Privacy Policy
This policy explains how Grapefine handles personal data in the Mova app and on its website, movawalk.com.
Who we are
Mova is made by Grapefine, registered with the Netherlands Chamber of Commerce (KvK) under number 77291611. Grapefine is responsible (the "controller") for the personal data described in this policy.
Address: Dopheide 2, 8471 VG Wolvega, the Netherlands
Privacy questions: privacy@movawalk.com
The short version
- Mova only collects what it needs to work.
- We do not sell personal data and we do not share it with advertisers.
- Usage statistics and crash reports are off unless you switch them on.
- You can export or delete your data from within the app.
- Mova works with health information. We only use that with your explicit consent, and this policy explains exactly what and why.
Our website
movawalk.com does not use cookies, analytics or tracking. Our hosting provider (Cloudflare) processes technical data about each visit, including IP addresses, to deliver the site and protect it against abuse.
If you email us, we use your email address and message only to reply to you. We keep that correspondence for as long as needed to handle your question, and at most two years.
Your account
Mova needs an account. You create one with Sign in with Apple, Sign in with Google, or your email address and a one-time code. We store your email address, an account ID and, if you give it, your first name. Sign-in codes are sent by email through Resend.
What you tell Mova during onboarding
To build a plan that fits you, Mova asks about your goal, your age, sex, height, current weight, an optional target weight, your current activity and walking habits, your schedule and your preferences. It also asks about things that affect how safely you can walk, such as joint discomfort, balance, advice from a healthcare professional, or a recent pregnancy.
Some of this is health data, a special category of personal data under the GDPR. Mova only processes it with your explicit consent, which it asks for before the first health question. If you do not give consent, Mova does not keep the health answers you entered. You can withdraw your consent at any time under Profile & settings › Privacy & data. Withdrawing does not affect processing that happened before.
If you stop onboarding before you finish, we delete what you entered after 14 days.
Your walks and activity
When you walk with Mova, it records the type of walk, start and end time, duration, distance, steps and an estimate of the calories you used, and it keeps your daily step and distance totals. This is stored on your phone and in your account, so your progress is safe if you change phones.
Location. Mova uses your location only during a walk you start, and only if you allow it. Your route is stored encrypted on your phone and is not uploaded to our servers. You can switch route recording off.
Maps. To show a route on a map, Mova uses Apple Maps on iPhone and Google Maps on Android. To load the map, your phone requests map images of the area from Apple or Google.
Apple Health and Health Connect
If you connect Apple Health (iPhone) or Health Connect (Android), Mova reads your steps and walking distance to show your daily activity and adjust your plan. When you finish a walk, Mova can save it as a workout in Apple Health or Health Connect. Mova does not read your weight, heart rate, routes or other health records.
Data from Apple Health and Health Connect is used only to provide Mova's features to you. It is never used for advertising, never sold, and never shared with third parties for their own purposes. You can disconnect at any time in the settings of Apple Health or Health Connect.
Subscriptions and purchases
You buy a Mova subscription through the App Store or Google Play. Apple and Google handle the payment; we never see your card details. RevenueCat, our subscription service, receives your account ID and the store's purchase details so that the app knows what you have access to.
Usage statistics and crash reports
Both are off by default. If you switch them on in Mova's privacy settings:
- Usage statistics (PostHog, EU servers) receive a fixed list of events, such as "walk completed", with a random ID that is not linked to your account, your name or your email address. No location, no session recordings.
- Crash reports (Sentry) receive technical details about an error, such as the app version and device model, cleaned on your phone first. No name, email address or health data.
You can switch either off again at any time.
Notifications
Reminders are scheduled on your phone.
Why we may use your data (legal bases)
| Purpose | Legal basis |
|---|---|
| Your account, Mova's features, syncing between your devices | Performing our agreement with you |
| Health information | Your explicit consent |
| Checking your subscription | Performing our agreement with you |
| Usage statistics and crash reports | Your consent |
| Security, preventing abuse, keeping our systems working | Our legitimate interest in a safe, working service |
| Answering your emails | Our legitimate interest in helping you |
Who processes data for us
We use these service providers. Each processes data only on our instructions, under a data processing agreement.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | EU |
| RevenueCat | Subscription status | United States |
| PostHog | Usage statistics (only if you switch them on) | EU |
| Sentry | Crash reports (only if you switch them on) | EU (Germany) |
| Resend | Sending sign-in codes | EU (Ireland) |
| Cloudflare | Hosting our website | United States |
| Apple and Google | Sign-in, payments, maps, Apple Health and Health Connect | Under their own privacy policies |
Outside the EU. Where a provider processes data outside the European Economic Area, we rely on the EU–US Data Privacy Framework if the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep data
| Data | How long |
|---|---|
| Your account and app data | As long as you have a Mova account |
| Onboarding answers if you stop before you finish | 14 days |
| After you delete your account | Removed within 30 days; removed from backups within 30 days after that |
| A record that an account was deleted (no email address, no app data) | As long as needed to make sure deleted data is not restored from a backup |
| Crash reports | Up to 90 days |
| Usage statistics | Up to 13 months |
| Emails to us | Up to two years |
Purchase records are kept by Apple or Google under their own policies.
Exporting your data
In Mova, go to Profile & settings › Privacy & data and choose to export your data. You get a file with your account details, plan and walks, and the routes stored on that phone.
Deleting your account
In the app. In Mova, go to Profile & settings › Privacy & data and choose to delete your account. For your security we ask you to sign in again before deleting. Mova then deletes your profile, health answers, plan, walks, routes, daily activity, challenges and reminders, and signs you out on every device.
Deleting your Mova account does not:
- cancel your Mova subscription: cancel it in the App Store or Google Play settings first;
- remove workouts that Mova saved to Apple Health or Health Connect: you can delete those in those apps.
Without the app. Email privacy@movawalk.com from the email address of your Mova account and ask us to delete it. We will confirm it is you and delete it within 30 days. See movawalk.com/delete-account/ for the details.
Your rights
You have the right to access, correct, delete or export your personal data, to restrict or object to its use, and to withdraw your consent at any time. Most of this you can do in the app; for anything else, email privacy@movawalk.com. We answer within one month.
You also have the right to complain to a data protection authority, in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority in the country where you live.
Age
Mova is for adults aged 18 and over. We do not knowingly collect data from anyone younger.
Security
App data is encrypted on your phone and sent to our servers over an encrypted connection. Access to our systems is limited and protected.
Changes to this policy
When we change this policy, we update the date at the top. If a change matters for how Mova uses your data, we tell you in the app before it takes effect.
Contact
Grapefine, Dopheide 2, 8471 VG Wolvega, the Netherlands
Chamber of Commerce (KvK): 77291611
privacy@movawalk.com