Movedproof Privacy Policy
Summary
Movedproof has no accounts, no analytics, no advertising and no tracking. Your condition reports — photos, videos, notes, timestamps and hashes — live on your device and in your own iCloud private database (Apple's CloudKit), which we cannot read. The only time any of your content reaches a server we operate is when you tap Share as web link; that uploads the report you chose so the link can be viewed, and you can delete it again at any time.
What the app stores and where
| Data | Where it lives | Who can see it |
|---|---|---|
| Units, reports, rooms, items, conditions, notes | On your device + your iCloud private database | Only you (and the devices signed in to your iCloud account) |
| Photos and videos you capture or import, their capture timestamps and SHA-256 hashes | On your device + your iCloud private database | Only you |
| Preferences (default "prepared by" name, whether you dismissed the first-launch notice) | On your device | Only you |
| PDF exports | Generated on your device and handed to the iOS share sheet | Whoever you send them to |
| Shared report links (see below) | Movedproof's share service (Cloudflare Workers + R2 object storage) | Anyone who has the link, until you remove it |
Shared report links — the one thing we store
When you publish a share link, the app uploads that report's photos, videos, item conditions, notes and timestamps to our share service. The service re-computes the SHA-256 hash of every file and refuses anything that does not match the report, then serves a read-only web page at an unguessable address (a random 128-bit token). The page carries a noindex instruction so search engines do not list it. We store nothing about you alongside it — no name, email, device identifier or location — and we do not use shared reports for anything other than displaying them at that link.
You can remove a shared report from the app (Manage share link → Remove link and delete uploaded copy). Removal deletes the files from our storage immediately and the link stops working. We may also delete shared reports that have not been accessed for a very long time or that violate the law.
In App Store privacy terms this is "Data Collected: User Content (Photos or Videos, Other User Content)", used for app functionality only, not linked to your identity and not used for tracking.
Camera, microphone and photo library
The camera is used only when you capture a photo or video for an item. The microphone is used only while you record a video. Photo-library access is used only when you choose to import existing photos or videos. Nothing is accessed in the background.
Subscriptions
Movedproof Pro is an auto-renewable subscription processed entirely by Apple through the App Store. The app receives only an anonymous entitlement from Apple's StoreKit so it can unlock Pro features; we never see your name, payment details or Apple Account. Apple's handling of purchase data is described in Apple's privacy policy.
Network access
Besides Apple's own iCloud and StoreKit services, the app talks to one server: our share service, and only when you publish or remove a share link. There are no third-party SDKs, analytics or advertising networks.
Children
Movedproof is a general-audience business tool (rated 4+) and does not knowingly collect information from anyone, including children.
Changes
If this policy changes, the new version will be posted at this address with a new effective date.
Contact
Questions: see the support page.