Privacy & Cookie Policy

1) Who we are (Controller)

Joy2Move is operated by SC GLOBAL PERSPECTIVE SRL, the data controller for processing on joy2move.net. Contact: support@joy2move.net. Registered address: [Str. Buzoieni 10, Sector 5, Bucuresti, RO]. We have not appointed a DPO; please use the contact above for privacy matters.

2) What data we collect

• Account data (if you sign in): email (for authentication), nickname, avatar URL, profile ID, and authentication metadata needed to operate your account.
• App usage: favorites, workout history, leaderboard participation, and similar in-app actions (for your features and progress).
• Health-related workout data (only after explicit consent): duration, frequency, and perceived effort. Because these may reveal aspects of your physical condition, we treat them as health data (special category) and process them only with your explicit consent.
• Device & technical: limited device/browser info and network logs necessary to run the service securely (e.g., error logs).
• Consent records: your cookie preferences stored in a first-party cookie (j2m_consent).
• Analytics (optional, only after consent): events and page views via Google Analytics 4 (see Section 5).

3) Purposes & legal bases

• Provide and secure the service (authentication, storage, PWA/offline, fixing bugs) — performance of a contract and legitimate interests.
• Health & progress features (store workout session details such as duration, frequency, perceived effort; show streaks/insights) — explicit consentfor any health-related data (Art. 9(2)(a)); where non-health data is used, performance of a contract. You can use the app without granting health-data consent and may withdraw consent at any time.
• Remember your consent — legal obligation and legitimate interests.
• Analytics (understand usage to improve the app) — consent.
• Marketing (ads/personalization) — consent (not enabled by default).

4) Cookies & storage we consider functional

We use essential cookies and storage (e.g., service worker cache, localStorage, IndexedDB) to keep the app fast, secure, and installable (PWA). These are required for core features and can’t be turned off within the app.

5) Analytics (Google Analytics 4)

We use Google Analytics 4 (GA4) to measure usage only after you grant analytics consent. Until then, Consent Mode keeps analytics storage denied by default. GA4 states it does not log or store IP addressesand provides EU-focused privacy controls. Your consent can be changed anytime below.

6) Service providers (processors) & recipients

• Supabase — authentication, database and application services (including transactional emails for sign-in).
• Vercel — hosting, build and edge delivery (including CDN and image optimization).
• Google Analytics — analytics measurement (only after consent).

We sign data-processing terms with our providers where applicable, and only share what’s necessary to run Joy2Move.

7) International transfers

When data is transferred outside the EEA/UK (for example, to Google LLC in the United States), we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and provider commitments. We take steps to ensure an adequate level of protection consistent with applicable law.

8) Retention

• Account & app data: for as long as your account exists (deleted upon account deletion).
• Health-related workout data (duration, frequency, perceived effort): retained only while consent is active; deleted or anonymized if you withdraw consent or delete your account.
• Consent records: up to 12 months.
• Analytics: typically 14 months in GA4 (configurable).

9) Your rights

You have rights of access, rectification, erasure, restriction, portability, and objection; plus the right to withdraw consent at any time (this doesn’t affect past processing). You can also lodge a complaint with the Romanian supervisory authority (ANSPDCP).

10) Children

Joy2Move is intended for users aged 16+. We don’t knowingly collect personal data from children under 16.

11) Manage your consent

You can clear cookies and site data in your browser settings. This removes your saved consent and you’ll be asked again on your next visit. To withdraw health-data consent (for health-related workout metrics) or delete your account/data, contact us at support@joy2move.net.

12) Updates & contact

We may update this page to reflect changes in our use of data or legal requirements. For questions, email support@joy2move.net.