Move Belong
Privacy policy
Last updated 19 October 2026
Who we are
Move Belong (ABN 83 432 174 196), 138a Garner Lane, Tuart Hill WA 6060, Australia. This policy is written for Australian law. We do not geo-block other countries and we do not market to them at launch. Privacy contact: privacy@movebelong.com. Access and correction requests: acknowledge within 5 business days, complete within 30 days, identity via the signed-in account email.
What we collect
Account details (name, email, phone, password, date of birth), household dependents, booking and membership history, payment records held by Stripe, notification preferences, emergency contact and health notes you or authorised staff record, intake-form answers (including allergies, conditions and free-text health questions), session logs and notes, assigned training programs, daily nutrition logs and member-visible meal-plan files (ordinary personal information, not health records), progress markers (body weight is treated as sensitive; performance markers as ordinary personal information), progress photos you choose to upload, messages you send to studios and their replies, waivers and signature evidence, and basic device data needed to run the service (including session IP and user agent while a session is live).
Location
Location is not linked to identity and is not used for tracking. When you choose Near me or the locate control on Explore, the app reads a one-shot when-in-use GPS fix on your device to centre the map and sort studios by distance from you. That fix stays in memory on the device for the search; it is not stored on your account and is not used for background tracking.
Camera and photos
The app asks for camera access only when you scan a studio's check-in QR code; the camera image is read on your device to get the code and is not saved or uploaded. Progress photos are optional: you choose each photo, it is stored privately against your account in Sydney, is visible only to you and to studio staff you have allowed to see progress, and you can delete it at any time. The app does not read your photo library in the background.
Notifications and device data
If you allow push notifications, we store a device token with Expo's push service so we can send class reminders, waitlist offers, studio messages and alerts for your account. You can turn notifications off in your device settings or in your Move Belong account, and removing the app stops them. We do not use advertising identifiers, we do not use third-party analytics or advertising SDKs, and we do not track you across other companies' apps or websites.
Calendar
When you choose Add to calendar, the class details (title, time, address, instructor, room, cancellation line and a link back to the class) are written into the calendar app you pick, or into a .ics file you share. That write uses the system add-event dialog and does not need broad calendar access. If you later cancel or the class is rescheduled while the app is open, and you allow Move Belong to update or remove that event, the app asks for full calendar access only at that moment so it can change or delete the event it stored. Event ids stay on your device under your signed-in account. Booking confirmation and class-change emails may attach a .ics file with the same booking id so you can add or replace the event yourself; mail apps do not always update an existing event automatically.
How we use it
We use your information to run your account, process bookings and payments, send transactional messages, apply class age and safety rules, support emergency contact on a roster when a studio is allowed to see health information, and respond to support and privacy requests. On a payment dispute, the booking, attendance, and waiver-signature records for that charge are shared with Stripe and the card network. Health, nutrition, and progress records are not included. Marketing from a studio or from Move Belong is always optional; see “Marketing and your choices” below.
What studios can see
Studios you belong to or book with can see the business-scoped information needed to run their club. They do not automatically receive your global profile from other studios. Contact details from your Move Belong profile are shared with a studio only if you authorise that request. Health information is a separate consent. A studio may declare that health information is required for membership (insurance, safety screening, legal/regulatory, or other with an explanation). You see that reason before agreeing. If you withdraw health access from a studio that requires it, we warn you that membership will end under the plan’s normal cancel terms.
Marketing and your choices
Marketing is opt-in and is never bundled with booking, paying, or agreeing to terms. Each studio you deal with is separate: agreeing to hear from one studio never signs you up to another, and it never signs you up to Move Belong’s own news. Move Belong’s news is a separate choice again, and studios are never told who has made it. Where you give an email address we cannot yet prove is yours (a studio’s website enquiry form, an intake form, or a staff member noting that you asked), we email you to confirm, and nothing is sent unless you click. A staff member can record that you asked to hear from a studio, and can record that you asked them to stop, but can never switch marketing on for you. Every marketing email carries the sender’s name and address and a one-click unsubscribe that takes effect immediately and applies to that studio only; your booking confirmations and class reminders are unaffected. You can see and change every choice per studio, and Move Belong’s own, at any time from your account. We keep a record of how and when each choice was made so a studio can answer “where did you get my details”; that record is kept even after a choice is turned off, and is destroyed under the retention rule below. We never sell or share marketing lists, and a studio moving to Move Belong from another platform does not bring its list with it.
Cross-studio privacy
Move Belong is built so consumers discover studios; studios do not browse other consumers. If a studio asks to access details from your global profile, you get Authorise or Deny, and you can later withdraw future access from Profile. Withdrawal cannot un-tell a studio a phone number it already received. A studio that types or imports an email is told only that if that person is on Move Belong, they have been asked to share; it is not told whether an account exists.
Children
Direct accounts are 16+. Under-16s use a guardian/dependent account. Class min/max age and guardian-required-below rules are enforced at booking when a date of birth is on file. We do not set platform marketing consent on dependent records. Design follows the forthcoming OAIC Children’s Online Privacy Code (best-interests defaults).
Automated decisions
Mandatory disclosure from 10 December 2026. Primary ADM: if you are not checked in, after the studio’s no-show grace period the system can mark a no-show, issue a strike, and after three active strikes in the reset window create a booking block. If the studio has turned on late-cancel strikes, a late cancellation can also issue a strike when nothing was kept and someone else did not take the seat. You can contest a strike with the studio. A staff booking pause is a person at the studio, not this automatic step. Also automated: waitlist FIFO promotion, booking eligibility gates (waiver, intake, entitlement, and an active booking pause), marketplace listing quality, trial/membership expiry, and an SMS template classifier that sees dummy merge data only, not your personal information.
Retention
National rule: 7 years from last relevant service, or until age 25 if later for someone who was a minor. Tax invoices 5 years (ATO). Staff help questions and the assistant's answers are stored for up to 12 months to improve help, with email addresses, phone numbers and card numbers removed. On account deletion we close the live account and keep health information in an archive hidden from day-to-day studio tools until that date, because NSW/VIC/ACT health-records law does not let a deletion request override retention. A studio that previously had health access may request the archive for a stated legal purpose; Move Belong reviews those requests manually; approved access is read-only, that studio only, 30 days. Destruction is logged (name, period covered, date).
Overseas recipients (APP 8)
Stripe (payments, and on a dispute the booking, attendance, and waiver-signature records passed on to the card network) US/IE; Twilio (SMS) US; Twilio SendGrid (email) US; Google (maps/places) US; Expo (push) US; Anthropic (AI help assistant: staff help-chat messages and matched help content) US. Database (Neon) and file storage (Vercel Blob) are in Sydney, Australia. App hosting functions are configured for Sydney (syd1). We describe locations factually; this is not a residency guarantee.
Access, correction and complaints
You can edit profile and health information in the product, and you can delete your account from the app (Account) or at movebelong.com/delete-account. For a copy of your data, or a correction we cannot make in-product, email privacy@movebelong.com from your account email. Complaints: contact us first (30 days); then the OAIC at oaic.gov.au. Notifiable data breaches follow our Data breach response plan.
Contact
privacy@movebelong.com or hello@movebelong.com.
Also see Terms of use.