Privacy Policy
legalPages.lastUpdated July 2026
legalPages.englishOnlyNotice
My Movement Lab ("we", "us", "our") is operated by My Movement Lab, based in Amsterdam, Netherlands. We are committed to protecting your personal data in accordance with GDPR.
Who We Are
My Movement Lab is a Pilates learning platform operated as a sole trader (ZZP/eenmanszaak) under Dutch law. Contact: mymovementlab@gmail.com
What Data We Collect
- Account data: email address, first name, password (encrypted)
- Learning data: quiz answers, XP, streak, badges, session progress
- Payment data: handled entirely by Lemon Squeezy, we never see or store card details
- Usage data: pages visited, session duration, device type (anonymized)
Why We Collect It
- To provide and personalize your learning experience
- To track progress and award XP, streaks, and badges
- To process subscription or one-time payment via Lemon Squeezy
- To send streak reminders and account notifications (opt-in only)
- To improve the platform based on anonymized usage data
Legal Basis (GDPR)
- Contract: processing account and payment data to deliver the service
- Legitimate interest: improving the platform and preventing fraud
- Consent: sending marketing emails (withdrawable at any time)
Who We Share Data With
- Supabase (database, authentication and file storage), EU servers. Processes your account data, learning progress and uploaded avatar.
- Google (optional "Sign in with Google"). If you choose it, Google shares your email and name with us and processes the sign-in itself. Not used if you register with email and password.
- Lemon Squeezy, with Stripe as its payment processor (payments, invoicing, VAT and subscription management). They receive your email and billing details, we never see your card data.
- Lovable (hosting and application infrastructure). Processes technical request data such as IP address and browser type in server logs.
- Anthropic (AI sequence generator, Pro feature only). Receives the sequence prompt you submit, no account identifiers. Only called when you generate a sequence.
We never sell your data to third parties. We do not use analytics, advertising or social media tracking services. Fonts are hosted on our own servers, so no font or CDN provider receives your IP address.
How Long We Keep Data
- Account and learning data: as long as your account is active
- After deletion: permanently deleted within 30 days
- Payment records: 7 years (Dutch tax law)
Your Rights (GDPR)
Access, correct, delete, export, object, withdraw consent.
Email mymovementlab@gmail.com, response within 30 days.
Cookies and Local Storage
We use strictly necessary cookies and local storage only: your login session, your sound and consent preferences, and your last quiz position. These are required for the app to work and are exempt from consent under the ePrivacy Directive.
We currently load no analytics, advertising or tracking cookies and no third-party scripts. The consent banner lets you accept or reject non-essential cookies. Nothing non-essential is loaded before you accept, and rejecting keeps it switched off. To change your choice, clear this site's data in your browser and the banner reappears.
Sessions expire automatically after 30 days of inactivity for your security.
Children
Not directed at under-16s. Contact us if you believe a child has registered.
Contact & Complaints
mymovementlab@gmail.com
Autoriteit Persoonsgegevens: www.autoriteitpersoonsgegevens.nl