Privacy comes first.

Local-first by design

MoveManifest is being built so core move capture remains usable on your device, including when internet service is unreliable. We do not sell personal information.

Information you choose to add

Your move records may include addresses, inventory numbers, descriptions, room names, notes, photographs, optional tracker references, and imported mover paperwork. Cloud sharing and processing features explain what is transmitted before you enable them.

Accounts

Household users may use core local features as a guest. An account is optional when protecting purchase history or enabling durable cloud backup. Professional workspaces require an account so subscriptions, client moves, and team access can be recovered across devices. Depending on the sign-in provider, we receive an account identifier and may receive your name and email address.

Purchases

Apple or Google processes payment information. MoveManifest receives signed transaction identifiers, product identifiers, purchase status, and subscription or entitlement dates. We use that information for purchase verification, first-versus-additional move pricing, entitlement recovery, refunds, fraud prevention, and customer support. We do not receive full payment-card numbers.

Camera and photos

Camera access is used to recognize mover inventory numbers, scan paperwork, capture item and condition photos, create optional high-value reference views, and record a room walkthrough you start. Photo library access is used only when you select existing images or documents.

Before an attached photo is uploaded, MoveManifest re-renders it as a normalized JPEG. The shared copy does not carry the original file’s EXIF or GPS metadata. Shared photos are protected by member-only access, create-once storage paths, and SHA-256 integrity checks.

Shared moves

Core capture stays on your device. If you create or join a shared move, inventory fields, workflow status, account or anonymous identifiers, installation identifiers, and selected item photos are transmitted to Firebase services so the owner and invited helpers can work on the same move. Uploads retry after temporary connectivity loss. Once pickup is locked, only the move owner may delete shared evidence.

Optional AI processing

The original room walkthrough video remains on your device. With your explicit consent, MoveManifest sends selected still frames to its authenticated AI service to draft an editable planning worksheet. A selected damage photo may also be sent if you request an AI-assisted condition note. These requests use OpenAI as a processing provider with response storage disabled. OpenAI may retain abuse-monitoring logs for up to 30 days unless different approved data controls apply. AI output is a draft and requires your review.

Retention and deletion

Local move records remain until you delete the move or remove the app. Shared move records and photos remain while the owner keeps that shared move. Deleting an owned move removes its shared inventory and associated media. Account holders may request deletion in Profile & Settings. Anyone may also use our web deletion instructions or contact support.

Contact

Questions may be sent to support@getmovemanifest.com.