Movo Privacy Policy

Effective October 8, 2026

Lea esta política en español

Movo is an app made by SubmissionSensAI Inc ("SubmissionSensAI", "we", "us"). This policy explains what happens to the information you give Movo.

It covers the Movo app only. Our website and our other products are covered by the SubmissionSensAI Privacy Policy.

It describes the app as it works today. Where something is planned but not built, we say so rather than reserving the right to do it later.

1The short version

You type a description of an ache, pain or stiffness. We send that description to AI services that help us pick a set of mobility exercises, and we send the exercises back. We do not store what you typed. We do not have an account for you. We do not sell or share your data, and we do not use it for advertising. Everything else Movo remembers, such as your routine and what you've completed, is stored on your phone and never reaches us. One of the AI services we use can keep a copy of some requests for a limited time to check for abuse. The details are below.

2What you give us

Your description of how you're feeling. Free text you type, for example "my lower back is stiff when I get out of the car." This is health information, and we treat it as the most sensitive thing the app handles.

Your IP address, which your phone sends automatically whenever it contacts any server.

Which language you use Movo in, English or Spanish. The app sends it with your description so the answer comes back in that language.

That is the complete list. We do not ask for your name, email address, date of birth, gender, address, phone number, medical history, or anything else that ties what you typed to you.

3What we do with your description

When you submit a description, it makes one round trip and is then gone from our systems:

1. It reaches our server, hosted by Railway.
2. We check your IP address against a short-term counter to stop one device flooding the service.
3. We screen the text for signs of a medical emergency, or a condition outside what Movo can safely help with, using fixed rules and an AI model.
4. We send the text to an AI model to select suitable exercises. The service we use is OpenRouter, which passes the request to the model provider, currently Google (Gemini).
5. Sometimes the first method can't match your description to our catalog, and we use a second one: OpenAI converts your text to a numerical form (an "embedding"), and we use that to search our exercise catalog at Pinecone. Pinecone receives the numbers, not your words.
6. We send the routine back to your phone.

If you write in Spanish, the AI model from step 4 also translates your description into English, under the same settings. We screen both the original and the English version, and steps 4 and 5 work from the English version.

We do not write your description to a database, a file, or a log. Our servers keep no record of what you asked. Our application logs record only technical errors, such as an error message and which step failed, and never the text you submitted.

Put plainly: once the response is sent, we have no way to retrieve what you asked. We could not show it to you, and we could not produce it if someone asked us for it.

What the AI services see

Steps 3, 4 and 5, and the translation of Spanish descriptions, are where your text leaves our servers. These are the only points at which another company sees your words.

The AI model (steps 3 and 4, and translation). These requests are sent with a setting that limits them to providers who do not store your text or use it to train their models. The setting is written into our application code, so it applies to every one of these requests. If no provider meets the condition, the request fails rather than going to one that does not. Today these requests are handled by Google through its Vertex AI service.

The second search method (step 5). OpenAI does not use these requests to train its models, but it keeps them for a limited period to monitor for abuse (currently up to 30 days, under OpenAI's API data policy) and then deletes them. We cannot switch that off. It applies only to requests that use the second method, not to every request.

4What stays on your phone and never reaches us

Movo keeps the following in storage on your phone:

• The routines Movo has built for you (up to the 20 most recent)
• Which routine you are following, and which exercises you have marked done on which days
• Your answer to the occasional "How's it feeling?" check-in, and the date you answered
• That you agreed to the notice shown when you first opened the app, confirmed you are 18 or older, which version of the notice you agreed to, in which language, and when
• The language you picked in the app, if you picked one

None of this is sent to us, apart from which language you use Movo in (section 2). There is no analytics service in the app, and we cannot see how you use it.

You can erase all of it by deleting the app. Because none of it is on our servers, that deletion is complete. There is no copy for us to remove.

5Video

Exercise videos are delivered by Cloudflare. When your phone plays a clip, Cloudflare receives your IP address and which clip was requested, as any video host would. Clips start loading when a routine is on screen. Cloudflare receives nothing about what you typed.

6Finding care near you

Some screens offer to find urgent care or a physical therapist nearby. Tapping one opens Apple Maps with a general search such as "urgent care". Apple handles that search under its own privacy policy. We send Apple nothing about what you typed, and we do not see what you search for or where you are.

7What we keep, and for how long

We hold no user database. There is no table with your name in it, because there is no table.

8What we do not do

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• We do not use your health information for advertising, marketing profiling, or data mining.
• We do not use what you type to train AI models, ours or anyone else's.
• We do not use advertising SDKs, tracking pixels, or third-party analytics.
• We do not combine your data with information from data brokers or other sources.
• We do not require an account, and we do not have one for you.

9Who else processes your data

These providers are based in the United States or run global infrastructure, so your information is processed there. Each acts on our instructions, except Apple Maps, which you use directly under Apple's terms. We do not authorize any of them to use your information for their own purposes.

10Your rights

You can ask us for a copy of your personal information, to correct it, or to delete it. Users in California may also ask what categories of information we collect and whom we disclose it to, and may opt out of sale or sharing, although we do neither. Users in the UK and EU have equivalent rights, and can complain to their data protection regulator.

How this works in practice: we keep no record of who you are and no record of what you typed, so in almost every case we will have nothing to give you, correct, or delete. We cannot link a request to a past session, and we will not ask you for identifying information in order to try. Everything Movo holds about you is on your phone and under your control.

Because what you type is health information, we ask for it only when you choose to submit it. This policy, linked from the notice Movo shows when you first open the app, explains what happens to it. You withdraw that consent simply by not submitting anything else. There is nothing retained to withdraw it from.

Write to info@submissionsensai.com and we will respond within one month.

11Children

Movo is for adults aged 18 and over. Everyone is asked to confirm they are 18 or older before using it, and the app declines and refers on where a description suggests the person is under 18. We do not knowingly collect information from children. If you believe a child has used Movo, contact info@submissionsensai.com. In practice there will be nothing stored for us to delete, but we will look into how it happened.

12Security

Traffic between your phone and our servers is encrypted in transit, and access to our infrastructure is limited to people who need it. The strongest protection we offer is structural: we cannot lose or expose a record of your health information, because we do not keep one.

No system is perfectly secure, and we make no absolute guarantee.

13This is not medical care

Movo provides general mobility exercises. It does not diagnose or treat, it is not medical advice, and it is not a substitute for a clinician. If your symptoms concern you, seek medical care. If they are severe or sudden, contact emergency services.

14Changes to this policy

If we change what we do with your information, we will update this policy and the date at the top. For any change that materially affects your health information, such as storing what you type, adding accounts, or adding analytics, we will tell you in the app before it takes effect, rather than relying on you to re-read this page.

15Contact

This policy is governed by the laws of the Commonwealth of Virginia, without regard to its conflict-of-laws rules.