Privacy Policy

Effective July 24, 2026. MovePact is operated by Renovatio, LLC.

The short version: we never learn where you are, there is no open microphone, voice notes are deleted within 24 hours, your body details never leave your phone, we show no ads, and we sell nothing about you to anyone. What little we do store exists so two people can book the same slot and move together.

What we collect

• Account: your email address and a password, used to sign you in. Your password is stored only as a hash by our authentication provider, never in readable form. If you sign in with Apple or Google instead, we never see a password at all.
• Profile: a handle you choose, a generated avatar, an optional profile photo, and the languages you want to be matched in. No real names. If you add a photo, session partners and friends can see it; you can replace or remove it at any time, removal deletes the stored image, and a photo reported by another member is hidden immediately while we review the report.
• Bookings and sessions: the slot time, activity, duration, distance goal, intensity and voice preference you book, whether a session was completed, your rounded progress percentage during it, and the distance you covered, measured on your phone.
• Plans and coordination: friend-session invitations, late signals and mutual reschedule choices.
• Voice notes: the notes you choose to record during a session, stored only to deliver them. They are deleted within 24 hours of your session ending, unless a note is part of a report, in which case it is kept while the report is reviewed.
• Connections: friendships you both agreed to, people you have blocked, and reports you file.
• Squads: if you join one, the squad you belong to, its name and colour, the invitations sent to you or by you, and the points your settled sessions contribute to your squad's battles. A squad keeps its battle scores and its win and loss record. Individual members are never ranked against each other, inside a squad or across squads, and battle results affect nothing but the score.
• Device: a push notification token, so we can send expected session updates such as a match, invitation, late signal or reschedule choice.

What never reaches us

• Your location. GPS is read on your phone to measure your own distance, and coordinates are discarded there. What crosses the network is a progress percentage and a distance, never a place: no coordinates, no route, no map, no city. Our database has no column that could hold a location, which means it cannot be leaked, stolen, or demanded from us.
• A live microphone feed. MovePact has no open call and no hot microphone. You decide when each voice note starts and stops, and nothing is captured between notes: not your breathing, not your street, not a conversation you have with someone next to you.
• Your body details and onboarding answers. Your sex, height, weight and quiz answers are stored only on your device and never reach our servers. They are kept for calculations that run on your phone. Your birth year is the one exception, and we would rather say so plainly than let you assume otherwise: the year alone, never a full date of birth, is sent when you create your account so that our server can check for itself that you are 18 or older instead of trusting the app's word for it. It is never shown to anyone you are paired with.
• Your health data. MovePact writes a completed workout only after you tap Save to Apple Health. It reads exactly one thing back: your walking and running distance, and only while an indoor session is running, because a treadmill moves you without moving your phone. That reading happens on your device to improve the distance estimate. Nothing else in Apple Health is read, no health data is transmitted to us, and none of it is used for advertising.
• Your calendar. A booked session is added only after you ask, using write-only calendar access. Calendar events and local reminder schedules stay on your device and are never sent to us.

How we use what we have

• Pairing you with a compatible person for a slot you booked.
• Sending the notifications you would expect: you are paired, your session is soon, or your partner sent a session update.
• Keeping the community safe: enforcing blocks and reviewing reports.

We do not show ads, do not sell or rent your information, and do not track you across other apps or websites.

Who processes data for us

• Supabase hosts our database, sign-in, and the short-lived storage that delivers voice notes.
• Apple delivers push notifications, through the Apple Push Notification service. Your device's push token is sent to Apple to deliver them, and to nobody else.
• An email delivery provider sends your password reset codes.

Retention and deletion

Voice notes are deleted within 24 hours of the session they belong to, reported notes excepted as described above. Everything else stays only while your account exists. When your account is deleted, your profile, your profile photo, your bookings, session history, friendships, invitations, squad membership, your squad invitations, your battle contributions and your push tokens are deleted, along with any voice notes of yours still waiting to expire. If you are the captain of a squad, deleting your account deletes that squad. Reports involving your account may be retained where needed for the safety of other people or where the law requires it. See how to delete your account.

Your rights

You can ask us what we hold about you, ask for a correction, or ask for deletion at any time by writing to hello@getmovepact.com from your sign-in address. There is not much to hand over, and that is the point.

Age

MovePact is for adults. You must be 18 or older to create an account, and we do not knowingly collect information from anyone under 18.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect. The current version always lives at this address.

Contact

Renovatio, LLC
hello@getmovepact.com