Privacy Policy
How Movaro handles product, purchase, support, and campaign data.
Movaro is a local-first desktop application. Your video files, GPX files, project files, and rendered media stay on your device unless you choose to share them through another service.
Information Movaro handles
When you download the app, Movaro records a random download event identifier, release, platform, version, architecture, download type, source, timestamp, and—when present—sanitized campaign labels such as source, medium, campaign, and content. Download records can also include an IP address and the referring page supplied by your browser. We use these records to understand download origins and help associate downloads with installations.
Purchases and subscriptions are processed by Lemon Squeezy. Movaro receives the order, customer, subscription, variant, and license information needed to provide access, validate licenses, prevent abuse, handle refunds, and provide support. Payment-card details are handled by the payment provider rather than Movaro.
If you join a waitlist or newsletter, request support, or redeem an invitation, we process the contact and request information you provide. If you connect Strava, short-lived authorization state and token-claim data are held for up to ten minutes so the connection can return securely to the app. Movaro does not upload your raw footage for editing or rendering.
If you optionally subscribe from the Movaro app, we associate your confirmed email address with the app installation identifier, platform, and app version. We use this association only for internal newsletter administration, audience segmentation, product updates, tutorials, and invitations to share feedback. It is not used as an account, license, entitlement, or identity for your projects, footage, routes, or activity data. The association is removed when you unsubscribe.
Why we use this information
We use product and purchase information to perform our contract with you, deliver downloads and licenses, operate subscriptions, provide support, protect the service, and meet accounting or legal obligations. We use limited aggregate launch attribution to understand download performance and improve the landing and download experience. Consent is used where required for optional marketing messages.
Sharing and retention
Information is shared only with service providers needed to operate Movaro, including Cloudflare for hosting and storage, Lemon Squeezy for checkout and licensing, Resend for requested email delivery, and Strava when you choose to connect it. These providers process information under their own terms and privacy commitments. Operational records are retained only as long as needed for the purposes above, while transaction records may be retained for legal and accounting requirements.
Strava
Connecting Strava is optional. When you connect, Strava asks you to approve Movaro's access. Movaro requests the read and activity:read_all permissions so you can choose from your own activities, including private ones. Movaro is not affiliated with or endorsed by Strava.
What Movaro accesses. Your Strava name, profile picture and athlete ID, to show which account is connected; a list of your recent activities (name, sport, date, distance and duration); and, only for an activity you choose, its recorded data: time, GPS position, altitude, temperature, heart rate, cadence and power. Movaro only accesses your own Strava data and never shows it to anyone else.
How it is used. Movaro converts the activity you choose into a GPX file stored on your device, where it is used to sync your footage and draw overlays. Layout previews use a separate local cache that is cleared after seven days or when you disconnect. Imported Strava activity files stay on your device and are not sold or used for advertising or analytics. Highlights explorer analyzes imported Strava activities only on your device; they are never sent for AI review, which uses only activity files you upload yourself.
Sign-in tokens. Movaro's server exchanges the Strava authorization for access tokens, so Movaro's Strava secret never ships inside the app. That one-time handoff is held for at most ten minutes. Your tokens are then stored only in your operating system's secure credential store (macOS Keychain or Windows Credential Manager). Token refreshes pass through Movaro's server and are not stored there.
Disconnecting and deletion. Choose Disconnect in Movaro's Strava activity picker at any time. This revokes Movaro's access with Strava and deletes your tokens from your device. You can also revoke access in Strava under Settings → My Apps. Activities you have already imported into a project stay on your device until you delete that project. For help removing Strava data, contact support@getmovaro.com.
Strava's role. Strava is an independent controller of your Strava data. Strava may collect and use information about how Movaro uses the Strava API for its own business purposes, as described in the Strava Privacy Policy. If this policy conflicts with Strava's Privacy Policy regarding Strava data, Strava's policy controls.
Your choices and rights
You can disconnect Strava, unsubscribe from marketing messages, manage a subscription through the billing portal, or ask us to access, correct, delete, or restrict eligible personal information. Depending on where you live, you may also have rights to object, withdraw consent, receive a portable copy, or complain to your local data-protection authority.
For privacy requests, contact support@getmovaro.com. We may need to verify a request before acting on it. This policy was last updated on 8 October 2026.
Website cookies and advertising
In the European Economic Area, the United Kingdom, Switzerland and other places whose laws require opt-in consent, and whenever we can’t tell where you are, optional analytics and advertising tools are off until you accept them. Elsewhere they are on by default, and you can turn them off at any time in Privacy choices. If your browser sends a Global Privacy Control signal, advertising tools stay off. Rejecting optional tracking does not prevent you from browsing, downloading Movaro, or managing your account. These choices apply to this browser and do not change your newsletter subscription.
Change your privacy choices. We remember your choice for 180 days. Where we ask for consent, we ask again when it expires or our configured providers change. You can withdraw consent or opt out at any time. Withdrawal stops future tracking; it does not undo information already sent to a provider. If JavaScript is disabled, optional integrations do not load.
Necessary storage
- Privacy choices — 180 days
- Browser storage named
movaro_privacy_choicesrecords the selected categories, time, and policy/configuration version. Expired choices are ignored and replaced on your next choice. If browser storage fails, a necessarymovaro_privacy_blockedcookie keeps optional tracking off for up to 180 days or until you successfully save a new choice. - Download protection — 15 minutes
- The
movaro_download_noncecookie protects download requests. - Account access — 1 hour
- The
movaro_sessioncookie keeps subscription management authenticated. - Newsletter confirmation — 15 minutes
- The
movaro_newsletter_confirm_csrfcookie protects the confirmation form. - Administrator access — 1 day
- The
admin_sessioncookie authenticates administrators. Administrator theme and sidebar preferences remain in browser storage until cleared.
Analytics
When analytics is allowed, we count blog views and CMS page impressions for internal reporting. We store daily totals per article or page without visitor identifiers, IP addresses, or browsing histories in the counters. Repeat page loads can count again; these are impressions, not unique visitors.
No optional analytics provider is currently configured on this website. Google’s cookie information.
When analytics is allowed, we remember where your visit began to understand download sources. This tab-only storage (movaro_visit_context) expires after 30 minutes of inactivity and is cleared when you turn analytics off.
Installation and download records
We use IP addresses to help associate downloads and Community activity with installations. These matches can be uncertain. IP addresses are stored and deleted automatically after 90 days. For questions or data requests, contact support@getmovaro.com.
Advertising
No optional advertising provider is currently configured on this website. Advertising integrations remain inactive until a provider is configured and advertising is allowed in your privacy choices.
Provider cookies can include Google’s _gcl_*, Meta’s _fbp and _fbc, Reddit’s _rdt_uuid, and OpenAI’s __oppref. Their lifetimes and data retention depend on provider settings. Review the provider information below for details. On withdrawal, we remove matching cookies accessible to this website and reload the page to stop the tools. Cookies on other domains must be managed through that provider or your browser.
We do not deliberately include email addresses, license keys, or account details in these website events. Purchase and completed-download reporting are not enabled by this website integration.
For questions or data requests, contact support@getmovaro.com.
Desktop entitlement diagnostics
Entitlement refreshes include the installation platform and app version, system hardware details, aggregate project and user-created layout counts, and the latest project-edit date. Movaro does not send project or layout names, filesystem paths, media, routes, or project contents with these aggregates.
Render statistics
When you export a video, the desktop app can send render statistics: render timings and phases, pipeline performance counters, render settings such as resolution, frame rate, quality, theme, and widget types, the counts and lengths of clip pieces, picture-in-picture clips, and cutaways, whether the render succeeded, failed, or was canceled, the error message of a failed render with file names, folder names and other personal details removed, and the route distance the export covers, rounded to 100 m, which built-in layout it used or whether it used one of your own, which published community layouts it used, and which built-in transitions, effects, looks, title templates, animations and stickers it used. These statistics are linked to the random installation identifier and help tune Movaro for different hardware. They never include video, file names, filesystem paths, GPS coordinates or tracks, or project names. You can turn them off in Settings → Privacy. Render statistics are retained for 180 days.
Highlights explorer and AI review
Highlights explorer finds moments on your device using your activity data and footage. On Creator, Studio and Founder, you can also use AI review to rank those moments for activities from files you upload (GPX, FIT or TCX). Activities imported from Strava are analyzed only on your device and are never sent for AI review. For such an activity, you can upload your own recording of it (GPX, FIT or TCX) in Highlights explorer; AI review then uses measurements from that file only.
For AI review, numeric activity summaries and candidate-moment measurements are sent to Movaro and its AI provider, Typesafe. These can include speed, elevation, recorded heart rate or power, and numeric footage coverage, brightness and sharpness. Source videos, video frames, GPS coordinates, activity names, file paths and absolute activity timestamps are not sent to the provider.
Requests, provider decisions and, if you turn on sharing in Settings → Privacy, suggestion feedback are linked to the installation identifier and an activity fingerprint for service limits, reliability and evaluation. Replay responses expire after 90 days; numeric evaluation records remain until the associated installation is deleted. For access or deletion requests, contact support@getmovaro.com.
Feature statistics
With render statistics turned on, the desktop app also records when you open a paid tool and how far its guided setup gets, when an upgrade prompt is shown for a paid feature, when you choose to upgrade from it, why an export was refused before rendering, whether you connected Strava, and how many activities you import from Strava or from GPX, FIT and TCX files: the feature, the setup step, the file format, your plan at the time, and the app version and platform. These statistics are linked to the random installation identifier and help us understand which features matter. They never include video, file names, filesystem paths, GPS data, or project names. You can turn them off in Settings → Privacy. Feature statistics are retained for 180 days.
Questions about privacy? Contact support.