Privacy Policy

1. Who is responsible for your data

The data controller is MOVEHábitos, the maker of MOVEListas. For any privacy request or question, write to suporte@movelistas.com.

2. What we store

• Account: your e-mail (that is how you sign in, with a link), the name you choose, country, currency and language. If you create a passkey, we store its public key, a nickname and the date it was last used.
• Profile picture (optional): a photo, gif or short video you choose. The file goes through antivirus and is re-encoded to a small size; the original is not kept on the server.
• Optional Food Score profile: year of birth, gender, region and city, how many people live with you. Only if you fill it in.
• Lists and purchases: items, quantities, prices, chosen store, planned date, purchase history and list versions.
• Receipts and invoices: the photo or PDF you upload is read on our server. Personal data that appears (tax IDs, card numbers, SSN, DNI, CUIL, cardholder name) is detected and blurred in the image and erased from the text before anything is stored. The original photo never stays on the server. The blurred image is deleted automatically after 90 days; the purchase record stays.
• Notes: texts, drawings and reminders you create in the app.
• Feedback: the stars and message you send in "Your opinion matters". The message reaches our support team by e-mail together with your e-mail and name.
• Usage: how many times you use the app per day (just a count) and a sign-in log with the type (link or passkey), the source network (only the first numbers of the IP address, never the whole address) and the browser model. Used for security and support.
• Location: only when you tap "near me" to find stores. The coordinates go to our server to search nearby stores and are not stored.
• Country suggested from your network address: looked up in a database that lives on our server (DB-IP Lite). The address is not sent to anyone nor stored; the flag you choose always wins.

3. What stays on your device

A session cookie (ml_sessao) only keeps you signed in for up to 90 days; it does not track anything. Your preferences (language, text size, appearance, bar position, open counter) stay in the browser's local storage, and the app keeps a copy of itself so it opens without internet.

We use no advertising cookies, pixels, or third-party tracking or analytics tools.

4. What we use it for

• Making the app work: your lists, purchases, suggestions, "running out", spending and Food Score.
• Sharing lists when you ask: whoever gets the link sees the list items and, in "shop together" mode, the names of who is on it.
• Improving the app with overall statistics by country and region (prices, consumption, categories). Anything we publish is always aggregated, never identifying anyone.
• Talking to you: the sign-in link, important service notices and, if you want, news and tips by e-mail about MOVEHábitos apps. You can turn it off under "More" or via the link in every e-mail.
• Security: proof of work at sign-in, usage limits and the sign-in log.

5. Who else sees the data

We do not sell, rent or share your data. The only third parties that come into contact with any data are these:

• Voice: when you talk to the app, speech recognition is done by your phone's or browser's speech service (Google or Apple), under their policy. Where that service does not exist (for example, on iPhone through the website), the audio goes to our server, is transcribed right away and discarded: no recording stays with us. To better understand accents and pronunciations, we keep for 90 days only the recognized text and the item you chose, plus the pronunciations you taught the app ("it was this"); all of it is deleted with your account.
• E-mail: our messages go out through Google Workspace.
• Product photos: they come from Open Food Facts and free photo libraries (Pexels, Openverse, Wikimedia Commons) and are cached on our server.
• Stores: the store database comes from OpenStreetMap and lives on our server.
• Law: we may hand over data if a competent authority requires it.

Receipt reading and the app's artificial intelligence run on our own servers. No receipt, list or photo is sent to third-party AI services.

6. Where it lives and how we protect it

Data lives on our own servers, operated by our team, with encryption in transit (HTTPS), a database with no internet access, antivirus and re-encoding of every uploaded photo, and daily encrypted backups kept in a separate vault.

The MOVEListas team accesses data only to operate the service and provide support. Servers may be located outside your country; we apply the same protections wherever they are.

7. For how long

• As long as your account exists, for account data, lists, purchases, notes and feedback.
• Receipt photo: 90 days. Session: 90 days without use. Shared-list link: 30 days.
• When you remove a purchase from history, its receipts and photos go with it.
• When the account is deleted, everything is removed within 30 days, except what the law requires us to keep. Backups are replaced in the normal cycle, within 12 months.

8. Your rights

At any time you can:

• See and correct your data: name, country, currency, picture and profile are under "More".
• Turn off news e-mails under "More" or via the link in every message.
• Request a copy of your data in a machine-readable format.
• Delete your account and all data, under "More" or by e-mail (the account waits 30 days and is then removed).
• Withdraw a consent you gave.

To make a request, write from your own e-mail to suporte@movelistas.com. We answer within 15 days.

Brazil: rights under the General Data Protection Law (LGPD, Law 13,709/2018); you may also complain to the National Data Protection Authority (ANPD). United States: we do not sell or share personal data for advertising; the access, deletion and correction rights of the CCPA/CPRA and similar state laws apply, and our e-mails comply with CAN-SPAM. Argentina: Law 25,326 guarantees access, rectification and deletion; the Agencia de Acceso a la Información Pública, the supervisory body for Law 25,326, handles complaints about compliance with personal data protection rules.

9. Children

MOVEListas is not intended for children under 13 and we do not knowingly collect their data. If you are responsible for a child who created an account, write to suporte@movelistas.com and we will delete everything.

10. Changes to this policy

When something important changes, we let you know in the app or by e-mail. The date of the last update is always at the top of this page.

11. Contact

MOVEHábitos — suporte@movelistas.com