Privacy Policy

1. Who we are

MOVLI (“we”, “us”) is a creature‑collecting game for iOS that is driven by real health data from WHOOP, Oura Ring or Apple Health. This policy explains what we collect, why, and the choices you have. It applies to the MOVLI app and to movli.xyz.

Questions or requests can be sent to [email protected].

2. Data we collect

2.1 Data from your WHOOP account

When you connect WHOOP, you authorize MOVLI through WHOOP’s OAuth screen. We request the following permissions and use them only for the purposes listed:

What we store. Each morning we compute a health score, a strain alignment result, a workout flag and the game rewards that follow. We store those derived values, plus the three daily scores WHOOP gives you (recovery score, sleep performance and the day’s final strain) so your trend chart in MOVLI keeps working. We do not keep raw WHOOP recordings such as heart‑rate series, sleep stages, GPS or workout details; they are used in memory to compute the day’s result, or to show you a detail panel when you tap a score, and then discarded. Your WHOOP access and refresh tokens are stored encrypted so we can fetch your next morning’s scores.

Webhooks. WHOOP notifies us when your recovery is ready. We store only the notification ID (to avoid processing it twice) and the day it applies to.

Revoking access. If you disconnect WHOOP in MOVLI, we tell WHOOP to revoke our access and delete your tokens at once. If you instead remove MOVLI from your WHOOP account, our next request fails and we delete your tokens then; either way we stop receiving your data. Game results you already earned stay on your account. We use WHOOP data only as you authorized, in line with the WHOOP API Terms of Use; we never sell it, share it with advertisers, or use it to build products that compete with WHOOP.

2.1b Data from your Oura account

If you connect an Oura Ring instead, you authorize MOVLI through Oura’s OAuth screen. We request three permissions: daily (your daily Readiness and Sleep scores, sleep duration and daily activity totals), workout (whether you logged a workout yesterday) and personal (used only to read your Oura user ID so we can match Oura’s notifications to your account; we never store your age, height, weight or sex). Each morning we take Oura’s Readiness score as your recovery, Oura’s Sleep score as your sleep, and turn yesterday’s moderate and high activity into the same activity score every MOVLI player gets.

What we store. Only the derived daily values the game needs: those two scores, how long you slept, the activity score and the game results that follow. Raw Oura data (heart rate, HRV, sleep stages, workout details) is read in memory and discarded; we keep Oura data no longer than strictly necessary and never use it to train or prompt AI models. Your Oura tokens are stored encrypted. Oura notifies us by webhook when new scores are ready; we store only the notification ID.

Revoking access. Disconnecting Oura in MOVLI revokes our access at Oura and deletes your tokens at once; removing MOVLI from your Oura account has the same effect on our next request. If you ask us to delete your Oura‑derived data, we do so within 72 hours. Oura requires an active Oura Membership for third‑party apps on Gen3 and later rings.

2.1c Data from Apple Health

If you use an Apple Watch or another device that writes to Apple Health, you can connect Apple Health instead. iOS asks you which data types MOVLI may read; we never write to Apple Health. MOVLI reads workouts, active energy, exercise minutes, sleep analysis, heart rate variability, resting heart rate, sleeping wrist temperature and respiratory rate.

What we store. Your iPhone folds the samples into one small set of daily totals before anything leaves the device: active energy and exercise minutes for the day, each workout’s duration, effort score and energy, minutes asleep and awake, how far your bedtime moved from your usual one, and the day’s HRV, resting heart rate, wrist temperature and respiratory rate values. We store those daily values, the sleep, activity and recovery scores computed from them, and the game results that follow; the past 30 days of them form your personal baseline. Individual Apple Health samples and heart‑rate series are never uploaded.

How we use it. Apple Health data is used only to compute your daily scores and run the game. We never use it for advertising or marketing, never sell it, never share it with third parties or data brokers, never use it to train or prompt AI models, and never store it in iCloud.

Revoking access. Disconnect Apple Health in MOVLI’s settings, or turn off MOVLI’s access at any time in the Health app (Sharing → Apps → MOVLI). Deleting your account removes every Apple Health–derived value we hold.

2.2 Account data

• Sign in with Apple: the stable user identifier Apple gives us and, if you choose to share them, your name and email (or Apple’s private relay address).
• Google Sign‑In (if you choose it): your Google account identifier, name, email address and profile picture URL, through Google’s standard sign‑in.
• Passkeys: the public key and credential ID your device creates. We never see your biometrics or device passcode.
• Session tokens that keep you signed in on your device.

2.3 Game data

Your creatures, gear, in‑game currency (VOLT), daily results, streaks, collection progress, invite codes and friendships. VOLT is a game currency with no cash value; it cannot be bought, sold or transferred.

2.4 Device and technical data

• Push notification token for your device, so we can tell you when your morning result is ready. Only collected if you allow notifications.
• Time zone offset, so your game day starts at your local morning.
• Standard server logs (IP address, request path, timestamp, app version) kept briefly for security and debugging.

We do not use third‑party analytics or advertising SDKs, and we do not collect precise location, contacts or photos.

3. How we use your data

• To run the game: compute your daily result, grow your creature, wear your gear, keep your streak.
• To keep you signed in and to secure your account.
• To send you a notification when your morning result is ready (if enabled).
• To let you add friends by invite code and show them your creature and collection.
• To detect abuse, fix bugs and keep the service reliable.

We do not use your data for advertising, profiling for marketing, or selling to anyone.

4. What friends can see

Social features in MOVLI compare collections, not bodies. Friends can see your creature, its name, level, rarity and form, what gear it wears, your collection progress, how long you have played, and whether you have checked in today. Friends cannot see your sleep, recovery, strain, workouts or any other health metric. There is no public profile; only people you add by invite code can see you.

5. Sharing with third parties

We share data only with service providers who process it on our behalf to run MOVLI, under contract and only as needed:

• WHOOP (WHOOP, Inc.) — you authorize us to read data from your WHOOP account; WHOOP’s own privacy policy governs your WHOOP account.
• Oura (Ōura Health Oy) — if you connect an Oura Ring, you authorize us to read data from your Oura account; Oura’s own privacy policy governs your Oura account.
• Apple — Sign in with Apple and push notifications (APNs). Apple Health data is read on your device through Apple’s HealthKit and is not shared with Apple or anyone else by us.
• Google — Google Sign‑In, only if you choose it to sign in.
• Railway — hosting for our servers and database (United States).
• Cloudflare — network security and delivery for movli.xyz.

We may also disclose data if required by law, or to protect the rights and safety of our users and the service. If MOVLI is ever part of a merger or acquisition, your data would remain subject to this policy.

6. Your choices and controls

• Disconnect WHOOP in the app’s settings. We delete your WHOOP tokens immediately and stop fetching data. You can also revoke MOVLI from your WHOOP account settings.
• Disconnect Oura in the app’s settings. We revoke our access at Oura, delete your Oura tokens immediately and stop fetching data.
• Disconnect Apple Health in the app’s settings, or revoke MOVLI in the Health app. We stop reading Apple Health immediately.
• Notifications can be turned off at any time in iOS Settings; we then delete the push token.
• Delete your account from the app’s settings. This permanently removes your account, WHOOP and Oura connections, Apple Health–derived values, creatures, gear, results, friendships and device tokens. Backups are purged within 30 days.
• Access, correction, portability and objection. Email [email protected] from the address on your account and we will send you a copy of the data we hold about you, correct it, or delete it within 30 days. You may also lodge a complaint with your local data protection authority.

7. Data retention

We keep your account and game data for as long as you have an account. Derived daily results are kept so you can see your history. Server logs are kept for up to 30 days. When you delete your account, everything associated with it is removed as described above.

8. Security

All traffic between the app, our servers, WHOOP and Oura uses TLS. WHOOP and Oura tokens are encrypted at rest. Sign‑in uses Apple’s identity services and passkeys rather than passwords, so we never store a password for you. Access to production systems is restricted to the people who operate MOVLI. If we ever learn of unauthorized access to your data, we will notify you and WHOOP promptly, as the law and our agreements require.

9. Children

MOVLI is designed to be suitable for all ages, but it is meant for people who track their health with WHOOP, Oura Ring or Apple Health and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal data from children under that age. If you believe a child has created an account, contact us and we will delete it.

10. International transfers

Our servers are located in the United States. If you use MOVLI from elsewhere, your data is transferred to and processed there. Where required, we rely on standard contractual protections with our providers.

11. Not medical advice

MOVLI is a game. Scores, recommended ranges and rewards are for entertainment and motivation only and are not medical advice, diagnosis or treatment.

12. Changes to this policy

If we make material changes, we will update the date at the top of this page and, where appropriate, notify you in the app. Continued use after a change means you accept the updated policy.

13. Contact

MOVLI · [email protected] · movli.xyz