Privacy Policy

When you sign in with Movmo from a participating airline's website, you can also choose Keep me recognized on [airline name] on this device. This choice is optional and separate from turning recognition on. You make it for one airline at a time, and a browser is remembered only when you choose it in that browser. The box is never ticked in advance. If you chose it for that airline before, Movmo may remind you next to the box, but the box is still unticked: a browser is remembered only if you tick the box in it. Once a browser is remembered, the next time you visit that airline's website in it, the airline can recognize you without asking you to sign in with Movmo again.

To make this work, Movmo's software on the airline's website keeps two items in your browser, under that website: a security key that your browser keeps and that cannot be copied out of it; and, once you choose, a random reference code. Neither contains your name, email address, or Movmo sign-in details. The key is created when you start signing in with Movmo from that website, before you are asked, and the public part of the key is passed to Movmo's sign-in page and reaches Movmo's servers only if you choose to be remembered, so that the reference code can be tied to that browser. When you come back to the airline's website without choosing to be remembered (for example after Not now, or if you cancel), Movmo's software deletes the key from your browser. If the sign-in is interrupted or cannot be finished, the key stays in that browser until a later sign-in with Movmo from that website ends without you choosing to be remembered, or until you clear that website's storage. In a remembered browser, each time you open a page of that airline's website that shows the Movmo button, your browser uses the key to prove to Movmo that it is the same browser, so Movmo learns when you visit that website in that browser; the reference code alone is not enough.

Movmo keeps a record of each remembered device: your Movmo account, the airline and its website address, the Movmo sign-in the device belongs to, the public part of the device's security key, the version of the wording you agreed to, a general description of the browser such as "Chrome on Mac" (not the full browser details), and when the device was added, was last used, and expires. Movmo stores only a scrambled (hashed) form of the reference code, never the code itself. Each time a remembered device recognizes you, Movmo updates when it was last used and, at most once a day for each airline, adds an entry to your account's sign-in history with the date and time, the airline, and a general description of the browser, device type and operating system, taken from the browser's own identification. The entry includes the network (IP) address of that visit only when Movmo's systems can confirm it, and never a location (see Section 3(d)). You can see your remembered devices for each airline on the Connected apps page in your Movmo account settings.

A remembered device lasts at most 30 days from when it was added. Using it does not extend that time; after 30 days you sign in with Movmo again on that website and can choose again. It ends sooner if the Movmo sign-in it belongs to ends in that browser: when you sign out of Movmo in that browser, Movmo deletes its records of that browser's remembered devices for every airline, and the reference codes left on those websites stop working; Log out of all devices in your Movmo account settings deletes every remembered device; when that sign-in reaches its own time limit, the device stops working. A remembered device only repeats the recognition you have already turned on for that airline: the airline receives the same categories you approved, in the same way as described above, and nothing more (if you approved your profile, the airline's page also receives your first name so it can greet you). Remembering a device never turns recognition on, never adds categories, and works only on that airline's website.

You can end it at any time:

• On the Connected apps page, turn off Recognize me automatically for the airline. Every remembered device for that airline is forgotten and your choice is withdrawn; your connection with the airline is otherwise unchanged. Turning it back on does not remember any device until you next choose Keep me recognized in that browser.

• On the Connected apps page, Remove a single device. Your choice for the airline stays in place, so the next time you sign in with Movmo there you may be reminded that you chose it before; the box is still unticked.

• On the airline's website, choose Forget this device or Not you?. Both forget that browser on that airline's website only. Not you? also asks the airline's website to sign you out of its own page, and the next time someone uses the Movmo sign-in button on that airline's website in that browser, Movmo first asks whether to continue as you or use another account. Neither signs you out of Movmo: until you sign out of Movmo (for example at accounts.movmo.io) or your sign-in expires, anyone using that browser can still use your Movmo account, including for Movmo Express Checkout, so on a shared device sign out of Movmo as well.

• Turn recognition off for the airline altogether, or delete your Movmo account.

In each case Movmo deletes its record of the device. With Forget this device and Not you?, your browser asks Movmo to delete it as the browser removes the reference code; if that request does not reach Movmo, the record can no longer be used, because your browser no longer holds the code, and it expires on its own. Forget this device and Not you? also delete the reference code and key from your browser. After the other options, or after you sign out of Movmo, the reference code and key left in that browser stop working, and are deleted the next time that website checks them with Movmo or when you clear the website's storage.

Movmo keeps a record of each time you give or withdraw this choice, as evidence of your consent: when you did so, the version of the wording you were shown, and the screen, network address and browser details you used when you gave it. A new choice adds to this history and does not replace earlier entries.

If you link or join a participating airline's loyalty program through Movmo (on the airline's website or, where the airline offers it, on Movmo's consent screen), that airline sends Movmo your membership details — program, member number, tier, and points balance — and Movmo stores them on your profile. The airline remains responsible for your loyalty account itself. These details are removed from Movmo when the airline removes the link (for example, after you unlink in the airline's own account settings), when you turn recognition off for that airline altogether, or when you delete your Movmo account. Turning off only the loyalty category for that airline stops Movmo returning these details to it but keeps the link, so turning it back on needs no re-linking; you can also remove the membership yourself from the Loyalty programs page in your Movmo account settings at any time.

When you turn recognition on for a participating airline, or expand what it can receive, Movmo sends you a receipt email naming the airline, the date and time, and the categories you approved (never the underlying values), with links to that airline's own privacy policy and terms where the airline has provided them. This receipt is a consent notice about your Movmo account and is sent even if you have unsubscribed from marketing emails.

You may turn recognition off for any participating airline, or remove individual categories, at any time from the Connected apps page in your Movmo account settings (or by contacting privacy@movmo.io). Movmo stops answering that airline's recognition requests as soon as you do, and any access credential the airline already holds stops working at its next renewal. The airline is required to delete the private identifier and the recognition profile it holds for you, and the same applies when you delete your Movmo account. Where the airline has already used your details under its own lawful basis, for example inside a booking it made for you, that copy is governed by the airline's own retention rules, and you should contact the airline directly about it. Turning recognition off does not sign you out of Movmo or affect any other airline or application. If you later turn recognition back on for the same airline, you are shown the consent step again and Movmo issues a new private identifier; the old one is never reused.

Participating airlines are controllers in their own right for the details they receive, and their own privacy notices govern how they use them. Movmo's consent screen names the airline as the recipient of your data; the airline's notice covers its side of the exchange.

Movmo does not use recognition sharing for automated decision-making or profiling that produces legal or similarly significant effects on individuals (within the meaning of GDPR Article 22). Movmo shares only the categories you approved; decisions about how to personalize its website are made by the airline.