Privacy notice

Last updated: 21 June 2026

Who we are

Movepath (“we”) provides personalised immigration roadmaps and planning tools. We are the data controller for the personal data described here. For any privacy question or to exercise your rights, contact privacy@movepath.io.

What we collect

• Account: email address and authentication details.
• Profile: age, education, field and years of experience, English level, savings range, family status, country of origin and current country, your immigration goal and timeline.
• Your plan: the roadmaps, checklist steps, budget items and document records you create.
• Documents you upload: files you add to your document vault, stored in a private bucket accessible only to you.
• Billing: your subscription plan and the identifiers from our payment processor (we do not store card numbers).

We do not use uploaded identity documents for facial recognition or any biometric matching. We do not knowingly collect special-category data; we personalise on immigration eligibility (a legal status), not on ethnicity.

Why we use it, and our lawful basis

• To provide the service you signed up for (your roadmap, tracker, vault and budget): performance of a contract.
• Security, fraud prevention and improving the product: our legitimate interests.
• Optional analytics and any marketing: your consent, which you can withdraw at any time.

Who we share it with

We use trusted processors to run Movepath: Supabase (database, authentication and file storage, hosted in the EU), Stripe (payments), our hosting provider, and our analytics provider when enabled. Each only processes your data on our instructions. We never sell your personal data.

How long we keep it

We keep your data for as long as your account is active. If you delete your account, we erase your profile, roadmaps, steps, budget, document records and uploaded files. We retain only the minimal billing records the law requires us to keep, for as long as required.

Your rights

You have the right to access, export (in a machine-readable format), correct, and erase your data, to restrict or object to certain processing, and to withdraw consent. You can export your data or delete your account yourself from your dashboard under Data & privacy, or email privacy@movepath.ioand we will respond within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) or your local supervisory authority.

Changes

We may update this notice; we will post the new version here with the date above.

This notice describes our current practices. It is general information, not legal advice.