The data controller is Lluis Moxo · contact@capconsultor.eu · España. Contact the controller with questions or to exercise your data rights.
Apple or Google provides an account identifier and, when available, your email and name. We store language/theme preferences, favorites, routines, sessions and technical security data. We do not receive your Apple or Google password. Notes sent with unrecognized-machine reports may contain personal information; avoid including it.
A shared demo account is available for app review using an email and password. The password is stored as a cryptographic hash, never as plaintext in the database. Its sample favorites and routines are visible to anyone holding those credentials. Do not enter personal data in that account. Regular accounts continue to use Apple or Google.
Only after you confirm each upload, your selected photo passes through the MOVA server to the OpenAI API to identify gym equipment. Do not include people, documents or sensitive information. MOVA does not save the photo in its database or photo storage. It retains limited analysis metadata such as date, result and usage. OpenAI processes the image under its API terms and policies, which may include temporary security retention. Immediate deletion by the provider is not guaranteed. Cancel and use manual search if you do not wish to send a photo.
Account and library data are processed to provide the service you request. Optional photo uploads require your consent, which you can withdraw for future uploads by not using analysis. Security, abuse prevention and usage limits rely on our legitimate interest in protecting the service. We also comply with applicable legal obligations.
We use Apple and Google for authentication, Vercel for server hosting, Neon for the database and OpenAI for authorized photo analysis. When you open an exercise with an animation, your device loads a Gym Visual GIF from raw.githubusercontent.com (GitHub and its CDN). This service receives your IP address and technical request data; MOVA does not send it your credentials, routines or recognition photos. Providers may process data outside the European Economic Area. Transfers must be covered by applicable mechanisms, including adequacy decisions or standard contractual clauses; you may request information about the safeguards used. MOVA is free, contains no advertisements of any kind and does not sell your data. Your data is not used for advertising or advertising profiles.
Account and library data remain while you keep your account. Settings > Delete account removes associated data from the active database. Analysis metadata and reports are subject to 30-day cleanup; sessions expire within 60 days. A pseudonymous usage counter may remain until the monthly period ends and cleanup runs, preventing deletion/re-registration from bypassing limits. If Apple is unavailable during deletion, only the encrypted token and minimum revocation metadata remain until revocation succeeds. Provider backups follow their retention cycle. Temporary maintenance backups are encrypted, access-restricted and removed when the verification they support is complete. No backup is used to reactivate a deleted account.
You may request access, correction, deletion, restriction, objection and portability where applicable, or withdraw consent, by contacting contact@capconsultor.eu. Proportionate identity verification may be required. You may complain to your competent data protection authority, including the AEPD in Spain (www.aepd.es).
MOVA is intended for adults aged 18 or over. Recognition suggests equipment categories; it does not make decisions with legal effects or provide personalized medical assessment.