Privacy Policy

Who we are

Move-IT is a sports management platform operated by Move Beyond ("we", "us"). We provide software that sports academies, clubs and gyms ("organizations") use to manage their members, subscriptions, attendance, court bookings and finances.

For data belonging to an organization's members, the organization is the data controller and Move Beyond acts as the data processor. For player accounts created directly in the Move-IT app, Move Beyond is the controller.

What we collect

• Account data — name, email address, phone number, and a password hash (we never store passwords in readable form). If you sign in with Google we receive your name, email and profile picture from Google.
• Membership data — when an organization registers you as a member: date of birth, gender, address, notes, your membership QR code and identity token, plus the sport category you train in.
• Activity data — subscriptions and sessions remaining, check-in records (time, method, who checked you in), payments recorded by the organization, and court reservations.
• Technical data — IP address, device and browser type, and error diagnostics used to keep the service running.

How we use it

• To operate the service: authentication, check-in, bookings, billing records.
• To send transactional email (account confirmation, password reset, trial and account status notices).
• To keep the platform secure, prevent abuse and diagnose faults.

We do not sell personal data, and we do not use member data for advertising.

Who can see your data

• Staff of the organization you belong to — restricted by role (owner, manager, cashier, gatekeeper, staff).
• Other organizations cannot see your data. Tenant isolation is enforced at the database level.
• Move Beyond administrators, only where necessary to operate and support the platform.

Processors we rely on

• Supabase — database, authentication and file storage.
• Vercel — application hosting.
• Resend — transactional email delivery.
• Google — optional sign-in and wallet passes, where you choose to use them.

Retention

We keep account and membership data for as long as your account or membership is active, and afterwards only as long as needed for legal, accounting or dispute-resolution purposes. Organizations may delete member records at any time from their dashboard.

Your rights

You can request access to, correction of, or deletion of your personal data, and you can object to certain processing. If your data was entered by an academy, contact them first — they control that record. Otherwise, email us and we will respond within 30 days.

Children

Many academies train minors. Where a member is under 18, the account and consent are managed by the organization and the parent or guardian who enrolled them. We do not knowingly allow under-18s to create standalone player accounts without that relationship.

Changes

We will update this page when our practices change and revise the date above. Material changes will be communicated by email.