Privacy

The short version

• The website counts visits with analytics software on our own server. It sets no cookies and stores no IP address.
• Do Not Track and Global Privacy Control are honoured by recording nothing at all.
• We sell nothing to anybody, and no advertising network is on this site.
• The personal data we hold is what you give us to use the app and the activities you record or import in it, what a business types into an application, what a member of a business team needs to sign in, what people write to us in support, and the email addresses of people who asked to be told when the app is out.
• The app uses your location only while you are recording an activity. Where you went is never sent to us and never saved on your phone.
• If you choose to import workouts from a health app, the app reads them and never writes anything back.
• A business never learns who you are. It sees the offer you claimed, and after a redemption a code for you that no other business shares.
• You can delete your account in the app, or by writing to us.

Who we are

MoveURAS is a product of Solaryxdev, Sharjah, United Arab Emirates. We are the controller of the data described here. Write to [email protected] about anything on this page, including a request to see, correct or delete what we hold.

Our systems run on our own servers in Germany (Hetzner, Nuremberg). Cloudflare sits in front of them and sees the network traffic in transit, as any content delivery network does.

Using the app

You sign in to the app with your email address and a six-digit code we send to it. There is no password. We keep the address, the name and city on your profile, a six-character support code the app shows you so that support can find your account without asking for your address, and which version of the terms you accepted, when, and that you confirmed your age. While MoveURAS is open only to people we have invited, we also keep the list of addresses we invited.

There is no analytics inside the app and no advertising. Each activity is saved on your phone first and sent to us when there is signal.

Your activities and points

For each activity you record or import we keep the sport, when it started, how long you were moving, how far you went where the sport has a distance, and whether it was recorded with location, timed, or imported. If you tell us how hard it felt, we keep that too. The points each activity earned, the offers you claim and the redemptions confirmed at a counter are kept with your account, because they are the service, and because a business's invoice is built from the redemptions.

For an activity recorded without location, such as a class or a gym session, the app counts your steps with the phone's motion sensor while it records, and sends us one number: the total for that activity. It is how a timed activity is told apart from a clock left running, and the motion sensor is used for nothing else.

With each activity we also receive how many of the phone's location readings the phone itself reported as simulated and, for an imported workout, which app recorded it. We use them only to keep points honest for the businesses that pay for them.

Your location, only while you record

The app uses your phone's location only while you are recording an activity, and only to measure how far you moved. If you lock your screen or switch apps during a recording, it keeps measuring until you finish; when the recording ends, so does location. Where you moved is never sent to us and is never saved on your phone. To measure the distance, the app holds the place you started and the last few seconds of positions in its memory while you record; what it saves and sends is the distance, never a place. The route drawn on screen while you record is a shape held in memory, without the place it started, and it is gone once the app is closed.

You do not have to share your location to earn points. Without it, an activity is timed instead of measured.

Workouts from a health app are read, never written

If you choose to, the app reads workouts you have already recorded in Apple Health on an iPhone, or in Health Connect on an Android phone: the sport, when it started, how long you moved, how far, and which app recorded it. It reads nothing else: no heart rate, no sleep, no weight, no steps. It never writes anything to either. We ask before reading anything, and you can turn it off in Health or Health Connect at any time. If you say no, everything else in the app works as before.

A workout somebody typed in by hand is not imported. Health data is never used for advertising and is never given to a business.

What a business sees when you claim

When you slide to claim an offer at a counter, the business's till shows that someone has claimed that offer, and roughly how long ago, in words like "just now" or "a minute ago". It does not show your name, email address, photo or anything about your activity. When the redemption is confirmed, the business sees a code for you that is different at every business and cannot be matched between businesses, and which visit this is for you at that business. That is everything a business ever learns about you.

An activity can be held for review

Every activity is checked automatically before it earns, and sometimes one is held for a person on our team to look at. While it is held it earns nothing, and the app says so in one sentence. You can ask for any decision to be looked at again, and a person, not only a machine, decides. When we hold an activity, remove points or stop an account from earning or claiming, we keep the reason with the activity or the account it concerns, and we tell you what it is. The terms say how this works.

Deleting your app account

You can delete your account in the app: open You, then Privacy and safety, and choose Delete account. You are signed out at once, and the deletion takes effect seven days after you ask; until then, sign in again and open Delete account in Settings to keep it. We delete your email address, your activities, including the workouts you imported, your points and your sign-in history. Your account and your profile are emptied: your name and everything else in them that identifies you are removed, and what stays is an empty record that your redemption records still point to.

Those records stay, because a business's invoice is built from them. They keep the time, the offer, the fee and the business's code for you. Once the account is emptied, nothing in them leads back to you. You can also ask by email: the deletion page says how.

Visits to this website and the app preview

On moveuras.com and on the app preview at demo.moveuras.com we count visits with Umami, open-source analytics software that runs on our own server in Germany. It uses no cookies. For each page view it records the page address without any query or fragment, the site that linked to it without its query, your browser and operating system family, device type, screen size and language, and the country, region and city derived from your network address at the time of the visit. It stores a one-way code derived from your network address and browser, keyed with a secret we hold and changed every month, so visits can be grouped within a month and not across months. We honour Do Not Track and Global Privacy Control by recording nothing. The statistics are deleted after 13 months.

There is no session recording and no heatmap. Neither is switched off in a setting: the only address our server will accept a measurement on is the one that counts a page view. No third party receives any of it, and there is no analytics on either sign-in panel — a script on a page that holds a session is a way to take the session.

Applying to list your business

The application form asks for your legal business name, a contact name, an email address, a mobile number, a city and a category, and for the venue: its public name, address, area, phone number and opening hours, plus the offer you want to run. We use it to decide the application and to reach you about it.

While you are filling the form in, an unfinished draft is kept in your own browser so a reload does not lose your work. It never leaves your device until you submit.

To stop the form being abused we count requests against a one-way code derived from your network address and from your email address. Those counters hold the codes and never the address or the email itself.

Asking to be told when the app is out

The form on the home page takes an email address and nothing else. We send one email to that address asking you to confirm, and until you click the button in it we send nothing more. The link in that email works for seven days; an address that is never confirmed is deleted after 30 days.

Once confirmed, we keep the address, the time you asked, the time you confirmed, which page you asked from, and the wording you were shown when you asked. That is the record that you consented, which the law asks us to be able to show. We use the address for one thing: to tell you when the app is released. There is no other mailing.

Every email we send to the list carries a link that takes you off it in one click, with no sign-in. When you leave, we keep the address and the date you left, so that we can show we stopped; nothing is sent to it again unless you join again yourself. You can also write to [email protected] and we remove it by hand.

To stop the form being abused we count requests against a one-way code derived from your network address and from the email address, as the application form does. Those counters never hold the address itself. Nothing about the device or the network you joined from is stored on the list.

Signing in to a panel

Partner and staff panels sign in with an email address and a six-digit code that expires in ten minutes. There is no password, and we never hold one. We keep the address on the account, the times of sign-ins, and the sessions the account has open so that you can end them.

Running a business on MoveURAS

A business on the platform holds its own venues, offers, team members, till devices, redemptions and invoices. Anyone the business invites can see them within the limits of the role they were given, and a refusal always says which role would have been allowed.

When a coupon is redeemed at your counter, the business is shown a code for the person who redeemed it, never their identity. That code is derived with a key held for that one business, so the same person is a different code at every business and the codes cannot be joined up between businesses. We charge AED 15 per confirmed redemption after your first 25 redemptions or your first 6 months, whichever comes first, which is why a redemption is recorded at all.

An invited demo

A member of our team can send you a private link to a demonstration. We record the address it was sent to, when it was opened, the browser that opened it and the network address it was opened from, so that a salesperson knows the link reached you and so a link can be withdrawn if it goes somewhere it should not. The network address is deleted after 30 days; the invitation email says so when the link is sent.

Support conversations

When you write to support we keep the conversation, its subject, the account it belongs to and the times of the messages, so that whoever picks it up can read what has been said.

Email we send

Transactional email is sent from [email protected] with [email protected] as the reply address, which is a mailbox a person reads. Sign-in codes, decisions on an application, and invoices are sent because you asked for them or because we owe you the notice. The only list this site keeps is the one above, of people who asked to hear when the app is out, and every email to it carries the link that ends it.

Errors your browser reports

If a page fails in your browser it sends us a short report so we can fix it: the page address without its query, the kind of failure, and the file and line inside our own code. The report is filtered before it is written down — a message is kept only when it matches a known browser wording, so text from the page you were looking at cannot travel with it. Nothing about the report identifies you, and it is not stored in a database.

Cookies and browser storage

This website sets no cookies. Two things are kept inside your own browser and never sent anywhere: an unfinished business application, and — on the panels — the session that keeps you signed in. Clearing your browsing data removes both.

Who else touches it

• Cloudflare, as the network in front of our servers.
• Hetzner, in Germany, as the company whose hardware our servers run on.
• The mail provider that delivers our transactional email.
• Apple and Google, whose stores deliver the app. We send them nothing about what you do in it.

No analytics company, no advertising company and no data broker receives anything. We have never sold personal data and the business does not have a way to make money by doing so.

How long we keep it

• Website statistics: 13 months.
• The network address recorded when an invited demo is opened: 30 days.
• An email address on the waitlist that was never confirmed: 30 days. A confirmed one: until you leave, and the address and the date you left after that.
• An application, and the account and business records behind a live merchant: for as long as the business is with us, and afterwards for as long as UAE law requires records of a commercial relationship to be kept.
• Support conversations: with the account they belong to.
• Your activities, the workouts you imported and your points: with your app account, until you delete it.
• Where you moved: never stored, on your phone or with us.
• Redemptions and the invoice lines built from them: for as long as UAE law requires the records behind an invoice to be kept, which is at least five years after the period they belong to. Once the account is deleted, nothing in them leads back to you.
• A claim that never became a redemption: with your app account, and after you delete it, with nothing in it that leads back to you.
• The reason for a decision about an activity or an account: with the activity or the account it concerns, and in our audit record, which cannot be edited and names an account number rather than a person.

Your rights, and how to use them

Write to [email protected] and ask. You can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, ask for a copy in a portable form, and object to a use of it. We answer within 30 days. If you are in the EU or the UK you may also complain to your national supervisory authority; in the UAE, to the UAE Data Office.

In the app, Settings gives you a copy of your profile, your activities, your points, your claims and your redemptions as a file, whenever you want it, and it is where you delete your account.

To have an account deleted, the deletion page says exactly what to write, what is removed, and what UAE law requires us to keep.

We do not yet name an Article 27 representative in the EU or the UK. If you are in either place and want to reach a representative rather than us directly, write to the address above and we will tell you where that stands.

Changes to this notice

The date at the top is the date this text last changed. A change that affects what we collect or why is told to account holders by email, not left for a reader to notice.