Privacy policy · hello expat

This is a translation of the French version.

This policy explains what data Hello Expat processes, why, for how long, with whom, and how to exercise your rights. It applies to the website, the blog, the waiting list and the application, including conversations with Moovy.

Who is responsible for your data?

The data controller is CAPÍTULO D'AROMAS - UNIPESSOAL LDA, Urbanização Village Marina, Lote 18, 8700-408 Olhão, Portugal, NIPC 519107616, who can be contacted at [À COMPLÉTER : email address dedicated to data protection].

What data do we process, and why?

Processing	Data	Purpose	Legal basis	Retention period
Waiting list	Email address, source of sign-up, date and proof of your confirmation	Informing you about the launch and our plans, sending you tips to prepare your move (one email a week at most)	Your consent, confirmed through the link received by email	Until you unsubscribe, and at most [À VALIDER : 3 years] without interaction
Account	Email address, language, country of origin and destination, situation	Creating and managing your account	Contract	During your subscription, then 12 months after it is cancelled (see below)
Conversations with Moovy	Your messages, the replies, your profile (destination, origin, situation)	Answering you and helping you with your formalities	Contract	Your conversation is kept on your device. With an account: during your subscription, then 12 months after it is cancelled
Sensitive data in conversations	What you choose to share about your health, a disability, your religion or your beliefs	Giving you suitable advice	Your explicit consent, requested at the start of the conversation, which you can withdraw at any time at the bottom of the screen	Same as conversations
Improving Moovy	Questions asked to Moovy, pseudonymised (without name, email or any detail that could identify you)	Creating new verified fact sheets and testing the quality of the replies, for our internal use only	Legitimate interest	[À VALIDER : 24 months]
Uploaded documents (coming soon)	Documents you choose to upload, and what Moovy draws from them (type of document, summary, dates, amounts, suggestions)	Reading and analysing them automatically as soon as you add them, to file them, note their deadlines and suggest your next steps; summarising them, preparing your applications	Contract (adding a document means asking for it to be read); explicit consent for sensitive documents [À VALIDER by our lawyer]	Until you delete them, and at most 12 months after your subscription is cancelled
Payment	Billing data; card data is processed by Stripe, not by us	Collecting subscription payments, invoicing	Contract; legal obligations (accounting)	Statutory retention period for accounting records
Audience measurement	Aggregated visit statistics, without cookies, without storage on your device and without browser fingerprinting	Understanding how the website is used	Legitimate interest	[À VALIDER : 24 months]

After cancellation. We keep your account data, your conversations and your documents for 12 months after your subscription is cancelled, so that you can find your file again if you come back. If you take out a new subscription during those 12 months, this period starts again from zero at your next cancellation. You can ask us to erase them at any time before then (see "Your rights"). Invoices are kept for the period required by law.

Moovy never asks you for a password and never accesses any government portal on your behalf.

Automatic reading of documents. When you add a document to your vault, Moovy reads and analyses it automatically, straight away, to file it and suggest your next steps (reminders, procedures). To do this, the file is sent to our AI provider (Anthropic, in the United States) for the time of the reading. The summary and the information Moovy draws from it are encrypted and stored with the document; every reading is recorded in your log, visible in your space. Moovy does not apply any of its suggestions without your agreement. If you do not want a document to be read, do not add it: you can delete a document and its information at any time.

Who do we share your data with?

Only with service providers who need it to run the service, bound by a data processing agreement:

Hosting: OVHcloud, server in Canada (Montreal, Quebec). Canada has an adequacy decision from the European Commission for private organisations subject to the federal data protection law (PIPEDA) [À VALIDER: exact scope of this decision for our host].
Document storage (coming soon): with OVHcloud, in the European Union (France). Each document is encrypted before it is sent, with a different key for each document and each person, held by a dedicated service (Scaleway, France), separate from our servers: no one on our team has a way to open them.
Artificial intelligence: Anthropic, which provides the model used by Moovy. Your messages and the necessary context are sent to it to generate the replies. This data is processed in the United States. The transfer is governed by the European Commission's standard contractual clauses, included in the data processing agreement signed with Anthropic. Anthropic does not use this data to train its models and retains it [À VALIDER after the agreement is signed : for at most 30 days, except for security reviews].
Emails: [À CONFIRMER : Brevo], for the waiting list and service emails. We do not track whether our emails are opened or clicked: no tracking pixel.
Payment: Stripe, for subscriptions.

We do not sell your data. Partner links send you to the partner's website: no data is passed on to the partner without your explicit consent.

Does your data leave the European Union?

The server that runs the site is in Canada, a country the European Commission recognises as offering an adequate level of protection for this type of organisation [À VALIDER by our lawyer]. The storage of your documents and the service that holds their keys stay in the European Union (France). Messages sent to Moovy are processed in the United States by Anthropic, under the European Commission's standard contractual clauses. For payments, Stripe may process data outside the EU with the same safeguards [À CONFIRMER].

Cookies and storage on your device

The website does not use advertising cookies or third-party trackers. Audience measurement is carried out without cookies and without storing anything on your device. The application keeps in your browser's storage your current conversation, your choice regarding sensitive data and the fact that you have signed up to the waiting list. This information is necessary for the service you request, is not sent to us other than as part of your messages to Moovy, and you can delete it at any time from your browser.

Your rights

You can request access to your data, its rectification or erasure, the restriction of or objection to its processing, and to receive it in a readable format (portability), and you can withdraw your consent at any time. Write to [À COMPLÉTER : dedicated email address]. We reply within one month.

If you consider that your rights have not been respected, you can lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados), the Portuguese data protection authority: cnpd.pt, or with the authority of your country of residence.

Security

Communications are encrypted (HTTPS). The documents you upload will be encrypted before they are stored. Access to data is limited to the people and service providers who need it. A data protection impact assessment has been carried out for Moovy and approved on 19 October 2026.

Changes

We may update this policy. The date of the latest update appears at the top of the page; in the event of a significant change, we will notify you by email.