MarketMate Privacy Policy

Last updated: 6 September 2026

1. About this policy

MarketMate is operated by Movent (Private) Limited ("MarketMate", "we", "us" or "our"). Movent (Private) Limited is the controller responsible for the personal information described in this Privacy Policy.

This Policy applies when you use the MarketMate apps for Android or iOS, marketmatehq.com, or another MarketMate service that links to it.

2. Information we collect

Account and authentication information. If you create an account, we collect your email address, username, password credentials, and information used to verify and authenticate your account.

Watchlist information. If you are signed in, we store the companies you add to your watchlist so that it can be available across your devices.

App settings and preferences. If you are signed in, we keep your in-app settings and preferences on your account, for example choices you make in the app and which one-time tips you have already seen, so that MarketMate works the same way on every device you sign in on. They are not shared with anyone.

Support information. If you contact us, we collect the details you provide, such as your email address, username, the subject of your request, your message, and our correspondence with you, together with the version of the app you are using.

Device, app, and security information. When MarketMate connects to our systems, we process information such as your IP address, device type or model, operating-system and app versions, language, time zone, request times, session information, and technical identifiers. This information is used to deliver and secure the Service.

Notification information. The app and mobile notification services may generate an app-installation identifier and a push-notification token. If you allow notifications, we process that token, your notification preferences, and the notification content needed to deliver the notifications you request. If you are signed in, the token may be linked to your account.

Crash and diagnostic information. If the app crashes or stops responding, a technical report may be sent to Sentry, our crash-reporting provider. A report may contain the type of failure, a scrubbed error message, stack trace, thread state, app version and build number, production environment, foreground or background state, device model, operating-system version, CPU architecture, available memory and disk space, event time, scrubbed diagnostic breadcrumbs, aggregate session status, and a randomly generated installation identifier. We configure these reports not to contain your name, email address, username, account identifier, watchlist, viewed symbols, typed text, screenshots, screen recordings, location, contacts, or advertising identifiers. Your IP address is visible to Sentry while the report is transmitted but is not stored with the event.

Usage insights. To understand how MarketMate is used and to improve it, the app may share usage statistics with our analytics provider, named in section 4. A usage report may contain a randomly generated installation identifier, on Android the device's resettable advertising identifier, device model, operating-system and app versions, language, the country or region derived from the connection, the screens opened and the time spent on them, session start and end times, app installation and update events, and the fact that an account was created and whether it was created with an email address, a Google account, or, on iOS, an Apple account. On iOS, usage reports contain no advertising identifier and no vendor identifier, and they are not used for advertising. We configure these reports not to contain your name, email address, username, account identifier, watchlist, the companies you view or search for, typed text, precise location, or contacts. Screens are reported by fixed names, so a report can say that a company page was opened but never which company. In the European Economic Area, the United Kingdom, and Switzerland, usage insights are off until you turn them on. Elsewhere they are on unless you turn them off. The control is in the app under Account > Usage insights. If you are signed in, your choice is saved to your account and applies on every device where you sign in.

You can browse MarketMate's main market-information features without an account. In guest mode, we do not collect an email address, username, or account watchlist, but the device, app, security, notification, diagnostic, and usage-insights information described above may still be processed where applicable.

3. How and why we use information

We use personal information to:

• create, verify, secure, and manage accounts.
• keep signed-in watchlists available across devices.
• provide the app, website, support, and notifications you request.
• protect MarketMate and its users, prevent abuse, and investigate security problems.
• find and fix crashes, errors, and performance problems.
• understand how MarketMate is used, improve its features and reliability, and, for the Android app only, measure the effectiveness of our own advertising for the app.
• comply with law and establish, exercise, or defend legal claims.

Where data-protection law requires a legal basis, we rely on:

• performance of our agreement with you for accounts, authentication, synced watchlists, support, and requested service features.
• our legitimate interests in operating and securing MarketMate, preventing fraud and abuse, maintaining reliability, and protecting legal rights, provided those interests are not overridden by your rights.
• your consent for notification permission, for usage insights where the law that applies to you requires consent for them, and for other optional processing where consent is required.
• our legitimate interests in understanding how the app is used and, for the Android app, in measuring our own advertising, for usage insights where consent is not required, subject to your right to object and to turn them off at any time.
• legal obligations that apply to us.

You do not have to create an account to browse the main market-information features. If you choose to create one, the requested account information is necessary to register, sign in, and provide account features. Notifications and usage insights are not required to use the main Service.

4. When we disclose information

We disclose only the information needed for the purposes described in this Policy to the following categories of recipients:

• hosting, database, and authentication providers.
• network, content-delivery, and security providers.
• email and customer-support providers.
• mobile push-notification providers.
• Sentry, operated by Functional Software, Inc., for crash reporting and app reliability. MarketMate crash reports are stored in Sentry's European Union region in Germany.
• Google Analytics for Firebase, operated by Google, for usage insights and, for the Android app only, for measuring our own advertising for the app. On iOS, usage insights are not shared for advertising. Google describes how it handles this information in How Google uses information from sites or apps that use our services.

Where a provider processes personal information for us, the applicable service agreement and data-protection terms limit its use to providing the contracted service, following our documented instructions, or complying with law. Those terms also require the provider to protect the information to the same or an equivalent standard as this Policy and applicable law.

We may also disclose information to courts, regulators, law-enforcement bodies, professional advisers, or other parties where required by law or reasonably necessary to protect rights and safety. If our business is reorganised, financed, sold, or transferred, information may be disclosed to the parties involved subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal information or permit our providers to use it for their own direct marketing.

5. International processing

Movent is based in Pakistan. We and our providers may process personal information in Pakistan and in other countries where they operate. Those countries may have different data-protection laws from your country.

Where European Economic Area or United Kingdom law requires a safeguard for an international transfer, we use a recognised mechanism, such as an adequacy decision or approved contractual clauses, together with any additional safeguards required for the transfer. You may contact us for information about the safeguard relevant to your information.

6. Retention and deletion

We keep personal information only for as long as needed for the purpose for which it was collected. In deciding how long to keep it, we consider the nature and sensitivity of the information, security risks, the time needed to provide the relevant feature or resolve a request, and applicable legal or claims requirements.

In particular:

• account information and a synced watchlist are kept while the account remains open.
• verification codes and incomplete sign-up records are deleted within 7 days after they are used or expire.
• session records, including the IP address and device description associated with a session, are deleted within 30 days after the session is revoked, replaced, or expires.
• notification tokens and preferences are kept while they are valid and needed to provide notifications. A token may become invalid earlier, but any token and preferences linked to the account are deleted when the account is permanently erased.
• support correspondence is kept while we handle the request. Support messages linked to an account are erased with the account unless a limited record must be kept for a legal, security, fraud-prevention, or claims purpose.
• crash and diagnostic reports stored by Sentry are retained for 90 days and then deleted through Sentry's retention process.
• usage insights held by our analytics provider are retained for no more than 14 months and then deleted through the provider's retention process. Aggregated statistics that cannot be linked to a device or a person may be kept longer.
• other operational records are kept for limited periods needed for security, fault resolution, and reliability, then deleted or de-identified.

You can request account deletion in the app under Account > Personal information > Delete account. If you cannot access the app, email privacy@marketmatehq.com from the address associated with your account.

Once a deletion request is confirmed or verified, we revoke active sessions, sign you out, and disable the account. The account then enters a 30-day recovery period. This same recovery period applies whether you delete the account in the app or we process a verified deletion request for you. During that period, you can cancel the deletion and restore the account by signing in again with the same email address and password. Restoring the account returns its username, watchlist, and other saved account information.

If you do not restore the account within 30 days, we permanently erase the account, its email address, watchlist, authentication credentials, support messages, and other account-linked personal information from active systems. Account-linked information held by providers processing it for us is included in the deletion process where applicable.

The username remains associated with the account during the 30-day recovery period. After permanent account erasure, it remains unavailable for a further 90 days to reduce impersonation and immediate reuse. It becomes available again 120 days after the deletion request was made.

Crash, diagnostic, usage-insights, and operational records that are not linked to the account cannot be located through the account and are not affected by account deletion. Sentry crash reports are retained for no more than 90 days, and other records remain subject to the limited retention practices described above.

Limited information may be retained for longer only where law requires it or where it is reasonably necessary for security, fraud prevention, dispute resolution, or legal claims. Information retained for one of these reasons is used only for that purpose and kept only for as long as the reason applies. Protected backup copies may remain until they are overwritten through the normal backup cycle and are not used for ordinary business purposes.

Uninstalling MarketMate does not delete an account.

7. Security

We use reasonable technical and organisational measures designed to protect personal information, including encryption in transit, secure credential handling, access controls, and measures intended to prevent unauthorised access. No electronic system can be guaranteed to be completely secure.

8. Your choices and rights

You can turn notifications off in your device settings and manage available notification preferences in MarketMate.

You can turn usage insights on or off at any time in the app under Account > Usage insights. Turning them off stops further collection on that device, and if you are signed in, your choice is saved to your account and applies wherever you sign in. On Android, you can also reset or delete the advertising identifier in your device settings.

Depending on the law that applies to you, you may have the right to access, correct, or delete your personal information, receive it in a portable form, and restrict certain processing.

Right to object. Where we rely on legitimate interests, you may object to that processing. We will stop unless we have compelling legitimate grounds to continue or the processing is needed for legal claims.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that occurred before it. You may also complain to the data-protection authority in the country where you live or work, or where you believe a violation occurred. In the United Kingdom, this is the Information Commissioner's Office.

To exercise a right or raise a concern, email privacy@marketmatehq.com. We may ask for information reasonably needed to verify your identity and protect the account.

9. Age requirement

MarketMate is intended for people aged 16 and over.

10. Changes to this policy

We may update this Policy when our practices, the Service, or legal requirements change. We will revise the date above and provide additional notice where required.

11. Contact us

Movent (Private) Limited FN-40, Wahdat Colony, Wahdat Road Lahore, Punjab 54000, Pakistan

Privacy: privacy@marketmatehq.com

Support: support@marketmatehq.com

Website: marketmatehq.com