Jovexa Move Privacy Policy
1. Who we are
Jovexa Move is an Android app for counting steps, tracking walks and runs, earning Move Points, joining walking and running groups and contributing to a community map. It is operated by Jovexa Labs ("we", "us"). For anything about your privacy, write to support@jovexalabs.com.
This policy covers the Jovexa Move app, its backend service and these pages. It does not cover the shops or websites of partner merchants, or Google services you use outside the app.
2. The short version
- You sign in with your Google account. We keep your email address, your name and the username you choose.
- The first time you sign in, the app asks you to accept the Terms of Service and this policy. Until you do, the app collects nothing and we hold nothing about you except the account that signing in created.
- We collect step counts and summaries of your walks and runs to show your activity and award Move Points. Your GPS route stays on your phone.
- Location permission is optional. The app never asks for background location.
- Activity is checked automatically for signs of cheating, and our staff may review it.
- In groups, other members see your username, your messages, the progress you share and your verified steps on the group leaderboard.
- People without Move Premium see ads. Personalised ads and analytics are off unless you turn them on. Crash reports are always sent.
- You can export your data and delete your account in the app, or ask us by email.
- Our servers are in Singapore, and Google processes some data worldwide.
- Jovexa Move is only for people aged 18 or over.
3. What we collect and why
We get data from you (what you type and the choices you make), from your phone (the step sensor, GPS and, if you connect it, Health Connect), from Google (your sign-in profile and purchase verification), from partner merchants (when a voucher is used) and from our staff (review and moderation decisions).
| Data | Why we use it | How long we keep it |
|---|---|---|
| Account. An internal user id; the user id issued by Firebase Authentication; your email address and whether it is verified; your display name (from your Google account; you can change it); your username (3 to 20 letters, digits or underscores); a country code; account status (active or suspended, with the date and reason of a suspension); creation and update times; which version of the Terms of Service and of this policy you accepted, and when. | To create your account, sign you in, show your name in the app and keep the account secure. | While your account exists. Removed or overwritten when you delete it (section 11). |
| App installations. For each installation: a random installation id created by the app; phone manufacturer and model; Android version; app version; a push-notification token (Firebase Cloud Messaging); first-seen and last-seen times. At most 10 installations in use per account. | To accept activity from your phone, send notifications, limit installations per account and detect abuse. | While your account exists. An installation unused the longest is retired when an eleventh is used. Deleted with the account. |
| Activity. Hourly step totals (the hour, the number of steps, whether they came from the phone's step sensor or Health Connect, and whether they were recorded offline). Walking and running sessions: type, start and end, active duration, steps, distance, how the distance was measured, maximum speed, average cadence, the number of GPS fixes and their average accuracy. For each record a verification status, a risk score and reason codes (section 5). Daily summaries: verified steps, verified running distance and points granted. | To show your activity and history, work out Move Points, challenge progress and group leaderboards, and check that activity is genuine. | While your account exists. Deleted with the account. |
| Move Points. Your available and pending balances and every points transaction: its type, amount, date, what it relates to and any note. If a staff member corrects your balance, who did it. | To run the points programme, show your history, keep accurate books and settle disputes. | While your account exists; afterwards kept without your personal details as an accounting record (section 11). |
| Rewards and vouchers. Each redemption: the offer and merchant, points spent, status (issued, used, expired, refunded), the times of each change, the voucher code (stored encrypted), who marked it used or refunded, and the refund reason. | To issue your voucher, let the merchant check it once, handle refunds and keep merchant accounts accurate. | As for Move Points. |
| Daily challenges. Which challenges you completed, on which day, and the points awarded. | To run challenges and avoid awarding the same challenge twice. | While your account exists. |
| Groups and messages. The groups you start (name, description) and join; the messages you post; progress cards you share (built by our server from your verified steps of a day and your latest verified walk or run: its type, distance and duration); the reports you make (reason and optional note); the people you block. | To run the groups, show messages and leaderboards to members, and moderate the community (section 6). | While your account exists. Your messages, reports, memberships and blocks are deleted with the account. A group you started stays for its other members, without your name. |
| Map contributions. The kind of contribution (new place, correction, accessibility details), the location of the place, its name and category, your notes and accessibility details. The moderator's decision and note, and any points awarded. | To review your contribution, publish approved ones on the community map and award points. | Approved contributions stay on the map after you delete your account, with the link to you removed. Others are deleted with the account. |
| Move Premium. The store (Google Play), product id, purchase token, latest order reference, subscription state, whether it renews automatically, the end of the current period and when we last verified it. We never receive your card or payment-account details. | To verify your purchase with Google and switch Premium features on and off. | While your account exists. Deleted with the account. |
| Your choices. Analytics (default off), personalised ads (default off), showing your username on map contributions (default off), and notifications for the daily challenge, rewards and marketing (marketing default off). | To apply your choices. | While your account exists. |
| Notifications. Messages in your in-app inbox (type, title, text, time, when you read them). | To tell you about challenges, rewards and your account. Marketing only if you opt in. | While your account exists. |
| Fraud prevention and safety. Review cases opened when activity, a redemption or an account looks suspicious, with the outcome, the reviewer and their note. Suspension records. | To stop cheating and abuse, protect the merchants who fund rewards and keep the programme fair. | While your account exists; afterwards kept without your personal details. |
| Technical and security records. Your IP address, the time and type of each request, and app and device details sent with it. An audit trail of staff actions and of some account events such as deletion. | To apply rate limits, protect the service, investigate problems and hold staff accountable. | Server logs about 30 days. The audit trail is kept permanently. |
| Messages you send us and our replies. | To answer you and keep a record of how a request was handled. | As long as needed to handle the request and any follow-up. |
| Merchant partners. If you apply to become a partner merchant or act for one: the business details, which users are its staff and their role, and the record of accepting the merchant terms (version, who, when and the IP address). | To review applications, run merchant offers and keep proof of the agreement. | While the partnership lasts and as long as needed afterwards for accounting. |
The app does not ask for your phone number, postal address, contacts, photos, camera, microphone or files, and we do not collect heart rate, weight, height, sleep or medical information.
4. What stays on your phone
- GPS routes. If you allow location, the app uses GPS while you track a walk or run, to measure distance. The route and the individual location points are stored only on your phone. We receive only the summary figures in section 3.
- No background location. Location is used only while a tracked session is running (shown by a notification) or while the map shows your position.
- Step counting works without location.
- Health Connect. If you connect it, the app reads your step counts from it on your phone and never writes to it. We upload only the step totals described in section 3.
- Offline activity waits on your phone until it can be uploaded. Activity older than 7 days is not accepted.
- Your ad-consent choices are stored on your phone by Google's consent tool.
The map is drawn by the Google Maps SDK. To draw it, Google receives the area you look at, your IP address and device details, under Google's privacy policy. When the map shows your position, your location is used on your phone to draw it. The app also asks our server for the community places inside the area on screen.
Uninstalling the app removes what is stored on your phone. It does not delete your account.
5. Automated checks and human review
Move Points can be exchanged for rewards paid for by merchants, so we check that activity is genuine. Every upload is scored automatically for plausibility, for example speeds, step rates or stride lengths that are not humanly possible, timestamps in the future, overlapping sessions, distance with almost no steps and activity uploaded long after it happened. Each record is then marked verified, held for review or rejected. Held activity earns pending points and is reviewed by a member of our staff, who approves or rejects it. The app shows you the status of each record. Repeated or serious abuse can lead to suspension.
If you think a decision is wrong, write to support@jovexalabs.com and a person will look at it again.
6. Groups and community chat
- What others see. Members of a group see your username, the messages you post, the progress cards you share, and your rank and verified steps of the last 7 days on the group leaderboard. Anyone using the app can find a group by its name and see its description and number of members.
- Messages are not end-to-end encrypted. They travel over encrypted connections and are stored on our servers so that members can read them. Our staff read a message when it has been reported or when needed to keep the community safe.
- Reporting. When you report a message, we store the reason and your note. The author is not told who reported it. A message reported by three different people is hidden until a moderator decides.
- Blocking. When you block someone, you no longer see their messages. They are not told.
- Deleting. You can delete your own messages at any time; deleting your account deletes all of them.
- Do not post personal information about yourself or others in groups. Read the Community Guidelines.
7. Who receives your data
We do not sell your personal data.
| Recipient | What for | What they receive |
|---|---|---|
| Google: Firebase Authentication | Signing in with Google | Your Google account identifier, email address, name and basic profile; IP address and device details during sign-in |
| Google: Firebase Cloud Messaging | Push notifications | The push token and the content of each notification |
| Google: Firebase Crashlytics | Crash reports | Crash details, phone model, Android version, app version and an installation identifier |
| Google: Analytics for Firebase | Usage statistics, only if you turn Analytics on | App usage events, an app-instance identifier, device details and approximate location derived from your IP address |
| Google: AdMob and the User Messaging Platform | Ads for people without Premium, and asking for ad consent | Advertising ID, IP address, device details, the ads you saw or tapped and your consent choices |
| Google: Maps SDK for Android | Drawing the map | The map area you view, your IP address and device details |
| Google: Play Billing | Buying and renewing Move Premium | Google Play handles payment. We send the purchase token to Google to verify it |
| Google Cloud (Cloud Run, Cloud SQL, logging) | Hosting our backend and database | The data in section 3, as our hosting provider, in Singapore |
| Partner merchants | Honouring your voucher | Only whether the code you show is valid and which offer it belongs to |
| Other people using the app | Groups and the community map | What section 6 describes; approved map contributions, with your username only if you turn that on |
| Authorities and courts | Legal duties, safety and protecting rights | What the law requires, including reports of child sexual abuse material |
| A buyer or successor of the business | Continuing the service | The data needed to continue it, under this policy |
We may use Google Play Integrity to check that requests come from a genuine copy of the app; if we do, we store only the resulting verdict.
8. Where your data is processed
Our servers and database are in Singapore (Google Cloud region asia-southeast1). Google's services in section 7 may process data in other countries, including the United States. Where the law requires safeguards for such transfers, we rely on Google's data processing terms, which include the standard contractual clauses approved for that purpose.
9. Advertising and consent
- People without Move Premium see a banner on some screens and, after saving a tracked walk or run, sometimes a full-screen ad: at most 4 a day and at least 10 minutes apart. Move Premium is ad-free.
- Ads never earn Move Points.
- Where the law requires it, for example in the European Economic Area, the United Kingdom and Switzerland, the app shows Google's consent message before any ad is requested. You can change your choice later in Settings.
- Personalised ads are off by default. While they are off we ask Google for non-personalised ads only. Non-personalised ads still use some device information, such as your IP address and identifiers, to deliver ads, limit how often you see them and prevent fraud.
- We do not pass your steps, sessions, Health Connect data, messages or Move Points history to the advertising service.
- You can reset or delete your advertising ID in your phone's Android settings.
Google explains how it uses data from apps that show its ads at policies.google.com/technologies/partner-sites.
10. Analytics and crash reports
Analytics is off by default; if you turn it on in Settings, the app uses Google Analytics for Firebase to record how the app is used, and you can turn it off at any time. Crash reports are always sent through Firebase Crashlytics so that we can fix problems. They contain technical details only, never your messages or activity.
11. How long we keep your data
While your account is open we keep the data in section 3 for as long as the account exists, unless section 3 says otherwise. The app shows the last 30 days of activity history; older records stay on our servers while the account exists. We do not delete inactive accounts automatically. Database backups are kept for 7 days.
When you delete your account (in the app, or by asking us; see Delete your account), deletion is immediate and cannot be undone. We remove:
- your email address, username and display name, and your Firebase sign-in identity;
- your app installations and push tokens;
- your hourly steps, sessions and daily summaries;
- your challenge completions, notifications and settings;
- your group messages, reports, memberships and blocks;
- staff roles and merchant-staff links, if you had any;
- your subscription records;
- map contributions that were not approved.
At the same time unused vouchers are cancelled, all your Move Points are forfeited and open review cases are closed. We keep, without your personal details and linked only to an internal id: your points history and redemption records (accounting), fraud cases and the staff audit trail (preventing abuse), the record of which versions of the terms and this policy you accepted, a record that the deletion happened, and approved map contributions without the link to you. Deleted data disappears from backups when they expire, within 7 days.
Deleting your account does not affect your Google account, and it does not cancel a Move Premium subscription: cancel that in Google Play.
12. Your rights and choices
In the app you can:
- see and correct your display name and username;
- export your data in Settings, as a file with your profile, accepted documents, settings, devices, activity, points history, redemptions, map contributions, subscriptions, notifications, groups, messages, reports and blocks;
- delete your account in Settings → Delete my account;
- change your choices for analytics, personalised ads, showing your username and notifications, and your ad consent where Google's consent message applies;
- withdraw the physical-activity, location and notification permissions in Android settings, and Health Connect access in the Health Connect app.
Depending on where you live, the law may give you the right to be informed, to access and receive a copy of your data, to have it corrected, to have it erased, to restrict or object to its use, to withdraw consent, and to complain to a data protection authority, such as the National Privacy Commission in the Philippines (privacy.gov.ph) or the authority of your country. To use these rights, write to support@jovexalabs.com from the email address of your account. We answer within 30 days.
If your account is suspended, or you have not accepted the current documents, you can still view your profile, export your data and delete your account.
13. Legal bases
Where the law asks us to name one, we rely on: performing our contract with you (your account, activity, points, rewards, groups, Premium); your consent (analytics, personalised ads, marketing notifications, Health Connect and the phone permissions, which you can withdraw at any time); our legitimate interests in keeping the service safe and fair (fraud checks, security records, moderation); and legal obligations (accounting and lawful requests).
14. Children
Jovexa Move is for people aged 18 or over. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we delete it.
15. Security
We protect your data with encrypted connections (HTTPS) between the app and our servers, permission checks on our servers for every request, a database role with only the access the service needs, encrypted voucher codes, encryption of the database at rest, daily backups, a permanent audit trail of staff actions, and automated and manual checks against abuse. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
16. Changes to this policy
We may update this policy. We will post the new version here and change the effective date. When the version changes, the app shows you the new document and asks you to accept it.
17. Contact
Jovexa Labs · jovexalabs.com · support@jovexalabs.com