Privacy policy
The short version. Your tests, routines and history stay on your phone. We only hold data on our servers if you join the early access list or turn on the optional Community features, and you can delete it at any time. We don't sell your data, we don't show ads, and the website and app use no advertising or tracking cookies.
Who we are
Movage is run by David Burley, trading as Movage, in the United Kingdom. David Burley is the data controller for the information described here. Contact us about anything in this policy at support@movage.co.uk.
The website (movage.co.uk)
Early access list
If you join the early access list we store your email address, the date you joined, where you signed up (for example, the website or a link from Instagram) and the fact that you agreed to hear from us.
- Why: to email you about early access, the launch and major app news.
- Lawful basis: your consent. You can withdraw it at any time by using the unsubscribe link in any email or by emailing us.
- How long: until you unsubscribe, or 12 months after the app launches, whichever comes first.
Cookies and analytics
The website doesn't use cookies, analytics or advertising trackers. Fonts and images are served from the site itself. Our host, GitHub Pages, keeps standard server logs (such as IP addresses) for security and to run the service.
The Movage app
Data that stays on your phone
Your mobility test results, scores, sessions, custom routines, settings and feedback are stored on your phone. We can't see them. They're removed if you delete the app or use Settings to clear your data, and you can export a backup at any time.
Camera and AR Wireframe Mobility tests
When you use a camera test, the video is processed on your phone to track a wireframe of your body and measure your range of motion. It isn't recorded, stored or sent to us. The body-tracking model (Google MediaPipe) is downloaded from the jsDelivr content network the first time you use a camera test.
Community (optional)
If you create a Community account to join communities and leaderboards, we store:
- your email address, used only to sign you in and never shown to other people;
- if you sign in with Google, the name and email address Google shares with us;
- the nickname you choose, which other members can see;
- your settings for showing your time and score;
- the clubs you create or join, and whether a club you own is shown on Top clubs;
- the date and length of guided sessions, from the 31 days before you joined onwards, if you choose to show your time;
- your latest overall and zone mobility scores, the test date and whether every result was measured with the camera, if you choose to show your score.
Other members only see your nickname, your rank, your totals or score and the camera-verified tick. They never see your email.
If a club is shown on the Top clubs leaderboard, everyone signed in to Movage can see its name, its member count and its total time or average score. They can't see who is in it. The club owner can hide it at any time.
- Why: to run your account, communities and leaderboards, and to prevent abuse.
- Lawful basis: to provide the service you asked for (contract), and our legitimate interest in keeping the service secure and fair. Mobility scores can count as health information, so we only share your score when you turn on "Show my mobility score", which is your explicit consent. You can turn it off at any time.
- How long: until you delete your account. Deleting it removes your nickname, clubs, sessions and score from our servers straight away.
Strava (optional)
If you connect Strava, your phone sends each finished session's name, start time, length, moves and muscles worked directly to your Strava account, tagged as Recovery. The connection details are kept on your phone. Strava's own privacy policy covers what happens to data in your Strava account. You can disconnect in Settings at any time.
Reminders, feedback and photos
Reminders are scheduled by your phone; we don't receive anything from them. If you send feedback, it opens your own email app, and we only see what you choose to send. Stretch photos and videos are loaded from our content delivery network, which, like any website, can see your IP address when it sends them.
Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in for the early access list and Community accounts | London, UK |
| SMTP2GO | Sending sign-in codes and early access emails | May include countries outside the UK |
| "Continue with Google" sign-in, only if you use it | May include countries outside the UK | |
| GitHub Pages | Hosting the website and app | May include countries outside the UK |
| Amazon CloudFront | Delivering stretch photos and videos | Global network |
| jsDelivr | Delivering the body-tracking model for camera tests | Global network |
Where a provider handles personal data outside the UK, we rely on the safeguards UK law requires, such as adequacy regulations or the International Data Transfer Addendum.
Your rights
Under UK data protection law you can ask to see, correct, delete or move your data, object to or restrict how we use it, and withdraw consent at any time. Email support@movage.co.uk and we'll respond within one month. You can delete your Community account yourself in the app; see how to delete your account.
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Children
Movage isn't aimed at children. You must be 13 or over to create a Community account or join the early access list.
Security
Data on our servers is protected by row-level security rules, so people can only read and change their own information, and all connections are encrypted. Sign-in uses one-time codes or Google, so there are no Movage passwords to leak.
Changes
We'll update this page if anything changes and show the new date at the top. For significant changes affecting Community accounts, we'll tell you in the app.