Legal

Movra Privacy Policy

AP Performance LLC (DBA Movra)

1. Introduction

This Privacy Policy describes how AP Performance LLC (DBA Movra) collects, uses, and safeguards your personal information when you use the Movra app or website. By using our services, you agree to the terms of this policy.

2. Who We Are

Movra is operated by AP Performance LLC.

Contact: support@movra.app
Address: 8055 E Thomas Rd. #C210, Scottsdale, AZ 85251

3. What Data We Collect

  • Name
  • Your phone number, if you give it to us on a form, in a message or on a call (business contact details only)
  • Age confirmation (13+)
  • Workout logs, nutrition logs, biofeedback
  • Uploaded photos and blood work (optional)
  • AI chat interaction history
  • Device and usage data (including Google Analytics tracking)
  • For businesses that use Movra CRM, and people who message or comment with those businesses on Facebook or Instagram: the data described in section 14
  • For the TikTok accounts Movra runs through Movra CRM: the data described in section 16
  • If you book a call or write to us on movra.app: the details described in section 17

4. How We Use Your Data

  • To provide personalized AI coaching
  • To improve app performance and features
  • To communicate important updates
  • If consent is given, to send promotional emails

5. Marketing Communications

If you opt in, we may send you occasional updates, tips, and promotional offers related to Movra. You can unsubscribe at any time by clicking the link in any marketing email.

We do not send marketing emails without your explicit consent.

6. Data Storage and Security

All data is securely stored using Firebase in the United States. We use encryption and access controls to protect your information.

7. Third-Party Services

  • Firebase (hosting, authentication, database)
  • YouTube API Services (publishing Movra’s own videos to channels Movra owns — see section 13)
  • Meta Platforms (Facebook and Instagram, for businesses that connect a Page or Instagram account to Movra CRM — see section 14)
  • TikTok (publishing Movra’s own videos to TikTok accounts Movra runs — see section 16)
  • Anthropic (AI that helps draft replies in Movra CRM — see section 14)
  • Cloudflare (media hosting and secure connections)
  • Amazon Web Services (email delivery)
  • Twilio (text messages and calls)

We do not sell or share your data with advertisers.

8. User Rights

You have the right to access, update, or delete your personal data. Contact us at support@movra.app to make a request. We will respond within 30 days.

9. Data Retention

We retain your data as long as your account is active. If you delete your account, your data will be removed unless retention is required by law.

10. Children’s Privacy

Movra is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13.

If we become aware of such collection, we will delete the data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted in the app or on our website.

Continued use of the service means you accept the updated terms.

12. Clinic and Organization Customers

For clinics and organizations using Movra to manage patients, the organization is the HIPAA Covered Entity and data controller for its patients’ Protected Health Information, and Movra acts as its Business Associate. That relationship and Movra’s PHI obligations are governed by the Business Associate Agreement rather than this consumer policy.

13. YouTube API Services

AP Performance LLC builds and runs Movra CRM (see Movra CRM). Its YouTube features schedule and publish Movra’s own videos to YouTube channels that Movra owns, using YouTube API Services. Those YouTube features are used only by AP Performance LLC for its own channels. They are not offered to client businesses, and they never access a viewer’s or any other creator’s YouTube data.

Terms that apply

What we access and store

  • OAuth access and refresh tokens for the YouTube channels we own, encrypted at rest on the operator’s own computer and never transmitted to a third party.
  • The videos, titles, descriptions, tags, and thumbnails that we ourselves upload.
  • Aggregate statistics for our own uploads — view, like, and comment counts — and the channel’s subscriber count, so we can compare our own content’s performance across platforms.

We do not read, collect, or store comments, viewer identities, watch history, or any YouTube data belonging to other users. We do not post comments, subscribe, or message on anyone’s behalf. We do not sell, share, or transfer YouTube data to any third party, and we do not use it for advertising.

How long we keep it

Statistics are stored alongside our own post records and are deleted when the channel is disconnected or the post is deleted. Tokens are deleted immediately when a channel is disconnected. You may request deletion of any stored data at any time by contacting support@movra.app.

Revoking access

Access granted to Movra CRM can be revoked at any time from the Google security settings page. Revoking access immediately ends the tool’s ability to upload to or read statistics from the channel.

14. Facebook and Instagram (Movra CRM)

Movra CRM also lets a business connect its own Facebook Page and Instagram business account, so it can manage its messages, comments, and posts in one place. That business is either Movra itself or a client business we set Movra CRM up for. Each client business gets its own separate copy. See Movra CRM.

What we access and store

  • The access tokens Meta gives us when a business connects its Page or Instagram account, stored encrypted on the computer or server that runs that business’s copy of Movra CRM.
  • Messages and comments sent to that Page or account, and the replies sent from it, with the sender’s name, handle, and the account ID Meta gives us.
  • The business’s own posts and their statistics, such as likes, comments, and reach.

How we use it

  • Only to provide Movra CRM to the business that connected the Page or account: showing its messages and comments, helping it reply from its own Page or account, publishing the posts it schedules, and showing how its posts perform.
  • Replies may be drafted with AI. To do that, message text is processed by our AI provider, Anthropic.
  • Each business sees only its own data. We do not sell this data, share it between businesses, or use it for advertising.

Who we share it with

Only the service providers that help us run Movra CRM (Anthropic, Cloudflare, and Amazon Web Services), who process it on our instructions, or when the law requires us to disclose it.

How long we keep it

We keep it while the business uses Movra CRM. A business, or anyone who messaged or commented with it, can ask us to delete their data at any time; we delete it within 30 days. See Data Deletion, which also explains how to remove Movra CRM’s access from Facebook or Instagram.

15. Text Messages (SMS)

If you give us your mobile number and agree to texts, AP Performance LLC (DBA Movra) texts you about a call you booked or asked for with us: a confirmation, reminders, a note if we miss you, and replies to what you text us. How many varies, usually 2 to 4 texts per booked call. Message and data rates may apply. Reply STOP to stop texts, or HELP for help.

We use Twilio to send and receive texts. Twilio handles your number only to deliver our messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared, sold, rented or transferred to any third party. Information is shared only with the providers that deliver our texts for us, and only to deliver them.

We keep a record of when and how you agreed to texts and of any STOP you send, so we can honour it. Please don’t text us patient information.

16. TikTok (Movra CRM)

Movra CRM publishes Movra’s own videos to TikTok accounts that Movra runs, using TikTok Login Kit and the TikTok Content Posting API. These TikTok features are used only by AP Performance LLC for its own accounts. They never access a viewer’s or any other creator’s TikTok data. See Movra CRM.

Terms that apply

What we access and store

  • The connected account’s basic profile: display name, avatar, and the account ID TikTok gives us, so the account shows in Movra CRM.
  • The access and refresh tokens TikTok gives us, stored encrypted on the operator’s own computer.
  • The videos and captions we ourselves publish, and the settings the account holder chose for each video before posting: who can view it, whether comments, duets and stitches are allowed, and any commercial content disclosure.

Before each post we ask TikTok for the account’s current posting options (its privacy choices, its comment, duet and stitch settings, and its maximum video length) to build the posting screen. We use them only for that post. Nothing is uploaded to TikTok until the account holder has reviewed the post and confirmed it.

We do not read, collect, or store comments, followers, messages, viewer identities, or any TikTok data belonging to other users. We do not sell, share, or transfer TikTok data to any third party, and we do not use it for advertising.

How long we keep it

Posting records are kept with our own post records and deleted when the post is deleted. Tokens are deleted when an account is disconnected. You may ask us to delete any stored data at any time at support@movra.app; we delete it within 30 days.

Revoking access

Access granted to Movra CRM can be removed at any time in the TikTok app under Settings and privacy > Security and permissions > Manage app permissions. Removing it immediately ends Movra CRM’s ability to post to the account. See Data Deletion.

17. Booking a Call or Writing to Us on movra.app

When you book a call or send a message on movra.app, AP Performance LLC (DBA Movra) collects what you enter: your name, email, phone number, your business’s name, and any note or message. If you asked for a live demo after a search on our builds page, the note includes what you searched for. If you agree to texts, section 15 applies.

How we use it

  • To set up your call. We add it to our own Google Calendar with you as a guest, so Google sends you the invite, and we email you a confirmation, reminders, and a link to move or cancel it.
  • To answer you. Your booking or message reaches Austin by email and is kept in our own customer records, so we know who we’re talking to and what you asked about.

Who else handles it

Only the providers that do these jobs for us: Google (the calendar and the invite), Amazon Web Services (our emails), Twilio (texts, if you agree to them), Cloudflare (the spam check on our forms), and Vercel (which hosts the site). We do not sell it or use it for advertising.

How we measure the site

We measure how movra.app is used: which pages are visited, what people search for on our builds page, and whether a call gets booked or a message sent. For that we use PostHog, Vercel Analytics, and the Meta pixel. We don’t send them your name, email, phone number, or message, and what you type is masked in our session recordings.

How long we keep it

We keep it as a business contact record until you ask us to delete it. Ask at any time at support@movra.app; we delete it within 30 days.

18. Contact Information

If you have any questions about this Privacy Policy or your data, contact us at:

support@movra.app
AP Performance LLC, 8055 E Thomas Rd. #C210, Scottsdale, AZ 85251

Version: 2026-11