MOVEN by EMMI Privacy Policy

1. Introduction and Scope

MOVEN is an AI-assisted task and scheduling app from EMMI Technologies (“EMMI”, “we”, “us”), UPES Council for Innovation and Entrepreneurship (UCIE), Workstation No. 22, Energy Acres, Bidholi Campus, Via Prem Nagar, Dehradun, Uttarakhand 248007, India. This policy explains what personal data MOVEN collects, why we use it, who processes it for us, and the choices you have.

It covers MOVEN's apps (Android and web, as they launch) and the website at moven.emmi.in. MOVEN is launching in India. If you have questions, contact us at support@emmi.in.

2. Who Can Use MOVEN

MOVEN is for people aged 18 and over. During onboarding we ask for your date of birth to check this. We do not take your date of birth from your Google account. We rely on the date you enter and do not verify it.

If the date shows you are under 18, we show a message that you cannot use MOVEN yet, we do not create or keep an account for you, and we immediately delete the information collected during sign-in and onboarding. We send one email to the address you gave when you signed up, inviting you to join MOVEN once you are 18 or over. As soon as the email is sent, we delete that address and all other information about you from our database. We do not use it for marketing. Our email service provider processes the address only to deliver the message.

We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has given us data, email support@emmi.in.

3. Information We Collect

• Account information from Google sign-in: your Google account identifier and email address and, where Google provides them, your name and profile picture.
• Date of birth, which you enter during onboarding. We use it to confirm you are 18 or over and to offer birthday offers and in-app surprises.
• Tasks and plans: task titles and descriptions, deadlines, durations, priorities, preferences, settings, and changes you make to your Timeline.
• Wellbeing inputs: your energy level and hours of sleep. MOVEN asks for these because its scheduling depends on them.
• Calendar data, only if you connect a calendar (Section 5).
• Assistant inputs: messages you send to the assistant, images and files you upload, and voice recordings if you use voice.
• Context and responses that the assistant builds and saves (Section 7).
• Technical and usage data: device and browser information, error and crash reports, and how the app is used (Section 11).

Why we use your information

We process your data with your consent, which you give when you sign in, enter information or connect a calendar, and only for the purposes below. You can withdraw your consent at any time as shown. Withdrawing does not affect what we did before, and some features will stop working.

Device permissions (Android)

Depending on the features you use, the MOVEN Android app may ask for permission to use your microphone (for voice), your photos or files (for uploads) and to send notifications. You can change these at any time in your device settings.

4. Google Sign-In

You can sign in to MOVEN with your Google account. Sign-in is handled by Supabase together with Google. For sign-in, MOVEN requests only basic identity permissions:

• openid: to verify who you are.
• email: to see your Google account email address.
• profile: to see your basic profile information, such as your name and profile picture.

We use this information to create and secure your MOVEN account and to show your name and picture in your profile.

Signing in does not give MOVEN access to your Google Calendar. Calendar access is a separate permission that you grant only if you choose to connect a calendar.

5. Calendar Data and Google User Data

In short: when you connect a calendar, MOVEN gets read-only access. It reads your events (title, start and end time, time zone, description and identifiers) and stores them. It uses them to work out your busy time blocks, show your events in your Timeline and suggest times for your tasks. It sends event titles and descriptions to xAI, our AI provider, for analysis. It cannot create, edit or delete anything in your calendar. The same applies to Outlook and Notion data.

Connecting a calendar is optional, and access is read-only. MOVEN works without one. MOVEN cannot create, edit or delete events in your calendar.

Permissions we request.

• Google Calendar: “See and download any calendar you can access using your Google Calendar” (calendar.readonly).
• Microsoft Outlook: “Read user calendars” (Calendars.Read).
• Notion: “Read content”, for the pages and databases you choose to share. We do not request access to Notion user information.

What we store. For each event we store the title, start and end time, time zone, calendar and event identifiers, and the description if the event has one. We do not store attendee lists. If an event has no description, MOVEN generates a short description from its title and stores that.

How we use it. We show your events in your daily and weekly Timeline, marked with the provider's logo, and we analyse your schedule so MOVEN can suggest when to do your tasks. MOVEN may show an imported event at a different time in your MOVEN Timeline when you or MOVEN rearrange your plan. This does not change the event in your original calendar.

Syncing. While a calendar is connected, MOVEN checks it in the background for new or changed events, at intervals that vary with how you use MOVEN. To do this we store the access credentials that your provider gives MOVEN.

AI processing. MOVEN sends event titles and descriptions to xAI to analyse them (Section 7). We do not send calendar events to Google Gemini or Sarvam AI. The assistant's saved context may include details drawn from your events, such as scheduled times.

Google user data at a glance

• What we access: events from the Google Calendar you connect: title, start and end time, time zone, calendar and event identifiers, and description.
• How we use it: to show your events in your Timeline, analyse your schedule and suggest times for your tasks.
• What we store: those fields, descriptions we generate for events that have none, calendar-related assistant context, and the access credentials Google gives MOVEN.
• Who we share it with: xAI, which receives event titles and descriptions so it can analyse them for the features above, and our hosting providers, Supabase and Google Cloud, which store and process it for us. No one else, and we do not sell it.
• How we protect it: credentials are kept in a restricted part of our database, access is limited to our application and authorised personnel, and our staff do not read it except in the cases described under Limited Use below.
• How long we keep it: we delete it within 24 hours after you disconnect Google Calendar, and within 72 hours after you delete your account.

What we never do with Google user data

We do not use it for advertising, including personalised, retargeted or interest-based ads. We do not sell it or give it to data brokers or resellers. We do not use it to decide credit or lending. We do not use it to build databases for other purposes. We do not use it to develop, improve or train generalized or non-personalized AI or machine learning models. These limits cover information we receive through Google Workspace APIs, including the Google Calendar API, and data derived from it, such as generated descriptions and assistant context.

Limited Use

MOVEN's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features described in this policy. We transfer it only as needed to provide those features, to comply with law, for security purposes, or in a merger or sale with your prior consent. Our staff do not read it unless you ask us to, it is needed to investigate abuse or a bug, or the law requires it. We do not permit our service providers to use it for any other purpose.

Disconnecting. See Section 16.

6. Tasks, Scheduling and Wellbeing

We use your tasks, deadlines, durations and priorities to rank tasks, find suitable times, spot conflicts and show your Timeline. If you enter wellbeing inputs, we use them to suggest better times for your work. They are stored on your device and in our database and are sent to xAI to produce suggestions. You can edit your tasks, profile and Timeline in the app at any time.

7. AI Processing and AI Providers

MOVEN uses these AI services. Each receives only what is needed for the request:

• xAI (Grok): MOVEN uses xAI's Grok API to process information and generate personalised scheduling recommendations. When you use MOVEN's scheduling features, information such as calendar event titles and descriptions, dates and times, wellbeing inputs and task details may be processed by xAI. We do not use xAI's stored-context features.

  Under xAI's API terms, xAI does not train its models on API inputs or outputs without explicit permission, and we have not given it.

  xAI may keep API requests and responses for up to 30 days for abuse monitoring and then deletes them.

• Google (Gemini API): images and files you upload to the assistant, to analyse them. We do not send calendar events to Gemini.
• Sarvam AI: voice recordings, only to convert and translate your speech into text for MOVEN. MOVEN does not store the recording, and we do not permit Sarvam AI to use it to train its models.

These providers process data under their own terms and privacy policies. AI output can be wrong. MOVEN suggests times and plans, it does not change your calendar, and you decide what to do.

The assistant does not keep a transcript of your conversations. It does save the context it builds and its responses in our database until you delete your account, and updates them from time to time. Calendar-derived context is deleted when you disconnect the calendar (Section 16).

8. Improving MOVEN and Training EMMI's Models

We do not sell your personal data or share it with third parties for advertising or marketing. We use patterns from how MOVEN's features perform inside the app, such as response times, error types, intent categories and whether you accept a suggestion, to improve MOVEN and to train EMMI Technologies' own AI models. We de-identify this data first, so it does not carry your user ID or link back to your account. It does not include your name, email address or date of birth, or text you enter such as task titles and messages, and it does not include your wellbeing inputs. It does not include Google Calendar data or any data derived from it. We do not sell your personal data.

9. Storage and Hosting

Your account and app data are stored with Supabase in Sydney, Australia. Our backend runs on Google Cloud in Iowa, United States. The website is delivered through Vercel's network. Access to stored data is limited to our application and authorised personnel.

10. Service Providers

11. Analytics and Monitoring Tools

We use these tools to run and improve MOVEN. They receive technical and usage information about how MOVEN is used.

12. Sharing and Disclosure

We do not sell your personal data or share it with third parties for advertising or marketing. We share it only with the providers in Sections 10 and 11, who process it for us. This includes sending calendar event titles and descriptions, and wellbeing inputs, to xAI so it can analyse them for MOVEN's features. We may also share it where the law requires, to protect the security of MOVEN or its users, or, for Google user data, in a merger or sale with your prior consent.

13. Security

We use reasonable technical and organisational measures to protect your data. We store calendar access credentials in a restricted part of our database and limit which parts of our system can read them. No system is completely secure, and we cannot guarantee absolute security.

14. Retention

We delete calendar data within 24 hours after you disconnect a calendar. We delete your account data within 72 hours after you delete your account. Logs, analytics data, crash reports and scheduling records are kept for 30 days and then deleted.

15. Your Rights and Choices

You can view and edit your tasks, profile and Timeline in the app. You can disconnect a calendar (in Settings, on the calendar connection page) and delete your account (Profile, then Settings, then Delete account) in the app. You can also email support@emmi.in to ask us to delete your account, correct your data or withdraw your consent. We reply within 24 to 48 hours on business days. If you are not satisfied, contact us at the same address. You may also complain to the Data Protection Board of India where applicable law provides for it. We do not currently offer a data export.

16. Disconnecting Your Calendar and Revoking Access

Go to Settings, open the calendar connection page and choose Disconnect next to the calendar. Within 24 hours we stop syncing and delete the stored events, the calendar-related context and the access credentials. Your MOVEN account and tasks remain, and your original calendar is not changed. You can also remove MOVEN's access in your Google, Microsoft or Notion account settings; for Google, see myaccount.google.com/permissions.

17. Account Deletion

You can delete your account in the app: go to Profile, then Settings, then Delete account. We delete your data within 72 hours. If you cannot open the app, you can request deletion from this page by emailing support@emmi.in from the address linked to your account. We check that the request comes from that address, reply within 24 to 48 hours on business days and delete your data within 72 hours after we confirm the request.

18. International Transfers

MOVEN is operated from India, but our providers process data elsewhere: Supabase in Australia and Google Cloud in the United States. Our AI providers, xAI, Google (Gemini) and Sarvam AI, also process data outside India, including on servers in the United States. This includes the calendar event titles and descriptions we send to xAI, as described in Section 5.

19. Security Incidents

If we find that personal data has been exposed in a security incident, we act promptly to investigate and contain it. We tell affected users by email or in-app notification what happened and what to do, for example disconnecting and reconnecting a calendar, and we notify the authorities where the law requires.

20. Changes to This Policy

We will post changes here with a new “last updated” date. If we change how we use Google user data, we will tell you and ask for your consent before using it in the new way.

21. Contact