LEGAL INFORMATION
Privacy policy
Last updated:
This English version is a courtesy translation. If it differs from the Spanish version, the Spanish version prevails.
On moovia.app we process personal data in two cases: if you join the early-access list, for which we only ask for your email address, and if you send us a collaboration proposal. This page explains what we do with it and what you can do.
Who handles your data
The data controller is Ashlyn Abraham Cedeño Holguín, a private individual who is developing the MOOVIA project.
- Controller
- Ashlyn Abraham Cedeño Holguín
- Tax ID (NIF)
- 60465396Y
- Address
- Rambla Marina 187, 13-1, 08907 L'Hospitalet de Llobregat (Barcelona)
- info@moovia.app
What data we process
- Your email address and the date and time you join the early-access list (the waitlist).
- Control data for the automatic emails: when MOOVIA was notified of your sign-up, when your welcome email was sent, the technical error message if that email fails and, if you joined before emails were automatic, a flag showing that yours was sent later.
- If you send us a collaboration proposal, the data in the form. We list it in the Collaboration proposals section.
- Whatever you tell us if you reply to our emails or write to us (for example, what you train).
- Technical logs: for each visit to the website, the IP address, browser, page requested and time; for each email sent, your email address masked (for example, p***@domain.com), also if the sending fails. Google generates them when hosting the website and running the email sending.
For the early-access list we don't ask for your name, phone number or anything else. We never use analytics or advertising tools.
What we use it for
- To send you the MOOVIA dossier in the welcome email.
- To let you know when we open the platform or launch the sensor.
- To invite you to early access: trying the platform and the sensor before everyone else, in the testing phase with the first users.
- To invite you to the MOOVIA community on WhatsApp.
- To reply if you write to us, and to take what you tell us into account when deciding what to build.
- To manage the list: every sign-up triggers an internal notice to info@moovia.app.
- To handle collaboration proposals and reply to you.
- Technical logs, only to keep the website and the emails working and secure.
We don't build profiles or make automated decisions about you.
Legal basis
- Your consent (Art. 6(1)(a) GDPR), which you give when you sign up with your email. You can withdraw it at any time; anything done before you withdraw it remains lawful.
- The emails we send are information you ask for when you sign up (Art. 21 of the Spanish LSSI), and every one of them explains how to unsubscribe.
- The WhatsApp group is also based on your consent: you join only if you want to.
- Collaboration proposals are based on handling the request you make to us (Art. 6(1)(b) GDPR) and on our legitimate interest in answering professional proposals (Art. 6(1)(f) GDPR).
- Technical logs are based on our legitimate interest in keeping the website and the emails working and secure (Art. 6(1)(f) GDPR).
Who we share it with
We don't sell your data or pass it on to third parties. Only the providers we need to run the list and the collaboration form can access it, and they process it on MOOVIA's behalf (as data processors) under contract:
- Google, through Firebase: Firestore (the database that stores the list and the collaboration proposals), Cloud Functions (which sends the automatic emails) and App Hosting (which hosts the website).
- Google, through Google Workspace: the info@moovia.app mailbox, which sends the emails and receives the notice of each sign-up and each proposal.
We would only disclose data to an authority if the law required us to.
International transfers
Your data is stored in the United States: Firestore, which holds the waitlist and the collaboration proposals, and App Hosting, which serves the website, are in Google's us-central1 region. The functions that send the emails (including the notice and the acknowledgement of proposals) run in the European Union (europe-west1, Belgium), and Google Workspace email may be stored in Google data centres in several countries.
These transfers outside the European Economic Area rely on the EU-US Data Privacy Framework, under which Google LLC is certified, and on the European Commission's standard contractual clauses, which are part of Google's data processing terms.
How long we keep it
- Waitlist data and related emails (the notice of your sign-up and anything you write to us): until you unsubscribe or MOOVIA stops running the waitlist. Then we delete them.
- Collaboration proposals and their emails: if they do not lead to a collaboration, 12 months from when we receive them; if we collaborate, for as long as the collaboration lasts. Then we delete them.
- Technical logs are deleted automatically by Google (after 30 days by default).
Collaboration proposals
If you write to us using the form at moovia.app/en/collaborate, this is how we handle your data:
- Data
- The type of collaboration, your full name, your email address, your organisation and your message; if you fill them in, your role, your city, your website or social profile and the planned date. We also store the language of the page you write from and the date and time it was sent.
- Purpose
- To handle your collaboration proposal and reply to you.
- Legal basis
- Handling the request you make to us (Art. 6(1)(b) GDPR) and our legitimate interest in answering professional proposals (Art. 6(1)(f) GDPR). That is why there is no consent box.
- Emails
- Every proposal triggers an internal notice to info@moovia.app, from which we can reply to you directly, and an acknowledgement to your email address. If the same address sends more than 5 proposals within 24 hours, the next ones are stored but trigger no email. To manage this we keep control data: when the emails were sent, the technical error message if a sending fails and a flag when that limit applies.
- Where
- The proposal is stored in Firestore, in Google's us-central1 region (United States). The functions that send the notice and the acknowledgement run in europe-west1 (Belgium).
- Transfers
- They rely on the EU-US Data Privacy Framework, under which Google LLC is certified, and on the European Commission's standard contractual clauses.
- Retention
- 12 months from when we receive it if it does not lead to a collaboration; if we collaborate, for as long as the collaboration lasts.
- Recipients
- We do not share your data with third parties. Only the providers listed in Who we share it with process it.
WhatsApp group (community)
- Joining is optional and you don't need it to be on the waitlist.
- The moovia.app/comunidad link just redirects you to WhatsApp; no data is collected at that step.
- Inside the group, your phone number is visible to the other members, along with your profile name and photo depending on your WhatsApp settings.
- WhatsApp (Meta) processes your data under its own privacy policy; MOOVIA does not control that processing.
- MOOVIA uses the group to share progress, collect ideas and organise events at gyms. You can leave whenever you like.
Children under 14
If you are under 14, you need the consent of a parent or guardian to sign up (Art. 7 of the Spanish LOPDGDD). If we learn that someone under 14 has signed up without that consent, we will delete their data.
Your rights
You can exercise these rights whenever you like, free of charge:
- Access
- find out what data we hold about you and get a copy.
- Rectification
- correct anything that is wrong.
- Erasure
- have it deleted (unsubscribe).
- Objection
- ask us to stop using it for a given purpose.
- Restriction
- have us keep it without using it while a question or complaint about it is resolved.
- Portability
- receive it in a standard format to take to another service.
- Withdraw consent
- at any time, without affecting what was done before.
To exercise them, write to info@moovia.app from the address you gave us. To leave the list, you can also just reply BAJA (Spanish for "unsubscribe") to any of our emails. We will reply within one month at most (Art. 12(3) GDPR). If you write from a different address, we may ask you to confirm that the email in question is yours.
Complaints
If you think we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es). If you write to us first, we will try to sort it out.
Changes to this policy
If we change anything important, we will update the date at the top and, if it affects what we do with your email, we will tell you by email before it applies.