Privacy policy

Who is responsible

The controller is HSE Support Germany s.r.o., Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic (company ID 29772745). Contact for all privacy questions: support@movemyfile.eu.

What we process

Account: e-mail address, name you enter, password (stored only as a secure hash by our sign-in provider), language and settings, plan and storage limits.

Your content: files and photos you upload, their names, size and type, previews we create for photos, folders, groups, shares, comments and notes.

Sharing records: who you shared with, link settings and when a share was opened or downloaded (times only — we do not store IP addresses in these records).

Upload requests and reports: people without an account who upload through a request enter a name; people who report content may leave an e-mail address.

Communication: feedback you send (with the page, app version and browser name), e-mails we send you and invitations.

Technical data: our hosting provider processes IP addresses and similar data to deliver the service, protect it against abuse and limit excessive requests; these logs are kept only for a short time.

Why and on what legal basis

To provide the service you signed up for — storing, sending and sharing files, notifications and support (Art. 6(1)(b) GDPR).

To keep the service secure, prevent abuse, handle reports of illegal content and understand usage in aggregated form (legitimate interest, Art. 6(1)(f) GDPR).

To meet legal obligations, for example under the Digital Services Act or accounting rules once paid plans start (Art. 6(1)(c) GDPR).

We do not sell data, do not show advertising and do not use your files for any other purpose.

Where your data is and who helps us

Files are stored in the EU (Cloudflare R2, EU jurisdiction). The database and sign-in run in Frankfurt, Germany (Supabase).

Processors: Cloudflare, Inc. (hosting, storage, network), Supabase, Inc. (database and sign-in), Brevo (Sendinblue SAS, France; sending e-mails), Hostinger (our support mailbox). Where a provider may process data outside the EU, this is covered by the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

Files stay until you delete them or your account. Links stop working when they expire or you stop them.

If you delete your account (Settings → Delete account), your workspace, files and personal data are deleted immediately; database backups are overwritten within about 7 days.

E-mail and access records are kept as long as the related account or share exists; content reports and decisions are kept as long as necessary to document them.

Cookies and local storage

We use no advertising or tracking cookies. Your browser stores only what the app needs: your sign-in session, language, appearance and a pending invitation code. No consent banner is needed for this.

Children and schools

Accounts are for people aged 15 and over. Pupils can open links and hand in work through upload requests without an account. Schools and teachers who use MoveMyFile remain responsible for their own obligations towards pupils.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. Most of it you can do yourself in the app (download your files, delete your account); for everything else write to us.

You can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz) or with the authority in your country.

Changes

We update this policy when the service changes and inform registered users about important changes in advance.