This English translation is provided for convenience. In case of any discrepancy, the French version prevails.
Mova is a movement preparation application for functional fitness and HYROX athletes, available at app.mova-training.app. It is published by Théry Persyn. This policy describes what personal data we collect, why, how it is protected, and what your rights are.
1. Data controller
The data controller is Théry Persyn, publisher of the Mova application. For any question regarding your personal data, contact: contact@wod-open.com
2. Data we collect
We only collect data necessary for the service to function:
| Category | Data | Purpose |
|---|---|---|
| Account | Email address, account identifier | Account creation and management, authentication |
| App usage | Completed sessions, progress, favorites, preferences (level, available equipment) | Personalize recommendations and track your progress |
| Payment | Subscription status (billing is handled by Paddle; bank details never pass through our servers) | Managing your Premium subscription |
| Technical | IP address, device type, technical logs | Security, bug diagnosis, fraud prevention |
The goals and levels you provide (for example: “work on the pistol squat”) are sports preference data, not health data under GDPR. Mova does not collect or infer medical information.
3. Sub-processors and hosting
To operate, Mova relies on the following providers, each acting as a data processor under GDPR:
| Provider | Role | Data involved |
|---|---|---|
| Supabase | Database and authentication | Account, app usage |
| Paddle | Merchant of Record — payment processing, billing, VAT | Subscription status, billing history |
| Resend | Transactional email delivery (confirmation, password reset) | Email address |
| Ionos | Website and app hosting | All data passing through the application |
We do not sell or rent your personal data to third parties. It is only shared with the providers listed above, strictly to the extent necessary for the service to operate.
4. Data retention
Your data is kept as long as your account is active. Upon account deletion, your personal data is deleted or anonymized within 30 days. Billing data (transactions, invoices) is managed and kept by our payment provider Paddle, acting as Merchant of Record, in accordance with its own legal obligations. Mova does not store any billing data.
5. Your rights (GDPR)
Under the General Data Protection Regulation, you have the following rights:
- Right of access: obtain a copy of the data we hold about you
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your account and data
- Right to data portability: receive your data in a structured format
- Right to object and restrict: object to certain processing
To exercise any of these rights, contact us at contact@wod-open.com. We respond within 30 days. You may also lodge a complaint with your local data protection authority (in France, the CNIL — www.cnil.fr).
6. Security
We implement reasonable technical and organizational measures to protect your data (encryption in transit via HTTPS, restricted database access, secure authentication). As no system is infallible, we cannot guarantee absolute security.
7. Cookies and trackers
The application only uses cookies and technical identifiers strictly necessary for it to function (session, authentication). No advertising or third-party tracking cookies are used.
8. Minors
Mova is not intended for individuals under 16. We do not knowingly collect data from minors under 16.
9. Changes
This policy may be updated. In case of a substantial change, we will inform you via the app or by email.
10. Contact
For any question: contact@wod-open.com