Privacy Policy

DesignSpark Studio LLC ("we," "our," or "us"), an Ohio limited liability company, operates the MoveTogether mobile app and the website at https://movetogetherfitness.com (together, the "Service"). MoveTogether is a social fitness app: you track your activity, compete with friends, climb leaderboards and leagues, and get coaching from our AI coach, Mo.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. Because MoveTogether works with health and fitness data, please read Sections 1, 4, 7, and 8 carefully.

By creating an account or using MoveTogether, you acknowledge and agree to this Privacy Policy, including as it is updated from time to time as described in Section 10. If you do not agree, please do not use the Service.

---

1. Information We Collect

Information you provide directly

• Account information. Email address, display name, and username. If you sign in with Apple, you may use Apple's Hide My Email relay address.

• Profile information. Optional bio, profile photo (avatar), your date of birth (used to confirm you meet our minimum age requirement and to tailor features), and fitness details you enter such as gender, age, height, current weight, and goal weight. We keep a history of weight entries to show progress over time.

• Phone number. If you choose to verify your phone number, we collect it (in E.164 format), the time and your IP address and device/browser at the moment you opted in (as a consent record), and the verification status. Verification is handled by SMS.

• Contacts (optional). If you grant contacts access to find friends, we use the phone numbers in your device contacts to match people who already use MoveTogether. We use them only for matching and do not store the contact details of people who are not MoveTogether users.

• Content you create. Messages you send in direct messages, competition group chats, and communities; your conversations with Coach Mo; reports you submit about other users or content; and other content you add to the Service.

• Voice. If you use voice features (such as talking to Coach Mo on Apple Watch), we capture and process your microphone audio to power the conversation, and we store transcripts of it. Audio is processed by our voice AI provider through a secure relay (see Section 4) solely to transcribe what you say and to generate a response. We do not create, store, or use voiceprints, voice embeddings, voice templates, speaker-recognition models, or other acoustic identifiers derived from your voice, and we do not use your voice to identify or authenticate you. We do not sell voice data.

• Location. With your permission, we collect your approximate or precise location to provide location-based features such as local weather insights. We store your most recent location and share it with our weather provider to generate those insights. Location is collected only while you use the app, and you can turn it off in your device settings.

• Support requests. When you contact us (through the support chat in the app or on our website, or by email), we collect your messages and the information needed to help you. Live chat in the app, on our website, and in the account portal runs on Chatwoot. When you chat while signed in, we share your MoveTogether user ID, email address, first name, a verification code that confirms the chat belongs to your account, your subscription tier, time zone, and account sign-up date with Chatwoot so support can recognize your account. Support may also start a chat with you in the app to follow up on your account or a request; this creates your support chat record in Chatwoot, identified by your MoveTogether user ID. Support email is also handled through Chatwoot. Our AI support agent, run by Skydive and powered by Anthropic's Claude, may answer your chat messages and support emails first, and a member of our team can take over. Support may also use relevant account, subscription, connected-tracker, and sync information to investigate your request (see Section 4).

• Movecoins rewards. Movecoins is an optional rewards program that is off until you turn it on. When you turn it on, we record your consent: when you gave it, the versions of the Movecoins Program Terms and this Policy you accepted, and when you turned it off, if you do. We keep a record of your Movecoins: what you earned and when (active days, monthly bonuses, the one-time welcome gift, and completed referrals), what expired, and what you redeemed. We also keep the plan you were on each day, because Pro earns at a higher rate and paid months build your cash-out allowance. Movecoins is offered only in the United States, so we also store the country of your app store account, which the app reports, and the days on which it was the United States. When you redeem Movecoins for a gift card, we collect:

  • your confirmation that you are at least 18 and a legal U.S. resident, with the time you confirmed;
  • the email address the card should be sent to, and a salted one-way hash of it (used to stop the same person claiming the one-time first-card offer twice);
  • the card amount and the Movecoins it cost;
  • the country our subscription manager (RevenueCat) last saw you in, which it works out from your IP address. We use it only to check that you are redeeming from the United States, and we do not store it;
  • the version of the Movecoins Program Terms that applied;
  • the delivery status from our rewards provider, Tremendous.

  We do not collect your state of residence for Movecoins. We may ask for reasonable proof of age, identity, or residence if a redemption looks ineligible or fraudulent.

  To protect the program from fraud, we also keep security records when you turn on Movecoins, when you redeem, and when your activity syncs while Movecoins is on. Each record holds: a one-way, salted code made from your IP address (we do not store the address itself); a random ID the app creates and keeps on your device; your device model and platform; the app version; and whether the app passed an integrity check (see "App integrity checks" below). We use these records only to spot fake activity and linked or duplicate accounts. On iPhone, the device ID stays on the device even if you delete and reinstall the app, so that one device is recognized as the same device. We do not use it for advertising and we do not share it with advertisers.

• App integrity checks. When you turn on Movecoins, redeem, or sync activity, the app asks Apple (App Attest) or Google (Play Integrity), through Google's Firebase App Check, to confirm the request comes from a genuine copy of MoveTogether on a real device. Apple or Google returns a short-lived token that we check on our servers. The check does not include your health data, your Movecoins, or your account details.

• Screen sharing with support. While helping you, support can ask to see your screen, either as a request in the app or, in the app's support chat, as a card our AI support agent can offer. The app shows the request and asks you to allow it or decline. If you allow it, a live video of your screen is sent to a member of our support team, who watches while you share. Our AI support agent does not see the video. What that video includes depends on your device. On iPhone, only the MoveTogether app is shared, not other apps. On Android 14 and later, Android asks what to share; the app asks you to choose to share one app and pick MoveTogether, so only MoveTogether is shared. If you choose to share your entire screen instead, everything on your screen is shared. On Android 10 through 13, Android shares your entire screen, including other apps you open and notifications that appear while you share, so close anything private before you allow it and avoid opening other apps until you stop. Within MoveTogether, the video can show anything visible in the app, including your health and fitness data, rings, competitions, and settings. MoveTogether's chat screens are hidden while you share; this does not hide other apps or notifications when your entire screen is shared. Sharing starts only after you tap Allow and approve your device's screen recording or screen sharing prompt, shows a banner in the app the whole time (on Android, also a notification with a Stop button), and ends when you tap Stop or after 30 minutes. We do not record the video. If the share was offered in your support chat and the share's chat says its messages are saved, the messages you and support exchange during the session are saved in that support conversation, like any other support message. Otherwise the session's messages are not saved. Pointers and drawings are never saved. For any share offered in your support chat, the conversation shows when the share ended and how long it lasted. Our AI support agent is set to stay quiet in your support chat while a share offered there is running. We keep a record that a session happened (who asked, when it started and ended, whether you allowed or declined it, and, for a share offered in the chat, which support conversation it belongs to).

• Showing one screen to our AI support agent. In the support chat, our AI agent can ask to see one screen. Nothing is sent unless you tap Show me on that request and then the button that sends it, which takes one picture of the MoveTogether screen you are on. Chat screens are hidden in it; other apps, the keyboard, and notifications are not in it. It can show anything on that screen, including health and fitness data. We send it to Anthropic, our AI provider, which turns it into a short description, masking names, email addresses, and phone numbers. We do not store the picture; your phone keeps it to show you in the chat, never in backups, deleting it after 30 days or when you sign out. We keep the description with your support conversation, and our AI agent reads only the description. If text in it looks like instructions to an AI, we add a private note for our support team. A request you don't answer ends after 10 minutes.

• Historical waitlist sign-ups. If you previously joined a website waitlist, we may retain the email address you provided to send the related updates and meet our recordkeeping obligations.

• The Board sign-up. If you submit The Board sign-up form, we collect your email address and the consent and subscription information needed to process that request. Submitting the clearly labeled form completes your opt-in to The Board. The Board is optional marketing email and is separate from in-app Updates, push notifications, support, data exports, and transactional notices. We do not send a confirmation or welcome email as part of sign-up.

Health and fitness data

With your permission, MoveTogether reads health and fitness data from Apple Health (HealthKit) on iPhone and Android Health Connect on Android. Wearables and fitness apps, such as Apple Watch, Garmin, Fitbit, Pixel Watch, Samsung Galaxy Watch, Oura, WHOOP, Polar, Strava, and Ultrahuman, reach us through those services when you turn on their sharing there. This may include:

• Steps, active energy / calories burned, exercise minutes, and Apple Activity ring / summary data
• Workouts, including type, duration, and distance
• Heart rate, resting heart rate, and heart rate variability (HRV)
• Sleep analysis
• Body mass / weight

Apple Health (iPhone). On iPhone, we ask Apple Health for permission to read eight data types: steps, active energy, workouts (including their type, duration, and distance), heart rate, sleep analysis, body mass (weight), your Apple Activity ring summary, and Apple exercise time. You choose which of them to allow in the Apple Health permission sheet.

Android Health Connect. On Android, depending on your enabled features and entitlement, we may read up to six Health Connect data types if you grant the relevant permissions: steps, active calories burned, exercise sessions, sleep sessions, distance, and weight measurements. Every member is asked for the three activity types and, optionally, sleep sessions and distance; Pro members can also explicitly enable weight from Settings → Data Sources → Health Connect, including after an upgrade. An entitlement change never opens a permission prompt automatically. Steps, active calories, and exercise sessions power activity progress. Distance is used for Distance competitions. Sleep sessions are used by any member for Sleep competitions and Coach Mo context, and Pro members can also use sleep sessions, duration, stages, and efficiency for Recovery and Morning Brief. Pro members can use weight measurements for automatic Weight trend/history and BMI progress without manual entry; BMI uses the height you enter in the app. Health Connect supplies measurements for this fitness feature, not a medical assessment, and does not provide Oura's proprietary numeric Sleep Score. We ask separately before reading in the background to keep authorized data current. The Android app reads back at most 30 days and does not request Health Connect's separate history permission. Health Connect access is optional. Declining or revoking one permission or data type stops only future reads covered by that revoked permission or data type; it does not delete copies already stored in your MoveTogether account (see Sections 5, 7, and 8).

Earlier direct wearable connections (ended October 9, 2026). Before app version 2.1.1, some members connected a wearable account (such as Google Health/Fitbit, Garmin, WHOOP, Strava, Polar, Oura, or Ultrahuman) to MoveTogether directly, and that data passed through a wearable-sync system that we operated ourselves on our cloud hosting provider, Railway (see Section 4). These direct connections ended on October 9, 2026, and we no longer receive data through them. We have deleted that wearable-sync system's data, including its database, cache, webhook-delivery service, and backups, and including copies relating to accounts that had already been deleted. We now read health and fitness data only from Apple Health or Health Connect, as described above; to keep your wearable's data reaching MoveTogether, turn on its sharing with Apple Health or Health Connect. Data received through a direct connection before it ended, which could include blood oxygen (SpO2) and respiratory rate, stays in your account and is handled under this Policy.

We use this data to power your rings, streaks, scores, leaderboards, competitions, and AI coaching. If you contact support about a sync problem, we may record, for up to 7 days, how much activity each of your sources (such as your iPhone, watch, or a fitness app) reported, so support can find the cause. We delete those records after 30 days. If you turn on Movecoins, we also use your daily step and exercise-minute totals, from the day you turn it on until you turn it off, to work out whether a day counts as an active day and how many Movecoins you earned. We do not use activity from before you turned Movecoins on, or after you turned it off, for Movecoins. Implausible totals are treated as data errors. Some of this data syncs automatically in the background so your stats stay current. We treat health and fitness data as sensitive. We do not sell it, we do not use it for advertising, and we do not send it to our rewards provider.

Information collected automatically

• Usage and product analytics. On iOS, when product analytics is enabled and PostHog is configured, we use PostHog to understand how the app is used, such as which features you use, screens you view, and session length, so we can improve the Service. On Android, PostHog is controlled by the account-scoped "Help improve MoveTogether" setting. While that setting is enabled, Android sends our explicit, bounded product events together with automatically captured screen views, application lifecycle events (install, update, open, and background), and deep-link opens including the link URL, its query parameters, and the referrer, as well as JVM uncaught-exception crash/error diagnostics.
• Session replay. On iOS, when product analytics is enabled and PostHog is configured, and on Android while the account-scoped "Help improve MoveTogether" setting is enabled, we may record masked app interactions to help us diagnose problems and improve usability. On Android the recording is a screenshot-based replay in which text inputs and images are masked; touch interactions are recorded as part of the replay, and device log (Logcat) capture is disabled.
• Diagnostics. On iOS, when product analytics is enabled and PostHog is configured, PostHog may process crash/error and performance diagnostics to help us find and fix bugs. On Android, while the account-scoped "Help improve MoveTogether" setting is enabled, PostHog processes JVM uncaught-exception crash/error diagnostics to help us find and fix bugs. Android does not enable network-content capture or Logcat capture. We strip free-form exception messages before Android crash diagnostics leave the device, and do not intentionally send health data or messages through this diagnostic path.
• Advertising and marketing attribution. Depending on your plan, you may see Google AdMob banner, native, and rewarded ads. These ads are non-personalized and contextual; where required, we use Google's User Messaging Platform (UMP) to obtain consent. Pro is ad-free. Rewarded ads unlock in-app perks only; watching an ad never earns Movecoins. Starting with iOS app version 2.1.2, we do not ask for Apple's App Tracking Transparency (ATT) permission, do not access Apple's Identifier for Advertisers (IDFA), and do not use a third-party mobile measurement provider. To see which Apple Ads campaigns lead to installs, RevenueCat collects Apple's Search Ads attribution token and exchanges it with Apple for the campaign, ad group, and keyword behind the install. Apple's SKAdNetwork may also send delayed, aggregate install reports for campaigns we run on Meta or TikTok; these do not identify you, and we do not use a Meta or TikTok SDK. In iOS app versions before 2.1.2, we could ask for ATT permission at the end of onboarding or from Privacy Settings. Only if you allowed it, our former mobile measurement provider, Tenjin, received the IDFA, a Tenjin device identifier, basic app, device, and network information, and a limited set of conversion events (completing registration, completing onboarding, joining a competition, starting a trial, and a paid subscription with product identifier, quantity, price, and currency), and could send measurement postbacks to Meta, TikTok, and Apple Ads. We never sent Tenjin your MoveTogether account ID, profile, email, phone, precise location, health or fitness data, social data, content, or transaction identifiers. You can turn this off in iOS Settings > Privacy & Security > Tracking > MoveTogether, and updating the app to 2.1.2 or later stops it.
• Device information. Device model, operating system version, app version, and network and device characteristics.
• Website analytics, cookies, and storage. Our public marketing website uses cookieless Vercel Analytics and Speed Insights for aggregate traffic and performance, and cookieless Ahrefs Web Analytics for aggregate traffic, referring sites, and visitor country, browser, device, and language. Ahrefs sets no cookies and stores no persistent identifier: it counts daily unique visitors from a hash of your IP address, your user agent, and a salt regenerated every 24 hours, discarding the raw IP address, so visits cannot be linked across days, devices, or other websites. It is not loaded on the authenticated portal and we do not use it for advertising. Microsoft Clarity also collects limited, cookieless page-view and basic interaction data, including clicks and scrolls, before consent or after optional analytics are declined. If you allow optional analytics, Clarity can additionally associate page views across a pseudonymous visitor and session to provide behavioral metrics, heatmaps, masked DOM reconstruction/session replay, interactions, page and device characteristics, performance, and diagnostics. Clarity may use first-party analytics cookies only after that consent. It is not loaded on authenticated portal surfaces, and we do not ask Clarity to connect its pseudonymous identifiers to a MoveTogether account or use it to track account, health, social, form, or support-chat data or for targeted advertising. If you allow optional analytics, we also load Google Analytics 4 on our public marketing pages to measure aggregate usage such as page views, sessions, and traffic sources; it sets first-party _ga cookies, is not loaded before consent or on the authenticated portal, and we do not enable Google Signals, advertising features, or ads personalization. If you allow optional analytics, we also load Searchable on our public marketing pages to measure how much of our traffic arrives from AI assistants and AI search tools such as ChatGPT, Perplexity, Gemini, and Claude; it stores a first-party visitor and session identifier on your device and records pages viewed, the referring URL and campaign parameters, and basic page and device characteristics. It is not loaded before consent or on the authenticated portal, and we do not use it for targeted advertising. With your consent, we also load the Reddit advertising pixel on our public marketing pages (never the account portal) to measure conversions from our Reddit ads and reach relevant audiences on Reddit. Unlike our analytics tools, this is advertising technology: it shares limited website event data (such as page visits and clicks on our download and other calls to action) with Reddit and sets advertising cookies, and it loads only where you have consented to advertising cookies. Consent is managed through our consent banner (c15t / consent.io), which applies prior opt-in where required (e.g. EU/UK) or opt-out elsewhere (e.g. some US states). This is cross-context behavioral advertising as described in Section 7; you can withdraw consent at any time through Cookie preferences, and we do not send Reddit your health, social, or account data. See our Cookie Policy for details. The mobile app does not use browser cookies; in-app analytics and marketing attribution are described above.

Information from third parties

• Sign in with Apple. If you sign in with Apple, we receive your Apple ID and, if you choose to share it, your name and an email address (which may be a private relay address).
• Sign in with Google. If you sign in with Google, we receive your Google profile name and email address.
• Wearables and fitness apps. Data from your wearable reaches us through Apple Health or Health Connect, under the permissions you grant there. Earlier direct wearable connections ended on October 9, 2026 (see "Health and fitness data" above), and we no longer receive data through them.
• App stores and payment providers. Apple, our subscription manager (RevenueCat), and our web payment processor (Stripe) tell us your subscription and entitlement status so we can unlock features.

What we do not do

• Depending on your plan, you may see non-personalized, contextual third-party ads through Google AdMob; Pro is ad-free. We do not use health or fitness data, Apple's Identifier for Advertisers (IDFA), or cross-context behavioral advertising to serve those ads.
• We do not sell your personal information.
• We do not use your health and fitness data for advertising.

---

2. How We Use Your Information

We use the information we collect to:

• Provide MoveTogether's core features: activity tracking, rings, streaks, scoring, friends, competitions, leagues, leaderboards, communities, and direct messages
• Generate AI coaching, weekly reports, and personalized notifications through Coach Mo (see Section 4)
• Verify your phone number and protect account security
• Help you find friends who already use MoveTogether (contacts matching, with your permission)
• Send push notifications and service messages you have not turned off
• Process subscriptions
• Run Movecoins if you turn it on: calculate earned and expiring Movecoins from your activity and completed referrals; check your plan, allowance and eligibility when you redeem; send your gift card through our rewards provider; and prevent duplicate accounts, faked activity, and other abuse of the program
• Show non-personalized, contextual ads on plans that include them and measure advertising campaigns using the privacy-preserving methods described in Section 1
• Provide customer support
• Understand usage and measure how our marketing performs so we can improve the Service
• Detect, prevent, and address fraud, abuse, cheating, and violations of our Terms or Acceptable Use Policy
• Comply with legal obligations

We do not use your information to make solely automated decisions that produce legal or similarly significant effects on you. Movecoins earnings are calculated automatically by fixed published rules. Our systems may flag activity or redemptions that look unusual, for example identical step totals day after day or several accounts on one device. A flag never refuses a redemption by itself: it sends the redemption to a person on our team, who decides. If we hold, reverse, or refuse a redemption, you can ask a person to review that decision by contacting us through our in-app support chat.

---

3. How We Share Your Information with Other Users

MoveTogether is social, so some information is shared with other users by design:

• Public profile. Depending on your privacy settings, your username, abbreviated name, avatar, bio, subscription status, and fitness signals such as current and longest streak, ring progress, rings-closed counts, competition points, and achievements may be visible to others.
• Friends. People you add as friends can see your activity and ring progress and may see you in shared activity feeds.
• Competitions, leagues, and leaderboards. Your rank, points, and identity are visible to other participants, and may appear on global leaderboards. In a Sleep competition, your points are your minutes asleep, so the other participants can see your nightly and total sleep time; sleep stages are not shown to them.
• Communities and chats. Content you post in communities, group chats, and direct messages is shared with the participants of those spaces.

You can control much of this through your in-app privacy settings (for example, profile visibility). Please use them to set the level of sharing you are comfortable with.

---

4. Service Providers and Other Third Parties

We use service providers to operate the Service and advertising platforms to deliver contextual ads or measure our campaigns. Our service providers may access only the data needed to perform their function and are required to protect it. Advertising platforms may process the limited advertising and attribution data described below under their own terms and privacy policies. Some third parties apply only to specific versions or platforms of the app.

AI coaching. For Coach Mo text coaching, insights, and reports, we send Anthropic the relevant fitness context (such as your goals, recent activity, and streaks), messages, and report data needed to generate the feature. The Coach text pipeline replaces your name and other people's names with placeholders before submitting prompts and does not include your MoveTogether user ID in those prompts. Other Anthropic-assisted support workflows may receive the content you submit and the minimum context needed to answer it. For Coach Mo voice, ElevenLabs receives spoken audio, relevant fitness context, your first name, and your user ID. Anthropic and ElevenLabs process this coaching data on our behalf to generate responses and voice, and do not use it to train their own models. Conversation data sent to our AI providers may be retained by them for a limited period for safety, debugging, and quality purposes, then deleted, in line with their terms. We also use automated tools to help detect content that may indicate self-harm or crisis, so we can surface support resources. Coach Mo's responses are AI-generated and are not medical or professional advice (see our Terms). You can delete your Coach Mo conversation history in the app, and deleting your account removes it.

Apple Intelligence for Coach Mo (optional). On supported iPhones, Pro members can turn on "Use Apple Intelligence" in Settings → Coach Mo. It is off unless you turn it on. When it is on, Coach Mo writes normal chat replies with Apple's Foundation Model on Apple's Private Cloud Compute servers instead of Anthropic. These replies are generated on Apple's servers, not on your phone. For each reply, your device sends Apple:

• the message you typed, exactly as you typed it, so any names you include are sent as written;
• Coach Mo's instructions and the same kind of coaching context described above (such as your goals, recent activity and workouts, streaks, competitions, and Coach Mo's memory notes), with your name and other people's names replaced by placeholders; and
• anything the model looks up while it answers: your Coach Mo memory notes (also with placeholders) and up to 30 days of your daily activity, including move calories, exercise minutes, steps, workouts, and sleep time. The model can also add, change, or archive Coach Mo memory notes, which we store as described above.

We do not include your MoveTogether user ID in what we send Apple. Apple states that Private Cloud Compute is designed so that data sent to it is used only to answer the request and is not stored. Apple processes these requests under its own terms and privacy policy, not under a contract with us, and we do not control how Apple runs Private Cloud Compute.

Turning this on does not keep your Coach Mo data only with Apple:

• Our servers still receive every message. We check it for safety, including automated screening by Stream, our moderation provider; count it against your plan; and save your message and Mo's reply to your Coach Mo history, as with any other Coach Mo conversation.
• If our servers recognize a message as a question about how to use MoveTogether, Anthropic answers it from our help documentation instead, with your name replaced by a placeholder.
• If Apple Intelligence is unavailable or cannot answer, Coach Mo uses Anthropic for that reply. Roast mode and Coach Mo features other than normal chat replies always use Anthropic.
• Messages and memory notes saved while the setting is on may later be sent to Anthropic, for example when you continue the same conversation on Anthropic or when Coach Mo uses its memory elsewhere.

You can turn the setting off at any time in Settings → Coach Mo. Deleting your Coach Mo conversation history or your account removes these conversations, as described above.

Support conversations. Live chat in the app, on our website, and in the account portal runs on Chatwoot. When you chat while signed in, Chatwoot receives the account identity and account details described above, along with your messages; a verification code generated by our servers confirms the conversation belongs to your account, so no one else can open it. Support may also start a chat with you in the app, for example to follow up on a request or a problem with your account; it appears in your support chat, you can reply or ignore it, and our team is told in Slack that it was sent, with your username and the reason but not the message. Website visitors who are not signed in chat without an account identity, and Chatwoot records the page they chatted from. Support email is also handled through Chatwoot. Support conversations and tickets from before support moved to Chatwoot remain in Intercom; no new support goes through it. Live chat messages and support emails may first be answered by our AI support agent, and a member of our team can step in at any point; the assistant's replies are AI-generated and may be wrong, so ask for a person if something does not look right. The agent runs on Skydive, and Anthropic's Claude writes its replies; Anthropic processes those conversations on our behalf and does not use them to train its own models. Support conversations are also shared in our Slack workspace so our team can follow and reply. When a problem needs our engineering team, the support agent can file a ticket for it in Linear, our issue tracker. The ticket holds the agent's summary of your request, with the email addresses and phone numbers we detect removed, a link to the conversation, and technical details about your app, device, syncing, and plan (see the table above). We do not add your name, email address, or MoveTogether user ID to the ticket, but the summary can include other things you wrote in the chat. Please do not send health details in a support chat or email unless they are needed to solve your problem. A support handoff from Coach Mo shows the message for you to copy and send yourself; it does not automatically send that message. Signing out of the app removes the saved chat link from your device. Deleting a Coach Mo conversation does not by itself delete a separate support conversation; contact us to request access to or deletion of support data under the rights and retention provisions below.

Feature ideas. You can send us an idea for the app from Home, from Settings, or by tapping "Send to the team" when Coach Mo offers it. We store the idea with your account, where you sent it from, your platform, app version and plan, and post it to our Slack workspace so our team can read it. Your username and account ID are shown to our team only if you turn on "OK to contact me about this"; ideas sent from Coach Mo are shared without your name. Ideas are deleted with your account.

Movecoins and gift cards. Our rewards provider, Tremendous, receives only what it needs to send your card: the delivery email, the amount, and an order reference. It never receives your health or fitness data. When you open your reward, you choose a card from the brands Tremendous offers, and the brand or card issuer then processes your use of the card under its own terms.

We may also disclose information:

• For legal reasons, if required by law, regulation, legal process, or a valid government request.
• For safety, to protect the rights, property, or safety of DesignSpark Studio LLC, our users, or the public, including to enforce our Terms and investigate abuse.
• In a business transfer, if we are involved in a merger, acquisition, or sale of assets, in which case we will notify you.

---

5. Data Retention

• Account and profile data: retained while your account is active.
• Unfinished accounts: if you create an account but never finish setting it up, and then don't use the app for 30 days, we delete the account and its data. We email you at least 7 days before, and opening the app (and signing in, if it asks) keeps the account. We never delete an account this way if it has a paid plan or trial, any recorded activity, friends, or competitions.
• Health, fitness, social, and content data: retained while your account is active so the Service can function.
• Android Health Connect data: copies of the six Health Connect data types listed in Section 1 are retained while your account is active to provide the features you enable. A separately granted background-read permission can keep those copies current; the app reads back at most 30 days. Revoking a data-type or background permission stops only future reads covered by that permission; it does not remove copies already stored by MoveTogether. Delete your account to remove or de-identify those copies within the 30-day period described below.
• Voice audio and transcripts: we retain transcripts of your voice interactions while your account is active, and we delete them when you delete your Coach Mo history or your account. Our voice provider retains transcripts only for a limited period (currently up to 30 days) to help us troubleshoot, and does not retain your voice audio. Audio is used only to generate a response and is then discarded. Your voice is never used to build a voice profile.
• Analytics and diagnostics: where collected, including iOS analytics, replay, and diagnostics and Android product analytics, screen, lifecycle, and deep-link events, masked session replay, and JVM crash/error diagnostics, retained for up to 12 months, then deleted or aggregated.
• Microsoft Clarity website analytics: Microsoft ordinarily retains playback data for 30 days, with longer published periods for aggregate heatmaps and selected or favorited recordings. These are Microsoft service-level periods that may change; see Microsoft's current retention documentation.
• Google Analytics website analytics: Google retains user- and event-level Analytics data according to the property's data-retention setting (configurable up to 14 months); aggregated reporting may persist longer. These are Google service-level periods that may change; see Google's current data retention documentation.
• Reddit website advertising: where you consent, Reddit processes the website event data and advertising cookies from the Reddit pixel under its own retention practices; we do not attach these to your MoveTogether account. See Reddit's Privacy Policy.
• Advertising and marketing attribution: Apple's Search Ads attribution token is used once to retrieve campaign information and is not separately retained by us. The resulting campaign, ad group, and keyword records are stored with your subscription profile (at RevenueCat) while your account is active, and are deleted when you delete your account. Google, Meta, TikTok, Apple Ads, and (for data collected through iOS app versions before 2.1.2) Tenjin may retain advertising engagement or attribution data they hold under their own privacy policies; SKAdNetwork reporting is aggregated and may be delayed.
• Consent and verification records (e.g., phone opt-in): retained as needed to evidence consent and for security.
• Movecoins records: your Movecoins balance history, consent records, and redemptions are kept while your account is active. When you delete your account, unredeemed Movecoins and your cash-out allowance are cancelled, and your activity-based Movecoins history and consent records are deleted. Redemption records are kept for 3 years after you delete your account, then deleted. What we keep is limited to the redeemed amount and Movecoins cost, dates, plan, eligibility confirmations, terms version, provider order references, delivery status, and a salted one-way hash of the delivery email; the plain email address and the link to your account are removed when the account is deleted. We keep these records to show what was paid out, meet tax and accounting obligations, handle disputes, and stop the same person from claiming one-time offers again with a new account.
• Movecoins security records: the security records described in Section 1 are kept for 180 days and then deleted, and are deleted sooner if you delete your account. Flags on your account are kept while your account is active and deleted when you delete it. The outcome of a review of a redemption, and our reviewer's note, stay with that redemption record and are kept for the same period as the redemption record above.
• The Board sign-up records: we may retain the email address and Board Topic subscription state while you are subscribed, along with consent information needed to manage the subscription. If you unsubscribe, we may retain a suppression record as reasonably necessary to honor that choice; this means we do not promise to delete every email-related record immediately after an unsubscribe.
• De-identified or aggregated data: we may retain and use data that no longer identifies you (for example, aggregate usage statistics) indefinitely to operate and improve the Service.

When you delete your account, we delete or de-identify your personal data within 30 days, except where we must retain certain records to comply with law, resolve disputes, or prevent fraud and abuse. You can request data export and account deletion from within the app or through your authenticated web account controls at any time.

Deleting specific data. Your health and fitness data syncs continuously from Apple Health or Health Connect, so we do not support deleting individual days, workouts, or metrics on their own while your account is active. To have us delete the health and fitness data we store, delete your account, which removes or de-identifies it as described above.

---

6. Data Security

We use technical and organizational measures to protect your information, including:

• Encryption in transit (TLS/HTTPS) for all network communications
• Encryption at rest for stored data, and secure storage for credentials on device
• Strict server-side access controls; the app speaks only to our backend APIs, which enforce access rules
• Regular review of our data practices

No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we take commercially reasonable steps to protect your data.

Where your data is stored. We are based in the United States, and we and our service providers store and process your information primarily on cloud infrastructure in the United States (including Amazon Web Services). Some features rely on additional providers; see Section 4.

Security incident notification. If we become aware of a security breach affecting your personal information, we will notify you and any regulators as required by applicable law, generally by email to the address associated with your account.

---

7. Your Privacy Rights and Choices

Wherever you live, you can:

• Access / export your data (in-app data export)
• Correct your profile and account information
• Delete your account and associated data from the app or through your authenticated web account controls. Deletion stops future Health Connect collection and removes or de-identifies the Health Connect data we stored within 30 days, subject to the Section 5 exceptions.
• Control sharing through your in-app privacy settings
• Turn product analytics on or off with the "Help improve MoveTogether" toggle in the app's Privacy settings (Data & analytics).
• Manage website analytics and advertising consent through Cookie preferences or the Do Not Sell or Share My Personal Information link in the public marketing-site footer (both open the same controls). Optional Microsoft Clarity, Google Analytics, and Searchable cookies and identifiers and the Reddit advertising pixel use consent as their basis. Consent is managed by our consent platform (c15t / consent.io), which applies the model required for your location — prior opt-in where required (e.g. EU/UK) or opt-out elsewhere (e.g. some US states); you can grant, decline, or withdraw at any time from the footer controls. Declining or withdrawing serves as your opt-out of the Reddit cross-context behavioral advertising described below, and where your browser sends a recognized opt-out preference signal such as Global Privacy Control, our consent platform treats it as an opt-out of both advertising and analytics cookies, so neither the Reddit pixel nor Google Analytics, Microsoft Clarity, and Searchable load. Vercel's and Ahrefs' aggregate cookieless analytics remain available.
• Advertising consent where applicable: where required by law, Google's UMP presents the applicable choices before AdMob ads are requested. The available choices and their handling are determined by Google and local law.
• Turn off advertising tracking in iOS app versions before 2.1.2 in iOS Settings > Privacy & Security > Tracking > MoveTogether. This stops Tenjin; version 2.1.2 and later do not track.
• Manage push notifications in app and device settings, and your tracker in Settings → Data Sources
• Manage Android Health Connect access in Health Connect or Android settings. You can revoke any of the six data-type permissions or background access at any time. Revoking a permission or data type stops only future reads covered by that revoked permission or data type: revoking Sleep stops only future sleep reads, revoking Distance stops only future distance reads, and revoking Weight stops only future automatic-weight reads. Core activity syncing continues where authorized, manual body entry remains available, and account deletion is required to remove health data already stored by MoveTogether.

To make a request or ask a question, email privacy@movetogetherfitness.com or contact us through our in-app support chat. We may need to verify your identity before acting on a request. We respond within the time required by applicable law — generally one month for EEA/UK (GDPR) requests and 45 days for California (CCPA) requests — and we will tell you if we need an extension the law allows.

For residents of the EEA and UK (GDPR / UK GDPR)

• Data controller: DesignSpark Studio LLC. Contact via privacy@movetogetherfitness.com or our in-app support chat.
• Lawful bases. We process your data to perform our contract with you (providing the Service), based on your consent (optional Microsoft Clarity, Google Analytics, and Searchable website analytics and the Reddit advertising pixel where consent applies; reading Health data and connecting wearables; SMS verification; contacts matching), and for our legitimate interests (security, fraud prevention, limited cookieless website measurement, and improving the Service). We rely on legitimate interests for Clarity's no-consent mode only where applicable law permits it and after any required balancing test; it does not replace consent where the use of storage or access technologies, or related processing, requires consent.
• Your rights. Access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent at any time.
• International transfers. We are based in the United States, so your data is processed in the US. Where we transfer EEA/UK data, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
• Complaints. You may lodge a complaint with your local supervisory authority.

For California residents (CCPA/CPRA)

• Categories collected: identifiers (name, email, phone, user ID, and device identifiers), account/profile information, health and fitness data (sensitive personal information), photos, user content, commercial information (subscription/purchase status), rewards information (Movecoins earned and redeemed, and gift card amounts, if you use Movecoins), internet/usage activity, and inferences used for coaching.
• Purposes: as described in Section 2.
• We do not sell your personal information. Only with your consent, we share limited marketing-website activity with Reddit through the Reddit advertising pixel for cross-context behavioral advertising (see Section 4); it applies only where you have consented to advertising cookies, and declining or withdrawing consent opts you out. You can exercise this opt-out at any time using the Do Not Sell or Share My Personal Information link (or Cookie preferences) in the marketing-site footer. Apart from that consent-based Reddit sharing (which began in August 2026), we have not sold your personal information or shared it for cross-context behavioral advertising in the 12 months before the "Last Updated" date at the top of this Policy.
• Sensitive personal information (such as health data) is used only to provide the Service and the purposes described here.
• Your rights: to know, access, correct, delete, and limit use of sensitive personal information. We will not discriminate against you for exercising your rights.

To exercise these rights, email privacy@movetogetherfitness.com or contact us through our in-app support chat.

Notice of Financial Incentive (Movecoins)

Movecoins is an optional rewards program. California law may treat it as a "financial incentive" because it rewards you while using personal information. This notice explains it before you join.

• What it is. You earn Movecoins for active days and monthly activity bonuses, a one-time welcome gift, and friends you refer who become active. Movecoins are never earned by watching ads. Subscribers on a paid Member or Pro plan who are 18 or older and live in the U.S. can redeem Movecoins for digital gift cards of $5, $10, $15, or $20, within a cash-out allowance that grows by up to $5 a month on Pro and up to $1 a month on Member, up to $20. The full rules, including earning rates, prices, expiry, and eligibility, are in the Movecoins Program Terms shown in the app before you turn Movecoins on.

• Personal information involved:

  • identifiers (user ID, email);
  • activity and fitness data (daily steps and exercise minutes), which is sensitive personal information;
  • commercial information (your plan and your redemption history);
  • your age and residency confirmations.

  We use this information to run the program, and we share it only as described in Section 4. We do not sell it, we do not share your health data with Tremendous or any ad network, and we do not use your health data for advertising.

• How to opt in. Turn on Movecoins in the app and accept the Program Terms. Movecoins is off until you do, and no activity is used for Movecoins before then.

• How to withdraw. You can turn off Movecoins at any time in the app. Turning it off stops new earning straight away; Movecoins you already earned stay in your balance until they expire and can still be redeemed if you turn Movecoins back on and are otherwise eligible. Withdrawing does not affect the rest of MoveTogether.

• Value of your data. We estimate the value of the personal information involved as roughly equal to the value of the rewards the program provides: at most the cash-out allowance for your plan, which is up to $5 a month in gift cards for Pro and $1 a month for Member, with unused allowance carrying over up to $20. We reached this estimate from the expected cost to us of the rewards delivered. We do not separately sell or price your data.

• No discrimination. We will not deny you service, charge different prices, or give a different quality of service because you exercise your privacy rights. Movecoins requires activity data because activity is what it rewards. If you turn Movecoins off or delete that data or your account, you can no longer earn Movecoins.

For residents of other U.S. states

If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive consumer privacy law, you have the right to confirm whether we process your personal data; to access, correct, and delete it; to obtain a portable copy; and to opt out of targeted advertising, the "sale" of personal data, and certain profiling. We do not sell personal data. We use personal data for targeted advertising only through the Reddit advertising pixel on our marketing website, and only where you have consented to advertising cookies; you can opt out at any time by declining or withdrawing consent in Cookie preferences. We do not use personal data for profiling that produces legal or similarly significant effects. We process sensitive data (such as health and fitness data) only to provide the Service, with your consent where required.

To make a request, email privacy@movetogetherfitness.com or contact us through our in-app support chat. We may need to verify your identity before we act, and you may use an authorized agent to submit a request on your behalf. Right to appeal: if we decline your request, you may appeal by replying to our decision or contacting us through our in-app support chat. If you have concerns about our handling of an appeal, you may contact your state attorney general.

Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no common industry standard for DNT, we do not currently respond to DNT signals. Where required by law, we honor recognized opt-out preference signals such as Global Privacy Control (GPC).

Marketing communications

We send service and account messages necessary to operate the Service. We send marketing or promotional messages only where permitted, and you can opt out at any time using the unsubscribe link in those messages or your in-app and notification settings. Opting out of marketing does not stop essential service messages.

The Board. The Board is a separate, optional marketing email. Submitting its clearly labeled sign-up form completes your opt-in; we show success on the page and do not send a confirmation or welcome email as part of sign-up. We record the preference only for The Board. Submitting the form does not clear an existing global unsubscribe or change preferences for unrelated email topics. Every Board marketing issue includes Resend-managed unsubscribe and preference options, which you can use to stop future Board email.

California "Shine the Light"

California Civil Code Section 1798.83 permits California residents to request information about our disclosures of personal information to third parties for their own direct marketing purposes. We do not share personal information with third parties for their direct marketing. You may contact us to confirm.

---

8. Health and Fitness Data

Health and fitness data is sensitive, and we handle it accordingly:

• Data minimization. We collect only the health and fitness data needed to provide the features you use, such as rings, streaks, scores, competitions, leagues, leaderboards, and AI coaching.
• Movecoins. Only if you turn on Movecoins, we use your daily step and exercise-minute totals to decide whether you earned Movecoins, and only for days from when you turned it on until you turn it off. We do this only because you asked to earn rewards, and the reward is provided directly to you by us. We send our gift card provider the delivery email and the card amount, never your health data. We never send health data, or events that reveal your activity (such as "earned an active day"), to advertising or attribution partners.
• Apple Health (HealthKit) data is read with your explicit permission and is used only to provide app features. We do not use HealthKit data for advertising or marketing, and we do not share it with third parties except the service providers in Section 4 that are necessary to deliver features you use (for example, AI coaching), and Apple, if you turn on Apple Intelligence for Coach Mo (see Section 4).
• Android Health Connect data is read from your on-device Health Connect store only after you grant the relevant permissions. The Android app reads up to six types, as described in Section 1: steps, active calories burned, and exercise sessions for all members, plus sleep sessions and distance for any member who grants them, and weight for Pro members who enable it. Background reads require a separate Health Connect permission; the app reads back at most 30 days and does not request the history permission. We do not use Health Connect data for advertising or marketing, and we do not send it to Google for advertising.
• You can revoke Health permissions at any time in iOS Settings, Health Connect, or Android settings, and change your tracker in Settings → Data Sources. Revocation stops future collection; it does not delete the data already stored by MoveTogether. Connecting Apple Health or Health Connect is optional, but some features (such as rings, streaks, and competitions) will not work without activity data.
• To power features like leaderboards, competitions, streaks, and AI coaching, your health and fitness data is stored on our servers (US cloud infrastructure), not only on your device. It is protected as described in Section 6 and shared only with the Section 4 providers needed to deliver features you use.
• MoveTogether is a fitness and motivation product, not a medical device or medical service. Coach Mo and any insights we generate are for general fitness and motivation only and are not medical advice. See the Health & Fitness Disclaimer in our Terms.

Not HIPAA / not PHI. DesignSpark Studio LLC is not a "covered entity" or "business associate" under the U.S. Health Insurance Portability and Accountability Act (HIPAA), and the health and fitness information you provide through the Service is not protected health information under HIPAA.

Consumer Health Data (Washington My Health My Data Act and similar laws)

Some states, including Washington (My Health My Data Act), Nevada, and Connecticut, regulate "consumer health data" collected by apps that are not covered by HIPAA. This section describes how we handle that data and applies in addition to the rest of this Policy.

• Categories of consumer health data we collect. Activity and fitness metrics (steps, active energy/calories, exercise minutes, Apple Activity ring/summary data, and workouts including type, duration, and distance); cardiovascular and physiological metrics (heart rate, resting heart rate, heart rate variability, and blood oxygen and respiratory rate received from earlier direct wearable connections before they ended on October 9, 2026); sleep analysis; body weight and related measurements you enter (including goal weight and weight history); and information you provide to or generate with Coach Mo about your health, fitness, and goals. On Android, our Health Connect collection is limited to six types: steps, active calories burned, exercise sessions, sleep sessions, distance, and weight measurements. Apple Health may provide the broader categories described above.
• Where it comes from. Apple Health (HealthKit), Android Health Connect, earlier direct wearable connections until they ended on October 9, 2026 (see Section 1), and information you enter directly. Android Health Connect data comes from the on-device Health Connect store, only after you grant the relevant permission.
• Why we use it. To provide the features you enable: activity rings, streaks, scores, leaderboards, competitions, leagues, Sleep competitions for any member, Pro sleep and body/BMI experiences, AI coaching, weekly reports, and personalized insights through Coach Mo. If you turn on Movecoins, we also use your daily steps and exercise minutes to calculate the rewards you earn. A separately granted background-read permission can keep the Android data types you authorize current; the app reads back at most 30 days. We do not use consumer health data for advertising, and we do not sell it.
• Who we share it with. Our gift card provider for Movecoins does not receive consumer health data. Otherwise, only the service providers in Section 4 that are necessary to deliver the features you use, for example our backend provider (Supabase), Railway, which hosted the wearable-sync system we operated for earlier direct connections until they ended on October 9, 2026, our AI providers (Anthropic and ElevenLabs) for Coach Mo, Apple's Private Cloud Compute for Coach Mo replies if you turn on Apple Intelligence for Coach Mo, and our support providers (Chatwoot, Skydive, Anthropic, Slack, and Linear, plus Intercom for requests made before support moved to Chatwoot) when you include health details in a support request or show our AI support agent a screen, since health data shown on that screen is part of the picture, and Stream when you choose to share your screen with support, since health data shown on screen is part of the live video. Each is contractually limited to processing the data on our instructions for those purposes, except Apple, which processes Coach Mo requests you choose to send through Apple Intelligence under its own terms (see Section 4). We do not share consumer health data with third parties for their own purposes, and we do not send Android Health Connect data to Google for advertising.
• Consent. We collect and share consumer health data based on your consent, given when you enable Apple Health access, or grant Android Health Connect permissions, and use the related features. Movecoins uses your consumer health data for an additional purpose, calculating rewards. We ask for your consent to that purpose separately, on the screen where you turn on Movecoins, we record that consent and the versions you accepted, and you can withdraw it at any time by turning Movecoins off. Connecting is optional, and you can decline. Background access is separately optional on Android. Where a state requires separate consent before we share consumer health data, we obtain it before sharing.
• Your choices and rights. You can withdraw consent at any time by revoking Health permissions in iOS Settings, Health Connect, or Android settings, and by changing your tracker in the app. Revocation stops future collection but does not delete data previously stored by MoveTogether. You can request access to your consumer health data, a list of the categories of third parties and the specific providers we have shared it with, and deletion of the data. Because this data syncs continuously from Apple Health and Android Health Connect, we do not support deleting individual days, workouts, or metrics on their own while your account is active; to delete the consumer health data we store, delete your account through the app or authenticated web account controls (see Section 5), and we will delete or de-identify it within 30 days, except where retention is required by law.
• How to reach us. Email privacy@movetogetherfitness.com or contact us through our in-app support chat.

---

9. Children's Privacy

MoveTogether is not intended for children under 13, and we do not knowingly collect or solicit personal information from anyone under 13. In the EEA and UK, where a higher digital-consent age applies (up to 16 in some countries), the Service is not intended for users below that age. By using the Service, you represent that you are old enough to do so, or that a parent or guardian has consented on your behalf where required.

Users aged 13 to 17 who turn on Movecoins can earn Movecoins but cannot redeem them, because redeeming requires being 18 or older and holding a paid plan. Movecoins expire on the normal schedule while a user waits to turn 18. Ads shown to all users are non-personalized and contextual.

If we learn that we have collected personal information from a child below the applicable age, we will deactivate the account and take reasonable steps to delete that information promptly. If you believe a child has provided us personal information, contact us through our in-app support chat and we will address it.

---

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date, post the new version at https://movetogetherfitness.com/privacy, and, where appropriate, notify you in the app or by email. Your continued use of the Service after changes take effect constitutes acceptance.

This version of the Privacy Policy is effective October 9, 2026. The Privacy Policy was first effective June 30, 2026.

---

11. Contact Us

• Privacy requests: privacy@movetogetherfitness.com
• Website support: visit MoveTogether support
• In-app: open the support chat at Settings → Resources → Contact Support
• Company: DesignSpark Studio LLC (Ohio, USA)
• Mailing address: DesignSpark Studio LLC, 815 Superior Ave. E., Ste 1618-A2, Cleveland, OH 44114-2706, USA
• Website: https://movetogetherfitness.com