Privacy Policy

Who we are

MOVE IT is a sports management platform operated by Move Beyond ("we", "us"). We provide software that sports academies, clubs and gyms ("organizations") use to manage their members, subscriptions, attendance, court bookings and finances.

For data belonging to an organization's members, the organization is the data controller and Move Beyond acts as the data processor. For player accounts created directly in the MOVE IT app, Move Beyond is the controller.

What we collect

• Account data — name, email address, phone number, and a password hash (we never store passwords in readable form). If you sign in with Google we receive your name, email and profile picture from Google. If you sign in with Apple we receive the email address Apple shares with us (which may be a private relay address if you chose to hide your email) and, the first time only, the name you allow Apple to share.
• Membership data — when an organization registers you as a member: date of birth, gender, address, notes, your membership QR code and identity token, plus the sport category you train in.
• Activity data — subscriptions and sessions remaining, check-in records (time, method, who checked you in), payments recorded by the organization, and court reservations.
• Technical data — IP address, device and browser type, and error diagnostics used to keep the service running.

How we use it

• To operate the service: authentication, check-in, bookings, billing records.
• To send transactional email (account confirmation, password reset, trial and account status notices).
• To keep the platform secure, prevent abuse and diagnose faults.

We do not sell personal data, and we do not use member data for advertising.

Who can see your data

• Staff of the organization you belong to — restricted by role (owner, manager, cashier, gatekeeper, staff).
• Other organizations cannot see your data. Tenant isolation is enforced at the database level.
• Move Beyond administrators, only where necessary to operate and support the platform.

Processors we rely on

• Supabase — database, authentication and file storage.
• Vercel — application hosting.
• Resend — transactional email delivery.
• Google — optional sign-in and wallet passes, where you choose to use them.
• Apple — optional Sign in with Apple, where you choose to use it.

Retention

We keep account and membership data for as long as your account or membership is active, and afterwards only as long as needed for legal, accounting or dispute-resolution purposes. Organizations may delete member records at any time from their dashboard.

Your rights

You can request access to, correction of, or deletion of your personal data, and you can object to certain processing. If your data was entered by an academy, contact them first — they control that record. Otherwise, email us and we will respond within 30 days.

Deleting your account. You can delete your MOVE IT account yourself at any time: in the app, go to Profile, then Account, then Delete account; on the web, sign in to the athlete portal, open Profile and choose Delete account. This signs you out everywhere and removes your login and personal profile. An academy may keep records it must hold by law, such as payment receipts. You can also email info@mbeg.org from the address on your account and we will delete it for you. A login that also has academy staff access is deleted once the academy owner removes that access, or by emailing us.

Children

Many academies train minors. Where a member is under 18, the account and consent are managed by the organization and the parent or guardian who enrolled them. We do not knowingly allow under-18s to create standalone player accounts without that relationship.

Changes

We will update this page when our practices change and revise the date above. Material changes will be communicated by email.