Privacy Policy

Last updated: October 3, 2026

1. Introduction

This page explains what personal data ProMovum collects, why, where it is stored, and what your rights are under the EU General Data Protection Regulation (GDPR). It covers the ProMovum apps (Android, iOS and Apple Watch) and this website.

2. Who is responsible for your data

For Pro accounts, subscriptions, support, security and the operation of the service, the data controller is Euscopia.net SRL, company number BE0825968361 (“Euscopia”), the company behind ProMovum. You can reach us at fitexo@googlegroups.com. Our registered address is Rue Haie du Loup 6, 5024 Marche-les-Dames, Belgium.

For the Movers that a Pro manages, the Pro may be the data controller. See section 7.

3. Information we collect

• Pro accounts: when a Pro signs in with Apple or Google, we store the email address, display pseudo, language, role (coach or physiotherapist), reminder preferences, and any optional professional details the Pro chooses to add, such as a postal address.
• Pro subscriptions: subscription status and the purchase-verification information we receive from the Apple App Store or Google Play. We never see your payment card details.
• Programs and exercise content: exercise programs, custom exercises, and any photos or videos a Pro attaches to a custom exercise.
• Movers managed by a Pro: a random internal ID, a pseudo chosen by the Pro, the program assigned, group membership, share-link information and access dates. See section 6.
• Optional cloud sync for independent Movers: a Mover who chooses Premium cloud sync signs in and syncs their programs across devices. This stores their email address, pseudo and programs.
• Pro applications: if you apply for Pro access through the form on this website, we collect your name, email, website (optional) and business address, only to verify your professional activity.
• Support: the messages and details you send us when you contact support.
• Technical and security information: to limit abuse, our servers use a hashed form of the IP address for rate limiting (we do not store the raw address for this). Google's infrastructure may also record standard technical request information, such as the IP address, in its logs.
• This website: it sets no cookies and uses no advertising or tracking tools. It remembers your language choice in your browser's local storage. It counts page views anonymously (page and language only, no visitor ID). The site loads its fonts from Google Fonts, which means your IP address is sent to Google when a page loads.

4. Information stored only on your device

The following data stays on the Mover's device and is not uploaded to the ProMovum cloud as part of normal operation:

• exercise session history
• repetitions and execution history
• pain scores
• fatigue scores
• heart-rate measurements or summaries
• other session performance information stored locally

ProMovum does not upload your exercise results to the ProMovum cloud. This also means a Pro cannot see these results through ProMovum. They stay on your device until you delete them or uninstall the app.

Apple Health (iPhone and Apple Watch)

If you use ProMovum on iPhone or Apple Watch, the app asks for two HealthKit permissions: to read your heart rate during a session, so it can be shown and summarised in your session history on your device, and to save workouts, so a completed session counts toward your Activity rings. Nothing else in Health is read or written. Data in Apple Health is managed by Apple under its own terms. You can review or revoke this access at any time in the Health app under Sharing > Apps, or in Settings > Privacy & Security > Health.

5. Information stored in the cloud

We use Google's Firebase and Google Cloud services (see section 10). The cloud may contain:

• Pro account information
• Pro subscription information
• exercise programs
• groups
• Mover internal identifiers (random IDs)
• Mover pseudos assigned by the Pro
• program assignments and access dates
• the relationships between Pros, groups, Movers and programs
• technical and security information needed to operate and secure the service

Share links: when a Pro shares a program with a link or QR code, a copy of the program is stored so anyone who has the link can open it. The copy shows the Pro's pseudo as the sender and does not contain the Pro's account ID. Share links expire automatically.

6. How Pros use Mover pseudos

Each Mover managed by a Pro has two identifiers in the cloud: a random internal ID, and a human-readable pseudo chosen by the Pro. The pseudo is stored in the cloud so the Pro sees the same Movers on all their devices, for example an iPhone and an Android tablet.

The pseudo is not the database identifier, and it is not anonymous: it is pseudonymised personal data, because the Pro can link it to a real person.

7. Physiotherapists, coaches and controller/processor roles

Euscopia acts as controller for the data connected to creating and managing a Pro account, subscriptions and billing, operating and securing the service, support requests, direct communication with users, and website use.

When a physiotherapist or coach uses ProMovum to manage Movers and assign programs, the Pro generally decides which Mover is managed, which pseudo is used, which program is assigned and why, and how long the professional relationship lasts. The Pro may therefore act as the data controller for the personal data they enter into ProMovum, and Euscopia may process certain data on the Pro's behalf as a data processor. This depends on the situation and is not a legal conclusion for every possible use.

A Data Processing Agreement applies to Pro accounts: see the Data Processing Agreement for Pros.

Pros are responsible for having a valid legal basis for the data they enter, for informing their Movers, and for entering as little identifying information as possible. If you are a Mover and have a question about data in a Pro's roster, please contact your Pro first. We will help if needed.

8. Health-related data

Data associated with rehabilitation or physiotherapy may be special-category health data under the GDPR, even when it is stored under a pseudo. Pseudonymised data is still personal data, and we do not treat it as anonymous.

ProMovum reduces the health information it processes by design: a Mover's real identity is not required, and exercise results, pain, fatigue and heart-rate information stay on the Mover's device. What remains in the cloud, such as a pseudo with an assigned program, can still reveal some health context, which is why we recommend careful pseudos (section 6).

9. Why we process personal data (legal bases)

• Providing the service (Pro accounts, programs, rosters, optional cloud sync): performance of a contract (Art. 6(1)(b) GDPR).
• Subscriptions and billing: performance of a contract, and legal obligation for accounting records (Art. 6(1)(b) and (c)).
• Operating and securing the service, preventing abuse and fraud, rate limiting, and anonymous website counters: our legitimate interests in a secure and reliable service (Art. 6(1)(f)).
• Reviewing Pro applications: steps taken at your request before a contract (Art. 6(1)(b)), and our legitimate interest in verifying professionals (Art. 6(1)(f)).
• Support and direct communication: performance of a contract and our legitimate interests (Art. 6(1)(b) and (f)).
• Heart rate and workouts through Apple Health: your permission, given through Apple's HealthKit prompt (Art. 6(1)(a) and 9(2)(a)). You can withdraw it at any time, and this data stays on your device.

We do not use consent as a general basis for things that are necessary to provide the service. For data about Movers that a Pro enters, the Pro is responsible for their own legal basis (see section 7).

10. Service providers and Firebase

ProMovum uses Google's Firebase and Google Cloud on the server side. Google acts as our processor and, where we act as processor for a Pro, as a sub-processor. The services we actually use are:

• Firebase Authentication: sign-in with Apple or Google (account identifier, email and name as provided by the sign-in service).
• Cloud Firestore: accounts, programs, rosters (Mover IDs and pseudos), groups, assignments, share links and subscription records. The database is located in the EU multi-region “eur3”.
• Cloud Storage for Firebase: photos and videos attached to custom exercises, copies of media for shared programs, and Pro application records.
• Cloud Functions for Firebase (including scheduled jobs): server logic such as verifying purchases, claiming share links, the Pro application form, account deletion and the anonymous website counter.
• Firebase App Check: integrated in the apps to help ensure that requests come from genuine copies of ProMovum.
• Firebase Hosting: serves this website.

We do not use Firebase Analytics, Crashlytics or advertising SDKs. Apple (Sign in with Apple, App Store, HealthKit) and Google (Google Sign-In, Google Play, Google Fonts) are independent providers that handle data under their own privacy policies. For Google's terms, see the Firebase privacy information and the Google Cloud Data Processing Addendum.

11. International transfers

Service providers such as Google may process data outside the European Economic Area (EEA). Our Firestore database (EU multi-region “eur3”), our Cloud Storage and our Cloud Functions are located in the EU. Some Google services, such as Firebase Authentication, the global network that serves this website, and Google's logging and support systems, may process limited data outside the EEA.

Where the GDPR requires it, such transfers rely on approved safeguards, such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework, as set out in Google's terms.

12. Data retention

We keep data only for as long as necessary to provide the service, comply with legal obligations, resolve disputes and maintain security. In practice:

• Pro account data: until the account is deleted (see section 15).
• Mover IDs, pseudos and program assignments: until the Pro removes the Mover or the Pro account is deleted.
• Share links: they expire automatically after a limited validity period and are then purged.
• Subscription and accounting information: subscription records in the cloud are deleted with the account (section 15). Accounting records, such as payment statements from Apple and Google, are kept for 10 years, as required by Belgian accounting law. Apple and Google keep purchase records under their own policies.
• Support requests: deleted 12 months after the request is closed.
• Security and technical logs: Google Cloud's request logs for our servers are kept for 30 days (Google's default log retention). Hashed rate-limit records are kept for 30 days.
• Backups: we do not keep separate backups of cloud data. Data you delete is removed from Google's systems within the period set out in Google's terms (up to 180 days).
• Exercise results on your device: we do not hold them. They stay until you delete them or uninstall the app.

13. Data security

We take reasonable measures to protect your data, including: encrypted network transport; authenticated access; access-control rules so that a Pro's data can only be read by that Pro's account; Firebase's security mechanisms and App Check in the apps; data minimisation; pseudonymisation; and keeping exercise results on the device instead of in the cloud. No system is completely secure, and we cannot guarantee absolute security.

14. Your GDPR rights

Depending on the processing activity, you may have the right to:

• access your personal data
• have inaccurate data corrected (rectification)
• have your data erased
• restrict how your data is processed
• object to processing based on legitimate interests
• receive your data in a portable format (portability)
• withdraw your consent at any time, where processing relies on consent
• lodge a complaint with a supervisory authority (see section 19)

These rights do not apply in exactly the same way to every activity. To exercise them, email fitexo@googlegroups.com. For data a Pro holds about a Mover, we may direct you to the Pro. We aim to reply within one month.

15. Account deletion

A Pro or Premium user can request deletion of their account from the in-app profile screen. The deletion is scheduled for 30 days later. During this period you can cancel it by simply signing back in. After 30 days, we permanently delete the account, its data in the cloud (including programs, groups, Mover IDs and pseudos, and subscription records held in the cloud) and the files you stored in the cloud.

Some information is not removed by this process: purchase records held by Apple or Google, accounting records we must keep by law, and share-link copies, which expire on their own. Movers who have no account have nothing to delete in the cloud under their own name. A Mover managed by a Pro can ask the Pro to remove them, or contact us. Uninstalling the app removes the data on the device.

16. Children and minors

ProMovum is not directed at children. Pro accounts, Premium subscriptions and any account-based feature are for people aged 18 or older. Using the app on your own (without a Pro) is for people aged 16 or older. A Mover under 16 may follow a program only if a Pro has assigned it and a parent or guardian has authorised it; the Pro is responsible for obtaining that authorisation (see section 7 and the Data Processing Agreement). We do not knowingly collect personal data from people below these ages. If you believe we have, please contact us.

17. Changes to this Privacy Policy

We may update this policy as ProMovum evolves. We will update the date above whenever we do, and for significant changes we will make that clear in the app or on this site.

The French version of this Privacy Policy is the reference version. The English and Dutch versions are translations provided for convenience; if they differ, the French version prevails.

18. Contact

Questions about this policy or your data? Email fitexo@googlegroups.com. Postal address: Euscopia.net SRL, Rue Haie du Loup 6, 5024 Marche-les-Dames, Belgium.

19. Supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work, or where you believe a violation occurred. In Belgium this is the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit).