1. Who we are
MoveByMe is operated by MoveByMe Ltd, a company registered in England and Wales under company number 17414835. MoveByMe Ltd is the controller of the personal data described in this notice.
Privacy questions and rights requests can be sent to hello@movebyme.uk.
2. The data we collect
Depending on the features you use, we collect:
- Account data: email address, account identifier and first name.
- Profile and planning data: age, sex, height, goals, experience, activity level, preferred training days, session length, training setting (such as home or gym) and available equipment.
- Health and fitness information: fitness baseline, limitation or injury information you choose to provide, adaptation preferences, weigh-ins, workout history, exercises, sets, repetitions, loads, times, distances, session feedback, goals and progress.
- Feedback: category, message, app screen and app version when you choose to send feedback.
- Basic app activity: selected events such as opening the app, completing onboarding, changing a schedule, updating a programme, and starting, completing or cancelling a workout, together with your account identifier, platform, app version and time.
- Limited app diagnostics: error type, a non-sensitive error reference, account identifier, app path and app version. These app-generated diagnostic records are designed not to include exercise names, weights, health answers, goals or feedback text.
- Connection and security records: our service providers process IP addresses, browser or device information, request and sign-in events, approximate location inferred from an IP address (such as country or city), and technical connection fingerprints to operate, protect and troubleshoot the service. This does not mean that MoveByMe accesses your device's GPS location.
- Membership information: where paid memberships are available, the store handles payment and we receive information needed to check access, such as the product, subscription status and expiry. We do not receive your full payment-card details from Apple or Google Play.
Technical connection fingerprints describe characteristics of a connection and may be shared by multiple devices or users; they are not necessarily unique hardware identifiers. Provider connection and security records follow separate retention and expiry rules from the account records stored by MoveByMe.
For Google Play membership checks, purchase tokens are sent to our Supabase-hosted verification service and checked with Google. The service stores an encrypted purchase token, a token fingerprint, subscription and verification details, and an opaque billing identifier linked to your MoveByMe account. The billing identifier is also sent to Google when checkout starts to match the purchase to the right account and help prevent misuse. Your workout and health answers are not sent to Google as part of this check.
Some information, including the latest readiness choice, saved custom workouts and active-workout recovery state, may be kept on your device. Clearing app storage can remove device-only information.
3. How we use it
- To create and adapt your training programme.
- To save your workouts, goals, weigh-ins and progress.
- To protect recovery when sessions or circumstances change.
- To provide account features, data export and account deletion.
- To check membership access, restore eligible purchases and prevent purchase misuse.
- To respond to feedback and support requests.
- To understand reliability and improve the service.
- To keep the service secure and investigate faults.
4. Our legal bases
We process ordinary account and service data because it is necessary to provide the MoveByMe service you request. We use limited reliability and security data for our legitimate interests in maintaining and improving a safe, dependable product.
Information about an injury, health limitation or required adaptation is optional and may reveal health information. It is processed only when you give separate explicit consent. You can withdraw that consent by choosing Nothing to work around in My Plan; MoveByMe then clears those details and stops using them, without affecting earlier lawful processing.
5. Who processes the data
We do not sell personal data and we do not use it for third-party advertising.
We use Supabase for authentication, hosted application data and Android membership verification; Apple for iOS, TestFlight and App Store distribution and Apple purchases; Google for Google Play distribution, purchases and subscription checks; and Apple iCloud Mail for support email.
OpenAI Sites and Cloudflare support this website and its hosting. Cloudflare also hosts supporting infrastructure for billing checks. The billing timer, when enabled, is designed to receive only job counts and fixed operational status codes, not workout records, purchase tokens or member identifiers.
When enabled, Healthchecks.io monitors whether the billing timer is running. It receives only run-status signals and routine server connection metadata, not member identifiers, purchase tokens, payment details or workout records. Monitoring alerts go to MoveByMe's operational contact.
Providers acting on our behalf process information to supply their services under their contractual and security obligations. Apple and Google also handle their own store-account and payment information under their own privacy notices.
6. International transfers
Some service providers may process data outside the United Kingdom. Where this happens, we use the safeguards required by UK data protection law, such as an adequacy decision or approved contractual protections.
7. How long we keep it
Account, profile, training, goal, weight, feedback and app-generated activity and diagnostic data linked to your account are kept while your account is active and removed from active systems when you permanently delete your account. Beta feedback is normally reviewed within 24 months. App-usage diagnostics and technical error reports are reviewed on a rolling basis and are normally retained for no more than 12 months. Feedback and diagnostics are deleted or anonymised when they are no longer needed.
Following our 6 October 2026 billing-deletion update, confirmed account deletion also removes the Google Play billing identifier, encrypted purchase tokens, token fingerprints, subscription-verification records, related billing jobs and account-specific verification rate-limit records from our active database. Billing records retained from accounts deleted before this update may still remain pending a separate review. Contact us about access or erasure requests involving those older records. This does not cancel your store subscription or erase transaction records held by Apple or Google under their own policies. Separate purchase-verification records are not all included in the in-app profile-and-activity export. Contact hello@movebyme.uk for access or erasure requests involving purchase records.
Provider connection and security logs, short-lived authentication tokens and protected backups may remain until their normal retention or expiry cycle. We may retain a record longer where necessary to comply with law, resolve a dispute or protect legal rights.
8. Your choices and rights
You can edit your plan and profile, download a copy of your saved profile and activity, or permanently delete your account from Account & settings in the app.
Under UK data protection law, you may also have rights to access, correct, erase or restrict your data, object to certain processing, receive portable data, and withdraw consent. Email hello@movebyme.uk to exercise a right. We may need to verify your identity first. You can complain to the UK Information Commissioner's Office if you are unhappy with our response.
9. Security
We use account authentication, encrypted connections, access controls and row-level database rules designed so signed-in members can access only their own personal training data. No online service can guarantee absolute security, so please use a strong, unique password and tell us promptly if you believe your account has been compromised.
10. Age and safety
MoveByMe is intended only for adults aged 18 and over. We ask for adult confirmation and age during setup. If we learn that a child has created an account, we will restrict or delete it and remove associated personal information unless the law requires otherwise. MoveByMe provides general fitness guidance, not medical diagnosis or treatment.
11. Changes to this notice
We may update this notice as MoveByMe develops. Material changes will be highlighted in the app or communicated by an appropriate method. The latest version will always appear on this page.