Privacy

Last updated 19 September 2026. Written to be read, not skimmed past.

What we collect, at a glance

What is stored on your device and account

Your device keeps your programs, exercise levels, timings, settings, session history, effort feedback, streaks and milestones. It also keeps your first-run answers, including your goal, weekly target and preferred reminder time. The optional lower-back-discomfort answer is stored as your goal. Sign-in and sync state are kept separately.

If you enable cloud sync, the app creates or resumes an account and sends your programs, settings, progress and sessions to Supabase. This includes your optional lower-back-discomfort answer if you provided it. Without an email, the account is anonymous. A random account ID links this data to your account. If you add an email, it is used for sign-in codes and access on other devices. Without an attached email, do not rely on recovering an anonymous account after losing this device's sign-in session.

Routines work offline once available on your device. With cloud sync enabled, changes wait for sync when you reconnect. Check the Sync line in Settings before switching phones. You can keep using the app locally without enabling cloud sync.

Your cloud choice

You can enable or stop cloud sync in Settings. Stopping it prevents further routine account and sync requests from this device. It does not delete data already sent, erase the account, or stop another device from syncing. A request already sent may finish. Use account deletion if you want to remove the server account. Your cloud choice is saved on this device separately from exercise data; importing an export does not enable cloud sync.

How we use synced data

Synced data is used to run sync and to show your history on your devices. We also analyse synced routines, sessions and settings to improve MoveDay and to build features such as routine suggestions. This is part of what you agree to when you enable cloud sync. If you do not want it, keep local only, or turn sync off and delete your account.

• Your fitness data is never sold. It is never used for advertising or marketing, and never for data mining that is unrelated to improving MoveDay.
• If we train models on synced data, we use it with account IDs replaced, and data from deleted accounts is left out of future training sets.
• We do not share your personal data with a third-party AI service. If a future feature needed that, the app would first ask for your separate, explicit permission.

Anonymous usage statistics

MoveDay counts how routines are used, without knowing who you are. The introduction shows this on its own screen with a switch that is on by default. Nothing is sent before you continue past that screen, and installs from before this change are asked inside the app.

What is counted: app opens; introduction answers from the fixed choice lists; your cloud choice; sessions started, finished or stopped early, with planned and actual minutes, skips, and the level and effort rating per exercise; the make-up of routines (exercise ids from our fixed library, seconds and sides); level changes; milestones earned; reminders switched on or off, with the time of day as a range; the time the introduction took, as a range; seconds of exercise per session; the exercise at which a session was stopped; and fixed error codes with the screen they happened on. Every event also carries the app version, the platform (iOS or web), the language, rough ranges for days since install and number of sessions, and whether the device uses local only, an anonymous account or an email account.

A routine you built yourself is sent as its list of exercises and times. If nobody else uses the same one, those entries can be recognised as belonging together, though not as yours.

To work out the rough "days since install" range, the app notes the day it was first opened. That date is kept on your device and never leaves it; only the range is sent.

What is never included: no account ID, device ID, install ID, advertising ID or any other identifier, not even a hashed one. Nothing you typed, such as routine names. No precise time, only the date and the hour. Your IP address is not stored: our collector receives it as any server does and drops it before anything is written. Only the country is kept.

Where it goes: to our own collector, which runs on Cloudflare. The statistics are stored in a Cloudflare database restricted to the EU. Cloudflare's network handles each request at the location nearest to you before it is stored. They are kept apart from account data at Supabase and are never combined with it. There is no third-party analytics SDK in the app. Because the statistics carry no identifier, we have no way to tell which entries came from your device, so we cannot export or delete them for you.

How to switch it off: open Settings, go to About and turn off "Share anonymous usage statistics". While it is off, nothing is collected, queued or sent. Statistics that could not be sent yet wait on your device for at most 7 days.

Services that receive data

• Supabase: when you choose cloud sync, account authentication, optional email, sign-in records, synced programs, settings and sessions. Our documented database region is Frankfurt in the EU.
• Resend: if you request email sign-in, delivers sign-in codes through our authentication service and processes the recipient email and delivery information.
• Cloudflare: serves the website and public pages and handles the connection information needed to deliver them. Cloudflare is also our processor for anonymous usage statistics: it runs the collector, and the statistics are stored in a Cloudflare database restricted to the EU. Cloudflare's network handles each request at the location nearest to you before it is stored.

Service providers process data to provide their services. Their operational logs, backups and processing locations can differ from the app database. Contact us for details about retention and international processing.

Reminders

On iPhone, reminders are scheduled locally with your permission. On the web, enabling reminders stores a push subscription endpoint, delivery keys, time zone, chosen time and last-sent day with your account. The notification delivery service receives the information needed to deliver the reminder. Reminder preferences form part of your synced settings when cloud sync is enabled. You can turn reminders off in Settings. When you stop cloud sync, the app also tries to unsubscribe this browser from web push. If that fails, follow the reminder error and disable notifications in browser settings. Other devices are unaffected. Local iPhone reminders continue until you turn them off or complete deletion in the app.

How long

App account data is kept while your account exists. Successful account deletion removes the account, stored programs and sessions, and associated web push subscriptions. Provider backups, authentication audit records and delivery or security logs may remain under the provider's applicable retention rules; they are not part of the immediate in-app deletion. Copies you exported and local copies on other devices are not remotely erased.

Export and delete

• Export: in Settings, choose "Download my data", then "Download", or "Export data", then "Export". The JSON contains your local programs, settings, history and progress, plus sync metadata when present. It does not include all server authentication, email-delivery or provider log records. Let sync finish first. Contact us to request other personal data.
• Import: Settings, "Import data" restores a compatible export, replacing app data on that device. Imported data can subsequently sync to your account if cloud sync is enabled. Import does not change your cloud choice.
• Delete account: Settings, "Delete account", then "Delete" and "Delete everything". Anonymous accounts use the same flow. The flow first stops this iPhone's scheduled reminders, then deletes any server account and finally clears local data. A server account requires a connection, including when cloud sync has been stopped. If this device has no saved server identity, deletion is local only and cannot delete an account on another device. Follow the error message if a stage fails: local data is kept if server deletion cannot be confirmed, but an earlier stage may already have succeeded. Local cleanup can also fail after the server account has been deleted. Retry or contact support; do not assume an error means nothing changed.
• Local copies: clearing browser storage or uninstalling is not server-account deletion. After successful deletion, the app restarts locally and asks for a new cloud choice before creating another account.

See support for help, including if you cannot access the app.

What we do not do

• No advertising networks, tracking pixels, third-party analytics SDKs or selling or renting of your data. Data is shared with service providers as described above.
• No usage statistics tied to you. The statistics described above are anonymous and can be switched off. Service-provider operational logs are separate.
• No HealthKit access, location permission, microphone recording or payment collection in this version. Spoken cues are audio output.

Your rights

Under the GDPR you can ask to see, correct, export or delete your data, or object to how it is used. Cloud sync and anonymous usage statistics rely on your consent, which you can withdraw in Settings at any time. Export and delete are built in; for anything else write to hello@moveday.io and you will hear back within a month. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

When this page changes in a way that matters, the date at the top moves and the app tells you on the next start.