Move
Stories
Move
Stories
The TAMITOS Move app reads data about your movement. That is a sensitive thing and it deserves an explanation that can be read, not four pages of lawyerly sentences nobody ever chews through.
Last updated 25. augusta 2026 · Controller: Tamitos, o.z.
The controller within the meaning of the GDPR is Tamitos, o.z..
E-mail and name. If you sign in through Google, Apple or Facebook, we receive your e-mail and name from them, not your password and not access to your account with them. Passwords for accounts created with an e-mail are not visible even to us: sign-in runs on the SRP protocol, in which the password never leaves the phone.
From the Health Connect service (Android) or Apple Health (iPhone) we read only these types of records, and they differ by platform.
On Android and on iPhone:
On iPhone, additionally:
On Android we read calories only inside a workout: we show them on each workout in History and their sum as the day's energy. We do not read heart rate or whole day calories on Android. In September 2026 Google decided, under its Minimum Scope rule, that they are not necessary for the app's features. On Android the app asks for workouts separately; steps and distance are counted without that permission too.
Reading in the background (Android only). If you allow it in the app, the app reads the same records a few times a day even when you do not open it, so your points arrive on their own. It reads nothing beyond what is listed above and sends nothing more. You can switch the permission off at any time in Health Connect settings.
What of it leaves for the server. From each activity the app sends only a summary: the start and the end, the type of activity, the number of steps, the distance travelled, the calories burned and the record's id, which is how we recognise that the same record has not arrived twice. We do not send heart rate or the name of your device to the server. Heart rate stays on the phone.
With every record we also take the kind of source, what recorded it (for example "Apple Watch" or "Garmin Connect"), not the name of your particular device, and whether it was entered by hand. Manually entered activities earn no points, otherwise anyone could write down a five hour run.
If you fill them in, we store your date of birth and weight. They serve one purpose only: a more accurate conversion of the intensity of your movement into points, and only when an activity arrives with calories burned. You do not have to fill them in, without them an average is used. We do not ask you for your height or your resting heart rate and we collect neither anywhere.
From the movement records we calculate MET minutes on the server, and points from those. We store them as a ledger, every point credited, spent or expired has its own line. You can see the whole of it in the app in the "Points and gifts history" section, which the app labels História bodov a darov.
When you turn points into euros, we store which family received how much and when. The family does not find out who in particular sent it how much.
This is the one question everybody asks themselves when granting a permission to health data, so let it be answered clearly. The app does not ask for and does not receive:
And once more the main thing: we never write anything into your health record. The app has no write permission in either system, so this is not a promise, it is technically impossible.
| What for | Legal basis |
|---|---|
| Running the account and signing in | Performance of a contract, Article 6(1)(b) GDPR |
| Converting movement into points and giving euros away | Explicit consent, Article 9(2)(a) GDPR. Movement data is health data and we do not process it without your consent. You give consent by granting the permission in Health Connect / Apple Health and you can withdraw it there at any time. |
| Leaderboard | Separate explicit consent, Article 6(1)(a) GDPR. The leaderboard shows euros given away, not points and not movement (see section 5), so it is not health data, but it is still about what one person sees about another, so we ask. It is switched on separately in the app and can be switched off at any time. |
| Protection against fraud | Legitimate interest, Article 6(1)(f) GDPR. The money that is given away is the partner's money intended for the families; if somebody could manufacture it with a fraudulent record, they would be harming the families. |
| Accounting and settlement with the partner | Legal obligation, Article 6(1)(c) GDPR |
The leaderboard does not show points or movement. It shows how many euros you have sent to the families, and that is not the same number. Points turn into euros only when you give them away yourself. Somebody who moves every day and never gives anything away is on the leaderboard with a zero. The leaderboard therefore cannot be read backwards to tell how much anyone moved.
Even so it is switched off until you opt into it yourself. Showing one person to another is something we ask about, not something we pre-select for you.
When you opt in, other users will see:
Never your e-mail. Nor your number of points, nor what you did, when, for how long or where. You can leave with a single switch and it takes effect for others at the next load.
We do not sell it to anyone and we do not provide it to advertising networks or data brokers.
Only these work with it:
The partner who pays for the monthly pot receives aggregate figures, how many people moved, how many euros went to which family. It does not receive a list of names or anything that could be matched to a particular person.
On Amazon Web Services servers in Germany, that is, in the European Union. We do not transfer it outside the EU.
You have the right of access to your data, to its rectification, to erasure, to restriction of processing, to portability and the right to object. You can withdraw your consent to the processing of movement data and to the leaderboard at any time, withdrawal has no effect on what happened before it.
The quickest route to erasure leads straight from the app: Profile → Delete account (the app prints it as Profil → Zmazať účet). It is deleted immediately and it is not a request that anybody approves. If you cannot get into the app, write to us through the account deletion page.
If you feel that we are handling your data badly, you can lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov Slovenskej republiky). We would rather you tried us first, but it is your right and we are not hiding it anywhere.
The app is for adults. The children here are the ones who are being helped, not the ones who register. We do not create accounts for persons under 16; if we find out that such an account has been created, we will delete it.
When this changes, we will change the date at the top as well. For a change that affects what we process about you, we will tell you in the app, not quietly.
This is an English translation of a document written in Slovak. It is here so that it can be read, and we keep the two saying the same thing. Where they differ, the Slovak version is the one that applies.