The photos of your home are yours

Your photos

• No location data. Before a photo leaves your phone, the hidden data it carries — where it was taken, which device took it — is removed. Only the image itself is uploaded.
• Made smaller on your phone. What’s uploaded is a version up to 1280 pixels and a thumbnail, both made on the phone itself — the full-size photo from the camera isn’t uploaded.
• In private storage. No photo has a public address. Only members of the move can see them.

Location comes in somewhere else, and only if you allow it: when your browser shares it, the app saves your position at that moment alongside a code scan or an action in the box’s history. It’s never continuous tracking, and it’s described in the privacy policy.

Who can see your move

Only the people the owner invited, with the role the owner gave them. The rule lives on the server itself, in every table: it doesn’t depend on the app behaving.

Someone who isn’t a member and scans a box’s QR code or holds their phone to it sees nothing — and the scan is recorded in the box’s history. On the plans that include it, the owner gets an email when the person scanning isn’t signed in to the app — at most one an hour.

The team that runs the platform sees accounts, numbers and dates — how many boxes, how many items, how much space — and never the content: not the photos, the descriptions or the box names. Every lookup they make is logged.

Your account

• A password of twelve characters or more, checked against the ones that have already shown up in known data breaches.
• Two-step verification, optional, with an authenticator app and recovery codes.
• An email alert when someone signs in to your account on a new device.
• Sessions that expire: after days without use, and always after a few weeks.
• Signing out erases the data stored on that phone or computer.

Where your data is stored

The database and the photos are hosted in Frankfurt, Germany. Some services the app uses may process data outside the European Union — sending emails, backups and, if you turn them on, AI suggestions and dictation, which use Google. Every provider is named in the privacy policy.

Backups

Once a week, an encrypted backup of the database and the photos is made and kept for 35 days; the photos also have a second encrypted copy with another provider.

What isn’t automatic yet

Deleting your account and downloading all your data at once are done on request, by email, for now — the terms of service and the privacy policy explain how.