Privacy policy
Who we are
Monthly Move is a service of Happy 2 Assist BV, Eindestraat 81, 3650 Dilsen-Stokkem, Belgium, VAT BE 1029.354.496 ("we"). We are the data controller for the personal data described here. Contact: hello@monthlymove.com.
What we collect
Account data (email address, name, language, password hash or Google sign-in identifier). Goal data you enter (goal, reasons, metrics, moves, check-ins, coach conversations, reviews). Data from sources you choose to connect, limited to what is needed for your metric (for example event counts, activity distances, order totals). Billing data handled by Stripe (we only store your plan, status and Stripe identifiers, never full card numbers). Technical data such as IP address and log entries for security.
Why and on which legal basis
To provide the service you subscribed to (performance of a contract, GDPR art. 6.1.b). To bill you and keep accounting records (legal obligation, art. 6.1.c). To keep the service secure, prevent abuse and rate limit public features (legitimate interest, art. 6.1.f). To send weekly nudge and month end emails, which you can switch off in Settings at any time (contract and legitimate interest). We do not sell your data and do not use it for advertising.
AI processing
Your goal context is sent to AI models through our AI provider to generate moves, coaching replies and reviews. The data is used only to answer your request and is not used to train models. Do not enter health or other sensitive data you do not want processed. AI suggestions are guidance, not medical, financial or legal advice.
Hosting and processors
Your data is stored in the European Union. We use carefully selected processors bound by a data processing agreement: our cloud hosting and database provider, our AI gateway provider, Stripe (payments), and an email delivery provider. Where a processor may access data from outside the EEA, transfers are protected by the European Commission standard contractual clauses or an adequacy decision.
Connected sources
Connectors are optional. Access tokens are stored encrypted and used only to read the data you selected. You can disconnect a source at any time, which deletes its stored token. Manual check-in works without any connection.
How long we keep data
Account and goal data: for as long as your account exists. When you delete your account in Settings, your data is deleted immediately from the live database and from backups within 30 days. Invoices and accounting records: 7 years, as required by Belgian law. Security logs: up to 12 months.
Your rights
You have the right to access, correct, delete, restrict and object to processing, and to data portability. You can export all your data as JSON or CSV and delete your account yourself in Settings. For anything else, email hello@monthlymove.com. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.
Cookies
We only use strictly necessary storage to keep you signed in and remember your language. We do not use advertising or tracking cookies, so no cookie banner is needed.
Security
Data is encrypted in transit and at rest, access is limited by strict row level security so each account only reaches its own data, and connector tokens are encrypted separately.
Changes
We may update this policy. We will notify you by email about material changes. Last updated 2026-11-03.