Privacy Policy
The camera
Movus needs the front camera because your movement is the controller. Every frame is analysed on the device, used to work out where your body is, and discarded immediately.
Nothing derived from the camera is ever transmitted. Not the video, not still images, not the skeleton or joint positions the app computes from them. None of it leaves your phone, and none of it is written to disk during ordinary play. The camera runs only while a game is running and stops when you leave it — your phone's green camera indicator shows exactly when.
There is one exception, and it stays on your phone. Movus has a hidden developer setting, off unless you deliberately turn it on by tapping the version number in Settings seven times, which saves the joint positions of your session to a file on the device so a detection problem can be reproduced. The app says so on screen while it is on, the file is overwritten by the next session, it is never uploaded, and deleting the app removes it.
What the app does send
If usage statistics are on (they can be turned off — see below), Movus sends a short summary at the end of each attempt at a game, and a handful of one-line events in between: that the app was opened, that a game was opened, that a setting was changed, whether you allowed the camera, that you finished onboarding, and — if you use the character editor — the costume you chose. None of them carries anything you typed or anything about you. Between them they contain:
| What | Why |
|---|---|
| Which game, whether you finished, how long, your score, reps and estimated calories | To see which games people play and which they give up on |
| Whether the camera read any movement at all, and how well it could see you | This is the app's main quality alarm — a session where nothing was detected is a bug |
| Device model, iOS version, frame rate, Low Power Mode, thermal state | Graphics quality is tuned per device class; there is no other way to know which class a report came from |
| A random identifier created on first launch | So one device's sessions can be counted as one person rather than many |
| Which character options you picked — hair, hair colour and kit | To see which of the options people actually use |
| Whether you have the app set to the light or the dark theme | So both are tested against how they are really used |
About that identifier
It is a random value generated on your device at first launch, which never leaves the phone; what is sent is a one-way hash of it. It is deliberately not your device's advertising or vendor identifier, so it cannot be matched against any other app. It is stable, which means sessions from one install can be grouped together over time. Deleting the app discards it.
What the app never collects
- Video, photographs, or any image from the camera
- Body or skeleton data derived from the camera
- Your name, email address, phone number or postal address
- Your location
- Your contacts, photos, calendar or microphone
- Any advertising identifier
There are no user accounts. You never sign in, so there is nothing to attach your activity to.
Apple Health
If you grant permission, Movus writes completed workouts to Apple Health and may read your height, weight, age and biological sex to make the calorie estimate accurate. This data stays on your device inside Health. It is never sent to us or to anyone else, and the app works without it — if the permission is off, it falls back to an average adult. You can revoke it at any time in the Health app.
Turning statistics off
Open Settings in the app and turn off the usage statistics switch. Nothing is sent from that point on. The games are entirely unaffected.
This website
The site is hosted by GitHub Pages and served through Cloudflare. To deliver the pages, both process your IP address and the details your browser sends with each request. The site sets no cookies of its own.
To count visits, Cloudflare Web Analytics runs a small script on the pages. It records the page viewed, the site you came from, your country, your type of device and browser, and how quickly the page loaded. Cloudflare states that Web Analytics does not collect or use visitors' personal data. The script is not loaded for visitors in the EU. The camera, the games and the app's statistics have nothing to do with the website.
Who processes the data
The anonymous statistics described above are processed on our behalf by PostHog (PostHog Inc., United States), which provides the analytics service. They are not permitted to use the data for their own purposes. No other third party receives anything from the app. The website's providers are listed under This website.
Because that processing happens in the United States, data from the UK and EEA is transferred there under the standard contractual clauses PostHog offers as a data processor.
How long it is kept
Usage statistics are retained for up to 12 months and then deleted. Everything else — your settings, scores, character and session history — lives only on your phone and is removed when you delete the app.
Children
Movus is not directed at children under 13 and does not knowingly collect data from them. It has no accounts, no messaging, no advertising and no purchases.
Your rights
If you are in the UK or EEA you have rights of access, correction, erasure and objection under the UK GDPR and GDPR. Because the statistics are not linked to any identity, we usually cannot single out your records from anyone else's — but you can stop all collection immediately with the switch in Settings, and deleting the app ends it permanently. For anything else, write to the address below.
Changes
If this policy changes materially, the date at the top will change and the new version will be published here before it takes effect.
Contact
Questions about privacy: [email protected]