Privacy Policy
Last updated: 20 September 2026
Who we are
What's The Move is run by Alexis Potoroacă, Romania, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR). Questions or requests about your data: contact.whatsthemove.app@gmail.com.
What we collect
- Account: the identity Google or Apple gives us when you sign in (your email address and an account identifier — never your password), and the username, profile photo, bio and interests you choose.
- What you post: moves and their photos and captions, stories, comments, live chat messages, places you add or claim, ratings and highlights.
- Your social activity: who you follow, your crew (close friends), direct and group messages, likes, saves, blocks and reports.
- Location: your device's precise location, only while you use the app and only if you allow it (see "Your location" below).
- Check-ins: where and when you checked in, and your visit counts per place.
- Device: a push notification token for each phone you sign in on, if you allow notifications.
Your location
We use your location to show places near you, centre the map on you, and confirm you are really at a place when you check in, post a move, claim a place or add photos. That check happens when you take the action; we do not track you in the background. Your check-ins are stored privately on your account. What others see is only a count of recent arrivals at a place, without who. If you go live and choose to show yourself on the map, your position is shown to the audience you picked, until you end it.
Why we use it (and on what legal basis)
- To provide the app you signed up for: your profile, feed, map, posting, messaging, check-ins and standings (performance of a contract).
- Location and push notifications: only with your permission, which you can withdraw at any time in your phone's settings (consent).
- To keep the app safe: handling reports, removing content that breaks the Terms, preventing abuse (legitimate interest).
Who can see what
- Public account: your profile, public moves and stories are visible to everyone in the app. Your check-in standings (such as Regular or VIP at a place, and your visit counts) appear on your profile and on that place's regulars board.
- Private account: only the followers you accept see your moves and stories, and you do not appear on regulars boards. Claimed places are always public.
- Private moves (Crew only, Followers only, Invite only) are visible only to the people you chose. This is enforced on our servers, not just in the app.
- Anonymous check-ins count toward your own history but are never shown to others.
- Direct messages are visible only to the people in that conversation. Your crew list is visible only to you.
- Stories are shown for 24 hours.
What we do not do
We do not sell your data, show advertising, or track you across other companies' apps or websites. The app contains no advertising or analytics SDKs.
Services we rely on
- Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions) stores and serves the app's data. It is hosted in the United States.
- Expo delivers push notifications to your phone.
- Google Sign-In and Sign in with Apple handle signing in.
- Maps are shown with Apple Maps on iPhone and Google Maps on Android.
- Many places come from OpenStreetMap (© OpenStreetMap contributors, available under the Open Database License).
Transfers outside the EU
Because our servers are in the United States, your data is transferred outside the European Economic Area. Google is certified under the EU–US Data Privacy Framework, and the transfer is also covered by the European Commission's Standard Contractual Clauses in Google's data processing terms.
How long we keep it
We keep your data for as long as your account exists. Content you delete is removed from the app straight away. When you delete your account (Settings → Delete account), we permanently delete your profile, moves, stories, comments, places you added, photos, follows, check-ins and push tokens. Messages you sent stay in the conversations of the people you sent them to, as in any messaging app. Reports you made against other accounts may be kept while they are needed to keep the app safe.
Your rights
Under the GDPR you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent at any time. Most of this you can do in the app; for anything else, write to contact.whatsthemove.app@gmail.com and we will answer within one month. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).
Age
You must be at least 16 to use What's The Move. We do not knowingly collect data from anyone younger; if you believe we have, write to contact.whatsthemove.app@gmail.com and we will delete it.
Changes
If we change this policy we will update the date above, and tell you in the app if the change is significant.