Privacy Policy

Last updated: 1 November 2026

MoveCue is built to keep your data on your phone. This policy explains what that means and the cases where data leaves your device.

What we collect on our servers

Very little, and nothing that tells us who you are. MoveCue stores your routines, workout history, body details, settings, and subscription state locally on your device. We do not run an account system and we never ask you to log in. Everything that does leave your device is described below. Some of it carries a random ID that the app makes up — never your name, email, or phone number.

What we don't collect

We do not collect your name, email, phone number, contacts, location, or advertising identifiers, and we never ask you to create an account. Your body details (sex, age, height, weight) and your heart rate never leave your devices. What we do receive is described below: for example, anonymous usage analytics (on by default, one tap to turn off), and a photo of an exercise sheet, only when you choose to send one to MoveCue AI.

When data leaves your device

Here are the cases where data leaves your phone. Most happen only when you choose a feature. Two happen on their own: anonymous analytics (which you can turn off) and app updates. None of them include your name or email — MoveCue doesn't have those to send.

1 · MoveCue AI (workout planner and Insights)

MoveCue AI turns a spoken or typed description, or a photo of an exercise sheet, into a structured workout. It also answers your questions about your own workouts (called "Insights"). It runs only after you tap "I agree, use AI" on an in-app consent screen that explains what is sent and links to Anthropic's privacy policy. If you never opt in, nothing is sent.

When you use it, what you type or say (as text) and any photo you attach go through our server on Cloudflare to Anthropic's Claude API, our AI provider, which builds the workout. If you include health details — for example, exercises from your physiotherapist or a recovery plan — those are sent too, because they are part of your request. To check that your subscription is active, the request also carries the anonymous subscription ID described under Subscriptions; our server uses it only to tell Free from Premium. It does not pass it to Anthropic.

To tailor the plan, MoveCue may also include a short training summary that is made on your phone. It is limited to a coarse training-frequency band (e.g. "a couple of times a week"), the names of body areas and a few exercises you've trained recently, your current streak, a count of recent personal bests, and the focus (for example "strength" or "recovery and rehab"), weekly availability and equipment you set at onboarding. It never includes your name, email, age, sex, height, weight, heart rate, or any notes you've written. It is sent only to build your workout and is not used to build a profile of you.

Insights: asking about your workouts. When you ask MoveCue AI a question about your training, the app needs some of your workout history to answer. This happens only after you tap "Allow" on a separate Insights consent screen. If you tap "Not now", none of this is sent. With your consent, the app sends only what each question needs, and where it can, it sends totals and averages instead of single records. This can include: dates and times, how long workouts took, whether you finished them, workout and exercise names, sets, reps, holds, weights, which side you worked, personal records, plan days, streaks, body areas, equipment and badges. It can also include the pain and difficulty ratings you give after a workout, but only if you have turned ratings on in the app. If ratings are off, they are not sent.

Never sent to Anthropic, even with Insights: your notes, your body details (sex, age, height, weight) and other profile details, your heart rate, data from Apple Health or Health Connect, and your subscription or device IDs. Workout and exercise names go with the data they belong to, so please do not put personal details, such as a person's name, in a workout name.

What is kept, and where. Your requests are not linked to you. Our server passes them to Anthropic without keeping them. It does not keep your questions or the answers. Its technical logs hold only counts, cost and errors (for example, which step failed) and never contain what you typed, said, or sent, or any workout data. Anthropic may keep API requests for a limited time under its own policy; see Anthropic's privacy policy. Nothing you send to MoveCue AI is used for advertising.

AI credits. Free use of MoveCue AI comes with a monthly credit allowance. To give one allowance per phone, the app makes a random device code (it holds no personal detail) and asks Apple (DeviceCheck / App Attest) or Google (Play Integrity) to confirm your device is genuine; they receive a device token, never your workout data. Our server keeps a scrambled (hashed) form of the device code and of the anonymous subscription ID with a count of credits used, for up to 40 days after your last use. It holds no question text, no answers and no name. 'Delete all my data' removes these records, except this month's credit count, so deleting data does not reset credits.

2 · Apple Health and Apple Watch (optional)

If you allow Apple Health, MoveCue adds each finished workout to Apple Health: the type of workout, start time, end time, duration, and an active-energy estimate. The estimate is calculated on your iPhone, using the weight you entered if you entered one. On iPhone, MoveCue reads nothing from Apple Health.

Apple Watch. If you allow it, the MoveCue watch app reads your heart rate during a workout so it can show it live on the watch. It is shown and then discarded — MoveCue never stores it, never sends it to your iPhone, and never sends it to us. Your workouts and settings travel between your iPhone and your watch directly, using Apple's own connection between the two devices; no MoveCue server is involved.

Workouts saved in Apple Health stay in Apple Health; MoveCue never sends them to us. You can change these permissions any time in the Health app → your profile → Apps → MoveCue. On Android, MoveCue never reads from Health Connect.

3 · Microphone & speech recognition

MoveCue uses the microphone only while you are recording: to describe a routine out loud to MoveCue AI, and to record your own short workout cues.

Dictation. Your speech is turned into text by your phone's own speech recognition. On iPhone, this happens on the device whenever your iPhone supports it; otherwise Apple's speech service may process it. On Android, your phone's speech service does the work and may send the audio to Google to process it. MoveCue never receives or stores the recording — only the text you choose to send goes to MoveCue AI, exactly as if you had typed it.

Your own cues. Cues you record stay on your phone. They are not uploaded, and the recordings are not included when you send a workout to someone.

You can deny or revoke microphone access at any time in your phone's Settings; MoveCue AI still works with typed input.

4 · Anonymous AI feedback

After MoveCue AI builds a workout, you can optionally rate it with a thumbs up or down and add an optional note. If you do, that rating, your optional note, and a coarse description of the plan (such as its name, goal, number of days, and equipment) are sent to our Cloudflare server and stored in a Supabase database we operate, so we can improve the feature. This feedback is anonymous — it carries no name, email, or identifier, and we have no way to link it back to you. The plan's description can say what it was for (for example, a rehab plan), so please don't put personal details in your note. Rating is entirely optional; if you skip it, nothing is sent. We keep this feedback only to improve MoveCue AI.

5 · Subscriptions

MoveCue Premium is sold through Apple's App Store and Google Play. We use RevenueCat to manage subscription state and verify purchases. RevenueCat identifies your device with an anonymous, randomly generated ID — we do not send it your name, email, or any account information, and MoveCue AI uses the same anonymous ID to check that your subscription is active. Your actual payment details are handled entirely by Apple or Google and are never seen by MoveCue or RevenueCat. See Apple's and Google's privacy policies for how they process purchases.

Promo codes (Android). If you redeem a promo code on Android, the code and a random key made by the app are sent to our Cloudflare server, which checks the code and keeps a record of the redemption (the code, the random key, and the dates) for up to two years so a reinstall can restore it.

6 · Product analytics

MoveCue uses PostHog, hosted on PostHog's EU Cloud (Frankfurt, Germany), to understand which features people actually use — for example, how many workouts get completed, or roughly how long a session runs. This is on by default, and you can turn it off at any time in Settings → Privacy → Analytics; the app stops sending anything the moment you do.

Analytics events are tied to an anonymous, randomly generated ID stored only on your device — never to your name, email, or any account (MoveCue doesn't have those). We don't look up your location from your IP address, we don't keep the IP address, and we don't use session recording or replay. Events are coarse, fixed-choice facts about feature usage — things like "workout completed (15–30 min)" or "MoveCue AI opened" — plus app opens and closes, your app version, whether you have Premium, roughly how long ago you installed the app, and the basic device details the analytics library adds (device model, operating system and version, language and time-zone setting, screen size). We never send your exercise or routine names, notes, anything you've typed or said, your photos, your body details, your heart rate, or your promo code.

Because this data is anonymous and not linked to you, there's no personal record to look up; turning the switch off stops it, and "Delete all my data" gives the app a new anonymous ID. For users in the UK and EU: our legal basis for this processing is legitimate interest — improving MoveCue for everyone who uses it — balanced against your right to object at any time, which the Settings switch gives you immediately.

7 · Crash reports

Crash reports. When MoveCue crashes or meets a serious error, it sends a short technical report to Sentry, a crash-reporting service, so we can find and fix the problem. The report holds the error and where in the code it happened, the app version, the phone model, the operating system version and the language setting. It never holds your name, your email, your body details (sex, age, height, weight, heart rate), your workouts or exercise names, or anything you typed. The app removes these before the report leaves your phone, and the report is not linked to you. We do not use crash reports for tracking or advertising. The reports are stored in Sentry's EU data region and are deleted automatically after 30 days.

8 · Photos you send to MoveCue AI

You can take or choose a photo of an exercise sheet — a physio handout, a gym plan, a class whiteboard — and MoveCue AI turns it into a workout you review before saving. MoveCue uses only the one photo you pick. Before it leaves your phone, the photo is resized and its hidden details (such as location and camera data) are removed. It then goes through our Cloudflare server to Anthropic's Claude API, which reads the exercises off the image.

MoveCue does not keep the photo — not on our servers, not in your workout history, and not with the plan it produces. Anthropic handles it under its API terms and may keep it for a limited time; see Anthropic's privacy policy. Before you send a photo, cover or crop out names, dates of birth, or other personal details on the sheet.

9 · Sending workouts to others

When you send a workout as a link or QR code, the whole workout is packed inside the link itself — nothing is uploaded and we keep no copy. If the person who receives it opens the link in a web browser rather than the app, our website (hosted by Vercel) reads the link to show them the workout. Your recorded voice cues are never included.

10 · Stays on your device

Your routines, workout history, records, badges, body details (sex, age, height, weight), reminders, and settings are stored only on your device. The one exception is the part of your workout history that a MoveCue AI question needs, if you have allowed Insights (see section 1). Your body details and notes are never part of it. Reminders are scheduled on your phone; we don't use push notifications. PDF reports, CSV exports, and workout backups are made on your phone and go only where you choose to save or send them.

App updates

At most once a day, MoveCue checks a small file on this website (movecue.app/app-version.json) to see whether a newer version is available, so it can show an "update available" banner. It also downloads small app updates from Expo, the service we use to deliver them. Neither sends personal data — only what any web request carries, such as your IP address and device type, plus, for Expo, the app version and a random ID the app makes for updates.

Third-party services

The cases above rely on a small number of third parties, each handling only what's described:

• Anthropic — builds AI workouts, reads exercise-sheet photos and answers your Insights questions.
• Cloudflare — runs our server for MoveCue AI (including the AI credit count), AI feedback, and promo codes.
• PostHog — anonymous usage analytics, EU-hosted, off any time in Settings.
• RevenueCat — subscription state, via an anonymous ID.
• Sentry — crash reports, EU-hosted, with no personal details.
• Supabase — stores the optional, anonymous AI feedback (your rating and note).
• Apple DeviceCheck / App Attest and Google Play Integrity — confirm the device is genuine for free AI credits.
• Expo — delivers app updates.
• Vercel — hosts this website, including the page that shows a sent workout.
• Apple and Google — app stores, purchases, speech recognition on your phone, and, on iPhone, Apple Health.

We don't sell your data, and we don't share it with anyone beyond what's needed to provide these features.

Cookies & tracking

The MoveCue app does not use cookies or advertising identifiers, and nothing in it is used for ads or to track you across other apps or websites. The one form of usage measurement inside the app — anonymous and easy to turn off — is described in Product analytics above.

This website

This website (movecue.app) is hosted by Vercel. It sets no advertising or tracking cookies, and it counts page visits with Vercel Web Analytics, which uses no cookies and does not identify you.

Deleting your data

Open the app → Settings → Delete all my data. This removes your routines, history, records, body details, and settings from your phone, and gives the app a new anonymous analytics ID, so usage data starts fresh. MoveCue keeps no account or copy of your workouts. The few records on servers (anonymous analytics, anonymous AI feedback, the AI credit count, and promo-code redemptions) aren't linked to your name, so there's nothing to find under it. Turn off analytics in Settings to stop it going forward, or email us (below) and we'll delete anything you can help us find.

Your rights

You can ask us about, or request deletion of, any data we hold by emailing hello@movecue.app. Because almost everything stays on your device, in most cases the fastest way to delete your data is the in-app option above.

Children

MoveCue is not directed at children under 13 and we do not knowingly collect data from children.

Changes

If this policy changes materially, we'll update the date at the top of this page and list what changed under "Version history" below. The current version is always at movecue.app/privacy.

Contact

Email hello@movecue.app with any questions.

Version history

1. Version 4 · 1 November 2026 MoveCue 1.5 Current version What changed

   • Added: MoveCue AI Insights. With a separate consent, MoveCue AI can answer questions about your workouts. Each question sends only the workout data it needs, including pain and difficulty ratings if you have turned ratings on. See section 1.
   • Changed: we removed the old line that the AI summary never includes pain or difficulty ratings, workout records, weights, reps or exact dates. With Insights consent, questions can use this data, as section 1 explains.
   • Never sent to Anthropic, as before: your notes, body details, heart rate, Apple Health or Health Connect data, and subscription or device IDs.
   • Added: free AI credits each month. The app makes a random device code and asks Apple (DeviceCheck / App Attest) or Google (Play Integrity) to confirm the device is genuine. Our server keeps scrambled forms of the device code and the anonymous subscription ID, with a count of credits used, for up to 40 days after your last use. It holds no question text, answers or name.
   • Clarified: our server keeps no questions or answers, and its logs hold only counts, cost and errors.
2. Version 3 · 26 October 2026 MoveCue 1.4 What changed

   • Added: crash reports (Sentry) for MoveCue 1.4. See "Crash reports" above.
3. Version 2 · 9 October 2026 MoveCue 1.3 What changed

   • Added: anonymous usage analytics (PostHog), which you can turn off in Settings → Privacy → Analytics.
   • Added: photos of an exercise sheet that you choose to send to MoveCue AI.
   • Added: your heart rate on Apple Watch, shown only on the watch and never kept.
   • Changed: our AI server keeps no content of your requests in its logs.
   • Changed: "Delete all my data" also gives the app a new anonymous analytics ID.
   • Clarified: how the microphone and speech recognition work, including recording your own cues.
   • Also described: promo codes, app updates, links to sent workouts, and this website.
4. Version 1 · 26 September 2026 MoveCue 1.2.1 What changed

   • Added: the once-a-day check for a newer app version.