Privacy Policy
Last updated: June 10, 2026
About this policy
Movburst is a mobile app that helps you build a movement habit with short movement breaks. This policy explains what information the app stores, how it is used, and the choices you have. It describes how the app actually works today — nothing more.
What we collect
Account: your email address and a password — or, if you choose to sign in with Apple or Google, your email address and name as shared by that provider (Apple lets you hide your real email behind a private relay address). Sign-in is handled by our infrastructure provider, Supabase; when you use a password it is stored only in hashed form and is never visible to us. Profile: your first and last name (used to build the display name your friends see), a username, and an avatar you pick from a fixed set of built-in icons — there is no photo upload. Activity: which movements you complete and when (timestamps and your local calendar date), plus streak counts computed from them. Friends and safety: your friend connections, invites you create, accounts you block, and reports you file (including the reason text you write), all stored by account identifier. Subscription: whether your account is free or Pro, when Pro expires, and a subscription identifier (the same as your account identifier). Product usage: to understand how the app is used and improve it, we record in-app events — which screens you open and actions you take (such as completing a snack or viewing the upgrade screen) — along with basic device and app-version information, associated with your account identifier. This is product analytics only. Operational: timestamps of your data-export requests, kept only to enforce the export rate limit.
What we do not collect
No location. No health or biometric data. No photos and no camera access. No contact list. No advertising identifiers and no ad networks. We do not track you across other companies’ apps or websites, and we never use your data for advertising. We never sell your data. Your payment details are handled entirely by Apple — we never see them.
How we use your information
To run the app: streaks, history, the leaderboard, and friend features. To keep your subscription status in sync with the app store. To enforce fair-use limits (for example, the data-export rate limit). To review reports and keep the community safe. And to respond if you contact us. That is the full list.
Who processes it for us
Supabase hosts our database, sign-in, and server functions — all app data listed above lives there. RevenueCat manages subscriptions: the app sends it your account identifier, and it tells us your subscription status; we do not store purchase amounts or receipts. PostHog provides our product analytics — the in-app usage events described above — hosted in the United States. If you choose social sign-in, Apple or Google verifies your identity and shares your email and name with us. Apple processes payments. Expo (Expo Application Services) delivers over-the-air app updates: when the app checks for an update it sends basic device and app-version information to Expo’s servers — no account data is sent. Each of these providers handles data under its own privacy policy.
What other users can see
Friends and leaderboard participants can see your name (shown as “First Last”), your username, avatar, current streak, today’s snack count, and your account identifier. Your email address is never visible to other users. If you block someone, you disappear from their view — they are not notified.
Notifications
Movement reminders are optional and are scheduled entirely on your device. Your reminder preferences stay on the device and are never synced to our servers, and the app sends no push notifications from a server.
Your choices and rights
Export: Settings → “Export my data” gives you a copy of your data as JSON, up to three times per hour. Delete: Settings → “Delete account” first erases your subscription record at RevenueCat and then permanently deletes your account and all app data; if the subscription record cannot be erased, nothing is deleted and you can try again. Two details worth knowing: if you accepted a friend’s invite, their record of that invite remains but no longer refers to you; and a report is deleted when either the reporting or the reported account is deleted.
Data retention
We keep your data while your account exists and delete it when you delete your account, as described above. Our infrastructure providers may retain routine server logs for their own operations under their own policies. Account-confirmation emails may be sent when you sign up.
Children
Movburst is not directed at children under 13. Please do not create an account if you are under 13.
Changes and contact
If this policy changes, we will update this page and the date at the top. Questions or requests: justin@jadamsco.com.