Privacy Policy
Last updated: August 5, 2026
About this policy
Movburst is a mobile app that helps you build a movement habit with short movement breaks. This policy explains what information the app stores, how it is used, and the choices you have. It describes how the app actually works today — nothing more.
What we collect
Account: your email address and a password — or, if you choose to sign in with Apple or Google, your email address and name as shared by that provider (Apple lets you hide your real email behind a private relay address). Sign-in is handled by our infrastructure provider, Supabase; when you use a password it is stored only in hashed form and is never visible to us. Profile: your first and last name (used to build the display name your friends see), a username, and an avatar you pick from a fixed set of built-in icons — no custom photo avatars. Activity: which movements you complete and when (timestamps and your local calendar date), plus streak counts computed from them. Clips: if you choose to record or attach a short proof-of-movement video (10 seconds or less) after completing a movement, we store that video, a small preview image, its length and dimensions, and when you posted it — all kept in private storage hosted by Supabase. Reactions: the emoji reactions you and your friends leave on each other’s clips, stored by account identifier. Friends and safety: your friend connections, invites you create, accounts you block, and reports you file (including the reason text you write), all stored by account identifier. Subscription: whether your account is free or Pro, when Pro expires, and a subscription identifier (the same as your account identifier). Product usage: to understand how the app is used and improve it, we record in-app events — which screens you open and actions you take (such as completing a snack or viewing the upgrade screen) — along with basic device and app-version information, associated with your account identifier. This is product analytics only. Operational: timestamps of your data-export requests, kept only to enforce the export rate limit.
Proof-of-movement clips
Clips are optional — the app works exactly the same if you never record one. The camera and microphone are used only while you are recording a clip, and the photo library opens only when you choose to attach an existing video; the permission prompts appear at that moment, never when the app starts, and declining still logs your movement. Clips are visible to you and the friends you have accepted — there is no public feed — and if you block someone (or they block you), neither of you can see the other’s clips. You can also choose to share your own clip outside the app through the system share sheet; once you share it, it is outside the app’s control. A clip disappears from your friends’ view about 24 hours after you post it, and the video is permanently deleted from our servers shortly after. Clips are delivered through private, short-lived links, never public URLs. If a clip concerns you, report it right from the clip (or report the user, or contact us) — a reported clip is hidden from everyone while we review it, and we remove content that breaks the rules.
What we do not collect
No location. No data from Apple Health, and no medical or biometric data — your movement history in Movburst is just which snacks you completed and when. No contact list. No advertising identifiers and no ad networks. The camera, microphone, and photo library are touched only when you choose to record or attach a clip — never in the background. The app never scans your photo library, and the only thing ever uploaded from it is a video you explicitly pick and attach. We do not track you across other companies’ apps or websites, and we never use your data for advertising. We never sell your data. Your payment details are handled entirely by Apple — we never see them.
How we use your information
To run the app: streaks, history, the leaderboard, and friend features. To keep your subscription status in sync with the app store. To enforce fair-use limits (for example, the data-export rate limit). To review reports and keep the community safe. To show the clips you post to your friends, and to review clips that are reported to us. And to respond if you contact us. That is the full list.
Who processes it for us
Supabase hosts our database, sign-in, file storage, and server functions — all app data listed above lives there, including your clip videos, which are kept in a private storage area. RevenueCat manages subscriptions: the app sends it your account identifier, and it tells us your subscription status; we do not store purchase amounts or receipts. PostHog provides our product analytics — the in-app usage events described above — hosted in the United States. PostHog also measures visits to our website (movburst.com) — anonymous page-view data (the page visited, the referring page, and basic browser and device type), using no cookies and never linked to any account. If you choose social sign-in, Apple or Google verifies your identity and shares your email and name with us. Apple processes payments. Expo (Expo Application Services) delivers over-the-air app updates: when the app checks for an update it sends basic device and app-version information to Expo’s servers — no account data is sent. Each of these providers handles data under its own privacy policy.
What other users can see
Friends and leaderboard participants can see your name (shown as “First Last”), your username, avatar, current streak, today’s snack count, and your account identifier. If you post a proof-of-movement clip, your accepted friends can also watch it for about 24 hours. Your email address is never visible to other users. If you block someone, you disappear from their view — they are not notified.
Notifications
Movement reminders are optional and are scheduled entirely on your device. Your reminder preferences stay on the device and are never synced to our servers, and the app sends no push notifications from a server.
Your choices and rights
Export: Settings → “Export my data” gives you a copy of your data as JSON, including your clip records, up to three times per hour. Delete: Settings → “Delete account” first erases your subscription record at RevenueCat and then permanently deletes your account and all app data, including your clip videos; if the subscription record cannot be erased, nothing is deleted and you can try again. Two details worth knowing: if you accepted a friend’s invite, their record of that invite remains but no longer refers to you; and a report is deleted when either the reporting or the reported account is deleted.
Data retention
We keep your data while your account exists and delete it when you delete your account, as described above. Clips are the exception: they are deleted automatically about a day after you post them, whether or not you ever touch your account. Our infrastructure providers may retain routine server logs for their own operations under their own policies. Account-confirmation emails may be sent when you sign up.
Children
Movburst is not directed at children under 13. Please do not create an account if you are under 13.
Changes and contact
If this policy changes, we will update this page and the date at the top. Questions or requests: justin@jadamsco.com.