Privacy Policy

This Privacy Policy explains how MoveMembers ("we", "us") collects, uses and protects personal data when you use our gym management software and website at movemembers.com (the "Service"). We keep this simple and only collect what we need to run the Service.

1. Who we are

MoveMembers is operated by NOPA STUDIO, a company registered in Singapore under UEN 53522570M. For any privacy question, contact us at hello@movemembers.com.

2. Data we collect

• Account data: the gym owner or staff name, email, password (stored hashed), gym name and type.
• Gym data you enter: your members, classes, bookings, payments, notes and related records that you add to run your gym.
• Payment data: when you subscribe, payment is processed by Stripe. We do not store your full card number; we keep only a subscription reference and status.
• Technical data: basic logs (IP address, browser, timestamps) needed for security and to operate the Service.

3. How we use data

• To provide, secure and improve the Service.
• To manage your account, subscription and billing.
• To send service emails (sign-up confirmation, receipts, expiry reminders, important notices).
• To respond to your support requests.

4. Legal bases

Where the GDPR applies, we process data to perform our contract with you (providing the Service), to comply with legal obligations (for example accounting), and for our legitimate interests in securing and improving the Service.

5. Members' data (you are the controller)

The member information you enter belongs to you and your gym. For that data you are the data controller and MoveMembers acts as a data processor: we process it on your instructions solely to provide the Service. You are responsible for informing your members and having a lawful basis to store their data.

6. Service providers we use

We share the minimum data needed with trusted providers: Stripe (payments), Resend and our email provider (transactional email), and our hosting provider (running the servers). If you enable LINE messaging, messages you send pass through the LINE Messaging API. Google Analytics receives website usage data, but only from visitors who accepted analytics cookies (see section 11). Each provider processes data under its own terms and security measures.

7. International transfers

Our providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

8. Data retention

We keep your data for as long as your account is active. After you close your account, we delete or anonymise your data within a reasonable period, except where we must keep records to comply with the law (for example tax records).

9. Security

We use technical and organisational measures to protect data, including encrypted connections (HTTPS), hashed passwords and access controls. No method is perfectly secure, but we work to protect your information.

10. Your rights

Depending on your location, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can export your gym data at any time from Settings, or contact us at hello@movemembers.com.

11. Cookies and audience measurement

Essential cookies. These keep you signed in and protect the Service against abuse. They are always on because the Service cannot work without them, and they are not used to follow you around other websites.

Analytics, optional and off by default. On our public website we use Google Analytics to see which pages actually help gym owners. It is not loaded when you arrive: the Google Analytics script is only added to the page after you accept it in the cookie banner, and no analytics cookie is written before that. Declining, or simply not answering, means nothing is measured.

Changing your mind. Use the Cookie settings link at the bottom of any page. Choosing to decline switches Google Analytics off straight away and deletes the analytics cookies it had already set.

We do not use advertising cookies, and we never sell your data.

12. Children

The Service is intended for gym businesses, not for use by children. If a gym stores data about minor members, the gym is responsible for obtaining the necessary consent from a parent or guardian.

13. Changes

We may update this policy. We will post the new version here and update the date above. Significant changes will be communicated by email.

14. Contact

Questions about this policy or your data: hello@movemembers.com.