Privacy

Next Move is operated by the Next Move operator. A dedicated product contact address will be published before public sharing.

• Account email. Used to create your account, sign you in, and contact you about your account.
• Encrypted check-in content. Your saved check-ins are stored as encrypted data. See “How your check-ins are protected” below.
• Authentication and session data. Used to keep you signed in and to keep your data scoped to your account.
• Operational logs. Technical logs used to run the service, diagnose errors, and protect against abuse. These do not contain your saved check-in content, your password, or your encryption keys.
• AI request data. When you choose to use an AI action, the text you select is sent for processing. See “How AI actions are different” below.

The content of a saved check-in is encrypted in your browser before it is sent for storage. The stored data is unreadable without your encryption key, which is derived from your account password and is never stored on the server in a usable form.

In normal use, the creator of Next Move cannot read the content of your saved check-ins from the database. Each account can only read, write, and delete its own check-ins.

One tradeoff comes with this: if you lose your password, we cannot recover saved check-in content for you. You can create an optional recovery key in your profile; it is generated in your browser, we never see it, and it is then the only way to keep your check-ins after a lost password.

AI actions are optional and only run when you explicitly trigger them. When you do, the text you select is sent in plain form to our server and on to OpenAI for processing, and the result is returned to you.

This means AI processing is not end-to-end private. Next Move does not offer fully private, anonymous, or zero-knowledge AI. If you do not want a piece of text processed this way, do not use an AI action on it.

• Supabase provides authentication, the database, and account metadata.
• Vercel provides hosting and runtime logging.
• OpenAI processes the text you select when you choose to use an AI action.

Plain check-in content exists in your browser while your workspace is unlocked. Only encrypted check-in content is stored in the database.

You can delete your account and your check-ins at any time from your profile settings.

If you have lost access to your account, deletion requests will be available through the dedicated product contact address once it is published.

If the data paths above change, this notice will be updated before the change is reflected in the product.