Privacy Policy
Last updated: September 5, 2026
1. Data controller
The data controller for personal data is FirstMove's publisher (an independent French sole proprietor). Contact: contact@getfirstmove.fr
2. Data we collect
FirstMove collects the following data:
- Account data: email address, chosen display name.
- Profile data: age, country, city, available budget, weekly time, skills, financial goal and timeline.
- Usage data: generated plan, task progress, reported income, plan history.
- Payment data: subscription status and Stripe customer ID. Card details are handled exclusively by Stripe and never pass through our servers.
- Technical data: anonymized usage events (plan generation, login) with no third-party behavioral tracking.
3. Purpose of processing
- Providing and personalizing the service (plan generation, progress tracking).
- Managing the subscription and billing through Stripe.
- Account-related communication (signup confirmation, service updates).
- Improving the service (aggregated, anonymized usage analysis).
4. Legal basis
Processing is based on contract performance (providing the service) for data required for the app to function, and on legitimate interest for improving the service.
5. Retention period
Data is kept for as long as the subscription is active, then for 12 months after the account is deactivated, unless deletion is explicitly requested sooner. Billing data is kept for 10 years as required by accounting rules.
6. Subprocessors and transfers
FirstMove uses the following subprocessors:
- Supabase: database hosting and authentication (EU/US).
- Render: server infrastructure hosting (US, Virginia).
- Stripe: payment processing (US/EU).
- Anthropic: plan generation via the Claude API (US). Data sent (user profile) is not used to train models.
Transfers outside the EU are governed by the European Commission's standard contractual clauses.
7. Your rights
Depending on where you live, you may have rights over your data, including: access, correction, deletion, portability, restriction of processing, and objection.
To exercise these rights, contact: contact@getfirstmove.fr. We'll respond within 30 days. EU residents may also file a complaint with their local data protection authority (in France, the CNIL, cnil.fr).
8. Cookies and trackers
FirstMove uses Vercel Analytics to measure traffic (no cookies, no individual identifiers, no sharing of data with third parties). No advertising or profiling cookies are set.
9. Contact
For any question about this policy, contact: contact@getfirstmove.fr