Movemento

Privacy policy

Last updated: October 27, 2026

This is a translation of the Spanish original, which prevails if they differ.

In four sentences

  1. Your Health history (workouts, activity, rings, sleep, heart rate) stays on your iPhone. We never send it to any server.
  2. Only what you decide to post leaves your phone, and heart rate only if you tick it.
  3. There are no ads, no tracking, and we don't sell data.
  4. You can delete your account and everything you've posted whenever you want, from the app.

Who is responsible

José Miguel Hidalgo, who makes Movemento (legal notice). For anything about your data, write to us at privacidad@movemento.app.

What data we process and why

Apple Health data, on your iPhone. With your permission, the app reads from Health your workouts (type, duration, distance, calories, average and maximum heart rate, GPS route), your daily activity (steps, distance, calories, exercise minutes, rings) and your hours of sleep. We use them only to show you your diary, your statistics and your recaps (the "wrap"). They are processed and stored only on your iPhone, excluded from the iCloud backup. They are not used for advertising and are not stored in iCloud.

What you post, on our server. When you post an entry we store:

The "Where" of a post. If the workout has a route, the app suggests the city: it asks Apple Maps with the coordinates of the route's midpoint and keeps only the city name, which you can change or delete before posting. When you search for a place or your city, what you type is also looked up in Apple Maps.

Challenges and joint posts. If you accept a challenge, while it lasts only your running total (kilometers, workouts, minutes or calories), calculated on your iPhone, is shared with the other person. Messages you write to each other inside a challenge are seen only by the two of you. If you accept a joint post and choose to add your data, the sport, duration, distance, pace and calories of that workout of yours are stored.

Meetups and clubs. If you propose a meetup, we store the sport, the day and time, the place and the note you write; if you join one, that you're going. If you create or join a club, we store its name, description, city and sport, who is a member and who runs it, and requests and invitations. Meetups are deleted with your account; a club, when its last member leaves.

Heart rate, only if you choose. It comes unticked, and the first time you tick it the app explains that it is health data. Because this data is considered health-related (art. 9 GDPR), we ask for your explicit consent when you create your profile, and in each post you choose which data is shown. You can remove it by editing the post, or withdraw everything by deleting your account.

Your account. Username, name, profile photo, the city where you train, whether your profile is public or private, who you follow, who follows you, who you block, and your cheers, comments, challenges, challenge messages and reports. You sign in with Apple or with your email. With Apple, we receive an identifier and the email Apple gives us, which can be a hidden forwarding address if you choose. With your email, we store it and send you a sign-in code to it each time you ask for one.

The city where you train. It's optional: if you want, you pick it from a list. We store its name and the coordinates of that city's center, never where you are or where you live. It appears on your profile and helps people who train nearby find you in Discover.

Photos. Only the ones you choose. When they are saved, their metadata is removed, including the GPS location of the original photo.

Notifications. Those about your diary (your memories, the workout you've just finished, the recap of your week, month and year, your milestones and your challenge reminders) are worked out and scheduled on your iPhone: what they say never leaves it. To notify you when someone follows, cheers, comments, challenges or tags you, when someone you follow posts or when one of your challenges changes, we store a notification identifier for each iPhone you sign in on (provided by Apple), its time zone (so a meetup's time reaches you in yours), the app's language on that iPhone (so notifications reach you in Spanish or English) and which types of notification you've turned off on it, and we delete it when you sign out. The text of the notifications we send never contains health data.

Who cheered you on. The app keeps in your diary, on your iPhone, the names of the people who cheered each of your posts, so it becomes part of the memory. If someone withdraws their cheer or deletes their account, they disappear from your diary the next time the app connects.

Reports. If you report something, we store what you reported and why, in order to review it. The person reported doesn't know who reported them. Anything reported by several people is hidden until we review it.

If you connect Garmin (optional). If you connect your Garmin Connect™ account from the app (coming in a future version), Garmin sends our server the workouts you record with your Garmin watch from then on, never earlier ones: type, time, duration, distance, pace and speed, calories, steps, elevation, heart rate, cadence, power, the point-by-point GPS route, laps and the watch model. We use them only to complete in your diary the workout that Garmin already saves to Health without a route: the map, splits, elevation and heart rate (average, maximum and its chart). Your heart rate stays yours: it only leaves your diary if you select it when posting. The server keeps them until your iPhone picks them up, and for 30 days at most; after that they live on your iPhone, like the rest of your diary. We also keep your Garmin user ID and the access credentials Garmin gives us, but never your Garmin password: you type it on Garmin's website, not in Movemento. Whatever you post from those workouts follows the same rules as any post and shows the Garmin watch as its source. We don't use this data for anything else: no advertising, no selling, no artificial intelligence. You can disconnect Garmin whenever you want from the app's settings or from your Garmin Connect account. When you disconnect it, or delete your account, we tell Garmin and delete from the server whatever Garmin data is left and your credentials.

If you write to us. We keep your message and your email in order to reply.

Waiting list. Until October 15, 2026, the day the app came out, this website had a list to announce the launch. It no longer exists: the form was removed and the emails it held were deleted.

This website. It uses no cookies or analytics, and loads nothing from outside.

Legal basis

Who it is shared with

Nobody else. There is no third-party advertising or analytics, we don't sell data and we don't use artificial intelligence on your data.

Outside the European Union. Apple, Google, Cloudflare, Resend and Garmin are US companies, as is the company that runs Supabase, even though your data is in Frankfurt: they may process some data in the US or access it from there. These transfers are covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.

How long

For as long as you have the account. If you sign in but never finish creating your profile and don't come back within 30 days, we delete the account automatically. When you delete it, we delete your profile and everything you posted within 30 days at most, including technical copies. We make an encrypted backup every week and keep only the last four: that's why what you delete also disappears from them within that period. The server's technical logs (for example, the IP address of each connection) are deleted automatically within a few days. Workouts that come from Garmin, until your iPhone picks them up and for 30 days at most; your Garmin credentials, until you disconnect it or delete your account.

Your rights

You can request access, rectification, erasure, objection, restriction and portability by writing to privacidad@movemento.app. You can also complain to the Spanish Data Protection Agency (aepd.es). You can withdraw your consent whenever you want (removing data from a post, deleting it, disconnecting Garmin or deleting your account), without affecting what came before.

Minors

The app is not intended for children under 16.

Changes

If anything important changes, we'll let you know in the app before it applies.