Privacy Notice

What we collect and why

• Account details: your name, email address, and password (stored hashed), or your Google account ID if you sign in with Google. Used to create and secure your account (needed to provide the service).
• Profile photo, if you add one. Shown to you and your buddies (needed to provide the feature; you can remove it anytime).
• Training data: your plan settings (intensity, schedule, session length, focus), check-ins (completion, effort, mood and optional notes). Used to build your plan and show your stats (needed to provide the service).
• Buddies: who you're connected with, blocks, and the fires and cheers you send. Your buddies see which days you trained and the type of session; your effort, mood and notes stay private.
• Subscription status: whether you have Pro, your plan, and renewal dates, received from Paddle. Used to give you Pro features (needed to provide the service). We never see or store your full card details.
• Technical data: basic server logs (such as IP address and browser type) kept for security and to fix problems (our legitimate interest in running a safe service).

We don't sell your data, show ads, or use advertising or analytics trackers.

Who we share it with

• Paddle.com, our reseller and Merchant of Record, which processes payments and handles billing, tax and refunds under its own privacy notice (paddle.com/legal/privacy).
• Google Cloud / Firebase, which hosts MoveOn and its database.
• Resend, which sends account emails such as verification and password reset.
• Google, if you choose to sign in with Google.
• Professional advisers, and authorities where the law requires it.

These providers process data on our behalf, or as independent controllers where noted, and some may store it outside your country. Where that happens, we rely on the safeguards the law provides, such as standard contractual clauses.

Cookies and storage on your device

We use only essential cookies: one keeps you signed in, and one remembers your language. Your browser also stores a few preferences on your device (theme, workout timer, install prompt). We don't use tracking or advertising cookies.

How long we keep it

We keep your data while your account is open. If you ask us to delete your account, we delete your data within 30 days, except records we must keep by law. Paddle keeps transaction records as required for tax and accounting.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your data, and to object to or restrict certain uses. Email hello@moveon.coach and we'll reply within one month. You can also complain to your local data protection authority.

Security

We use encrypted connections (HTTPS), hashed passwords, and access controls that keep your data readable only by our servers. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you.

Children

MoveOn isn't intended for anyone under 16, and we don't knowingly collect their data.

Changes

We'll update this notice when our practices change, and tell you about significant changes.