This page is maintained by the MoventraIQ team.
This policy describes how MoventraIQ ("we", "us") handles information you provide when using the app. It complements the Terms of Service and Medical Disclaimer.
Information we collect
- Account info you provide (email, name, optional phone number for SMS reminders).
- Assessment answers, pain scores, daily check-ins, exercise completions, and coach messages.
- Technical info: device / browser type, IP address, and audit-log records of sensitive actions.
- Push subscription endpoints (if you enable push reminders).
How we use it
- Generate and adapt your personalized wellness program.
- Provide AI coaching responses and educational content.
- Deliver reminders you opt into (email, push, SMS).
- Protect the Service and diagnose abuse (rate limits, audit logs).
- Comply with legal obligations.
We do not sell your data. We do not use your content to train third-party AI models.
Subprocessors
The Service relies on: Lovable Cloud (hosting, database, authentication, file storage), Lovable AI Gateway (AI model routing for coaching and program generation), Twilio (SMS reminders, if you opt in), and standard email delivery infrastructure for account and reminder emails. These providers process data on our behalf under written contracts and only for the purposes above.
Retention
Account data is retained while your account is active. When you delete your account from Settings, your profile, programs, check-ins, coach messages, achievements, and reminder settings are permanently removed within 30 days. Audit logs and rate-limit records are retained for up to 12 months for security purposes. Backups are purged on a rolling 30-day schedule.
Your rights (GDPR / CCPA)
You can export a JSON copy of your data at any time from Settings → Account & data. You can delete your account from the same screen. To correct or restrict processing, contact
support@moventraiq.com. EU/UK residents may lodge a complaint with their local supervisory authority.
Cookies & tracking
We use only strictly necessary cookies (authentication session, CSRF protection). We do not run advertising trackers or cross-site profiling.
Security
We use TLS in transit, encrypted storage at rest, row-level access controls, per-user rate limiting, audit logging of sensitive actions, and secret management for keys.
Children
The Service is not directed to children under 13. Do not create an account if you are under the minimum age in your jurisdiction.
Changes
Material changes to this policy will be communicated in-app. Continued use after the effective date constitutes acceptance.
Effective: 2026-07-25 · Version 1.1