Privacy Policy

1. What information do we collect?

Personal information you disclose to us. We collect information you voluntarily provide when you create an account, use the app, join the waitlist, request beta access, contact us, or otherwise interact with the Services.

The personal information we collect may include:

• Names;
• Email addresses;
• Passwords or authentication credentials, where applicable;
• Account settings and contact preferences;
• Waitlist, beta-interest, marketing opt-in, and unsubscribe status;
• Referral codes, page/source information, and UTM campaign parameters such as source, medium, and campaign;
• Training goals, experience level, equipment, injury flags, workout logs, run logs, body weight, heart-rate data, recovery scores, sleep schedules, and related health or fitness data you provide or authorize;
• Support messages and other information you choose to send us.

Sensitive information. When necessary, with your consent or as otherwise permitted by law, we may process health, fitness, workout, injury, recovery, location, and wearable-related data to provide the Services.

Information collected automatically. When you use the Services, certain information may be collected automatically:

• Website cookies and similar technologies. Our website uses strictly necessary cookies and local storage to run the website and remember your cookie choices. We use analytics or marketing cookies only with your consent. You can accept, reject, or change non-essential cookie choices through the Cookie Preferences controls on the website. See our Cookie Policy.
• Precise geolocation data. When you use running or GPS-tracking features, we may collect real-time GPS coordinates and route data. Location access is requested when needed and can be revoked through your device settings.
• Crash and diagnostic data. We may collect device identifiers, app version, operating system, and crash logs through service providers such as Firebase Crashlytics to diagnose errors and improve stability. This diagnostic data is not intended to include your health or workout content.

Information from third-party integrations. If you choose to connect Apple Health, Google Health Connect, WHOOP, Strava, or similar integrations, we may receive the health and fitness data you authorize those services to share, such as step counts, heart-rate readings, sleep data, workouts, pace, distance, and route data. You control these permissions through the relevant service or device settings and may revoke them at any time.

2. How do we process your information?

We process information depending on how you interact with the Services, including:

• To create, authenticate, maintain, and secure user accounts;
• To generate, adapt, display, and save training programs, workout logs, running logs, recovery scores, and progress data;
• To provide waitlist, beta-access, product-update, founder-pricing, and launch communications when requested or permitted;
• To honor email unsubscribe requests and communication preferences;
• To operate, debug, protect, and improve the website, app, algorithms, and customer support;
• To measure website and campaign performance where analytics or marketing cookies are allowed;
• To comply with legal, regulatory, platform, tax, accounting, security, and fraud-prevention obligations.

3. When and with whom do we share your personal information?

We may share information with service providers who perform services on our behalf, including Firebase/Google LLC for authentication, database, hosting, cloud functions, and crash reporting; RevenueCat for subscription management and in-app purchase processing; app stores and payment platforms for purchases and subscriptions; email or support providers; and integrations you choose to connect.

We may also share information during a business transfer, to comply with legal requirements, to enforce our agreements, or to protect the rights, safety, and security of Mass in Motion, our users, or others.

We do not sell your personal information, including your health data, to third parties. We do not share your health data with advertisers.

4. Cookies, consent, and marketing preferences

Non-essential website analytics and marketing cookies are off by default. You may accept all cookies, reject non-essential cookies, or manage categories at any time through the Cookie Preferences controls available on the website and in the Cookie Policy.

If your browser sends a recognized Global Privacy Control signal, we treat that signal as a request to disable non-essential cookies where required by applicable law.

Marketing email is optional. If you opt in, we may send beta updates, product updates, launch news, founder-pricing details, and related Mass in Motion communications. You can unsubscribe using the link in our emails or by contacting support@massinmotionapp.com.

5. How long do we keep your information?

We keep personal information for as long as necessary to provide the Services, maintain your account, honor your preferences, comply with legal or platform obligations, resolve disputes, enforce agreements, protect security, and support legitimate business operations. We may retain certain records longer where required or permitted by law, such as billing, tax, accounting, fraud-prevention, abuse-prevention, backup, or legal records.

When you delete your account, we delete or de-identify your personal information from our active systems generally within 30 days after we verify the request, except for information we are permitted or required to retain and copies that may persist in encrypted backups for a limited period before being overwritten. For full details, see our Account Deletion and Data Deletion Policy.

6. How do we keep your information safe?

We use reasonable technical and organizational measures designed to protect personal information we process. No electronic transmission or storage system can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never defeat our safeguards.

7. Do we collect information from minors?

We do not knowingly solicit data from or market to children under 13 years of age. If you are under 18, a parent or legal guardian must review and agree to the applicable terms on your behalf. If you believe a minor has provided personal information, contact us at support@massinmotionapp.com.

8. What are your privacy rights?

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also be able to withdraw consent where processing is based on consent.

You can review or update some information in your account settings. To request deletion or exercise other rights, contact us using the contact information below. We may need to verify your identity before completing a request.

9. California privacy rights (CCPA/CPRA)

California residents may have the right to know, access, delete, correct, and receive information about certain disclosures of personal information, subject to applicable exceptions.

• Right to Know. You may request that we disclose the categories and specific pieces of personal information we collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we shared it.
• Right to Delete. You may request deletion of personal information we collected about you, subject to legal exceptions.
• Right to Correct. You may request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing. We do not sell your personal information or share it for cross-context behavioral advertising.
• Right to Non-Discrimination. We will not discriminate against you for exercising privacy rights.
• Right to Limit Use of Sensitive Personal Information. We use sensitive personal information, including health and fitness data, to provide the Services and as permitted by law.

To exercise California privacy rights, contact us at support@massinmotionapp.com. We will respond within the time required by applicable law after receiving a verifiable consumer request.

10. Consumer health data (Washington State)

If you are a Washington State resident, you may have additional rights regarding consumer health data under the Washington My Health My Data Act. Please review our Consumer Health Privacy Notice for details, including rights to access, correct, delete, and withdraw consent for processing consumer health data.

11. EEA, UK, and Swiss privacy rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data in reliance on one or more of the following legal bases:

• Performance of a contract. To create and maintain your account and to provide the Services you request, including generating and saving training programs, workout and running logs, and recovery scores.
• Consent. To send optional marketing communications, to set non-essential analytics or marketing cookies, to connect optional third-party integrations you choose, and to process health and fitness data, which is special-category data we process on the basis of your explicit consent. You may withdraw consent at any time without affecting processing carried out before withdrawal.
• Legitimate interests. To operate, secure, debug, and improve the Services, prevent fraud and abuse, and understand how our website and campaigns perform, where those interests are not overridden by your rights.
• Legal obligation. To comply with applicable laws and respond to lawful requests, and to meet tax, accounting, and record-keeping requirements.

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to processing of your personal data; the right to data portability; and the right to withdraw consent where processing is based on consent. To exercise these rights, contact us at support@massinmotionapp.com. You also have the right to lodge a complaint with your local data protection supervisory authority — in the UK, the Information Commissioner's Office (ICO).

12. International data transfers

Mass in Motion LLC is based in the United States, and we and our service providers (including Firebase/Google LLC) may store and process your personal information in the United States and other countries that may have data-protection laws different from those in your jurisdiction.

Where we transfer personal data out of the EEA, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (together with the UK International Data Transfer Addendum and the Swiss addendum where applicable) or another lawful transfer mechanism. You may request more information about these safeguards by contacting support@massinmotionapp.com.

13. Do we make updates to this notice?

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective when accessible. We encourage you to review this notice periodically.

14. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at support@massinmotionapp.com or write to us at our registered agent address: 6545 Market Ave. North Suite 100, Canton, Ohio 44721.