Privacy, in plain language.
Movenue collects the information needed to run your account and personalize workouts. We do not sell personal information, and the optional form companion is designed to analyze frames on your device.
Information you provide
Account details, workout preferences, onboarding answers, set logs, feedback, and support messages. Optional health context is stored only when you choose to provide it.
Optional Apple Health imports
In the iPhone app, you can choose to read workout summaries and optional activity and heart-rate summaries from Apple Health. First you grant permissions and review an on-device preview. Only when you separately confirm Save are those summaries sent securely to Movenue’s server, encrypted in storage, and associated with your account so you can view them across devices. We do not import workout routes, raw heart-rate samples, medical records, or sleep records. We do not write to Apple Health or sync in the background. Imported Health data is not sent to OpenAI or other AI services, used for advertising or product analytics, or stored by Movenue in iCloud.
Managing Health history
You can remove all imported Health history in All workouts → Apple Health → Privacy & remove imports. This removes Movenue’s active copy, not the original records in Apple Health. You can revoke read permissions in Apple Health; this does not remove previously saved imports. Removing a record in Apple Health does not automatically remove Movenue’s copy. Hosting-provider backups, if retained, expire according to the provider’s backup retention. Imports are optional and not required for other Movenue features. Summaries are for training history, not diagnosis or medical advice.
Camera and form companion
Camera access is optional. Live camera frames are processed in your browser for movement cues and are not uploaded or stored by Movenue. Form feedback is general fitness guidance, not medical advice or a diagnosis.
Payments and service providers
Stripe processes payment details; Movenue stores subscription status and Stripe identifiers, not complete card numbers. Hosting, email, database, and media providers process limited data needed to deliver the service.
Product analytics
We record a limited first-party funnel: CTA, account, verification, onboarding, workout, form companion, checkout, second-workout, and cancellation events. Events use random browser/session identifiers, page paths, and small non-sensitive properties. We do not include health free text, camera frames, passwords, or payment details.
Account support and connection diagnostics
To troubleshoot sign-in and account issues, we record limited account-linked connection metadata: an IP address when supplied by our trusted hosting proxy, connection time, sign-in method, derived device/browser labels and a request identifier. Authorized administrators can see this alongside account and billing identifiers. Approximate city, region and country are estimated using a database on our server; we do not send your IP to an external geolocation lookup service or collect GPS location. VPNs and mobile networks can make these estimates inaccurate. We keep at most 50 sampled connections per account in a 30-day viewing window and remove expired records on the next diagnostics read or write. Hosting backups may retain older copies according to their retention policy. Diagnostics do not include Health imports, workout content, raw browser headers, passwords, session tokens or request bodies, and are not used for advertising.
Your choices
You can skip optional profile fields, deny camera access, update account details, cancel a subscription, or ask for access or deletion by emailing support@getmovenue.com.