Privacy notice · October 28, 2026
Your information.
Who we are
Operator: First Move Club (Calgary, Alberta)
Address: available from the privacy officer on request
Privacy officer: Club host — info@firstmoveclub.com
Reports and concerns: info@firstmoveclub.com
We handle personal information under Alberta’s Personal Information Protection Act. Questions, access requests and corrections go to the privacy officer. We use service providers outside Canada. We have a written policy on service providers outside Canada; email info@firstmoveclub.com to receive it, and the privacy officer answers questions about it (see “Service providers outside Canada” below).
What we collect and why
First Move Club collects your first name, email, age, city, gender, dating preferences, activities and a photo of your face to review your request and plan suitable groups (see “Your photo”). Dating preferences may reveal sensitive information. Your private second step adds age preferences, relationship intent, availability, travel comfort, activity experience, a description of your routine and a screenshot of your recent activity, which you can also share on the request form itself. You can also choose to give links to public fitness profiles, a club or gym, or a recent event; these are optional (see “Activity verification”). We record your consent, review status, member number, invitations, registrations, waitlist positions, payment, attendance and cancellations. Applying does not subscribe you to marketing. Once you are approved, we email you when registration opens for a night in your city and, if you have no place on it, remind you two days before registration closes. These come with membership; to stop them, turn them off on your profile, which takes effect at once, or reply to one or email info@firstmoveclub.com, and we stop them within ten business days.
If you apply from a city where events have not been announced yet, we collect only that short introduction and your photo. Until nights start in your city, the photo is used only for a host’s review of your request: nobody else sees it, because there is no door to check and no one to pick. We won’t ask for preferences or activity screenshots until events are announced in your city.
Who processes it
Authorized First Move Club hosts review requests. Netlify hosts this website, Google Firebase stores application records and authenticates hosts and members, Resend delivers application and event emails, Stripe processes card payments made through a night’s Stripe payment link, Google Analytics counts visits to the public pages (see “Website analytics”), and email you send to our firstmoveclub.com addresses is forwarded by ImprovMX to the hosts’ Gmail inboxes. Our primary application database is in Montreal, Canada. Member sign-in records, analytics, other processing, email delivery and the email we receive, logs and service backups may occur outside Canada, including in the United States. Access is limited to the operation of the club.
Service providers outside Canada
Our policy is to use a service provider outside Canada only for a service the club needs, to give it only the personal information its job needs, and to keep access to the club’s accounts with each provider limited to the people who run the club. These are the providers: Netlify (United States) serves the website and runs its scheduled jobs; Google Firebase keeps application records, photos and activity screenshots in Montreal, Canada, but its sign-in service, backups and support may process data in the United States; Resend (United States) sends our emails and keeps delivery records for them; Stripe (United States) processes card payments made through a night’s Stripe payment link and keeps its own records of them; Google Analytics (United States) receives the visit data described under “Website analytics”, and only with your consent; ImprovMX forwards email sent to our firstmoveclub.com addresses, and Google’s Gmail (United States) holds the hosts’ inboxes where that email and our host alerts are read. Our own connections to each of them are encrypted, and each handles the information under its own published terms and privacy commitments. While information is outside Canada, courts and authorities there may be able to obtain it under that country’s laws. We review this list when we add a service or a provider changes its terms, and we update this notice before a new provider handles personal information. The privacy officer answers questions about the collection, use, disclosure or storage of personal information by these providers; email info@firstmoveclub.com, which is also where to ask for the written policy.
Private access and member accounts
Before approval, each emailed sign-in link works once and grants access to your application; do not forward it. If your application is approved, we create a member account for you and assign a sequential member number, shown on your dashboard and kept with your participation records; it is an identifier and nothing more. You choose your password through a one-time link that works for 7 days; a password-reset link works for 24 hours, and a one-time sign-in link you ask for from the login page works for 7 days. Firebase Authentication, a Google service, stores your email address and a one-way hash of your password. We never see, store or send your password, and no host can read it. We record when you set your password and when you last signed in, and we keep the Firebase account identifier with your application so the two can be matched and removed together. Deleting your account asks for your password once one is set, so that nobody with a stray sign-in link can delete it for you.
Essential, HttpOnly cookies keep you signed in for up to 14 days; changing your password signs out your other devices. Beside them, one more essential cookie holds only the figure 1 for the same time, so the menu can show your Dashboard and Profile links; it identifies nobody. Hosts use a separate restricted session. Analytics never runs on your private pages (your application, the dashboard, account set-up, emailed sign-in links or the host workspace).
When you accept a new version of the Terms, we keep the version and date you accepted before it with your application as a consent history, and copy that history into your participation records, so we can always show which version applied on a given night.
Introductions
After an event, each checked-in attendee sees the first names, photos and a reference (their rotation number for the evening, or their badge number) of the attendees they could be introduced to, based on the genders each of you said you would like to meet as it stood when you checked in (we keep a copy of that answer with the registration, so changing it later can’t be used to learn anyone else’s), until picks close 48 hours after the night ends. We do not publish a member directory or full profiles. You may pick up to two people, or no one, and your picks are private; you can remove a pick until picks close. When picks close, we compare them: only where two people picked each other do we email each of them the other’s first name and email address, both at the same time. Nobody is told who else picked them, or that anyone did, and someone who picked without a match gets one email saying there was no match this time. Matches stay on your dashboard for 30 days. We cannot recall contact details once a match has been emailed. “Hide me from this person” on the roster stores a private marker for that night that removes each of you from the other’s list and withdraws any pick between you; neither of you is told, and the marker is deleted with your application.
Your photo
Every request includes a clear, recent photo of your face. We use it for three things: so a host can see who is asking to join while reviewing your request; so the host can match you to your request at the door (the night’s check-in screen shows it beside your first name); and, after a night you attended, so the people from that same night who could be introduced to you can recognise you while picking.
Who sees it: authorized hosts; you; and the attendees of a night you attended who appear on each other’s picks list (the same people whose first names you see on yours, under “Introductions”). They see it beside your first name while picks are open, and it stays available to them until matches stop showing, 30 days after picks close; a mutual match also sees it on their matches card. Nobody else sees it: not other members, not people from other nights, and never the public. It has no public address. The website shows it only to someone signed in who is allowed to see it at that moment, and it is never attached to an email.
When you upload it, we make a new copy no larger than 1080 pixels on a side and keep only that: its location (GPS), camera details and other metadata are removed, and the file you chose is not kept. It is stored in the same private Firebase Cloud Storage bucket in Montreal, Canada as activity screenshots, but it is not deleted after seven days: it is kept until your application is deleted (see “Retention and deletion”). You can replace or delete it at any time from your private application or your profile page, and deleting your application deletes it. We never use it for automated face recognition or advertising.
Activity verification
On the request form, or after confirming your email, you share one screenshot of your recent activity (up to three if you like) for private review by authorized hosts. Show activity types and dates only; remove routes, addresses, health measurements, medical information and payment details. File selection and cropping happen on your device; we receive only the preview you explicitly choose to share. We re-encode images to remove original file metadata. We do not request fitness passwords, account connections or full health exports. You may arrange an alternative minimal participation check with a host instead. Activity verification is not an identity check, background check or safety guarantee.
You may also give the address of a public fitness profile (for example Strava, Garmin Connect, Apple Fitness, Nike Run Club or Peloton), the name of a club or gym you train with, and a recent race, league or class streak. These are optional. Hosts look only at what the page shows to anyone; we do not connect to your accounts, hold any token or ask for a login. Before linking a profile, check its own privacy settings so it does not reveal your home address or regular routes; a privacy zone around your home is a good idea. The links and names are stored with your application, shown only to authorized hosts, and you can change or remove them at any time from your private application.
Screenshots are stored in a private Firebase Cloud Storage bucket in Montreal, Canada. Only you and authorized hosts can access them through the application. Access ends seven days after each upload. Automatic deletion follows; background processing may take longer. This dedicated bucket has soft delete and object versioning disabled. You can delete screenshots earlier from your private application, and deleting your application also removes its screenshots. Hosts must not download, copy or forward them. Your consent, review method and review result stay with your application until its deletion; screenshots are never shown to other members or attached to emails.
Host notes and review decisions
Hosts may add short, dated notes to your application while reviewing it or following something up, and when an application is placed on the waiting list they record which of a fixed set of private reasons applied (for example the current age range, or that rooms are full this cycle). Notes and reasons are visible only to hosts, are never shown to you in the app, in email or to other members, and are deleted with your application. You can ask the privacy officer for access to them.
Nights, waitlists and cancellations
When you register for a night we record the night, the pool you were placed in (women or men, from the gender you gave, or the pool you chose if neither answer fits you, so rooms stay balanced), when your place must be paid for by, your waitlist position if the night is full, who registered or cancelled it (you or a host), when you told us you had paid, and when you paid, attended, cancelled or did not show up. We use this to run the night, to offer open places to the waitlist in order, and to email you about your place. When you pay by Interac e-Transfer, our bank shows the club your name, the amount and the message you attach (your FMC reference); we record only that payment was received and when. When you pay by card through a night’s Stripe payment link, Stripe collects your card details and we never see them: we give Stripe your email address, to fill in its checkout form, and a reference for your place, and we record Stripe’s reference for the payment, the amount, the currency and when it was paid. Refunds are recorded with the amount, the date and the host who sent them.
Cancelling a paid place inside 48 hours of the start, or not showing up, is recorded as a strike against your application, with the night, the kind of strike, the date, the date it expires (365 days after the night) and the date your registration is paused until (30 days). If a host waives a strike, we keep the record with who waived it, when and why, and it no longer counts. If your place is refilled and paid before the night, we record that the fee became refundable less the CAD $10 administration fee. The count of unexpired strikes is shown to you on your dashboard and to hosts. If you reach 3 unexpired strikes, your account is blocked and we add the hashed denylist entry described under “Retention and deletion”, with the reason “three late cancellations or no-shows”. A dispute sent to info@firstmoveclub.com within 7 days is kept with the host notes on your application; the founder reads it and replies in writing (once the club has a co-host, someone other than the host of that night reads it). The Terms set out the policy.
Referrals
Approved members receive a six-character referral code and link. When someone applies with it, we store on their application who referred them: the member’s internal reference, first name and code, and we promise them a review within 24 hours. The member who vouched for you sees your first name and whether you’ve been approved or are on the waiting list (or are still in review), is emailed when you are approved, and hosts see that you were referred and by whom. Members can vouch for up to 3 people in a rolling 90-day window, and we count referred applications to apply that limit. A code that is not a current member’s is stored only as the text you typed. Your referral code is deleted with your application; the note that another applicant was referred by you stays with their application until it is deleted.
At the door
At each night a host glances at your government photo ID to confirm your first name and age. Nothing is copied or photographed; we record only that you checked in. If the ID does not match your application, the host records that the place was forfeited for that reason. The host asks whether you are happy to appear in photographs that evening and records your answer (yes or no), the time and which host asked, with your attendance; you can change it during the night. That answer covers taking photographs only. Before we publish any image in which you are recognisable, on the website, on social media or anywhere else, we ask you separately for that specific image and use, and record that consent too; you can withdraw it for future use by emailing info@firstmoveclub.com. The host’s check-in screen and paper sheet list first names, badge numbers, rotation numbers, arrival and the photo answer, and the check-in screen also shows the photo you gave us (see “Your photo”); the paper sheet is shredded once attendance has been recorded.
Reports, concerns and feedback
“Report a concern” on your dashboard, after a night, asks what happened in your own words, lets you name the person by their roster reference and whether you want to be contacted. Optional post-event feedback asks how comfortable you felt and whether a date happened. A report, or feedback that tells us you were uncomfortable or asks for contact, triggers an alert email to the host and to info@firstmoveclub.com; the alert carries your reference, first name, the reference you named, your comfort answer and your contact wish, never your written details, which hosts read only in the host workspace. A person acknowledges it within 24 hours. A concern about a host goes to info@firstmoveclub.com; the founder reads it and replies in writing (once the club has a co-host, someone other than that host reads it). Nonresponses to feedback are not treated as failures. Feedback that raises no concern is deleted with your application; a report, or feedback that raises a concern, is kept with the participation record for the same two years, because it may be needed if a claim is made or a pattern repeats.
Retention and deletion
Application records and related profiles, photos, sessions, registrations, introduction picks, hidden markers, host notes, referral codes and feedback are deleted automatically 90 days after your last activity with us, such as applying, confirming your email, saving your preferences, being kept on the waiting list after a review, or being invited to, paying for or attending a night. If you never confirm your email, that is 90 days after you apply. Because membership is ongoing, an approved member’s records are instead kept for 365 days after their last sign-in, registration or night, so that an account and referral code do not vanish between seasons. A strike or a block extends retention of the application to 365 days after it, so that the strike can be counted until it expires and the block honoured. When an application is deleted we also remove the matching Firebase Authentication account. You can request immediate removal through your private application or your dashboard. An email already being processed may complete before removal finishes.
When you pay for or attend a night, we keep a separate participation record: your first name and email, the night, your member number, the version of the Terms you accepted and when (with any earlier versions you accepted), your rotation number, your photo answer for the evening, and when you paid and attended. It is kept for two years after the event, including after your application is deleted, so we can show which terms applied if a claim is made. Reports and feedback that raise a concern are kept with it for the same period.
If we remove a member for a conduct or safety reason, or their membership ends after 3 strikes, we keep a one-way hash of their email address, not the address itself, with the reason and a short host note, for two years. New requests are checked against it so the same address cannot simply apply again. A waived third strike removes the entry.
Sent email content is cleared from the website delivery queue after sending. Deleted records may remain in database backups for up to seven days. Provider delivery records and emails already received follow their own retention schedules. Hosts delete inbox copies and any separately held records on the same schedule. Payment records held by a payment provider or bank are handled under their terms.
Website analytics
We use Google Analytics 4 (measurement ID G-5NKSM6KYSE) on the public pages to count visits and see which pages help people decide to apply. It sets cookies and records your visit only if you choose “OK” on the banner the first time you visit. Until then, and if you choose “No thanks”, Google Analytics sets no cookie and stores no identifier about you; at most it receives cookieless pings that record that a page was viewed without consent and cannot be linked to you.
With your consent, Google Analytics sets first-party cookies holding a random identifier and records the pages you view, the site that referred you, your browser and device type and your approximate location worked out from your IP address. Google Analytics 4 does not log or store IP addresses. We send it no names, email addresses, application answers or anything else you type, and we have not turned on advertising features, Google Signals or any audience sharing. Google processes this data for us under its data processing terms, on servers that may be in the United States, and we keep event-level data for two months. Your choice is saved in your browser under the key fmc_consent.
To withdraw consent, use the button below: it removes your saved choice and the analytics cookies and shows the banner again, where you can choose “No thanks”. You can also clear this site’s data in your browser, or install Google’s Analytics opt-out add-on. Declining never changes what the site does for you.
Measurement and service protection
Separately from Google Analytics, we count aggregate application starts, validation errors, saved applications and submission errors by city and campaign. Counts are not unique people and contain no application answers or email addresses. We store only a campaign identifier in session storage to preserve attribution during your visit. Short-lived hashed rate-limit identifiers, including a hash of the email address on login attempts, protect the service from abuse; hosting providers may maintain their own security logs. Our own server logs record events by type with the last four characters of a reference, never names or email addresses. Aggregate counters are removed after 90 days.
If something goes wrong
If personal information is lost or accessed without authorization, we will contain the incident, assess the risk of harm, and notify the people affected and Alberta’s Office of the Information and Privacy Commissioner where the law requires it.
Your choices
Use your private application or, once approved, your dashboard and profile page to update your preferences, activities, age, pool choice and profile links, replace or delete your photo, cancel a registration, remove a pick before picks close, hide yourself from someone, report a concern or delete your records. For corrections to your first-step details, access requests or privacy questions, email info@firstmoveclub.com and include your application reference; for conduct reports and strike disputes, email info@firstmoveclub.com. Withdrawing application consent means we cannot continue arranging introductions for you. If you are not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner of Alberta.
Event photography and any publication of an image require the separate consents described under “At the door”; you can say no and still take part. The website’s generated images are illustrations, not photos of past First Move Club events.