Privacy Policy
Last updated 8 August 2026 · Version 2026-08-08
This policy covers both the Moovio app and this website. It is written to be read, not to be survived. If anything here is unclear, email folu.adelagun@moovio.co.uk and we'll explain it.
Moovio is run from the United Kingdom and this policy is written under UK GDPR and the Data Protection Act 2018. Moovio is the data controller.
What we collect
If you register interest as a Founding Coach on this website: your name and email, and — only if you choose to give them — your phone number, coaching niche or specialism, your area, and how you heard about Moovio. We record the date you submitted and the version of this policy in force at the time.
If you complete the trainer survey: your survey answers. The survey runs on Google Forms, so Google holds a copy too. It's used for product research only and is kept separately from everything else.
If you use the app: your account details (name, email, and your phone number if you verify one), your profile, and your postcode — which we convert into an approximate map location so you can find coaches near you and they can find members near them. We store the coordinates for your postcode area, not your street address.
Then, as you use it: what you book and buy, the messages you exchange with your coach, what you post in communities, your reviews, your nutrition logs, and any activity or health figures you record. If you're a coach, also your certifications and the evidence you upload for them, and the payout details Stripe needs to pay you.
Health and fitness information is treated as special-category data. No coach sees any of it until you switch sharing on for that specific coach and that specific type of data, and you can switch it back off at any time.
What you're agreeing to on this website
By submitting the register-interest form you're telling us you want to be considered for the Founding Coach Program. Marketing email is a separate, optional tick — if you don't tick it we'll still contact you about your application, and nothing else.
Registering interest doesn't commit you to anything and doesn't cost anything. The founding cohort is limited and we can't offer a place to everyone who registers, so submitting the form isn't a guarantee of one — we'll be in touch about whether and when your area is opening.
We don't sell it
We do not sell your details, and we do not share them with any third party for their own marketing, advertising or profiling — ever. We don't run advertising, and there is no analytics, tracking or crash-reporting company in the app collecting your behaviour.
What is true is that running Moovio takes other companies — somebody has to host the database, take the payment, draw the map. Those companies are listed in full below. They act on our instructions under contract, they can't use your data for their own purposes, and we'd only ever disclose data beyond that if the law required it.
Who else handles your data
This is the complete list of companies that receive personal data from Moovio, what each one gets, and why.
- Supabase — Database, sign-in and file storage
Effectively everything you give us: your account details, profile, postcode and the map coordinates derived from it, photos, community posts, messages with your coach, nutrition logs and any health figures you record.
Processes data in: Our database runs in Supabase's London region. Supabase itself is a US company.
- Railway — Hosts our API server
Everything the app sends to or receives from our server passes through it, including the requests above.
Processes data in: United States
- Vercel — Hosts this website and the Moovio web app
Standard request information — your IP address, browser and the pages you load.
Processes data in: United States
- Stripe — Payments, subscriptions and coach payouts
Your card details, which you type on Stripe's own checkout page and which never reach us. Alongside that Stripe receives your Moovio user ID, the amount, and what you bought. For coaches taking payouts, Stripe also receives the identity details it is legally required to verify. If you buy something physical, Stripe collects your delivery address at checkout — we don't store it; we read it back from Stripe to show the coach who has to post your order.
Processes data in: Ireland and the United States
- Anthropic — AI coaching drafts and automatic content checks
This is the one to read carefully. Two things go to Anthropic. First, content you write in public — community posts, reviews and coach bios — is sent to Anthropic's Claude models to be checked for abuse and unsafe content before it appears. Second, when a coach uses the AI Coach to draft something for you, the specific data you consented to share with that coach (your watch figures, or your nutrition logs) is sent along with their instructions, so the draft is actually about you. Meal names and ingredients typed into meal research go too. We use Anthropic's commercial API, under terms that do not allow your data to be used to train their models.
Processes data in: United States
- FatSecret — Food and nutrition database
The food you type into search, and barcodes you scan. Your name and account are not sent — FatSecret cannot tell one Moovio user from another.
Processes data in: Outside the UK
- Open Food Facts — Backup barcode lookup
The barcode number only.
Processes data in: France
- postcodes.io — Turns a postcode into a map location
Your full postcode. Every member and coach who enters a postcode has it sent here — from your own device when you type it, and again from our server if we later need to repair a missing location. Nothing identifying you goes with it.
Processes data in: United Kingdom
- MapTiler — The map in Discover
Your device's IP address and which part of the map you are looking at — which, in practice, is the area you live or train in.
Processes data in: Switzerland
- Expo — Push notifications
Your device's push token and the text of each notification, which can include a coach's name or a booking time.
Processes data in: United States
- Twilio — SMS security codes (through Supabase)
Your phone number, when you verify it.
Processes data in: United States
- Brevo — Founding Coach email updates
The name, email, phone, niche, area and referral source you gave on the Founding Coach form. Nothing from inside the app goes here.
Processes data in: France
- TikTok and X — Previews of a coach's own social posts
The link the coach pasted, and nothing else. This happens on our server, so your device is never in contact with them.
Processes data in: United States
- Google — The trainer survey on this website
The survey runs on Google Forms, so your answers are held by Google as well as by us. The survey is entirely optional and separate from your Moovio account.
Processes data in: United States
The exercise catalogue in the app is synced from MuscleWiki, and the web version of the map loads a stylesheet from the unpkg CDN. Neither receives anything about you beyond the ordinary fact of a request.
Sending data outside the UK
Several of the companies above are based outside the UK, mostly in the United States, so using Moovio means your data is transferred there. Our database itself sits in London. Where a transfer leaves the UK we rely on the data processing terms each provider offers, which is where the safeguards UK GDPR requires are set out. If you'd like to know which mechanism applies to a specific provider, ask us and we'll tell you.
How long we keep it
Some things are on a fixed clock, and we delete them automatically:
- Daily activity and health figures — 24 months, rolling
- The log of which coach viewed which of your data — 24 months
- In-app notifications — 90 days
- AI drafts a coach never approved — 90 days
- Records of our AI usage and costs — 12 months
- Resolved content-moderation records — 12 months
- Payment-processing housekeeping records — 30 days
Your nutrition logs and your messages with your coach are not on a timer, and that is deliberate. Deleting a year-old weight entry wouldn't protect you, it would break the long-range charts you signed up for; and the message history is the record of what a coach actually advised and what you actually reported, which is exactly what either of you would need if a question about your care ever came up. So the limit on both is your account, not the calendar: we keep them for as long as you're using Moovio.
To make that a real limit rather than a euphemism for "forever": if you don't sign in for 24 months we'll email you a warning, and if you still don't come back the account and its data are deleted.
Founding Coach register-interest details are kept until the programme closes or you ask us to remove them, whichever comes first.
Financial records are the exception to all of the above. We have to keep transaction records for six years for tax purposes, so those rows survive even after an account is deleted — but we strip out every link to who you were, leaving only the figures and Stripe's own reference.
Your rights, and how to actually use them
Under UK GDPR you can ask to see the data we hold about you, get a copy of it, correct it, delete it, restrict or object to how we use it, or withdraw a consent you've given.
Two of those you don't have to ask us for at all — they're built into the app. Open the menu, go to Settings → Account & data, and you can:
- Download your data — one file containing every row we hold about you
- Delete your account — which stops any billing immediately
Account deletion has a 30-day pause before anything is actually erased. Billing stops and your coaches are told straight away, but for those 30 days you can still change your mind and cancel it from the same screen. After that it's permanent and we can't recover it.
Data sharing with a coach is controlled separately, per coach, under "Who can see your stats" — turning it off cuts their access immediately.
For anything else, email folu.adelagun@moovio.co.uk. Every marketing email we send includes an unsubscribe link, and unsubscribing costs you nothing else — for coaches, it doesn't affect your standing in the Founding Coach Program.
If you think we've handled your data badly, please tell us first so we can fix it — but you always have the right to complain to the Information Commissioner's Office at ico.org.uk.
Keeping it safe
Everything travels over an encrypted connection and is encrypted at rest. Access to your rows is enforced by the database itself rather than by the app asking nicely, so one member cannot read another's data even if the app has a bug. The credentials for our payment, AI and nutrition providers live only on our server and are never shipped inside the app. The register-interest form on this website can add your entry but cannot read the list back — only Moovio staff with administrative access can see it.
Every time an AI tool reads a member's data on a coach's behalf, that read is logged — who, what, when. Those log entries are part of the data download you can take from the app.
Children
Moovio is for people aged 18 and over. We don't knowingly collect data from anyone younger, and if we find we have, we delete it.
Changes to this policy
When we change this policy we update the version and date at the top. If a change materially affects what we do with your data, we'll tell you rather than expecting you to notice.