Privacy Policy
Last updated: October 2026
NextMove ("we", "us") respects your privacy. This page explains what data we collect on nextmoveto.com and in the NextMove iOS and Android apps, why, who processes it, and your rights under the GDPR.
Controller
[TO BE CONFIRMED: legal name and postal address of the controller — see our Impressum.] Contact: support@nextmoveto.com.
Data we collect
- Account: email address, name and password (stored securely in hashed form).
- Profile and onboarding answers: e.g. country, nationality, city, visa status, field, goals, education, experience, skills and preferences you enter.
- CV uploads: the PDF/DOCX file you upload is stored in private storage that only your account can access. Its text is analysed to produce an ATS score, skill suggestions and a cover-letter draft, which are saved to your profile.
- Saved items and deadlines: opportunities and programmes you save, deadlines, career plans and scenarios.
- Notifications: in-app notifications and your notification preferences. In the mobile app, deadline reminders are scheduled locally on your device and only after you allow notifications; reminder content does not leave your phone.
- Payments: subscription and purchase records (product, amount, status, dates). Card details are handled by Stripe and never stored by us.
- Usage analytics: page views and feature interactions, including via Google Analytics 4 on the website.
- Contact and session requests: messages and booking details you send us.
How we use your data
To provide the service (contract performance), personalise opportunity matches, analyse your CV and generate career plans at your request, send notifications you enabled, process payments and meet legal obligations, and — based on legitimate interest or consent where required — improve the product.
AI processing
CV analysis, career plans, page translation and news summaries are produced by Google Gemini models accessed through the Lovable AI Gateway. CV text and relevant profile details are sent only when you use these features. [TO BE CONFIRMED: whether providers may retain or use inputs for training, and the transfer safeguards (e.g. EU Standard Contractual Clauses).]
Processors
- Lovable (hosting, database, file storage and AI gateway)
- Google (Gemini AI models; Google Analytics)
- Stripe (payments and billing)
- Our email delivery provider for account and service emails
- Apple and Google, if you use the mobile apps or buy through their stores
[TO BE CONFIRMED: storage regions and any non-EU transfers for each processor.]
Retention
We keep your data while your account exists. When you delete your account, profile data, CV files, saved items, deadlines, plans and notifications are deleted immediately. Payment records are retained separately where tax or accounting law requires it. [TO BE CONFIRMED: exact retention period and legal basis.]
Your rights
You can access, correct, export, restrict or object to processing of your data, and delete your account at any time in Settings or via nextmoveto.com/delete-account. You may also complain to a data-protection supervisory authority.
Contact
Reach us at support@nextmoveto.com for any privacy-related question. [TO BE CONFIRMED: data protection officer, if appointed.]