Last updated: 24 October 2026
MoveIQ is operated by Mono IQ AB, Swedish company registration number 559589-8338 (“we”, “us”, “the service”). We process personal data under the EU General Data Protection Regulation (GDPR) and applicable Swedish law. This policy covers the MoveIQ web app, installable web app, mobile apps and related web forms.
Android app: Read the separate privacy policy for MoveIQ's Android app for details about location sharing, app permissions, push notifications and field-app data.
iOS app: Read the separate privacy policy for MoveIQ's iOS app for details about location sharing, app permissions, push notifications and field-app data.
The moving company using MoveIQ is normally the data controller for its customers', contact persons' and employees' data. MoveIQ processes that data as a data processor on the company's instructions. Contact the moving company shown in your booking with questions about a specific processing activity.
MoveIQ is a controller for data needed to manage customer relationships, register companies, send service messages and operate the platform. The data processing agreement governs processing for each connected company.
Contract (Art. 6(1)(b)): to create accounts, manage bookings and offers, plan staff and vehicles, communicate about jobs, send invoices and provide support.
Legal obligation (Art. 6(1)(c)): for accounting, invoice records and any RUT handling required by law.
Legitimate interests (Art. 6(1)(f)): for security, troubleshooting, access control, abuse prevention, operations, backups and service improvement. We balance these interests against people's privacy.
Consent (Art. 6(1)(a)): where required, for example for non-essential cookies or browser push notifications. Consent can be withdrawn without affecting earlier processing.
Limited visit statistics: we use limited server-side counts to understand page use and improve service operation, based on legitimate interests (Art. 6(1)(f)). Page categories replace personal links and record IDs; time is rounded to the hour. We do not count unique visitors, build individual profiles or use these statistics for advertising. Signed-in visits may include company ID for a company usage overview, but not an individual user ID. Do Not Track (DNT: 1) and Global Privacy Control (Sec-GPC: 1) browser signals prevent recording. You can object by emailing support@moveiq.se.
The Android and iOS field apps can send push notifications when users enable the feature. The app asks for notification permission after sign-in. A push subscription contains the device's technical push token and installation ID and is linked to the user's company account. Notifications are used for jobs and messages. Permission can be turned off in the app or phone settings.
On Android, MoveIQ asks for location permission after sign-in, and only when the company's setting includes the user's role. Before the operating system permission prompt, the app explains that the current location is shared with company dispatchers and, for active assigned jobs, the customer. Users can turn sharing on or off in app settings. The company administrator chooses which roles are included. Android shows an ongoing notification while sharing is active. The app sends a position about every 30 seconds while Android's location service is active. Updates received when no active assigned job exists are discarded without saving coordinates. Revoking permission or turning sharing off clears the stored position.
If the moving company enables the Customer Portal add-on, a personal link is sent to the booking email address when the job becomes active. The portal shows the customer's name, booking number, planned time, pickup and delivery addresses, and current status to provide information about the agreed job. The moving company is responsible for the accuracy of the email address. The link grants access without sign-in and should not be shared with unauthorized people.
When the company has an active GPS package, the customer portal can show current GPS positions for vehicles linked to the customer's booking. If the company's GPS setting includes drivers or workers, the portal can also show staff assigned to that booking when they have granted location permission and enabled sharing. Real positions appear only while the job has In progress status. Vehicle positions must be no more than 15 minutes old and staff positions no more than three minutes old; they must also have been recorded after the customer portal link was sent. A vehicle without a current GPS position temporarily receives a clearly labelled simulated demo position in Stockholm; it does not show the location of the vehicle or driver. The live map is available when either the GPS package or the company's staff GPS tracking setting is enabled. If both are off, no live map is shown. Turning off the GPS package removes vehicle positions but does not itself turn off staff location sharing. The moving company is responsible for informing affected staff about real location sharing. OpenStreetMap is the default map provider and receives the visitor's IP address and requested map areas; the personal customer portal link is not sent as a referrer.
If the company enables the Enhanced Livemap add-on, Google Maps is used in the company's Live map and customer portal. Google receives the visitor's IP address and technical data needed to display the map. For jobs in progress, MoveIQ may also send pickup and delivery addresses to the Google Routes API to calculate the driving route. Customer names, booking numbers and the personal customer portal link are not sent in the route request. The route is used only in the current map view and is not stored by MoveIQ. Google's current Google Maps Platform terms apply.
MoveIQ uses necessary cookies for sign-in (up to 12 hours, with a 30-minute inactivity timeout), language and theme (one year), and acceptance of the terms of service (five years or until the terms change). These cookies are needed for the service requested and are not used for advertising.
For landing-page cookies, language, appearance and motion preferences, and support-chat browser storage, see Cookies & local storage.
The landing, sign-in and registration pages choose light or dark based on the system setting when opened without a saved preference, using dark as a fallback. An explicit light or dark choice is saved in local storage (moveiq-public-theme) until changed or site data is cleared. This is separate from themes in the signed-in app.
The installable web app uses browser cache and a service worker for installation and push notifications. Push notifications are enabled only after the user grants permission in the browser. A push subscription contains technical subscription keys and an endpoint address and is linked to the user in the company's account. Notification text is limited to saying that a job or booking needs attention; customer names and addresses appear only after authentication in the app.
Fonts and map libraries are served from MoveIQ's own server. When a user chooses to open an external map or navigation link, that map provider processes data under its own terms.
Drawn signatures: Customers can review and sign the booking agreement at the start of a job and provide a separate completion acknowledgement at no charge. They can sign using a personal email link with a one-time code valid for ten minutes, or on an assigned staff member's device. An email code proves access to the email address, not verified identity. Staff-assisted signing is expressly recorded without electronic identity verification. MoveIQ stores the signature, stated name, comments, exact declaration, immutable document copies and hashes, time, method, the person who opened the signing flow on a staff device, IP address and browser details as contract evidence. Drawing speed and pressure are not stored. Earlier signatures are never overwritten. A completion acknowledgement does not waive complaint rights or approve extra charges. Links last up to seven days; relevant booking changes, cancellation or switching to BankID block unsigned links. Completion signing remains available after the job is complete. The customer receives a link to their copy. An essential secure browser cookie binds staff-device signing to the signed-in initiator for up to seven days. Signature evidence follows booking retention and approved erasure; expired requests are removed after a further seven days.
Digital signing: This feature is currently disabled and marked Coming soon. When released and enabled by the moving company, Mobile BankID will fully replace drawn signatures for new signings. Earlier signed documents remain as history. MoveIQ connects directly to BankID. BankID receives an offer summary, reference and hashes that bind the signing to the saved offer and agreement documents. Full PDF documents remain in MoveIQ. If the offer contains a full personal identity number, the people permitted to sign are restricted. BankID processes identity and technical data, including IP address, for the signing. MoveIQ stores the verified signer identity, document copies, exact signing details, timestamps, digital signature and certificate status as contract evidence. Bookings created directly may give the customer a signing link valid for seven days. Changes to agreement details, completion or cancellation of the booking, or disabling the add-on invalidate the link. Signing confirms the existing booking. Approval through the existing offer link remains available.
Job pool add-on: When a moving company posts a job to the job pool, other companies in the same county see only the date, area, size, services and price—not the customer's name, contact details or exact addresses. When another company takes the job, the customer's details for that job are transferred to that company, which becomes the customer's contractor and controller for the job. The company posting the job is responsible for informing the customer and obtaining their agreement to the transfer; MoveIQ records the confirmation. Offers: If a company lets a customer choose between offers, MoveIQ emails the customer (using the name and email address from the booking) to ask whether they want offers. Until the customer agrees, no other company learns the job exists. Even afterwards, other companies do not see the customer's name, contact details or exact addresses. Companies give binding hourly and per-cubic-metre prices if selected by the customer, and an estimated total price. Customer details are given only to the company the customer chooses and that confirms the job. If the customer does not reply or selects no company, no details are shared.
We disclose data only when needed for a stated purpose, required by law or instructed by the company. The current complete list of sub-processors, with locations and safeguards, is at moveiq.se/underbitraden. Moving companies are notified at least 30 days before a sub-processor is added or replaced. Depending on enabled features, these providers may receive data:
Before personal data is transferred to a provider outside the EU/EEA, an appropriate transfer mechanism, such as standard contractual clauses and supplementary safeguards, must be in place.
Registration requests. When a company applies for an account, we retain the application details (company, contact person, email, phone and invoicing details) together with the IP address and time to review the request and prevent abuse, based on legitimate interests. Declined requests are deleted after 30 days. A blocked IP address is kept for as long as the block applies.
Website chat. When you use the chat on moveiq.se, we store your name, email address, messages, IP address and time to respond and prevent abuse, based on legitimate interests. Conversations are deleted after 90 days. A blocked IP address is kept for as long as the block applies.
The moving company normally sets the retention period for customer data. The service's default is 36 months after a completed booking. After that, names, email addresses, phone numbers, personal identity numbers, pickup and delivery addresses and free-text notes are automatically anonymized when no longer retention is required.
Accounting records are kept for as long as accounting rules require. The statutory period is calculated from the relevant financial year and is not a single general 84-month period for all data.
Suspicious sign-in patterns and temporary lockouts may trigger security alerts to active SUPER administrators by email and registered push devices. Alerts contain limited event information; account and IP details are available after sign-in. Queue and delivery metadata for these alerts is deleted after 30 days.
Chat messages and attachments are automatically deleted after 30 days. Limited visit statistics (page category, hour, bot classification and company ID when signed in) are retained for 30 days and automatically purged hourly. Raw IP addresses, full browser strings and individual user IDs are not stored in these statistics. Expired records may remain until the next cleanup run. Security and sign-in logs are handled separately. Sign-in logs (email, IP address and result) are deleted after 180 days; the support-access log is deleted after 24 months. Session data, push subscriptions, other files and backups have separate technical lifecycles under the documented operations retention plan.
Signing attempts last up to three minutes and never beyond the offer link's validity. Incomplete and test document copies are deleted after seven days. Completed signature evidence follows the company's retention period for booking data and is also deleted after an approved manual erasure. Any data that must be preserved for legal reasons requires a documented retention basis and operational process. BankID does not store the content of the digital signature; MoveIQ stores the contract evidence. BankID's own technical logs are subject to its terms. The customer's download link expires with the offer link and requires the same browser used for signing. An essential secure browser cookie that binds signing to the correct browser lasts up to one day. Signing pages are not stored in browser cache, and personal links are excluded from visit analytics.
Customer portal links expire when the job is completed or cancelled and last no more than 45 days from the job start. They also stop working when customer data is anonymized, the company account is disabled or the Customer Portal add-on is turned off. If both the GPS package and the company's staff GPS tracking setting are off, no live map is shown. Turning off the GPS package removes vehicle positions; staff location sharing is controlled separately by the company's GPS setting and each person's consent. Expiration of a link does not itself delete the booking; booking data follows the retention periods above. Customer portal pages do not allow browser caching, and the personal link is excluded from MoveIQ's visit analytics.
Send your request to the moving company responsible for your booking. The company must verify your identity and normally responds without undue delay, no later than one month. Data that must be retained by law cannot be deleted immediately; other data should be removed when there is no longer a legal basis.
MoveIQ may show assigned jobs, workload, estimated job difficulty, points, awards and work-related statistics for each driver or worker. The moving company determines the purpose and is responsible for ensuring that monitoring is necessary, proportionate and known to employees. Data must not be reused for incompatible purposes or used for automated decisions with significant effects.
Administrators and dispatchers can see this information for staffing, planning and operational follow-up. Drivers and workers can access only their own profiles and jobs assigned to them. If location tracking is enabled, the employer must provide specific information in advance and document its assessment of legal basis, proportionality and whether a data protection impact assessment is needed.
The web app uses HTTPS, HttpOnly session cookies, server-stored sessions, role- and job-based access, BCrypt password hashes, tenant separation, time-limited links, upload limits, file-type checks, security headers, abuse prevention and audit logs. Access to customer data is limited to what each user needs for their work.
When needed for support, troubleshooting and quality assurance, MoveIQ platform staff may open a connected company's account in a dedicated review mode. Access is read-only—no changes can be saved—and customer data such as names, phone numbers, emails, personal identity numbers, addresses and notes is masked with clear placeholder text. Other booking, pricing and scheduling information may remain visible so the issue can be investigated. This access uses a separate account that is not visible to the company's own users.
No internet-connected service is completely risk-free. If a personal data breach occurs, MoveIQ contacts the responsible moving company without undue delay. The company decides whether the breach must be documented, reported to the Swedish Authority for Privacy Protection (IMY) within 72 hours or communicated to affected people.
The data processing agreement is part of the license and user agreement and is accepted when a moving company accepts the license terms.
The agreement describes the processing, its duration, categories of data and data subjects, instructions, security measures, sub-processors, incident handling, assistance with data-subject rights, and return or deletion when the agreement ends.
Questions about a moving contract, price, cancellation rights, the RUT deduction or complaints should be directed to the moving company selling the service. The answer may depend on whether you are a consumer or a business and on how the service was ordered.
If you believe your personal data is being processed unlawfully, you can first contact the responsible moving company. You may also complain to the Swedish Authority for Privacy Protection (IMY): www.imy.se.
Contact the moving company that handled your booking with questions about your data. You can also submit a request to delete your data. For questions about the MoveIQ platform, email support@moveiq.se. We update the date above when this policy changes and publish a new version when a change is material.