ORVYN
Privacy Notice.

ORVYN is operated by MOVA FINANCIAL TECHNOLOGY LTD, a company registered in England and Wales under company number 17222969, with its registered office at Suite 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE.

In this Privacy Notice, “MOVA”, “we”, “us” and “our” refer to MOVA FINANCIAL TECHNOLOGY LTD. “ORVYN” refers to the ORVYN music player app, website and related support services.

This notice explains what personal information we handle, why we handle it, and what choices and rights you have.

1. ORVYN’s privacy model

ORVYN is designed as a local-first music player for music that you already own.

Your music files, artwork, library metadata, playlists, favourites, ratings, listening history, settings and local caches are processed and stored on your device or in locations that you choose, such as Files, iCloud Drive or a network music source.

ORVYN does not require an ORVYN account and does not upload your music, artwork, library catalogue or listening history to a MOVA server.

2. Information processed by ORVYN

Depending on how you use the app, ORVYN may process the following information locally on your device:

• music file names, folder paths and source details;
• track, album, artist and other embedded metadata;
• embedded or locally stored artwork;
• playlists, favourites, ratings and playback history;
• app settings, downloads and temporary audio or artwork caches;
• network-source usernames and connection details;
• credentials needed to access a network source, stored in the device Keychain.

This information is used to provide the app’s library, browsing, playback, playlist, download and rediscovery features. It is not transmitted to MOVA as part of normal ORVYN use.

You remain responsible for the music files and sources that you select and for having the necessary rights and permissions to access them.

3. Information you choose to send to us

If you contact us, we may receive:

• your name or email address;
• the contents of your message;
• attachments or screenshots that you choose to send;
• diagnostics or other information that you voluntarily include.

ORVYN’s diagnostics feature is designed to redact passwords, tokens and private file paths before copying a report. You should still review any report before sending it to us.

We use this information to respond to support requests, investigate problems, improve ORVYN and protect our legal rights.

4. Apple App Store purchases

ORVYN Pro is offered as a one-time in-app purchase through Apple’s App Store.

Apple processes payment details and handles App Store billing. MOVA does not receive or store your payment-card number or security code.

ORVYN may process local transaction and entitlement information supplied by Apple so that it can unlock ORVYN Pro and restore your purchase on supported devices.

Apple’s own terms and privacy policy also apply to App Store transactions.

5. Website information

When you visit an ORVYN or MOVA website, our hosting and email providers may process basic technical information such as IP address, browser type, device information, requested pages and security logs.

We use this information to operate, secure and maintain the website. We do not use ORVYN library data for advertising or behavioural profiling.

If we introduce non-essential analytics, advertising cookies or similar technologies, we will update this notice and provide any legally required choices before using them.

6. How we use information

We may use personal information to:

• provide and support ORVYN;
• respond to questions and support requests;
• process and verify App Store entitlements;
• maintain website and service security;
• prevent fraud, misuse or attacks;
• comply with legal obligations;
• establish, exercise or defend legal claims;
• improve ORVYN when you voluntarily provide feedback or support information.

We do not sell personal information. We do not use your music library, artwork or listening history to create advertising profiles.

7. Legal bases

Where UK data protection law applies, we rely on the following legal bases:

• Contract: to provide ORVYN features and respond to support requests.
• Legitimate interests: to maintain, secure and improve our services, respond to enquiries and protect our business.
• Legal obligation: where processing is necessary for tax, accounting, legal or regulatory requirements.
• Consent: where consent is required, such as for certain optional marketing communications or non-essential website technologies.

You may withdraw consent at any time where we rely on consent.

8. Who we share information with

We may share limited information with:

• Apple, for App Store purchases and entitlement services;
• website, hosting and email providers that help us operate our services;
• professional advisers, insurers or auditors where reasonably necessary;
• law-enforcement or regulatory authorities where legally required;
• a successor or buyer of all or part of our business, subject to applicable law.

We do not provide your music files, artwork, library catalogue or listening history to advertising networks, data brokers or recommendation services.

9. International transfers

Some service providers may process information outside the United Kingdom. Where this happens, we will use a lawful transfer mechanism and appropriate safeguards required by applicable data protection law.

10. How long we keep information

Local ORVYN information remains on your device until you delete it, remove the app, clear it using the app’s controls or otherwise remove the relevant source or files.

We retain support correspondence and voluntarily supplied diagnostics for as long as reasonably necessary to respond to your request, investigate issues, improve our services and meet legal obligations.

Transaction, accounting and legal records may be retained for the period required by law.

Website security and technical logs are retained according to the policies of the relevant hosting provider and our operational requirements.

11. Security

We use reasonable technical and organisational measures to protect information we control.

ORVYN stores network credentials using the device Keychain and is designed to keep library information on the device. However, no device, software or internet transmission can be guaranteed to be completely secure.

You are responsible for securing your devices, network sources, backups and accounts used with third-party services.

12. Your rights

Depending on the circumstances and applicable law, you may have rights to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion;
• request restriction of processing;
• object to certain processing;
• request data portability;
• withdraw consent where processing relies on consent;
• complain to a supervisory authority.

Much of ORVYN’s library information never reaches MOVA and remains under your control on your device. We cannot provide access to information that we do not receive or hold.

To exercise your rights, contact:

dataprotection@getmova.co.uk

We may need to verify your identity before responding. We will respond within the period required by applicable law.

You may also complain to the UK Information Commissioner’s Office.

13. Third-party services

ORVYN may work with Apple system services, Files, iCloud Drive, AirPlay and user-selected network sources. Those services are operated by third parties and may have their own terms and privacy notices.

ORVYN does not control the privacy practices, availability or security of third-party services.

14. Changes to this notice

We may update this Privacy Notice when ORVYN, our services or applicable law changes.

The latest version will be published at getmova.co.uk/orvyn/privacy with the updated date shown at the top.

15. Contact

If you have questions about this Privacy Notice or ORVYN’s handling of information, contact:

MOVA FINANCIAL TECHNOLOGY LTD
Email: dataprotection@getmova.co.uk
Company number: 17222969
Registered office: Suite 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE