What we do today, what we are building towards, and how to tell us about a problem. Last updated 9 October 2026.
Mova's products are not yet open to the public, and this website does not ask for financial information. It collects only the messages you choose to send us through the contact form.
The website is delivered over an encrypted HTTPS connection through Cloudflare. Our source code is kept in a private repository, and the keys and passwords the site needs are stored as protected settings, not in the code. The contact form checks what is submitted and filters out automated spam.
These are the principles our products are being built around. They describe our design intentions for launch, not features you can use today, and we will update this page as they are put in place.
Your household's data kept separate from everyone else's. Encryption in transit and at rest, with extra protection for sensitive fields. No bank logins: importing statements as files means we never need your banking credentials. Access for our own team limited to what each person needs. The ability to export or delete your data.
If a security incident affects personal information, we will investigate it promptly, and where the law requires it we will tell the Information Commissioner's Office within 72 hours of becoming aware of it and tell the people affected.
We do not currently hold any independent security certifications, such as ISO 27001 or SOC 2, and we will not say we do until we have been independently assessed. We would rather be accurate than reassuring.
If you think you have found a vulnerability on this website, please email dataprotection@getmova.co.uk with the subject "Security". Tell us what you found and how to reproduce it. We will acknowledge your report, keep you informed and fix genuine issues as quickly as we can.
Please do not access, change or share anyone else's data, do not disrupt the service, and give us reasonable time to fix a problem before telling others. We will not take action against people who report issues in good faith and follow these guidelines.
We will never ask for your password, full card number or banking login by email, message or phone. If you get a message that claims to be from Mova and asks for them, do not reply, and forward it to dataprotection@getmova.co.uk. When our products launch, use a strong, unique password and turn on two-step verification.