Privacy Policy

Last updated: 25 October 2026

Moveya is a trading name of Moveya Fit Ltd, a company registered in England and Wales. Company number 17341833. In this Privacy Policy, "Moveya", "we", "us", and "our" mean Moveya Fit Ltd trading as Moveya. For UK data protection law, Moveya Fit Ltd is the data controller of personal information collected through the Site. Moveya Fit Ltd is registered with the Information Commissioner's Office (ICO) as a data controller. Registration number ZC217978.

This Privacy Policy explains how we collect, use, share, and protect personal information when you use moveya.io, the Moveya mobile apps for iOS and Android, and related services (collectively, the "Site"). Questions: see "How to Contact Us" below.

Moveya accounts are intended for people aged 18 or over. A parent or legal guardian may book an Offering for a minor where the Studio expressly permits minors. Minors may not create their own Moveya accounts.

Residents in the United Kingdom and, where applicable, other countries may have additional privacy rights. See the "Your Privacy Rights" and "United Kingdom privacy rights" sections below.

1. What does Moveya do?

Moveya is a booking platform that enables members ("Members") to discover, book, and attend fitness classes and related offerings operated by independent studios, gyms, and trainers ("Studios" or "Partners"). Moveya provides the technology platform, including account management, scheduling, payments where applicable, and optional features such as recommendations and health insights.

Moveya does not own, operate, or instruct at Studios. When you book a class, you enter into a direct relationship with the Studio offering that class. Moveya facilitates the reservation and, where applicable, payment processing.

The Site serves three primary audiences: Members who book classes; Studios and trainers who list and manage Offerings; and Moveya administrators who review studio applications and operate the platform.

Moveya also offers Moveya Intelligence, a plugin that Studios add to their own mobile apps to show members a suggested class. If you use a Studio's app that includes Moveya Intelligence, section 8 explains what we receive and how we use it.

2. What personal information does Moveya collect?

We collect or receive personal information in several ways. Often you choose what information to provide, but sometimes we require certain information for you to use the Site and for us to provide the services you request.

Personal information you provide to us

Account creation. To create a Member account, you may provide your name, email address, mobile phone number (optional at sign-up), password, and profile details such as a photo, fitness preferences, and saved favourites. If you make a purchase, you provide payment and billing information through our payment processor, Stripe. Moveya does not store your full card number.
Studio and trainer accounts. If you register as a Studio or trainer, we ask for your business name, address, phone number, email, tax or business identifiers where applicable, payment details for payouts, and information about your team, schedules, and Offerings. If your Studio subscribes to a paid plan, we also keep billing records for it: your plan and add-ons (such as the branded app and SMS & WhatsApp messaging), any promo code or discount applied, invoices and payments, message top-up purchases, and usage against monthly allowances (such as marketing emails sent and message credits used). Card details are handled by Stripe. Moveya administrators can see these records to run billing, support, and platform revenue reporting. If a Studio manager chooses to connect Instagram, we also receive the Instagram account identifiers and media described under "Studio Instagram connections" below.
Bookings and transactions. When you book, cancel, or pay for a class — or purchase, redeem, or cancel a class pack — we collect booking and entitlement details, payment status, attendance records, waitlist status, credit balances, redemption history, and related transaction history. If a Studio deactivates a pack product, we retain your existing entitlement and related booking records so you can continue to use remaining credits and so we can operate cancellations, restores, and support. When a refund is issued, Stripe processes the refund to your payment method and related Connect balance adjustments between Moveya and the Studio (such as platform-fee handling and debiting card-processing pass-through costs). Fee and refund rules — including the Moveya service fee — are commercial terms described in our Terms of Use and Pricing page.
Visit rewards. If a Studio on Pro offers member loyalty, we record which of your paid visits count toward that Studio's reward steps, the reward the Studio granted, and whether you have used the code. The Studio chooses the rewards and pays for them. Moveya does not keep a points balance you can cash out or move to another Studio. The Studio can see your name, photo, and which rewards are still unused. A reward code is for that Studio only.
Studio waivers. If a Studio asks you to sign its waiver before booking, we record which version of the waiver you agreed to, the name you typed, when you signed, your IP address, your browser or device, whether you signed in Moveya, a Studio's app, or a Studio's website, and a drawn signature if the Studio asks for one. Studio staff can also record that you signed a paper waiver, with a photo of the form. You can see every waiver you signed in Settings → Privacy. Waivers never ask health questions. For these records the Studio is the controller and Moveya processes them on the Studio's behalf.
Reviews and ratings. If you leave a star rating or written review after attending a class, we collect the content you submit and associate it with your account and the relevant class or Studio.
Communications. When you contact us through the Site, respond to surveys, or exchange messages with Moveya or a Studio through platform features, we collect the content and metadata of those communications.
In-app chats. When you chat with a Studio, with another member, or in a padel match group chat in Moveya or a Studio's branded app, we store the messages and photos you send and receive, when they were sent and read, edits and unsends, blocks, reports, and your agreement to the chat rules. We keep the earlier wording of edited or unsent messages, and messages stopped by our filter, where only Moveya administrators can see them, so we can review reports. We remove location data (GPS) from photos before storing them. Chat photos are not sent to any outside service for scanning.
Text messages and WhatsApp. If a Studio you book with uses Moveya's SMS and WhatsApp messaging, we process your mobile number, the messages the Studio sends you (such as booking confirmations, waitlist spots, class cancellations, payment problems, replies to your questions, and — only if you opt in — offers), any replies and attachments you send back to that Studio's number, delivery status, and your text-message preferences and opt-out history (including when you reply STOP). Messages are sent from a number dedicated to that Studio, promotional texts start with the Studio's name, and the Studio's team can read the conversation in its Moveya inbox.
Smart suggestions. If you use smart suggestions, you may choose to save a home or work location (we round it to roughly 500 metres), tell us when you are free to play, choose whether you are open to padel game invites, and give feedback on suggestions (for example "not for me" or hiding a venue or player). Hiding a player is private and never shown to them.
Instructor payroll. If a Studio on Pro uses instructor payroll, its managers may enter details about the Studio's instructors: pay rates, bonuses and commission, the name, address, and email to print on invoices, how the instructor works with the Studio (for example self-employed or employed), tax reference (UTR) and VAT number where provided, payment notes, internal notes, and adjustments such as bonuses or deductions. Moveya uses these with the classes each instructor taught and their attendance to calculate monthly pay statements. We do not collect or store instructors' bank details for payroll, and Moveya does not send payroll payments.
Health and wearable connections. If you choose to connect Apple Health, Google Fit / Health Connect, WHOOP, or similar services, or enable health-related features, we may receive health and fitness signals you authorise (such as activity, sleep, recovery, strain trends, or cycle information you provide). Using those signals for recommendations or AI Insights requires a separate explicit consent in Settings → Health & Privacy.
Studio Instagram connections. Studio managers may optionally connect a professional Instagram account through Meta’s Instagram login. Connecting is voluntary and is not required to use Moveya. When a Studio connects, we receive an access token, Instagram user ID, username, and a cached copy of recent media (typically the latest posts, including image or video previews, permalinks, and media type) so we can display that feed on the Studio’s public Moveya profile. We do not use Instagram to sign members in, and we do not collect Instagram account data from Members unless they tap through to Instagram. A Studio can disconnect Instagram at any time in studio profile settings; disconnecting deletes the stored token and cached media from Moveya.
Information about others. If you provide emergency contact details or book on behalf of another person, you represent that you have obtained any necessary permissions for us to receive and use that information.

Personal information collected automatically

Usage and device data. When you visit or use the Site, we may collect information such as your IP address, browser type, device type, operating system, language preferences, app version, and general interaction data (for example, pages or screens viewed, buttons or links tapped, and search queries).
Usage analytics. If you opt in to usage analytics, we collect product usage data on web and app: anonymised page and screen views (normalised paths, surface, and browser or OS category) and UI interaction events (which controls you activate, such as buttons and links, with a stable element identifier and location). On the website we also use Google Analytics (GA4) to measure visits, landing pages, and traffic sources, and anonymised lead events when you successfully submit certain forms (for example a demo request on /demo — we send a lead-type label only, not your name, email, or message content). Google's script is only loaded after you accept analytics: until then it is not downloaded and no Google Analytics cookies are set. If you later withdraw consent, we switch it off and delete its cookies (such as _ga). We use this to improve Moveya and may show aggregated trends to platform admins. We do not use third-party advertising pixels, and we do not collect session recordings, heatmaps, or keystroke logging under this category.
Location data. With your permission, we may collect precise or approximate location from your device to show nearby Studios, maps, and location-based content. Map features may use Mapbox. You can disable location access in your device or browser settings; some features may not work without it.
Cookies and local storage. We use cookies and similar technologies for essential functions (such as sign-in, session management, and security) and, with your consent, for optional analytics and preferences. See "Cookies and similar technologies" below.
Studio marketing email engagement. Studio marketing emails, including automated ones, contain a small tracking image and tracked links. When you open one of these emails or tap a link in it, our email provider (Resend) tells us, and we record whether that email was delivered, opened, and clicked, along with the open and click counts. The Studio that sent the email can see this for its own campaigns so it can measure them. Booking and account emails are not tracked this way. You can stop this by unsubscribing from the Studio's marketing emails or turning off Marketing in Settings → Privacy & Data. Many email apps also let you block images from loading automatically.
Push notification tokens. If you use the mobile app and allow notifications, we store a device token so we can deliver booking confirmations, reminders, and — if you opt in — marketing messages.
Smart suggestion activity. When personalisation is on, we build a profile of your training pattern from your activity on Moveya — such as the days and times you usually book, the studios, instructors, and class types you choose, how far you usually travel, and, for padel, your level and the players you have played with. We record each suggestion we make, why we made it, and whether you saw, opened, booked, or dismissed it.

Personal information from other sources

Studios may provide information about classes, instructors, and your attendance or feedback in connection with Offerings you book.
Payment processors such as Stripe provide transaction confirmations, fraud signals, and payout status.
If a Studio connects Instagram, Meta/Instagram provides account and media information the Studio authorises so we can show recent posts on that Studio’s Moveya profile.
If you sign in using a supported third-party identity provider, we may receive basic profile information such as your name and email address, subject to your settings with that provider.
If you use a Studio's own app that includes Moveya Intelligence, that Studio sends us its timetable, an identifier for you, and your booking events, as described in section 8.

3. How does Moveya use personal information?

We use personal information for the following purposes:

Operating the Site: To create and manage accounts, process bookings and waitlists, facilitate payments and refunds through Stripe (including class bookings and class packs), manage pack entitlements and credit redemptions, display Studio and class listings, record attendance, and deliver the core booking experience. If a Studio has connected Instagram, this includes displaying that Studio’s authorised Instagram media on its public profile.
Essential processing: To authenticate you, maintain sessions, secure the Site, prevent fraud and abuse, enforce our Terms of Use, and cache your own data so the app performs reliably. Essential processing cannot be turned off while you use Moveya.
Communication: To send service-related messages such as booking confirmations, cancellations, reminders, security alerts, and account notices. These transactional messages are sent regardless of optional marketing preferences.
Text messages and WhatsApp: To let Studios that use Moveya messaging send you booking texts by SMS (on by default once you have added a mobile number, and you can turn them off in Settings → Privacy & Data → Text messages), booking updates on WhatsApp (off unless you turn them on), and replies to messages you send them. Promotional texts and WhatsApp offers are sent only if you opt in, are not sent during quiet hours (by default 21:00–08:00 in the Studio's time zone), and stop when you reply STOP.
In-app chats: To deliver your messages; to let other members you share a Studio, club, or padel match with find you by name and start a chat (you can turn this off in Settings → Privacy & Data); and to keep chats safe. Every message is checked automatically against a word list before delivery, and a message that fails is not delivered. Until someone replies, you can send them one text message. Each padel match has a group chat: you are added when you pay for a place or are added to a split-payment booking, and removed if you leave or are refunded. We review reports, may remove messages or pause messaging, and tell you when we do and why.
Customer support: To investigate, respond to, and resolve inquiries, complaints, and service issues.
Optional analytics: If you opt in, to understand how the Site is used — including which pages or screens you open and which buttons or links you tap — measure performance, and improve features. Aggregated trends may be reviewed by Moveya platform admins. Studio dashboards may show aggregated traffic trends only where applicable.
Optional personalisation: If you opt in, to tailor class recommendations using your preferences, favourites, booking history, and activity on Moveya. This does not include health data unless you separately enable health consent.
Smart suggestions and Fill Assist: If personalisation is on, to suggest classes, courts, and padel games that fit your routine, and to form padel games with compatible players if you are open to game invites. Studios use Fill Assist to tell us which of their sessions are likely to have empty spots. A studio's need can only move up options that already suit you; it never makes us suggest something that does not. Suggestions never include a discount. Studios see only totals, such as how many suggestions were made for a session and how many led to bookings, never who received them. Suggestions are capped and are not sent by push between 21:30 and 07:30. You can turn class or padel suggestions off under Smart suggestions in your profile settings. Suggestions do not produce legal or similarly significant effects about you.
Instructor payroll: To let Studios on Pro calculate what they owe their instructors each month, produce invoice or payment-statement PDFs and payroll exports for their accountant, and keep an audit trail of changes. We do this on the Studio's behalf, as described in "Who does Moveya share personal information with?".
Optional marketing: If you opt in, to send promotional push notifications, studio marketing emails (including emails a studio sets up to send automatically, such as a welcome or a note when you have not visited in a while — based on your bookings and visits with that studio), and — where you separately opt in to promotional texts — studio offers by SMS or WhatsApp about Moveya, Studios, or related offers. Booking and reminder messages are not part of this toggle. You can unsubscribe from a studio’s marketing emails with the link in the email, which stops future marketing emails from that studio only.
Health insights: If you separately give explicit consent under Settings → Health & Privacy, to use health and wearable signals (and, where you provide it, cycle information) in class recommendations, readiness features, and optional AI Insights. Health data is not used for marketing or advertising.
AI-generated insights: To generate optional Member AI Insights and, where configured, recommendation explanations. These features may send relevant account activity (such as bookings, preferences, and favourites) to AI processors listed in "Third-party services". Health and wearable signals are included only when health recommendation consent is enabled. Studio AI reports use studio operational metrics for studio operators and do not include member health-consent data. AI outputs are informational and do not, by themselves, produce legal or similarly significant effects about you.
Legal and business purposes: To comply with law, respond to lawful requests, protect rights and safety, and support audits, recordkeeping, and corporate transactions.

4. Consent categories

Moveya uses a consent model that separates essential processing from optional features. You can manage optional categories in Settings → Privacy & Data when signed in, or through the cookie and consent banner before you sign in.

Essential (always on)

These are strictly necessary to provide the Site and cannot be disabled while you use Moveya:

Authentication and session management (Supabase)
Bookings, waitlists, attendance, class management, and class-pack entitlements
Payments, refunds, and subscriptions (Stripe), including Connect payouts and refund-related balance adjustments with Studios
Security, fraud prevention, and rate limiting
Client and server caching of your account and booking data
UI preferences such as theme and layout settings

Optional (your choice)

Usage analytics — first-party page/screen views and button or link interactions (web and app), plus Google Analytics on the website (including anonymised lead events for successful demo requests), to help us improve Moveya. Not used for advertising; no session replay or keystroke logging.
Personalisation — tailored class recommendations and smart suggestions based on your preferences and activity (excluding health data unless separately enabled). Turning personalisation off stops smart suggestions. You can also turn class suggestions, padel suggestions, game invites, and game-invite push notifications on or off separately under Smart suggestions in your profile settings.
Marketing — promotional push notifications and studio marketing emails, including open and click measurement for those emails. Transactional booking messages remain on. You can unsubscribe from a studio’s emails without turning off marketing for other studios.
Promotional texts — offers by SMS and on WhatsApp from Studios you book with. Both are off by default. Ticking the promotional texts box at sign-up turns on offers by SMS only; offers on WhatsApp are turned on separately in Settings → Privacy & Data → Text messages, where you can also switch either off. Promotional texts start with the Studio's name. Replying STOP to a Studio's text turns them off for that number.
Booking texts — booking updates by SMS are on by default once you add a mobile number; WhatsApp booking updates are off unless you turn them on. You can switch either off in Settings → Privacy & Data → Text messages.
Health & wearables — managed separately in Settings → Health & Privacy. Connecting a wearable does not by itself enable health recommendation or AI health use; that requires a separate explicit opt-in (unchecked by default).

5. Who does Moveya share personal information with?

Moveya does not sell your personal information to third parties for their own marketing purposes. We do not operate third-party advertising networks on the Site.

Service providers. We use vendors to operate the Site — including hosting, authentication, databases, payments, maps, push delivery, email delivery, and AI processing — only to perform services on our behalf. Named providers are listed in "Third-party services".
Studios and trainers. When you book a class or purchase a class pack, we share information needed to fulfil the reservation or pack purchase — such as your name, contact details, booking status, attendance, and relevant entitlement or credit-redemption details — with the relevant Studio or trainer.
Studios as controllers. Once a Studio receives your information, the Studio decides how it uses it and is responsible for that use. When a Studio uses Moveya's tools to manage its own clients and team — for example its client list, attendance, notes, emails, texts, chats with you, member loyalty visit counts and reward codes, and instructor payroll — Moveya processes that information on the Studio's behalf, under a data processing agreement and on the Studio's instructions. You can make requests about that information to the Studio directly, or to us and we will pass them on.
Smart suggestions. Studios never see which members were suggested their sessions. They see totals only, such as at-risk sessions, suggestions made, and bookings and revenue that came from suggestions. If you are open to padel game invites, other players invited to the same game see only your first name and playing level in the invite.
Instructor payroll. Payroll details are visible only to the Studio's managers, not to other instructors or members. The Studio may download statements and exports and share them with the instructor or its accountant.
Messaging providers. When a Studio texts you or you reply, your mobile number and the message content pass through Twilio, which delivers SMS and WhatsApp messages for us. WhatsApp messages are also processed by Meta under WhatsApp's own terms and privacy policy.
Wearable and health providers. If you connect Apple Health, Google Fit / Health Connect, WHOOP, or similar services, data flows according to your connection settings and the provider's own privacy policy.
Instagram / Meta. If a Studio connects Instagram, we exchange data with Meta as needed to complete login and to retrieve the media the Studio authorises. Cached posts shown on a Studio profile are visible to other users and visitors of that profile. Members who open an Instagram link leave Moveya and are subject to Meta’s terms and privacy policy.
Chats. The person or Studio you chat with sees your messages. In a Studio chat, the Studio's managers and any trainers the Studio assigns to that chat can read it. In a padel match group chat, the other players in that match and the club's managers see your messages, your first name and last initial, and your profile photo. Each match chat says this at the top, and shows when a club manager first posts. Clubs may use match chats only to run the match, not for marketing. Members you share a Studio, club, or padel match with can see your first name, last initial, profile photo, and one thing you share (for example "Also at Lumen House") in people search, unless you turn this off.
Other Members and the public. Content you choose to make public — such as reviews, ratings, or public Studio and trainer profiles — may be visible to other users and visitors. Studio listings, schedules, practitioner names, and Instagram posts a Studio has authorised us to display are also publicly accessible.
Legal and safety. We may disclose information to law enforcement, regulators, courts, or other parties when required by law, to protect rights and safety, or to respond to valid legal process.
Business transfers. If Moveya is involved in a merger, acquisition, reorganisation, or sale of assets, personal information may be transferred as part of that transaction, subject to this Privacy Policy.
With your consent. We may share information in other circumstances where you have given consent or as otherwise permitted by law.

6. Cookies and similar technologies

We use cookies, local storage, and similar technologies to recognise you when you visit the Site and to support essential and optional features.

When you first visit the Site, you see a consent banner provided by Cookiebot (Usercentrics) that lets you accept or reject optional categories. Optional cookies are not set until you accept them. Cookiebot keeps an anonymised record of your choice so we can show that consent was given. You can change your choices at any time with "Cookie settings" in the Site footer, or in Settings → Privacy & Data when signed in.

The cookie declaration at the end of this policy lists each cookie we use, who sets it, its purpose, and how long it lasts. It is updated automatically from regular scans of the Site.

Moveya does not currently respond to browser "Do Not Track" signals because there is no uniform industry standard. Where required by law, we honour applicable opt-out signals such as Global Privacy Control (GPC).

Essential cookies and storage: Required for sign-in, session management, security, and core booking functionality.
Optional analytics storage: Used only if you accept usage analytics in the consent banner or Settings. Supports first-party page/screen views and UI interaction events, and Google Analytics cookies and similar identifiers on the website. Optional boxes in the consent banner start unticked, and refusing is as easy as accepting. Google Analytics is not loaded until you accept, and its cookies are deleted if you withdraw.
Preference storage: Used to remember your consent choices, theme, and similar settings.

7. Health and sensitive data

Some information we process may be considered sensitive under applicable law, including health and fitness data, cycle information, precise geolocation, and payment information.

Special category data. Where health, wearable, or cycle information constitutes special category personal data under UK GDPR, we process it only where we have both a lawful basis under Article 6 and an applicable Article 9 condition. For Moveya's optional health and wearable features, we generally rely on your explicit consent under Article 9(2)(a), together with consent under Article 6(1)(a). That consent must be specific and affirmative; it is separate from analytics and marketing; and you can withdraw it at any time in Settings → Health & Privacy without affecting processing carried out before withdrawal.

Connecting Apple Health, Google Fit / Health Connect, WHOOP, or similar services is optional. Using synced or entered health signals — including sleep, recovery, activity, readiness, and any cycle information you choose to provide — for class recommendations, readiness personalisation, or AI Insights requires the Health & Privacy opt-in (off by default). We do not use health data for advertising or marketing.

When that consent is enabled, relevant health signals may be sent to AI processors (see "Third-party services") to generate insights. When consent is off, AI Insights and recommendations continue without those health signals. Disconnecting a wearable or withdrawing consent does not by itself delete historical health summaries you already stored; you can delete health data in Health & Privacy settings, or delete your account.

Moveya is not a medical provider. Health features are not medical advice. Do not use Moveya to diagnose, treat, or manage a health condition.

8. Moveya Intelligence in a Studio's own app

Moveya Intelligence is a plugin that Studios add to their own mobile app. If you use a Studio's app that includes it, this section applies to you even though you do not have a Moveya account. The Studio's own privacy policy covers everything else its app does.

What we receive

From the Studio's server: the Studio's timetable, an identifier the Studio uses for you (not your name, email address or phone number), and booking events for its classes, such as booked, attended and cancelled.
From the Studio's app on your phone, and only after you agree on the consent screen: one summary per day of sleep duration, resting heart rate, heart rate variability and workout minutes, read from Apple Health or Health Connect.
Records we create: your consent choice and the version of the notice you saw, and the suggestions we showed you and whether they led to a booking.

How we use it

We use this information only to choose a class to suggest to you in that Studio's app, to explain in one line why it fits, and to give the Studio aggregated results, such as how many suggestions led to bookings. The Studio never receives your health values: it sees counts, and the reasons for suggestions as general codes.

We do not use this information for advertising, we do not link it to a Moveya account, we do not share it with other Studios, and we do not send it to AI model providers.

Who is responsible

The Studio decides to offer Moveya Intelligence in its app, sends us its timetable and booking data, and is responsible for its app and its own privacy notice. Moveya decides how the health summaries and booking data are used to choose a suggestion, and is the controller of that processing.

Legal basis

Health summaries — your explicit consent (Article 9(2)(a), together with Article 6(1)(a)), given on the consent screen in the Studio's app. If you say no, you can still get suggestions based on your bookings.
Timetable and booking data — our legitimate interests in providing the suggestion feature the Studio offers in its app, balanced against your rights. These suggestions never use health data unless you have agreed.

Your choices

You can disconnect at any time in the Studio's app. Disconnecting withdraws your consent and deletes the health summaries we hold for you. To exercise your other rights, contact the Studio, or email privacy@moveya.io and tell us the name of the Studio's app.

Studio console accounts

If you work for a Studio that uses Moveya Intelligence, we process your name, work email address, password (stored only as a secure hash), role, and console activity to give you access to the Moveya Intelligence console, send account emails such as verification, team invites, go-live and billing updates, and keep the account secure. Subscription billing is handled by Stripe.

9. Third-party services

The Site relies on the following third-party providers (among others). Each processes data according to its own privacy policy:

Vercel — application hosting and related infrastructure for moveya.io
Google Analytics — optional website usage measurement when you accept analytics cookies (https://policies.google.com/privacy)
Cookiebot (Usercentrics) — website cookie consent banner, consent records, and cookie declaration (https://www.cookiebot.com/en/privacy-policy/)
Supabase — authentication, database, and file storage (https://supabase.com/privacy)
Stripe — payment processing, Studio payouts, and Studio subscription billing, including add-ons, promo codes, and message top-ups (https://stripe.com/privacy)
Mapbox — maps and location display where shown (https://www.mapbox.com/legal/privacy)
Expo — mobile push notification delivery
Resend — delivery of authentication emails and, when you opt in, studio marketing emails, including delivery, open, and click events for those marketing emails (https://resend.com/legal/privacy-policy)
Twilio — SMS and WhatsApp delivery, Studio phone numbers, and inbound replies for Studios that use Moveya messaging (https://www.twilio.com/legal/privacy)
Meta / WhatsApp — delivery of WhatsApp messages when a Studio has connected WhatsApp and you have WhatsApp messages turned on (https://www.whatsapp.com/legal/privacy-policy)
Apple Health, Google Fit / Health Connect, WHOOP — optional wearable and health integrations you choose to connect
Meta / Instagram — optional Studio Instagram login and media display when a Studio manager connects an Instagram account (https://privacycenter.instagram.com/policy)
Vercel AI Gateway — routes optional Member AI Insights, studio AI reports, recommendation-explanation requests, and the member and studio AI assistants to model providers on our behalf
OpenAI — large language models used via the AI Gateway for generative insights and explanations (https://openai.com/privacy)
Anthropic — large language models used via the AI Gateway for generative insights and explanations (https://www.anthropic.com/privacy)

AI processors receive only the data needed to generate the requested insight or explanation. For Member AI Insights, that may include account activity you authorise the feature to use; health and wearable signals are included only when health recommendation consent is enabled. Studio AI reports use studio operational metrics (for example bookings, attendance, and aggregated usage trends) for studio operators and do not include member health-consent data. Assistant chats do not include health, cycle, or wearable data. Where the provider contract allows, we configure AI features so submitted customer content is not used to train foundation models.

Links on the Site to third-party websites or apps are governed by those parties' privacy policies, not this one.

AI assistants

This is an AI assistant, not a person. Replies can be wrong.

Moveya and its vendors may process this chat to reply and to improve the product. Sending a message is your consent to that processing.

Chats are not used to train a foundation model unless the vendor contract says otherwise.

The assistant is not a human. Member chats can use the public help content and, when you are signed in, your own bookings, packs, and credits. Studio manager chats can use that studio's guides and aggregate schedule, attendance, revenue, and audience counts. Health, cycle, and wearable data are not included. We keep assistant chats for 180 days, then delete them, unless you ask to talk to a person — that conversation is kept with the support message.

10. International data transfers

Moveya Fit Ltd is based in the United Kingdom. Personal information may be processed in the United Kingdom and in other countries where our service providers operate (including the United States), for example for hosting, authentication, payments, maps, push delivery, email delivery, analytics, and AI processing.

Where personal information is transferred outside the United Kingdom, we use a lawful transfer mechanism required by UK data protection law — which may include a UK adequacy regulation, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, depending on the provider. You may email privacy@moveya.io for more information about the safeguards that apply to a particular transfer.

11. Data retention

We keep personal information only as long as needed for the purposes in this Privacy Policy and to meet legal, tax, and accounting duties. Typical periods (or criteria) are:

Account profile data — while your account is active; deleted or anonymised after account deletion, subject to legal holds
Booking, pack entitlement, payment, and refund records, and Studio subscription, add-on, and top-up invoices — typically up to 6 years after the relevant transaction for accounting, tax, chargeback, and dispute purposes
Studio marketing email delivery, open, and click records — kept with the Studio's campaign history while the Studio's account is active; deleted when the Studio's account is deleted or you delete your Moveya account
Support and contact messages — typically up to 2 years after the last related message, unless a longer period is needed for an ongoing matter
AI assistant chats — deleted after 180 days, unless the chat was handed to a person, in which case it is kept with that support message
Marketing consent records — while marketing consent is active, and for a reasonable period afterwards to evidence consent or withdrawal
Text message and WhatsApp conversations — kept in the Studio's Moveya inbox while that Studio's account is active and deleted when the Studio's account is deleted. If you delete your Moveya account, messages are unlinked from your account but may remain in the Studio's conversation history with your phone number
Text-message opt-outs (STOP) and consent changes — kept for as long as needed to keep honouring your opt-out and to evidence it
In-app chats and chat photos — kept until you or the other person deletes their account. Deleting your account deletes your Studio chats and member chats, including their photos, and the messages and photos you posted in padel match group chats. Padel match group chats are deleted one year after the match. Messages you sent as a Studio's staff stay in that Studio's conversations, shown as from the Studio, and are deleted when the Studio's account is deleted
Messages stopped by our filter, messages Moveya removed, and the earlier wording of edited or unsent messages — deleted after 6 months, unless they are part of an open report
Optional analytics events — typically up to 24 months, then deleted or aggregated
Smart suggestion profiles, saved places, availability, feedback, and suggestion history — while your account is active; profiles are recalculated regularly, saved places can be edited or removed at any time, and all of it is deleted when you delete your account
Instructor payroll records — kept in the Studio's account while it is active and deleted when the Studio's account is deleted, unless the Studio needs them kept for tax or accounting. If an instructor deletes their Moveya account, statements the Studio already created stay with the Studio but are no longer linked to that account
Studio waiver signatures — kept while your account is active so the Studio can show what you agreed to. If you delete your account, we remove your IP address and device details and unlink the record from your account; the typed name, Studio, waiver version, and date are kept for three years for the Studio's insurance and legal claims, then deleted
Health and wearable summaries — until you delete them in Health & Privacy settings, or your account is deleted; withdrawing recommendation consent stops new use for recommendations and AI Insights but does not automatically erase stored summaries
Studio Instagram connections — access tokens and cached media while the Studio remains connected; deleted when the Studio disconnects Instagram or the Studio account is deleted
Moveya Intelligence health summaries — until you disconnect in the Studio's app, or the Studio's Moveya Intelligence account is deleted. Test data from a Studio's sandbox is deleted after 14 days
Moveya Intelligence timetables, booking events, suggestions and consent records — while the Studio's Moveya Intelligence account is active; deleted when that account is deleted
Moveya Intelligence console accounts — while the account is active; billing records as described above
Moveya Intelligence console sign-ups that are never confirmed — deleted 7 days after sign-up
Backups — rotated on our providers' backup schedules; deleted copies may persist until the next rotation completes

Class-pack entitlements and related bookings are retained while credits remain usable or while we need the records for refunds, disputes, accounting, or support — including after a Studio deactivates the underlying pack product.

If deletion is not immediately possible (for example backup archives), we securely store the data and isolate it from further processing until deletion is possible.

12. Security

We use technical and organisational measures designed to protect personal information, including encryption in transit (HTTPS/TLS), access controls, and monitoring for vulnerabilities. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials confidential. Notify us promptly if you believe your account has been compromised.

13. Your privacy rights

Depending on where you live, you may have the following rights regarding your personal information, subject to applicable law and exceptions:

Access and portability — request a copy of the personal information we hold about you.
Correction — request correction of inaccurate personal information.
Deletion — request deletion of personal information we have collected from you.
Opt-out — opt out of optional analytics, personalisation, and marketing through Settings → Privacy & Data, or reject optional cookies through the consent banner. For promotional texts, you can also reply STOP to any Studio text.
Health consent — enable or withdraw health data use for recommendations and AI Insights in Settings → Health & Privacy.
Chats — turn off "Let members find and message me" in Settings → Privacy & Data to leave people search and stop new member chats, and block anyone at any time. Mute a padel match group chat from its header, or report any message in it.
Objection and restriction — object to or request restriction of certain processing, where applicable law provides this right.
Non-discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise these rights, sign in and update your Settings, delete your account in the Moveya app via Profile → Settings → Account → Delete account, use our public account deletion page at /account/delete (also linked from the site footer), or contact us using the details in "How to Contact Us" below. We may need to verify your identity before fulfilling a request.

Account deletion permanently removes your login and associated product data. It is not a temporary freeze. Some records may still be retained where required for legal, tax, accounting, chargeback, or dispute purposes, as described in "Data retention" above.

Studio operators who want to cancel a paid Moveya subscription or branded app, or close a Studio relationship, must contact us as described in the Studio Terms of Use. That cancellation requires one full calendar month's written notice and is separate from a member deleting their own account.

If you opt out of marketing push notifications, we may still send transactional messages related to your bookings and account.

Replying STOP to a Studio's text turns off promotional texts and WhatsApp offers from that Studio's number but does not turn off booking texts. To stop booking texts too, switch them off in Settings → Privacy & Data → Text messages.

14. United Kingdom privacy rights

Moveya is a trading name of Moveya Fit Ltd, a company registered in England and Wales. Company number 17341833. For UK data protection law, Moveya Fit Ltd is the data controller of personal information collected through the Site.

This Privacy Policy is intended to provide notice at or before the point of collection, as required by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Legal basis for processing

Under UK GDPR, we must have a lawful basis for each use of your personal information. Depending on what we are doing and your relationship with Moveya, we rely on one or more of the following:

Consent (Article 6(1)(a)) — where you have chosen to opt in, for example to optional usage analytics, personalisation, marketing push notifications, promotional texts and WhatsApp offers, WhatsApp booking updates, precise device location, or health and wearable features. Promotional texts also rely on your consent under the Privacy and Electronic Communications Regulations (PECR).
Explicit consent for special category data (Article 9(2)(a)) — where health, wearable, or cycle information is special category personal data, in addition to the Article 6 basis above.
Contract — where processing is necessary to provide the Site and services you request, such as creating your account, managing bookings, processing payments, and communicating about your reservations (including booking texts by SMS).
Legal obligation — where we must process or retain information to comply with applicable law, regulation, court order, or request from a competent authority.
Legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights, for example to maintain security, prevent fraud and abuse, improve the Site, and keep internal records. This includes checking chat messages for harmful content, keeping safety records to review reports, and showing you in people search to members you share a Studio, club, or padel match with; you can object to people search by turning it off.

Your rights under UK GDPR

If you are in the United Kingdom, you have the rights described in section 13 above, including the right to access, rectify, erase, restrict, object to, and port your personal information, subject to applicable exceptions.

Where we rely on consent, you may withdraw it at any time through Settings → Privacy & Data, Settings → Health & Privacy, or your device settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to complain

If you are unhappy with how we handle your personal information, please contact us first at privacy@moveya.io or through our contact page so we can try to resolve your concern.

Moveya Fit Ltd is registered with the Information Commissioner's Office (ICO) as a data controller. Registration number ZC217978.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Guidance and contact details: https://ico.org.uk/make-a-complaint/.

15. Users outside the United Kingdom

Moveya Fit Ltd is operated from the United Kingdom. If you access the Site from outside the UK — including from the European Economic Area — local data protection laws may give you additional rights.

We apply the same privacy controls and consent choices described in this policy regardless of where you use Moveya. Optional analytics, personalisation, and marketing can be managed in Settings → Privacy & Data.

Moveya does not sell your personal information. We do not use third-party advertising cookies or share personal information for cross-context behavioural advertising.

If you believe local law gives you rights we have not addressed here, or you wish to make a privacy request, please email privacy@moveya.io with "Privacy Request" in the subject line, or use our contact page.

16. Updates to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Site and update the "Last updated" date.

If we make material changes, we will provide reasonable notice by email, in-app notice, or another appropriate method. Where required by law, we will seek your agreement before changes take effect.

If you do not agree to an updated Privacy Policy, you must stop using the Site. The "Last updated" date at the top of this page shows when the policy was most recently revised.

17. How to contact us

Moveya is a trading name of Moveya Fit Ltd, a company registered in England and Wales. Company number 17341833. Moveya Fit Ltd is registered with the Information Commissioner's Office (ICO) as a data controller. Registration number ZC217978.

Privacy questions or requests: email privacy@moveya.io with "Privacy Policy" or "Privacy Request" in the subject line, or use our contact page. General support: support@moveya.io.

We aim to respond to privacy requests as soon as reasonably practicable and in accordance with applicable law.

Manage your preferences

You can change optional consent categories anytime after signing in. Essential processing remains active while you use Moveya.

Usage analytics

Help us improve Moveya by sharing which pages or screens you open and which buttons or links you tap (web and app). First-party product analytics only — not used for ads or cross-app tracking, and we don’t record sessions or keystrokes. You can turn this off anytime.

Personalization

Tailor class recommendations using your preferences, favourites, and activity. Does not include health data unless you enable that separately.

Marketing

Receive offers and updates from studios via email and, on branded apps, push. Booking confirmations and reminders are always sent when relevant.

Marketing email

Allow studios you have booked with to email you offers, newsletters, and win-backs. You can also unsubscribe from a single studio with the link in any marketing email. Transactional booking emails are unaffected.

Text messages

Booking texts and offers by SMS or WhatsApp from studios you book with. Booking texts by SMS are on once you add a mobile number; WhatsApp and offers are off until you turn them on. Reply STOP to any studio text to stop offers.

Health & wearables

Manage health data consent separately in Health & Privacy.

Questions about this policy? Email privacy@moveya.io, contact us, or write to support@moveya.io. See also our Terms of Use.