliable service.
Support messages: your email address and whatever you write to us.	Answer your questions and handle your requests.	Performance of a contract or legitimate interests in helping you.

Payment card details. We never see or store your card or bank details. Web payments are processed by Paddle; in-app purchases are processed by Apple or Google.

Reminders. Training reminders are scheduled as local notifications on your device and only if you allow notifications. We do not send push notifications from our servers.

We do not use your data for advertising, we do not sell or rent it, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

3. Who we share data with

We share personal data only with the service providers we need to run the Service, and only as much as they need:

Supabase Inc. (USA): database, authentication and server functions. Our project is hosted in the European Union (Frankfurt, Germany). Processor.
Cloudflare, Inc. (USA): hosting of the website and web app, content delivery, DNS and security, and forwarding of emails sent to support@movemory.com. Processor.
Paddle.com Market Limited (United Kingdom) and its affiliates: our online reseller and Merchant of Record for web purchases. Paddle collects your payment and billing details directly at checkout and processes them as an independent controller under the Paddle Privacy Policy. We share your user ID and email address with Paddle so it can link the purchase to your account, and receive subscription and transaction data back.
Apple Inc. and Google LLC: sign-in, and in the mobile apps, in-app purchases through the App Store and Google Play. They process data under their own privacy policies.
RevenueCat, Inc. (USA): manages in-app subscriptions in the iOS and Android apps. It receives your user ID and purchase receipts, not your repertoire. Processor.
Our email provider, which stores the support mailbox that messages to support@movemory.com are forwarded to. Processor.

We may also disclose data if the law requires it, to protect our rights or the safety of users, or to a successor if the Service is transferred to another operator (we will tell you in advance and this policy will continue to apply).

The opening library is based on the public lichess.org database. The Service does not send your data to Lichess.

4. International transfers

We are based in Armenia, and some of our providers are based in or may access data from other countries, including the United States and the United Kingdom. Where data protection law requires it, these transfers are covered by appropriate safeguards, such as an adequacy decision of the European Commission (including the EU–US Data Privacy Framework where the provider is certified) or the European Commission’s Standard Contractual Clauses included in our providers’ data processing terms. You can ask us for more information about these safeguards.

5. How long we keep data

Account and repertoire: for as long as you have an account. When you delete your account in Settings, we delete your account and all its data immediately.
Guest accounts: deleted with all their data after 180 days without activity.
Detailed training history (individual sessions and attempts): 90 days. Your progress and statistics per line and move are kept as long as the opening exists.
Deleted openings: kept for 30 days so that the deletion can sync to all your devices, then permanently removed.
Subscription and billing records: for as long as needed to provide Pro and for the period required by tax and accounting law (generally up to 5 years after the transaction). Paddle, Apple and Google keep their own records under their policies.
Technical logs: kept by our hosting providers for a short period, normally no more than 30 days.
Support emails: up to 2 years after the conversation ends, unless you ask us to delete them sooner.

Copies of deleted data may remain in our providers’ encrypted backups until those backups are overwritten in their regular cycle.

6. Data stored on your device

We do not use advertising or analytics cookies, and we do not track you across websites, so we do not show a cookie banner. The Service stores the following on your device because it is strictly necessary for the features you use:

your sign-in session (access and refresh tokens);
a cached copy of your repertoire and a queue of training results, so that training works offline and syncs later;
your app settings, such as theme, sound and reminder preferences.

When you open the checkout on the web, Paddle’s checkout script loads and may set its own cookies to process the payment and prevent fraud; see the Paddle Privacy Policy. The website movemory.com itself does not set cookies.

7. Your rights

Depending on where you live, including under the EU and UK GDPR and the Armenian Law on Protection of Personal Data, you have the right to:

access your personal data and get a copy of it;
rectify inaccurate data;
erase your data: you can delete your account yourself in Settings → Delete account;
data portability: you can export your repertoire as PGN and your full data as a JSON backup in Settings → Data;
restrict or object to processing based on legitimate interests;
withdraw consent where processing is based on consent (for example, turn off notifications in your device settings);
lodge a complaint with a data protection authority, in particular in the country where you live or work. In Armenia, this is the Personal Data Protection Agency of the Ministry of Justice.

To exercise any right, write to support@movemory.com. We will reply within one month. We may ask you to confirm that the account is yours before acting on a request.

California residents: we do not sell or share personal information for cross-context behavioural advertising, and you have the rights to know, delete and correct personal information described above.

8. Security

We protect your data with encryption in transit (HTTPS/TLS) and at rest by our hosting provider, access control that lets each account read and change only its own data, and the principle of least privilege for our own access. Sign-in is handled by Apple or Google, so we never store passwords. No system is perfectly secure, but if a data breach is likely to put your rights at risk, we will notify you and the authorities as the law requires.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you are a parent or guardian and believe a child under 13 has given us personal data, contact us and we will delete it. In some countries a higher age applies to consent for online services; where that is the case, users below that age need the consent of a parent or guardian.

10. Changes to this policy

We may update this Privacy Policy. We will post the new version on this page and change the date above. If the changes are material, we will tell you in the app or by email before they take effect.

11. Contact

Vladimir Paramonov, Individual Entrepreneur, 104 Gevorg Chaush St., Apt. 4, Ajapnyak District, Yerevan 0057, Armenia. Email: support@movemory.com.