Privacy Policy

Kinehub is operated as an independent product governed by the laws of England and Wales. Reach the team at hello@movewell.app. For data-protection questions or to exercise your rights, email privacy@movewell.app.

• Account — email address and, if you provide one, display name.
• Profile — goals, focus areas, fitness level, daily time commitment, reminder time, gender, age band, height, weight, units preference, activity level, job type, pain areas, existing conditions, dark-mode and sound preferences.
• Activity — session logs (date, duration, exercises completed, optional mood and notes) and per-exercise completion records.
• Optional health logs — before/after pain ratings, sleep quality, sleep hours, and recovery scores you choose to enter.
• Wearable & health data — if you connect a device or import metrics, we may store steps, active minutes, resting heart rate, average heart rate, sleep hours, sleep quality, calories burned, and workout count.
• AI coach messages — the messages you send and receive through the recovery coach so we can generate replies and keep your conversation history.
• Therapist link & consent choices — whether you are connected to a clinician, how you connected, and your per-category consent choices (pain data, check-in/sleep data, wearable data, mental health/coach messages).
• Shared report tokens — when you generate a shareable report, we create a random link and store the snapshot of data it points to.
• Payments — Stripe customer ID, subscription ID, price/product IDs, status, and current period dates. We do not store card numbers.
• Technical — minimal error and request logs needed to keep the service running, plus anonymised analytics events.

We do not collect your precise location, contacts, advertising identifiers, or biometric data beyond what you import from a wearable.

• Personalise your daily plan, exercise library, and "Next 7 days" recommendations.
• Show your streaks, weekly activity, pain trends, and achievements on the Progress page.
• Power the AI recovery coach and keep your conversation context.
• Generate the reports you choose to share with a clinician or trusted person.
• Send the daily reminder you've configured, if you turn it on.
• Process payments and manage your subscription or team plan.
• Detect crisis-risk language in coach messages and, where appropriate, show emergency resources or alert a linked clinician.
• Diagnose and fix bugs.

We do not sell your data and we do not use it for advertising.

Under GDPR/UK GDPR, we rely on:

• Contract — to provide your account, sessions, progress tracking, and reminders.
• Consent — for optional data such as wearable imports, AI coach use, pain/sleep logs, and sharing data with a therapist. You can withdraw consent at any time.
• Legitimate interests — for analytics, error reporting, fraud prevention, and service improvement, limited to data that is not sensitive.
• Vital interests — in rare cases where coach messages indicate imminent risk of serious harm to you or others, we may process that message to show crisis resources or notify an emergency contact or linked clinician.

You can connect to a physiotherapist or other clinician by accepting an email invite or entering a connection code. Before any health data is shared, you choose which categories the clinician may see: pain data, check-in/sleep data, wearable data, and mental health/coach messages. Each category is off by default and can be revoked at any time from the Care Team or consent settings. The clinician sees only the data you have consented to, and only while the link is active.

Messages you send to the AI recovery coach are processed to generate helpful replies and maintain conversation context. We also scan messages for phrases that may indicate self-harm, suicidal ideation, or other severe distress. If detected, we show an in-app Crisis Card with emergency resources and, if you have connected and consented to share mental health data with a clinician, we may notify them. This is not a substitute for emergency services — if you or someone else is in immediate danger, call your local emergency number.

Connecting Apple Health, a fitness watch, or importing metrics manually is optional. We store the metrics you choose to sync so you can see trends alongside your sessions. This data is treated as health data: it is never shared with a clinician without your explicit consent, never used for advertising, and never sold.

We use only the cookies and local storage required to keep you signed in and remember your preferences (theme, sound, language). We do not run third-party analytics or advertising cookies.

We keep your data while your account is active so you can access your history, streaks, and progress. If you delete your account, we delete or anonymise your personal and health data within 30 days, except where we are legally required to keep it (for example, billing records). Shared report snapshots are deleted when you revoke the link or when the report expires.

Your data is stored on Lovable Cloud, a managed backend that hosts our database, authentication, and serverless functions. Data is encrypted in transit (HTTPS/TLS) and at rest. Row-level security ensures one account can never read another account's data, and therapist access is limited by your consent choices.

Lovable Cloud and our service providers may host data outside your country of residence. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses to protect your rights. If you need the specific hosting region for your project, contact us.

Kinehub is intended for people aged 16 and over. We don't knowingly collect data from anyone younger. If we learn we have collected data from an under-16, we will delete it promptly.

To keep Kinehub fast and reliable we use privacy-respecting tools: PostHog for product analytics (which features you use, anonymised where possible) and Sentry for crash and error reports. These tools receive your user id, page paths, and event names — never your pain notes, coach messages, or sensitive health details. You can opt out by contacting us.

If we make material changes we'll update the effective date and, where appropriate, notify you in-app the next time you sign in.

Questions, data requests, or complaints: privacy@movewell.app. General support: hello@movewell.app.