Privacy Policy

Overview and scope

This Privacy Policy applies to the NextMove AI mobile application and this website (together, the “Service”). The Service is operated by NextMove AI (“NextMove AI,” “we,” “us,” or “our”).

NextMove AI is a fitness planning and tracking service. It helps you maintain a fitness profile, plan and log workouts, track activity, complete wellness check-ins, and request personalized suggestions from the AI coach known as Nova.

Information we collect

Information you provide

• Account information: email address, password credential handled by our authentication provider, and full name if supplied.
• Fitness profile: age, gender, height, weight, fitness goal, experience level, preferred training time, weekly gym frequency, daily step goal, injury notes, average sleep, and diet preference.
• Activity and wellness information: workout plans, workout history, duration, estimated calories, step counts, and daily check-ins such as energy, soreness, sleep, mood, and notes.
• AI coaching information: coaching requests, generated recommendations, action items, and the fitness context used to create those recommendations.
• Support information: information you include if you contact us for help or privacy questions.

Information collected automatically

We process basic technical information needed to operate the Service, such as authentication/session data, request timing, error information, and security or rate-limit events. The app may also keep a limited local cache of your recent dashboard data on your device so it can remain useful during temporary connectivity problems.

We do not currently use third-party advertising SDKs or cross-app behavioral tracking, and we do not collect precise location, contacts, photos, microphone recordings, or payment card details through the app.

Optional Health Connect data

On supported Android devices, you may choose to connect NextMove AI to Google Health Connect. This feature is optional. If you enable it, the app requests read-only access to:

• step totals; and
• exercise or workout sessions, including activity type, start/end time, duration, and calories where the source provides them.

NextMove AI reads recent records, currently up to 30 days for activity synchronization, and stores synchronized activity in your account so it can appear in your history, dashboard, progress views, and recent activity summary. That summary may be used to generate the AI coaching response you request.

You can revoke Health Connect permission at any time in NextMove AI or in Android’s Health Connect settings. Revoking access stops future reads; it does not automatically remove activity already synchronized to your NextMove AI account. You may remove that information by deleting the related records where supported or by deleting your account.

Our use and transfer of information received from Health Connect adheres to the Google Play User Data policy, including the Health Connect permissions requirements.

How we use information

We use information described above to:

• create and secure your account and authenticate your session;
• save and display your fitness profile, plans, logs, and progress;
• calculate dashboard summaries and recovery-readiness indicators;
• provide AI-generated fitness recommendations and related action items when you request them;
• sync optional activity information you authorize through Health Connect;
• provide offline continuity through a limited on-device cache;
• enforce usage limits, prevent abuse, and protect the Service;
• diagnose errors, maintain reliability, and respond to support requests;
• comply with applicable law and enforce our legal rights.

NextMove AI provides general fitness information. It is not a medical device and does not provide diagnosis or treatment.

How information is shared

We do not sell or rent your personal information. We do not share it for targeted advertising. We disclose limited information only in the following circumstances:

• Service providers: Supabase provides authentication, database, and server-function infrastructure. Our AI model provider processes the fitness context needed to generate a recommendation you request. These providers process information on our behalf to deliver the Service.
• Legal and safety reasons: we may disclose information if reasonably necessary to comply with law, valid legal process, or to protect the safety, security, and rights of users, the public, or the Service.
• Business transfers: information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.
• With your direction: we may share information when you explicitly ask or authorize us to do so, such as when exporting data through your device’s share sheet.

AI provider credentials remain on our server and are not included in the mobile app. We send the AI provider only the context reasonably needed for the recommendation requested, rather than your password credential.

Storage, security, and international processing

Account and fitness information is stored using Supabase-hosted PostgreSQL infrastructure. We use technical and organizational safeguards designed to protect it, including encrypted network connections, authenticated requests, server-side secret storage, and row-level database rules intended to restrict each user to their own records.

A limited snapshot may be stored locally on your device for offline continuity. You are responsible for protecting access to your device and account credentials.

No system can be guaranteed completely secure. If we learn of a breach requiring notice, we will notify affected users and authorities as required by applicable law.

Our providers may process information in countries other than your own. Where required, we rely on appropriate legal mechanisms and contractual protections for international transfers.

Retention and account deletion

We retain account and fitness information while your account is active and as needed to provide the Service. We may retain limited security, transaction, or legal records for longer where necessary to prevent fraud, resolve disputes, enforce agreements, or comply with law.

You can permanently delete your account from Settings → Your data → Delete account. The deletion process removes your authentication account and associated profile, workout plans, workout logs, step logs, check-ins, and AI suggestion history from active systems. Residual copies may remain in encrypted backups until those backups are overwritten through ordinary retention cycles, unless law requires longer preservation.

If you cannot access the app, you can submit a deletion request through our public Delete Account page. We will verify that you control the account before processing the request.

Uninstalling the app does not by itself delete information stored in your account. Use the in-app deletion control or contact us if you cannot access your account.

Your rights and choices

Depending on where you live, you may have rights to:

• access or receive a portable copy of your information;
• correct inaccurate profile information;
• delete your account and associated information;
• withdraw consent or object to certain processing;
• restrict processing or lodge a complaint with a data protection authority.

You can edit many profile fields directly in the app. You can export a machine-readable copy through Settings → Your data → Export my data. You can also disconnect Health Connect at any time.

To make another privacy request, email maazbinhassan@gmail.com. We may need to verify that you control the relevant account before completing a request.

Children’s privacy

NextMove AI is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information without appropriate consent, contact us so we can investigate and delete it. A higher minimum age may apply in some countries.

Changes to this policy

We may update this policy as the Service or applicable requirements change. We will update the “Last updated” date and, when a change is material, provide additional notice in the app or through another appropriate channel before the change takes effect.

Contact us

For privacy questions, account-deletion help, or requests relating to your information, contact:

NextMove AI Privacy maazbinhassan@gmail.com