Next Moves Lab: Stop managing your work. Start finishing it.

Effective: 10 October 2026

This policy explains what Next Moves Lab collects, why, and the choices you have.

1. Who we are

Next Moves Lab is run by Bojan Stojanović PR Ležimir, a sole trader registered in the Republic of Serbia. Our full business details are in our Terms of Service.

We are the data controller for the information described here. You can reach us at team@nextmoveslab.com.

2. What we collect

Information you give us

What	Why
Your email address, and your name if you give it	To create your account, sign you in, and contact you about the service
If you sign in with Google: your name, email address and profile picture from Google	To sign you in
Everything you put into the app: tasks, notes, goals, rules, answers to setup questions, and text you import from other AI tools	This is what the product reads to plan your day and suggest what to do next
Voice input and photos of notes	Turned into text and treated like anything you type. We do not keep the audio or the photo. On some browsers, the browser's own speech service (for example Google's, in Chrome) does the voice-to-text step
What you finish, change, skip or move	So future suggestions fit how you actually work
If you subscribe: your billing email, plan, status and payment dates, from Paddle	To give you access and handle renewals, failed payments and refunds
Messages, bug reports, feature ideas and votes you send us	To answer you and decide what to build

What you write may include client names, amounts owed, or personal matters. We do not filter it. Section 5 explains what happens to it, and Section 6 explains what happens if it suggests a crisis.

Information collected automatically

Account and usage data: when you sign in, which features you use, and when.
Technical data: IP address, browser and device type, and rough location from the IP address (country or city, never precise).
Cookies and analytics: see Section 9.

What we do not do

We do not read your email inbox.
We do not record your screen.
We never see or store your card details (see Section 8).
We do not sell your data.
We do not follow you across other websites, apart from the advertising tools on our public pages (Section 9). In the EU, the EEA, the UK, Switzerland and Serbia they only load if you say yes.

If you connect Google Calendar

Connecting Google Calendar is optional. If you do, we ask Google for read-only access, and this is what we receive and keep:

The connected Google account's email address and Google ID, so the app can show which account is connected.
The list of your calendars, so you can choose which ones count. We keep the names and Google IDs of the ones you choose. For some calendars that ID is an email address.
From the calendars you choose, each event's name, start and end time, and Google's ID for it, for the next 30 days, and whether it takes up your time (for example, an invitation you accepted that shows you as busy).
An access key, encrypted before we store it, and a note of which permissions you gave us.

We do not read event notes, guest lists, places or attachments, and we never create, change or delete anything in your calendar.

How we use it: only to show your day in the app and fit your plans around your free time, and, if you connect an AI assistant (below), to answer it when you ask about your day. Your Google data is not used for advertising, is not sold, and is not read by people at Next Moves Lab unless you ask us for help with it or the law requires it.

Google data and AI. The AI models that plan your day never see your calendar. They are not given event names, times, calendar names or your Google account details. They receive one number, the free minutes left in your day, worked out on our own servers. The one exception is Ask, the assistant inside the app: when you ask it a question, the names and times of the events that take up your time today, tomorrow, or on a day you ask about are included in what it reads, so it can answer "is Thursday free". That text goes to the AI model providers in Section 5, through our routing service, and only to providers that do not keep it or train on it. An invitation you haven't accepted, or time marked free, is sent without its name. If you never use Ask, no Google user data reaches any model. In every case, no Google user data, whether raw, aggregated, anonymised or derived, is used to develop, improve or train any artificial intelligence or machine learning model, general or specialised, ours or anyone else's.

Who receives your Google data. This is the complete list of everyone who receives, stores or can see information we obtain from Google. We do not share, transfer or disclose it to anyone else, and never to anyone for their own purposes.

Who	What they receive	Why
Supabase (Ireland, EU)	The connected account's email address and Google ID, the names and IDs of the calendars you chose, the events described above, and the encrypted access key	They host our database. This is where the data is stored, encrypted at rest, for the periods set out below
Vercel (Ireland, EU)	The same data, held in memory only while a request is being handled	They run the servers the app runs on. Nothing is kept there
AI model providers, through our routing service (OpenRouter), only when you use Ask	The names and times of the events that take up your time on the day you ask about, and how much of your working hours is free. Nothing else from your calendar	To answer your question. Routed only to providers that do not keep or train on what we send (Section 5). For a small number of test accounts, a second model reads the same text afterwards to check the quality of the answer
The AI assistant you connect, if you connect one (see the next section)	The event names and times for today or tomorrow, and how much of your working hours is free, each time you ask it about your day. An invitation you haven't accepted, or time marked free, is sent without its name	Because you asked it to. This happens only on your instruction, under your own account with that company, and only while the connection is on
Google	Our requests to read the calendars you chose	That is how we read your calendar

Nobody else receives Google user data. In particular, the models that plan your day never receive it (Ask is the only AI path that does, above); it is never sent to our error monitoring, which is set up to leave out what you entered and carries no calendar content; never to our analytics or advertising tools; and never to our email or payment providers. If this list changes, we will update this policy before the change takes effect and, where the change is material, email you first.

How long we keep it: each event is deleted within two days after it ends. Everything else, including the key, is deleted when you disconnect, when you delete your account, or 30 days after your subscription ends, and we then ask Google to cancel our access. You can also cancel it yourself at any time at myaccount.google.com/connections.

Google API Services User Data Policy. Next Moves Lab's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: we use Google user data only to provide and improve the calendar features described on this page; we transfer it only as listed above, or where needed for security or required by law; we do not use it for advertising; we do not sell it; we do not use it to build or train AI or machine learning models; and no human at Next Moves Lab reads it except with your permission, for security, as required by law, or in aggregated, anonymised form to run the service.

If you connect an AI assistant

Connecting an AI assistant, such as Claude, ChatGPT, Gemini, Perplexity, Grok or Muse, is optional. Once you allow it, it can do only the following:

Read your tasks, how long they take, where each one sits, the notes and dates on them, what changed since it last looked, and how your week is going.
Read your goals.
Read your calendar events and free time for today or tomorrow, if you have connected Google Calendar, as described above. Connecting an assistant is your choice to disclose that Google data to the assistant's company when you ask it about your day.
Read how you work, only if you tick "Share how I work" when you allow it: your rules, the names and terms you use, what you have told the app about your work, your goals and your working hours. It is off unless you tick it.
Change your day, only if you choose "Read and change" when you allow it. With "Read only" it cannot. That means: add tasks (into your day only once you confirm, or straight to Later), mark tasks done with a note and links to the result, undo that, move tasks to Later, change a task's name, time, note, due day or repeat, say it is working on a task, and propose a plan for your day, which takes effect only once you confirm. Every change says which assistant made it, and every change to a task can be put back, by the assistant or by you.
Keep a log of the work it does for you: what it started, finished or got stuck on, the goal it served, a link to the result, and a question for you when it needs one, which shows on your Home page with Done and Not now. Each assistant sees only its own log. This too needs "Read and change".

It cannot delete anything, and it cannot see your email address, your password, your billing, or anything else in your account. It gets a key of ours that works only for the above; the sign-in behind it stays on our servers. For an assistant that cannot open our sign-in page, such as a script or an agent on a server, you can make such a key yourself on Your tools; it stops when you end it there, or on its own after 90 days unused.

What we keep from it: the work log, with its questions and your answers; the notes and links it leaves when it finishes a task; who made each change to a task and what the task said before, so the change can be put back; and a count of what each assistant did in the last 30 days, shown on Your tools. All of it is labelled with the assistant's name. The work log shows on your Home page and under your goals, and we use it when we plan your day, so you are not handed work an assistant already did. We keep it like your tasks, and delete it when you delete your account.

What the assistant receives is handled by its company, under your own account with them and their privacy policy. The assistant is not our processor: you connect it yourself and it acts for you. We never send it anything unless it asks, and we cannot see your conversations with it. You can disconnect at any time, in the app or in the assistant's settings.

If you use the referral program

If you share your referral link (subscribers who have paid at least once): we make a code for your account. Anyone who opens your link sees your first name, if you added one, on the offer page. Never your email address. You see how many people joined through your link, when, and whether their first payment went through, but never who they are.

If you join through a referral link: the link stores a cookie, nm_ref, for 14 days. It holds only the referral code, so the free month applies when you subscribe. When you start, we record which link you came through, and a scrambled form of your IP address, for 7 days, to limit how many free months one place can start. To make sure the free month goes to a new customer, we compare your email address and Paddle customer ID with our past subscriptions and with the person who shared the link. There is one free month per card, so we also keep a scrambled form of the card you start with, made from its type, last four digits and expiry (never the card number itself), and compare it with other free months and with the cards the person who shared the link pays with. If you have subscribed before, or the card has already had a free month, the free month is cancelled straight away and nothing is charged. The person who shared the link sees that someone joined, when, and whether the first payment went through. Not your name or your email.

3. Why we are allowed to process it (legal bases)

Purpose	Legal basis
Running your account and delivering the service, including reading what you enter to plan your day	Performance of a contract (Art. 6(1)(b) GDPR)
Personalising suggestions to how you work	Performance of a contract (Art. 6(1)(b))
Security, abuse prevention, reliability, and checking the quality of suggestions	Legitimate interests (Art. 6(1)(f))
Product emails such as tips and a weekly recap, which you can turn off in one click	Legitimate interests (Art. 6(1)(f))
Cookieless analytics and error reports	Legitimate interests (Art. 6(1)(f))
Advertising tools on our public pages (Section 9)	Consent (Art. 6(1)(a)). Outside the EU, the EEA, the UK, Switzerland and Serbia: legitimate interests, and you can say no at any time
Running the referral program: codes, free months, rewards, and the checks that keep it fair	Performance of a contract (Art. 6(1)(b)), and legitimate interests in preventing abuse (Art. 6(1)(f))
Meeting tax and accounting obligations	Legal obligation (Art. 6(1)(c))
Showing help when what you write suggests a crisis	Vital interests (Art. 6(1)(d) and Art. 9(2)(c))

Where we rely on consent, you can withdraw it at any time. Withdrawing does not affect processing already carried out.

4. How long we keep it

While your account is open, we keep what you have entered and your history, so the product keeps working and stays personalised.

When you delete your account, we delete your personal data from our live systems straight away, except:

Backups, which are overwritten within 7 days.
Billing and tax records we must keep by law. The billing email address and payment customer ID on them are removed about 30 days after you delete your account, or once your subscription has ended if that is later. Copies of billing emails we sent you are removed after 90 days.
Answers you give when you delete your account, kept without anything that links them to you.
Feature ideas you posted, which stay on our roadmap without your name.
Your email address on our email provider's do-not-send list, so we never email you again.
Error reports and service logs that carry your account ID, deleted within 90 days.

Referral program. Opens of a referral link: 2 days. The scrambled IP address on a referral: 7 days. A referral that led to a subscription stays as part of that billing record, without the IP address, and so does the scrambled form of the card, so the same card cannot start a second free month.

Support messages are kept while your account is open and deleted with it. Copies of messages and account notices in our inbox are deleted within 12 months.

5. Artificial intelligence

What happens to what you enter

To plan your day, the text you enter, and a short summary of the work a connected AI assistant logged for you, is sent to AI model providers (large language models), which we reach through a routing service. This means your text leaves our servers and is processed by a third party. We only use providers that do not train AI models on what we send. Some keep it for a short time, up to 30 days, to check for abuse, and then delete it.

What the models get from your calendar. The planning models receive only a count of your free minutes, worked out on our servers: no event names, times, calendar names or Google account details. Ask, the assistant inside the app, is the one exception: when you ask it a question, the names and times of the events that take up your time on the day in question are part of what it reads, under the same no-training routing as everything else on this page. The full list of who receives your Google data is in Section 2, under "If you connect Google Calendar".

Personalisation is not training

We personalise. The product learns from your own history (what you finish, how long things take you, what you keep moving) to make your suggestions better. This affects your account only.
We do not train AI models on your content. What you write is not used to train or fine-tune any AI model, ours or anyone else's.

If this ever changes, we will ask for your separate consent first. Saying no will not change your service.

Who at Next Moves Lab sees your content

We look at your content only when you ask us for help, to fix a problem, or to check the quality of the product's suggestions. Access is limited to the people who need it.

The product can be wrong

Suggestions, reasons and first steps are generated automatically. You always have the final say, and you can change any suggestion. Nothing here is professional, financial, legal, or medical advice.

Automated decision-making

Choosing what to suggest is automated, but it has no legal or similarly significant effect on you within the meaning of Article 22 GDPR, and you can override it at any time.

6. If what you write suggests a crisis

If what you write suggests you may be in crisis, the product stops planning and points you to real help, including a helpline directory. We do not keep a record that this happened, and no one is alerted.

Next Moves Lab is not a mental health service and is not a substitute for professional care or emergency services.

7. Information about other people

What you enter may mention other people, such as a client or someone you are meeting, and so may the event names in a connected calendar. We use it only to provide the service to you, on the basis of legitimate interests. We do not build profiles of those people or contact them.

You are responsible for what you put in. Please avoid entering other people's sensitive details (health details, financial account numbers, government ID numbers) where you can. If someone contacts us about information you entered, we may need to act on their rights under data protection law.

8. Who else handles your data

We use a small number of service providers. Each one handles your data only to provide its service to us, under a data processing agreement.

Type of provider	What they do	Where	Google Calendar data?
Database and sign-in (Supabase)	Store your account and what you enter	Ireland (EU)	Yes, stores it
Hosting (Vercel)	Run the website and the app	Ireland (EU)	Yes, in memory while serving a request
AI model providers, reached through a routing service	Read what you enter to plan your day (see Section 5)	EU, US and elsewhere, depending on the model	Only when you use Ask (Section 2)
Email	Send and receive our emails	EU	No
Analytics	Count page views and measure page speed, without cookies	EU and US	No
Error monitoring	Crash and slowness reports, with your account ID, set up to leave out what you typed	US	No
Paddle	Payments, tax, and recovering failed payments, as merchant of record	EU and worldwide	No
Meta	Measuring our adverts on our public pages, with your yes where the law requires it (see Section 9)	US	No

To get the current list of named providers, email team@nextmoveslab.com.

Payments. Paddle is the merchant of record for purchases: Paddle sells the subscription to you and handles payment and tax. We never see, receive, or store your card details, and Paddle's own privacy policy governs that transaction. Paddle's scripts, including its tool for recovering failed payments, run on our pricing and checkout pages, on some public pages, and inside the app. They receive your email address or your Paddle customer ID, and may set a short-lived security cookie on Paddle's own site.

International transfers. Some providers are outside the European Economic Area. Where that happens, transfers are covered by an adequacy decision or by Standard Contractual Clauses.

We do not sell your data.

9. Cookies and similar storage

Essential. Cookies that keep you signed in, keep the service secure, and complete sign-in and payment steps. These do not need consent. They include nm_ref (14 days), set only when you open a friend's referral link: it holds the referral code so the free month applies when you subscribe, and identifies nobody. A twin, nm_ref_hint, holds no code and only lets our pricing page point you back to the offer.

Preferences. Small cookies and browser storage that remember choices you make, such as how the side menu looks, which sign-in button you used last, or something you started writing but did not send. None are used for tracking or advertising.

Analytics. We count page views and measure how quickly pages load without setting cookies, and we never identify you. On our public pages, the counter briefly uses your IP address and browser details to tell visits apart, and keeps a visit number in your browser tab until you close it.

Error reports. If something breaks or is slow, and for a small sample of page loads to measure speed, a report goes to our error monitoring with the page, your browser and device type, and your account ID if you are signed in. It is set up to leave out what you typed, and it never includes your IP address.

Advertising. On our public pages, and on the page you see right after paying, we use the Meta pixel to tell whether an advert worked. It reports that a page was viewed or that a purchase happened. It sets a cookie, _fbp, that lasts 90 days, and a second, _fbc, if you arrived from one of our adverts. Its script also saves a few entries in your browser (lastExternalReferrer, lastExternalReferrerTime and multiFbc) noting the site or advert you came from, and Meta may set its own cookies on facebook.com. It never runs inside the app. Meta's own privacy policy governs what Meta does with this.

You choose. If you visit from the EU, the EEA, the UK, Switzerland or Serbia, advertising tools load only after you press Accept on our cookie question. Elsewhere they load unless you say no, or your browser sends a Global Privacy Control signal, which we treat as a no. You can change your answer at any time with Cookie settings at the bottom of any public page, and saying no removes these cookies. Your answer is kept in a cookie, nml-consent, for six months. If we add an advertising tool, we list it here first and ask again.

10. Your rights

If you are in the EU/EEA, the UK, or Serbia, you have the right to:

Access a copy of your data
Correct anything inaccurate
Delete your account and data
Export your data in a portable format
Object to processing based on legitimate interests
Restrict processing in certain circumstances
Withdraw consent at any time where consent applies

How to use them: email team@nextmoveslab.com. We answer within 30 days. You can also download a copy of your tasks and history, and delete your account, from inside the app.

Complaints: you may complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or to your local supervisory authority if you are in the EU/EEA or the UK.

If you are in California: you have rights to know what we collect, and to access, correct and delete it. We do not sell personal information. The advertising tools on our public pages may count as "sharing" under the CCPA/CPRA; you can turn them off with Cookie settings, and we honour Global Privacy Control. Using these rights will never mean worse service or a different price.

11. Security

Data is encrypted in transit and at rest, and access to production systems is limited to those who need it. No system is perfectly secure. If a breach affects your personal data and puts you at risk, we will tell you and the relevant authority as the law requires.

Privacy Policy