Privacy

Last updated 24 September 2026. Written to be read, not skimmed past.

Who is responsible for your data

MoveDay is an app by Planken Consulting B.V., registered with the Dutch Chamber of Commerce (KvK) under number 85529397, Iepenplein 100, 1091 JR Amsterdam, the Netherlands. Planken Consulting B.V. is the controller of your personal data under the GDPR: it decides how your data is used and is responsible for it. "We" and "us" on this page mean Planken Consulting B.V. Questions about your data or this policy: hello@moveday.io.

What we collect, at a glance

Signing in

MoveDay needs an account: the app opens on a sign-in screen and there is no way to use it without signing in. Signing in stores your routines and history in your MoveDay account so they survive a reinstall and move with you to a new phone. What reaches us depends on how you sign in:

• Sign in with Apple: we ask Apple for your email address only, not your name. Apple sends us a sign-in token with an ID for you and your email address, or a private relay address if you choose Hide My Email. Apple knows that you signed in to MoveDay.
• Continue with Google: we ask for Google's basic sign-in information. Google sends us a sign-in token with an ID for you, your email address, your name and a link to your profile picture. Our authentication service stores these with your account as they arrive; the app does not show or use your name or picture. Google knows that you signed in to MoveDay.
• Continue with email: you type your email address and we send an 8-digit sign-in code to it. Resend delivers the code.
• Sign in with password: this link on the sign-in screen is only for accounts we set up ourselves for app review and testing. You cannot create a password account.

You can add Apple or Google to an existing account later; the account keeps one random account ID. If this phone held routines and history from before sign-in was required, they are added to the account you sign in with.

What is stored on your phone and in your account

Your phone keeps your programs, exercise levels, timings, settings, session history, effort feedback, streaks and milestones. It also keeps your answers to the two questions in the introduction, your weekly target and preferred reminder time, and whether you have finished the introduction. Your sign-in session is kept separately.

While you are signed in, the app sends your programs, settings, progress and sessions to Supabase, our cloud provider, linked to your account ID, including your getting-started answers. Routines work offline; changes wait on your phone and sync when you reconnect.

Your data stays until you delete it. It stays in your account across sessions, reinstalls and phones for as long as the account exists. We do not delete accounts for inactivity.

Signing out (Profile, Account) first uploads what is on your phone to your account, then clears MoveDay's data from the phone and cancels its reminders. If the upload fails, the app asks before it signs out anyway. Signing out never deletes data from your account; signing in again brings it back. Other phones stay signed in.

How we use your account data

Account data is used only to run the app for you: to sign you in, to sync and to show your routines and history on your phones. We do not analyse your account data. What we learn about how MoveDay is used comes only from the anonymous usage statistics below, and only with your consent.

• Your fitness data is never sold. It is never used for advertising, marketing or data mining.
• We do not train models on your account data.
• We do not share your personal data with a third-party AI service. If a future feature needed that, the app would first ask for your separate, explicit permission.
• If we ever want to analyse account data, for example to suggest routines, we will update this policy first and ask for your separate permission in the app. Until you give it, nothing changes.

No health data. MoveDay does not ask about symptoms, pain or medical conditions and does not collect health data. The introduction describes a movement pattern, not a diagnosis, and asks you nothing about your health. Please do not type health information into routine names.

Anonymous usage statistics

MoveDay counts how routines are used, without knowing who you are. You are asked once, on the completion screen of your second routine, with two choices: "Share anonymous statistics" and "Not now"; the same choice is on the Getting started card on the home screen and in Settings. Statistics are sent only if you choose Share. Nothing is sent before you choose, and nothing is sent if you choose Not now. Installs from before this change are asked once inside the app.

What is counted: app opens; getting-started answers from the fixed choice lists; sign-in attempts, with the method (Apple, Google or email) and whether it was done, cancelled or failed; sessions started, finished or stopped early, with planned and actual minutes, skips, and the level and effort rating per exercise; the make-up of routines (exercise ids from our fixed library, seconds and sides); level changes; milestones earned; reminders switched on or off, with the time of day as a range; the time the getting-started questions took, as a range; seconds of exercise per session; the exercise at which a session was stopped; and fixed error codes with the screen they happened on. Every event also carries the app version, the platform (iOS or web), the language, rough ranges for days since install and number of sessions, and whether the phone is signed in and with which method.

A routine you built yourself is sent as its list of exercises and times. If nobody else uses the same one, those entries can be recognised as belonging together, though not as yours.

To work out the rough "days since install" range, the app notes the day it was first opened. That date is kept on your phone and never leaves it; only the range is sent.

What is never included: no account ID, device ID, install ID, advertising ID or any other identifier, not even a hashed one. No email address or name. Nothing you typed, such as routine names. No precise time, only the date and the hour. Your IP address is not stored: our collector receives it as any server does and drops it before anything is written. Only the country is kept.

Where it goes: to our own collector, which runs on Cloudflare. The statistics are stored in a Cloudflare database restricted to the EU. Cloudflare's network handles each request at the location nearest to you before it is stored. They are kept apart from account data at Supabase and are never combined with it. There is no third-party analytics SDK in the app. Because the statistics carry no identifier, we have no way to tell which entries came from your phone, so we cannot export or delete them for you.

How to switch it off: open Settings (the gear on the Profile tab), go to About and turn off "Share anonymous usage statistics". While it is off, and before you choose, nothing is collected, queued or sent. Statistics that could not be sent yet wait on your phone for at most 7 days.

Guided audio and the lock screen

On iPhone, a routine's spoken cues and beeps keep playing when the screen is locked or you switch apps. They play on top of your music or podcast at their own volume; your music keeps playing as it was. A phone call pauses the routine until you tap Resume. While a routine runs, the lock screen shows it with Pause, Resume and Next: as a MoveDay card when other audio plays, or in the Now Playing controls when nothing else plays. The cues are made and played on your phone; the card and the controls show only the routine and exercise names and send nothing to us. MoveDay does not use the microphone and records nothing.

Services that receive data

• Supabase: account authentication, your email address, the sign-in details from Apple or Google described above, sign-in records, and your synced programs, settings and sessions. Our documented database region is Frankfurt in the EU.
• Apple: if you use Sign in with Apple, Apple handles the sign-in and gives us the token described above. When you delete your account, the app asks Apple to disconnect MoveDay from your Apple Account.
• Google: if you use Continue with Google, Google handles the sign-in and gives us the token described above.
• Resend: delivers sign-in codes through our authentication service and processes the recipient email and delivery information.
• Cloudflare: serves the website and public pages and handles the connection information needed to deliver them. Cloudflare is also our processor for anonymous usage statistics: it runs the collector, and the statistics are stored in a Cloudflare database restricted to the EU. Cloudflare's network handles each request at the location nearest to you before it is stored.

Apple and Google also process your sign-in under their own privacy policies. Service providers process data to provide their services. Their operational logs, backups and processing locations can differ from the app database. Contact us for details about retention and international processing.

Outside the EU. Supabase, Cloudflare and Resend are companies based in the United States. Your account data is stored in Frankfurt, but these companies may access or process it from outside the EU to run their services. We rely on the EU Standard Contractual Clauses in their data processing agreements and, for Cloudflare, also on its certification under the EU-US Data Privacy Framework. If you sign in with Google, Google processes your sign-in under its own privacy policy, including in the United States.

Reminders

On iPhone, reminders are scheduled on your phone with your permission. On the web, enabling reminders stores a push subscription endpoint, delivery keys, time zone, chosen time and last-sent day with your account. The notification delivery service receives the information needed to deliver the reminder. Your reminder time is part of your synced settings. You can turn reminders off in Settings. Signing out cancels this phone's reminders and, on the web, removes this browser's push subscription. Other phones are unaffected.

How long

Account data is kept for as long as your account exists, until you delete it in the app or ask us to. Signing out, uninstalling or not using the app does not delete it. We keep your history until you delete your account, so it is still there when you come back. Successful account deletion removes the account, its sign-in details, stored programs and sessions, and associated web push subscriptions. Provider backups, authentication audit records and delivery or security logs may remain under the provider's applicable retention rules; they are not part of the immediate in-app deletion. Copies you received from us and local copies on other phones are not remotely erased.

Copy of your data and deletion

• Copy of your data: email support@moveday.io from the email address of your account; the Profile tab shows that address. To protect your data we only answer a request that comes from that address, and we send the copy back to it. If you use Hide My Email with Sign in with Apple, write from the address Apple forwards to (iOS Settings, Apple Account, Sign in with Apple, MoveDay). You get one JSON file with your programs, settings, session history and progress as stored in your account, the facts about the account itself (sign-in methods, when it was created and last used) and your reminder time, within one month of your request. It does not include server authentication, email-delivery or provider log records; ask in the same email if you want those.
• Import: Settings, "Import data" restores a compatible file, such as the copy we send you, replacing app data on that phone. Imported data then syncs to your account.
• Delete account: Profile, Account, "Delete account", then "Delete everything". If you signed in with Apple, the button reads "Confirm with Apple to delete" and Apple asks you to confirm; MoveDay is then disconnected from your Apple Account too. If Apple cannot be reached, the account is still deleted and you can remove MoveDay in iOS Settings, Apple Account, Sign in with Apple. The flow first stops this phone's scheduled reminders, then deletes the server account and finally clears the phone, which returns to the sign-in screen. Deletion needs a connection. Follow the error message if a stage fails: local data is kept if server deletion cannot be confirmed, but an earlier stage may already have succeeded. Local cleanup can also fail after the server account has been deleted. Retry or contact support; do not assume an error means nothing changed.
• Local copies: clearing browser storage or uninstalling is not account deletion; your data stays in your account.

See support for help, including if you cannot access the app.

What we do not do

• No advertising networks, tracking pixels, third-party analytics SDKs or selling or renting of your data. Data is shared with service providers as described above.
• No usage statistics tied to you. The statistics described above are anonymous and can be switched off. Service-provider operational logs are separate.
• No health data, HealthKit access, location permission, microphone access or payment collection in this version. Spoken cues are audio output.

Your rights

Legal basis. We keep and sync your account data because it is needed to provide the app you signed up for (performance of a contract, GDPR article 6(1)(b)). Anonymous usage statistics rely on your consent (article 6(1)(a)), which you can withdraw in Settings at any time. We do not process account data for purposes of our own.

Under the GDPR you can ask to see, correct, export or delete your data. Deletion is built into the app. For a copy of your data, email support@moveday.io from your account's address as described above; for anything else write to hello@moveday.io. You will hear back within a month. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

When this page changes in a way that matters, the date at the top moves and the app tells you on the next start.