Privacy Policy
Last updated: July 15, 2026
MoveWell ("the App") is owned and operated by Tech Efficient LLC ("we," "us," or "our"). MoveWell helps physical therapists and the people they work with follow home exercise programs: a therapist collects short exercise videos, organizes them into a program, and shares that program with a patient, who watches each exercise and logs how it went. You can also use MoveWell on your own as a personal clip organizer. This Privacy Policy explains exactly what we collect, why, and who we share it with when you use the MoveWell mobile application, the website at move-well.net, and related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information as described below.
1. Information We Collect
1.1 Information You Provide Directly
- Account information: Email address (required) and a password (stored only as a one-way bcrypt hash).
- Profile information: Display name and optional profile photo.
- Your clips: The exercise videos you choose to bring into the App, along with the segment markers (start time, end time) and labels you create. Your original videos are never modified by the App.
- Library and program data: The tags, exercises, workouts, programs, and session logs you create — including how an exercise felt (for example, "felt good" or "pain") and the sets and reps you completed.
- Messages: If you are connected with a therapist or patient, the direct messages you send and receive with them inside the App. Messaging is one-to-one between you and that person; there is no group chat and no public messaging.
- Support communications: Any message or feedback you send us.
1.2 Information from Third-Party Sign-In
If you sign in with Apple or Google, we receive your name, email address, and a unique identifier from that provider. We never receive or store your password for those services.
1.3 Information Collected Automatically
- Device info for push notifications: When you opt in to notifications, we store the push token issued by Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) so we can deliver activity reminders and invites. The token is rotated by the operating system and is not used for advertising.
- Crash & error logs (Sentry): If the app crashes or throws an unhandled error, we send a stack trace, the app version, the OS version, the device model, and your account identifier — which includes your email address and display name — to Sentry so we can trace the error to a session and fix bugs. We do not attach your clips or session-log content to crash reports.
- Product analytics & session replays (PostHog): We record which screens you visit and which actions you take (for example, opening a program or logging a session), and — to help us reproduce and fix issues while the App is in early release — we capture session replays: recordings of your on-screen activity within the App. Text you type (such as passwords and notes) is masked in these recordings. These analytics events and replays are associated with your account and are stored by PostHog in the US.
- Server log data: Standard web-server logs — IP address, user-agent, request path, and timestamp — are kept for up to 30 days for security and abuse detection.
1.4 Information We Do Not Collect
- We do not use your device's advertising ID. MoveWell has no ads.
- We do not access your device's address book.
- We do not read your location in the background, and MoveWell does not use your location.
- We do not sell your personal information to anyone.
- We do not use your data to train AI models.
1.5 Who Can See Your Information
MoveWell has no public feed, no following, and no social sharing. Your clips, programs, and logs are visible only to you and to a physical therapist you are connected with, and only as needed for your care:
- If a therapist shares an exercise program with you, they can see the sessions you log against that program — including how each exercise felt and the sets and reps you recorded — so they can guide your recovery between visits.
- If you are a therapist, the patients you connect with can see the programs and exercise clips you assign to them.
- If you and a therapist (or patient) are connected, you can send each other direct messages, visible only to the two of you. You can report a message or block the other person at any time from within the conversation; blocking stops messages in both directions.
We do not otherwise share your clips, programs, logs, or messages with other users.
2. How We Use Your Information
We use the information above only to:
- Create and authenticate your account.
- Store and organize the clips, segments, tags, workouts, and session logs in your library.
- Deliver transactional notifications by push or email (for example, security and account messages).
- Diagnose crashes and improve the product (Sentry, PostHog).
- Detect and prevent abuse, spam, fraud, or security threats.
- Comply with legal obligations.
3. How We Share Your Information
We do not sell your personal information. We share it only in these specific cases:
- With a therapist or patient you are connected with — as described in section 1.5, a program you assign, a session you log, or a message you send is visible to the connected therapist or patient. This happens only within an active care connection in the App, and only for people you are connected with.
- With service providers we rely on to operate the App (each acts as a data processor on our behalf):
- Our hosting provider — application and database hosting (United States).
- Apple Push Notification service / Firebase Cloud Messaging (Google) — delivery of push notifications.
- Sentry — crash and error reporting.
- PostHog — product analytics.
- SMTP provider on our hosting account — outbound transactional email.
- Legal requirements: We may disclose information if we are legally required to (subpoena, court order, lawful government request).
- Safety: We may disclose information when we believe it is necessary to protect the safety, rights, or property of our users or the public.
- Business transfers: If Tech Efficient LLC is acquired or merged, your information may be transferred as part of that transaction. We would notify you and update this policy before any change of control.
4. Data Retention
We retain your account information for as long as your account is active. If you delete your account, we delete or anonymize your personal information within 30 days. Crash logs and analytics events are retained for up to 12 months. Server logs are retained for up to 30 days. We may retain limited records longer where required for legal, tax, or fraud-prevention purposes.
5. Data Security
We protect your information using industry-standard practices: passwords stored as bcrypt hashes (never plain text), short-lived JWT access tokens with rotating refresh tokens, HTTPS/TLS for all transport, and access controls on the server side. No system is 100% secure, and we cannot guarantee absolute security, but we work to minimize risk.
6. Your Rights and Choices
You may at any time:
- Access and update your profile from Profile → Edit in the App.
- Delete your account from Profile → Settings → Delete Account in the App. This is self-service and removes your account and personal data within 30 days. You can also request deletion by emailing support@techefficientllc.com.
- Opt out of push notifications from your device settings.
- Request a copy of the personal data we hold about you by emailing the address above.
If you are a resident of California, the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection laws (including the CCPA and GDPR), you may have additional rights — including rights of access, correction, deletion, portability, and to lodge a complaint with your local supervisory authority. We honor those rights without charge. Contact us to exercise them.
7. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it. If you believe a child under 13 has used the Service, contact us at the email below.
8. International Users
MoveWell is operated from the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your jurisdiction.
9. Third-Party Links and Services
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Review their policies before providing information to them.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new "Last updated" date and, for material changes, give you reasonable notice in the App or by email before they take effect. Your continued use of the Service after the effective date means you accept the updated policy.
11. Contact Us
For any question about this Privacy Policy or our data practices:
Tech Efficient LLC
Email: support@techefficientllc.com