Legal

Privacy Policy

Last updated: September 3, 2026

This Privacy Policy explains how My Movemates ("My Movemates", "we", "us", or "our"), operated by AveeDev Digital Inc., collects, uses, stores, and shares information when you use the My Movemates mobile app and related services.

1. Information We Collect

1.1 Account and sign-in information

When you sign in with Google or Apple, authentication is handled through Google Sign-In, Sign in with Apple, and Firebase Authentication. Depending on your account settings and the information made available by those providers, this may include:

• Google account identifier, Apple account identifier, or Firebase user identifier
• Name, alias, and optional profile photo
• Email address

If you use Sign in with Apple, Apple may allow you to share a private relay email address instead of your personal email address. We use sign-in information to authenticate you, keep you signed in, associate your app data with your account, and support profile, friends, referral, notification, and leaderboard features.

1.2 Health data and activity information

If you grant permission, My Movemates may read your step count and workout or exercise records from Apple Health on iOS or Health Connect on Android. When you enable workout import, this can include workouts recorded by your phone, watch, or another connected source.

• Import reads are optional and can be revoked at any time in your device settings.
• Imported workout data may include the source record identifier, source app or device, activity or exercise type, start and end times, duration, distance or laps when provided, recording method, and source update time.
• If you choose Route Memory for an eligible workout, the app may read that specific workout's route coordinates from Apple Health or Health Connect. Route coordinates stay on your device, are not sent to our backend, analytics, logs, or notifications, and are held only while the app creates the preview and share image. The displayed route always omits at least the first and last 200 metres.
• We use step count and imported workouts to show activity in the app, support widgets, calculate progress, and determine eligibility for in-app rewards or claims.
• Export writes are separately optional. When enabled, the app can write completed My Movemates follow-along or timed DIY exercise sessions to the current health platform. In-app exercise runs are labelled Functional Strength Training; distance and laps are written only when supplied by the user.
• We do not use Health Data for advertising or sell Health Data.

Based on the current app implementation, My Movemates does not directly upload your raw step-count history from Apple Health or Health Connect to our backend. However, the app may sync daily or derived step records and imported workout records, including the fields described above, in order to keep your account progress consistent across sessions and devices.

1.3 On-device workout, profile, and usage data

My Movemates stores certain data locally on your device to power app features, including:

• Workout progress, completed sets, video progress, timestamps, and related counters
• Stats such as sets done, active days, exercise minutes, focus time, exercise time, body-part counters, Move Coins, Karma Coins, streaks, and any historical active-hour totals retained from earlier app versions
• Personalization settings such as your alias, avatar preference, theme, age range, gender, selected focus areas, goals, caution areas, caution handling, available exercise equipment, and routine filters
• App tour and feature prompt completion status
• Manual workout logs, including exercise or activity details and optional private notes
• Cached leaderboard snapshots, friends snapshots, poke state, referral/Thanks state, health-sync state, and exercise recommendations
• Home Screen or Lock Screen widget snapshots
• Temporary Photo Memory and Route Memory files created only while you prepare an image for sharing

1.4 Server-side synced data

When you are signed in and app services are enabled, My Movemates may send certain authenticated data to our backend services, including:

• Your authenticated account token or account identifier needed to verify your session
• Progress sync events, timestamps, timezone information, activity totals, body-part deltas, Move Coins, Karma Coins, streaks, and derived progress deltas
• Personalization data such as your alias, avatar preference, age range, gender, selected focus areas, goals, caution areas, caution handling, available exercise equipment, and routine filters
• Profile-photo metadata and the selected, cropped profile photo uploaded for your account
• Manual workout sessions, including set or activity measurements, timestamps, duration, distance or laps when supplied, and optional private notes
• Imported health-workout sessions and related source metadata, derived activity or reward records, and health-sync cursors or operation records
• Goal-plan data, including accepted or completed plans, weekly schedules, planned exercise slots, exercise completions, check-in responses, completion outcomes, rewards, and feedback
• Guided habit-progress data, including track and checkpoint progress, completed items, timestamps, streak status, and streak-recovery records
• Requests and responses related to stats summaries, exercise recommendations, filter options, and leaderboard data
• Limited profile or leaderboard display data needed to support account, ranking, friends, referral, and social features

1.5 Friends, referrals, leaderboard, and social data

If you use friends, referral, Thanks, leaderboard, or poke features, My Movemates may collect and process:

• Alias, public user identifier, rank, Move Coins, Karma Coins, and leaderboard display data
• Friend search requests, friend requests, accepted friend relationships, request status, timestamps, and removal actions
• Referral or Thanks records, including aliases or public user identifiers, timestamps, Karma Coin grants, and Personalized preview access status
• Poke records, including sender and recipient aliases or public user identifiers, the app-provided message selected by the sender, selected language and tone, status, read/open/reply timestamps, reply eligibility, reply Move Coins, reply muscle names, and related Karma Coin credits
• Achievement and social-notification records, including achievement type and progress details, titles and messages, friend delivery status, read and celebration status, available app-provided reply options, the selected reply or cheer, and related timestamps

My Movemates does not currently provide open-text user-to-user messaging. Poke messages and achievement replies or cheers are selected from options provided by the app. Free-form feedback submitted to My Movemates is not delivered to other users.

1.6 Notifications and device data

If you allow notifications, My Movemates may schedule local reminder notifications on your device. For social notifications, My Movemates uses Firebase Cloud Messaging. To support these notifications, My Movemates may register and store:

• Firebase Cloud Messaging device token
• Platform
• Timezone offset
• App version
• Notification-related identifiers and payload fields needed to route the notification and open the relevant app screen

Notification payloads may include limited context needed for the relevant feature, such as a poke ID, sender or recipient alias, message text, request ID, goal-plan status, achievement details, reply or cheer details, Personalized preview access status, or the health platform and source workout record identifier needed to offer Route Memory. Notification payloads do not contain route coordinates.

1.7 Feedback submissions

If you submit in-app feedback, My Movemates sends your message and related context to our backend.

1.8 User-initiated sharing

You may choose to generate and share achievement, Photo Memory, Route Memory, or progress cards through your device's sharing tools. The app may temporarily create an image containing the information shown to you. A Route Memory card uses Apple Maps on iOS or Google Maps on Android for its base map and draws the privacy-trimmed route on your device. You choose the recipient and the third-party app or service through which a card is shared. Once shared, the recipient or third-party service handles that content under its own privacy practices.

On Android, Google Maps SDK may automatically collect request and device metadata, crash metrics, IP address, a Maps SDK pseudonymous identifier, and map-camera or map-interaction events where applicable. Google handles that technical data under its own privacy practices. My Movemates does not send workout route coordinates to its backend, analytics, logs, or notification services.

1.9 Analytics and advertising identifier information

My Movemates may use Firebase Analytics to understand app usage, feature performance, reliability, and launch-readiness. Firebase Analytics may collect app interaction data and technical identifiers, such as app instance identifiers, device or app information, and on Android, the Android Advertising ID when available.

My Movemates does not show third-party ads, sell personal information, or use the Android Advertising ID to target advertising in the app. If the Android Advertising ID is collected, it is used for analytics and measurement purposes. You can reset or delete your Android Advertising ID in your device settings.

2. How We Use Information

We use information to:

• Authenticate your account and keep you signed in
• Provide app functionality, including workouts, manual logs, health-workout import and export, Route Memory, goal plans, check-ins, guided habit progress, streak recovery, progress tracking, reminders, widgets, personalization, friends, achievements, replies, pokes, referrals, Thanks, Karma Coins, and leaderboard features
• Read step count and imported workouts, if you permit it, and show activity and step-based progress in the app
• Write completed My Movemates workouts to Apple Health or Health Connect when you enable export
• Sync progress, restore data, and keep stats consistent across sessions or devices
• Show leaderboard, profile, friends, referral, and social features
• Provide daily and personalized exercise recommendations
• Send local reminders, goal-plan notifications, achievement celebrations, and social notifications if enabled
• Receive and triage feedback, support requests, and valid creator or rights-holder takedown requests
• Analyze app usage, feature performance, reliability, and launch-readiness
• Maintain, secure, troubleshoot, and improve the app and related services

3. How We Share Information

We do not sell your personal information. We may share information only:

• With service providers and infrastructure providers that help us operate the app and related services
• With authentication, notification, hosting, storage, database, analytics, or content providers as needed to deliver app features, including Azure Blob Storage for profile photos
• With YouTube or other embedded content providers when embedded content is loaded
• With Apple Maps or Google Maps when you choose Route Memory and a base map is rendered; those providers may process the map area and technical or service information under their own privacy practices
• If required to comply with law, regulation, legal process, or enforceable governmental request
• To protect the rights, safety, security, or integrity of My Movemates, AveeDev Digital Inc., our users, creators, rights-holders, or the public

4. Third-Party Services and Content

My Movemates uses third-party services or content, including:

• Google Sign-In
• Sign in with Apple
• Firebase Authentication
• Firebase Analytics / Google Analytics for Firebase
• Firebase Cloud Messaging
• Apple Health and HealthKit
• Health Connect
• Apple Maps on iOS and Google Maps on Android for user-initiated Route Memory previews and share images
• Azure Blob Storage for profile-photo hosting
• YouTube embedded content
• Backend hosting, database, and storage infrastructure used to operate My Movemates services

These providers may collect technical or service-related information directly under their own privacy policies.

5. Permissions We Request

• Health permissions, to read steps, workouts, and an eligible workout's route when you choose Route Memory, and to write My Movemates workouts or supplied distance data to Apple Health or Health Connect when you enable the corresponding direction
• Notification permissions, to send local reminders and social notifications
• Camera access, only if you choose to make a Photo Memory for user-initiated sharing
• Photo-library access, only if you choose a profile picture from your device
• Internet access, for sign-in, sync, embedded video playback, leaderboard data, recommendations, social features, feedback, and external links
• Android scheduling or boot-related permissions where needed to keep local reminders working reliably after reboot or over time
• Android Advertising ID permission, when included by Firebase Analytics, for analytics and measurement only

My Movemates does not currently request microphone, contacts, live-location, or ad-display permissions. Route Memory reads an existing workout route through Apple Health or Health Connect only after you choose the feature; it does not record your live location. Photo Memory and Route Memory images are created in temporary device storage for sharing and are not uploaded or added to your photo library by My Movemates. A profile picture you select is cropped on the device and uploaded only as the profile picture for your account.

6. Data Retention

• On-device app data remains on your device until you clear app data, sign out and remove app data, or uninstall the app.
• Route coordinates are kept in memory only while composing a Route Memory preview and share image. The temporary share image is deleted after the native sharing flow completes.
• Authentication and account records handled by Google Sign-In, Sign in with Apple, and Firebase Authentication are retained according to those providers' own policies.
• Server-side synced account, demographic, profile-photo, progress, personalization, manual-log, imported-health-workout, goal-plan, check-in, guided habit-progress, streak-recovery, leaderboard, friends, referral, Thanks, poke, achievement, notification, reply, and feedback-related data is retained for as long as needed to provide the service to your account, unless you request deletion sooner.
• Analytics records and technical identifiers handled by Firebase Analytics or Google Analytics for Firebase are retained according to those providers' settings and policies. Aggregated, de-identified, or non-account-level analytics may be retained after account deletion.
• Creator or rights-holder takedown request records may be retained as needed to document the request, verify authority, prevent repeat issues, and comply with legal obligations.
• When you submit a valid deletion request, we aim to delete or de-identify applicable server-side personal data within 30 days after verifying the request, unless we are legally required to retain certain information for a longer period.

7. How You Can Delete Your Data

• You can revoke Health Data permissions and notification permissions in your device settings.
• You can remove locally stored app data by clearing app storage or uninstalling the app.
• You can initiate deletion of your My Movemates account in the app by going to Settings, choosing Delete Account, and completing the confirmation flow.
• Account deletion removes applicable profile-photo metadata and your My Movemates workout and imported-session records, and attempts to remove workouts My Movemates wrote to Apple Health or Health Connect. To remove a stored profile-photo blob, use the separate Remove photo control in Settings before deleting the account.
• If you cannot access the app, you can contact us at support@mymovemates.com for account deletion support. We may need enough information to verify that you control the account.

After we verify your request, we aim to complete deletion within 30 days, unless a longer retention period is required by law, security, fraud prevention, backup integrity, dispute handling, or technical requirements.

8. Your Choices

• Sign out of the app at any time
• Decline or revoke Health Data access
• Disable notifications
• Reset or delete your Android Advertising ID in your Android device settings
• Choose whether to use health-workout import or export, Route Memory, camera-based Photo Memory, profile photos, friends, referral, Thanks, poke, goal plans, sharing, and Personalized features
• Request deletion of your server-side data as described above

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. However, no method of transmission or storage is completely secure.

10. Children's Privacy

My Movemates is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal data, contact us so we can address it.

11. International Transfers

Third-party providers and service infrastructure we use may process data on servers located in different countries.

12. Creator and Rights-Holder Takedown Requests

If you are a creator, copyright owner, or authorized rights-holder and believe that content available through My Movemates uses your rights without authorization, contact us at support@mymovemates.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.

14. Contact Us

For privacy questions, retention questions, deletion requests, creator or rights-holder takedown requests, or other support questions, contact: support@mymovemates.com.