Privacy Policy

Introduction

This Privacy Policy describes how Cockpit Mobile, Inc. (“moveapp.ai,” “we,” “us,” or “our”) collects, uses, and shares information when you use our AI-powered fitness coaching mobile application and website at moveapp.ai (collectively, the “Service”).

moveapp.ai is a fitness coaching platform that uses artificial intelligence to provide personalized workout plans, text-based coaching chat, real-time voice coaching, activity tracking, and motivational support. By using the Service, you consent to the practices described in this Privacy Policy.

This Privacy Policy is incorporated into and subject to our Terms of Service. If you do not agree with these practices, please do not use the Service.

Information We Collect

Account Information

When you create an account, we collect your name and email address. If you sign in using Google or Apple, we receive your name, email, and an authentication identifier from those services. Account authentication is managed by our provider, Clerk.

Fitness Profile & Onboarding Data

During onboarding, you may provide information about your activity level, fitness goals, preferred activities, physical limitations, available equipment, age, and gender. This information is used to personalize your AI coaching experience.

Activity Data

When you track or log activities, we collect the activity type, duration, exercises performed (including sets, reps, weight, and distance), and any notes you provide to your AI coach about your workouts.

Location & GPS Data

With your permission, we collect GPS coordinates during activity tracking to map your route and calculate distance. This includes latitude, longitude, altitude, speed, and accuracy data. Location data may be collected in the foreground or background while an activity is in progress. You can disable location access at any time through your device settings, though this may affect route-tracking functionality. Your GPS coordinates are not shared with our AI providers—only calculated distance summaries are included in AI context.

AI Interaction Data

When you use our AI coaching features, we collect:

• Text chat messages you send to and receive from the AI coach
• Voice conversation audio processed in real time by OpenAI’s Realtime API during voice coaching sessions (audio is streamed and processed in real time; we do not store raw audio recordings of your voice)
• AI-generated content such as workout plans, coaching responses, and activity summaries

Device & Technical Data

We automatically collect device type, operating system, timezone, and app version to provide and improve the Service.

How We Use Your Data

We use the information we collect to:

• Provide AI-powered coaching through text chat and real-time voice conversations
• Generate personalized workout plans based on your fitness profile and history
• Track your activities and calculate statistics such as streaks and total distance
• Generate audio coaching phrases using text-to-speech for guided workouts
• Send you transactional emails such as welcome messages and workout notifications
• Manage your AI usage credits and subscription billing
• Analyze usage patterns to improve the Service (via anonymized analytics)
• Provide customer support and respond to inquiries

Third-Party Services & Data Processors

We share data with the following third-party service providers to operate the Service. Each provider receives only the data necessary for its function:

AI Providers (Anthropic & OpenRouter)

Our text-based AI coach and workout plan generator use Anthropic’s Claude model accessed via OpenRouter. These services receive your chat messages, fitness profile (goals, activity level, limitations), recent activity summaries (type, duration, distance), and first name for personalization. GPS coordinates and raw location data are not sent to these providers.

OpenAI (Voice & Audio)

Our voice coaching feature uses OpenAI’s Realtime API to process voice conversations in real time. OpenAI also provides text-to-speech services for generating audio coaching phrases during guided workouts.

Clerk (Authentication)

Clerk manages user sign-up, sign-in, and session management. Clerk receives your email address, name, and authentication tokens (including Google and Apple OAuth credentials if used).

PostHog (Analytics)

We use PostHog for product analytics and session replay to understand how the Service is used and to improve the user experience. Text inputs are masked in session replays. PostHog receives anonymized usage events and device information.

Resend (Email)

Resend delivers transactional emails on our behalf (e.g., welcome emails, workout notifications). Resend receives your email address and first name. You may unsubscribe from non-essential emails at any time.

Cloud Storage

We use S3-compatible cloud storage to host generated audio coaching files. These files do not contain personally identifiable information.

Zendesk (Customer Support)

We use Zendesk to manage customer support inquiries. When you contact us for support, Zendesk may receive your name, email address, and the content of your support request.

Mailchimp (Email Marketing)

We use Mailchimp to send marketing and promotional emails. Mailchimp receives your name, email address, and may receive additional profile or usage data to personalize and target email content. You may unsubscribe from marketing emails at any time using the unsubscribe link in each email.

Shopify & Printify (Merchandise)

We use Shopify and Printify to operate our merchandise store. If you purchase merchandise, these services may receive your name, email address, shipping address, and payment information necessary to fulfill your order.

AI Usage Logging

To manage your AI credit usage and improve the Service, we log metadata about each AI interaction, including the AI model used, the feature accessed (e.g., coach chat, workout generation), token counts, estimated cost, and your user ID. These logs are used for billing, monitoring service quality, and detecting abuse. AI input and output text may be retained in logs for a limited time for debugging and improvement purposes.

Data Retention

We retain your data as follows:

• Account and profile data: Retained for as long as your account is active, and deleted upon request.
• Activity and workout data: Retained for as long as your account is active to provide historical stats and coaching context.
• Chat history: Retained to provide continuity in coaching conversations. Deleted upon account deletion request.
• AI usage logs: Retained for up to 12 months for billing and service improvement, then deleted or anonymized.
• Location/GPS data: Stored with your activity records for as long as your account is active.

Data Security

We use industry-standard security measures to protect your data, including encrypted data transmission (TLS/SSL), secure authentication via Clerk, and access controls on our servers and databases. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13 years of age. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

Your Privacy Rights

United States Residents

If you are a resident of California, Colorado, Connecticut, Virginia, or another US state with applicable privacy legislation, you may have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information
• Access your personal information in a portable format
• Non-discrimination for exercising your privacy rights

We do not sell your personal information to third parties. Data shared with our AI providers and service processors is used solely to operate the Service.

European Union & UK Residents (GDPR)

If you reside in the EU or UK, you have the right to access, rectify, erase, restrict processing, object to processing, and request portability of your personal data. You also have the right to withdraw consent at any time and to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).

Data Deletion

You may request deletion of your account and all associated data at any time by emailing [email protected]. Upon receiving a verified request, we will delete your personal data from our systems and instruct our third-party processors to do the same, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page with a revised effective date and, where required, by sending you an email notification. We encourage you to review this page periodically.