Security and data
Moveful has no accounts. What it knows about the person using it (settings, break history and health-check answers) stays on their device, so there's no customer data for us to hold, lose or share. The one thing that reaches us is a message someone chooses to send from Help & feedback.
What is stored, and where
- Settings, break history and progress: on the device only. Browser local storage for the web app; macOS preferences for the Mac app; the app's data folder for the Windows app (or a folder next to the program for the portable version).
- Health check answers: on the device only, used to leave out exercises that may not suit the person or to show a short reminder at the start of breaks.
- Nothing else. No names, email addresses, keystrokes, window titles, screenshots, audio or video are collected or stored.
What goes over the network
- Break screen updates (Mac and Windows apps), when the app starts and about once a day: a request to
/mac/version.jsononmoveful.co.uk, and when there is a new version,/mac/player.html. The download is checked against the SHA-256 hash in the manifest before it's used; anything that doesn't match is discarded. Both files come from this site over HTTPS, so the check catches a damaged or partial download; it doesn't protect against someone who controls the site itself. To approve every change yourself, deploy theupdatespolicy set to 0 with the installer (see Deploying Moveful): the apps then never check for updates and keep the break screen they were installed with, and you move to a new one by rolling out a newer installer through your usual change process. (An update downloaded before the policy arrived stays in use until a newer installer replaces it.) - Optional guide figures (Sam, Nina, Marcus, Mei, Alex and Kai): downloaded once from
moveful.co.uk/models/when someone picks one. - Recorded spoken cues, when someone turns spoken cues on: each break downloads the lines it says from
moveful.co.uk/voice/. If they can't be downloaded, the device's own voice says them. - The web app loads from
moveful.co.ukand works offline after that. - The Microsoft Teams app is a personal tab that opens the web app (
moveful.co.uk/app/?teams=1). It asks for no Teams permissions and no sign-in, has no bot, and reads nothing from Teams; settings stay in the Teams client's web storage on that device. - Addresses to allow: the Mac and Windows apps connect only to
moveful.co.uk, for the update check, the guide figures and the recorded spoken cues. - Feedback (web app and Teams tab), only when someone writes a message in Help & feedback and presses Send: a request to
moveful.co.uk/api/feedbackwith the message, a reply address if they add one, and the app's build, language and browser. Opening Help asks the same address whether the form is available. - The apps send no analytics, crash reports or usage data.
Signals the desktop apps read
To avoid interrupting calls and presentations, the Mac and Windows apps read, on the device: time since the last keyboard or mouse input, whether another app is using the camera or microphone (the same record that drives the privacy indicator), and which app is in front and whether it's fullscreen. The Mac app can optionally read calendar busy times, with the person's permission. None of this leaves the device.
Hosting and sub-processors
- Vercel hosts the website, the web app and the downloads. It processes standard request logs (IP address, request) to serve pages (Vercel's privacy policy).
- Resend delivers messages sent from Help & feedback, and email sent to our moveful.co.uk addresses, to our inbox (Resend's privacy policy).
- The home page uses cookie-free Vercel Web Analytics; the app and the guides don't. See Privacy.
Builds
- The Mac app is a native AppKit app; the Windows app is built on Electron. Both show the break in a local web view with no remote code other than the checked break-screen update above.
- Code signing: the Mac app and package are signed with Sohus Ltd's Apple Developer ID and notarised by Apple. The Windows installers and the MSI are signed by Sohus Ltd with a certificate from Microsoft (Azure Artifact Signing), and timestamped, so the signatures stay valid after the certificate expires.
- Open-source components include three.js and Electron. The figures are CC0 (Quaternius) and MIT-licensed (Microsoft Rocketbox) assets, and Alex and Kai are Adobe Mixamo's X Bot and Y Bot, used under Adobe's Mixamo terms.
Health content
Moveful gives general wellness guidance, not medical advice, and doesn't diagnose or treat anything. The health check only changes which exercises are suggested, and for a few answers shows a short reminder at the start of breaks.