Privacy Policy

Your body scans are processed on your phone. Your face is removed and your skin is recolored on the device, and the original photo is never saved or uploaded. Scans, measurements, weight and workouts stay on your phone unless you choose to send them to a coach, or train with friends in a group (see below). We don’t sell your data, show ads, or use tracking or analytics tools; if the app crashes, it sends a crash report so we can fix it. You can delete your account and your data from the app at any time.

The de-identified body images from your scans, your body measurements, weight, training plan and workout history are stored on your device, encrypted with a key kept in your phone’s secure storage. We can’t see them. They are removed when you delete your account in the app, or when you delete the app.

Your account. When you sign in with Apple, Google or email we receive your name, email address and an account ID, and we store a profile with your language and sign-in method.

When you ask a coach for a plan. Only if you send a request, we store and share with that coach: the name you choose to show them, your goal and note, your body outline and proportions, height, weight and measurements, the training details you enter (experience, equipment, schedule, injuries), and, if you attach them, your de-identified front and back body images. The coach’s plan is stored with the request.

When you share progress with your coach. If you tap Share progress, or turn on automatic sharing for a coach plan, we send that coach your number of sessions, your weight trend, your exercise logs and up to two of your latest de-identified body images. Automatic sharing is off until you turn it on.

When you train with friends. If you start or join a group, we store the group’s name and invite code, the plan and workouts shared with it, the sessions planned in it (time and workout) and, for each member, the name they chose to show the group and their answer to each session (going, not sure, can’t come, at the gym, training or finished) with how many sets they have done. Only the people in that group can see it.

Notifications. If you allow notifications, we store your device’s notification token and your language on your profile, so we can send you group messages (for example, when a friend gets to the gym, starts the workout or nudges you). Session reminders are scheduled on your phone.

Courses and community. Your course watch progress, your workout streak, the comments and reviews you post (shown publicly with your display name), the people you block, and the reports you file.

Website. If you join our waitlist, your email address and language.

Crash reports. If the app crashes or hits an error, it sends a report with the error, app version, device model and operating system to Firebase Crashlytics. Crash reports are not linked to your account and don’t include your photos, scans, body data or messages.

Technical data. Our hosting and database providers process standard technical data such as IP address and device type to run and secure the service.

Body images, measurements, weight and injuries can reveal information about your health. We only receive them when you choose to send them to a coach or share progress, and we use them only to provide that coaching. Where the law requires it (for example in the EEA and UK), your choice to send them is your explicit consent, which you can withdraw at any time by deleting the request or your account.

To run the service: sign you in, deliver your requests to the coach you picked and their plans back to you, run your training groups and their notifications, show course content and your progress, keep the community safe (including reviewing reports), provide support, and protect the service from abuse. We don’t sell or rent your personal data and we don’t use it for advertising.

A coach sees only the requests and progress you send to them. The people in a group you’re in see the name you chose for it, your answers and sets done for its sessions, and what’s shared with the group. Other users see only your public comments and reviews. Our team can access data when needed to provide support, handle reports or keep the service secure. Coaches are independent professionals, not our employees; please only share with a coach what you are comfortable sharing.

Performance of our contract with you (running your account and the features you use), your explicit consent for health-related data you choose to share and for waitlist emails, and our legitimate interests in keeping the service secure and moderating content.

We use processors under appropriate agreements: Google Firebase (authentication, database, Crashlytics crash reports and Cloud Messaging for notifications), Apple and Google (sign-in, and Apple’s push notification service), Vimeo (course video), Vercel (website hosting) and, if you buy on our website, Stripe (payments; we never see your full card number). Some process data outside your country under appropriate safeguards such as Standard Contractual Clauses.

We keep your data while your account exists. When you delete your account in the app (Profile, Settings, Delete account) we delete your profile, your plan requests including any body images and progress you shared, your course progress, streak, comments, reviews and block list, delete the groups you own and remove you and your answers from the others, revoke Sign in with Apple, and erase the data stored on your phone. Leaving a group removes your membership and your answers; when its owner deletes a group, its sessions, answers and invite code go with it. Purchase records are kept as long as the law requires. Reports you filed are kept only as long as needed to handle them. Removed data may remain in encrypted backups for a short period before it is overwritten.

Subject to applicable law, you can access, correct, export or delete your personal data, and object to or restrict how we use it. Delete your account in the app at any time, or email hello@movody.fit for any other request. You may also complain to your local data protection authority.

Data is encrypted in transit, data on your phone is encrypted at rest, and our database only lets each person reach their own records (a coach only the requests sent to them, and the people in a group only that group’s records).

Movody is not for children under 16, and we do not knowingly collect their personal data. If you believe a child has an account, contact us and we will delete it.

We will post any changes here with a new date above. For any privacy question or request, contact hello@movody.fit.