Privacy Policy

Welcome to Move Club, a digital wellness service operated by Reaction Wellness Ltd. ("Reaction," "we," "us," or "our"). Your privacy matters to us. This Privacy Policy explains how we collect, use, share, and protect your personal data when you access Move Club via our mobile app or website (the "Service").

By using Move Club, you agree to the practices described herein. If you do not agree, please do not use the Service.

1. Who We Are

Move Club is a direct‑to‑consumer wellness and fitness program offered by Reaction Wellness Ltd. (Reg. No. 516079506), with its registered office at Sapir 7, Herzeliya, Israel. While Reaction also provides enterprise wellness solutions, this Policy applies exclusively to the Move Club product.

2. Data We Collect

We collect the following categories of personal data to deliver and improve Move Club:

2.1 Information You Provide Directly

• Identifiers: name, email address, password
• Profile Details: age range, gender, preferences
• Health & Fitness Data: step goals, activity levels, weight, wellness goals, challenge responses
• User-Generated Content: comments, posts, progress updates, and community interactions you share within the app
• Feedback & Support: survey answers, form submissions, support requests

2.2 Data from Connected Services

When you link Apple Health, Google Fit, Health Connect, or similar platforms, we may import:

• Step counts
• Activity levels
• Distance walked (estimated)
• Caloric expenditure (estimated)

2.3 Automatically Collected Data

• Technical & Device Data: device type, operating system, IP address, device identifiers (for push notifications and fraud prevention)
• Usage Data: app launches, screen views, feature interactions, session timestamps, button clicks, challenge participation
• Performance & Diagnostics: crash logs, app performance metrics (launch time, hang rate, energy use), error reports
• Cookies & Analytics: session cookies, SDK data for performance monitoring and fraud detection

3. How We Use Your Data

We use your personal data for the following purposes:

Service Delivery & Personalization

• Create and manage your account
• Set and track your walking goals
• Generate personalized coaching tips and challenge recommendations
• Customize your in-app experience based on your activity level and preferences
• Display community content relevant to your interests

Rewards & Progress Tracking

• Calculate points based on your activity
• Facilitate redemptions with our Rewards partners (gift‑card vendors or charities)
• Detect anomalous activity for fraud prevention
• Track milestone achievements

Communication & Support

• Send transactional messages (subscription confirmations, account updates, password resets)
• Respond to support inquiries
• Notify you of material changes to the Service or these policies
• Send marketing and promotional emails (if you opt in)

Marketing & Advertising

• Send promotional emails or in-app messages if you opt in
• Segment users by behavior to deliver targeted marketing communications
• Measure effectiveness of marketing campaigns

Note: We do NOT use health/fitness data for advertising purposes or share it with advertising networks.

Analytics & Improvement

• Analyze usage patterns and feature engagement
• Measure app performance and user retention
• Resolve technical issues and crashes
• Plan and develop new features
• Evaluate effectiveness of challenges and rewards
• Understand audience characteristics

Legal & Compliance

• Comply with applicable laws
• Enforce our Terms & Conditions
• Protect against fraud and abuse
• Maintain records for tax and regulatory requirements

4. Legal Basis for Processing

If you are located in the European Economic Area, the UK, or Switzerland, we rely on the following legal grounds for processing:

• Consent: for marketing communications, non-essential cookies, and connected‑service integrations (e.g., Apple Health, Google Fit)
• Contract Performance: to fulfill our obligations under your subscription and to operate your account
• Legitimate Interests: for analytics, fraud detection, service improvement, and enforcing our Terms, provided these interests do not override your rights
• Legal Obligation: to retain records for tax, regulatory, or other legal requirements

5. Sharing Your Data

We do not sell your personal data. We may share your data with:

Service Providers

• Cloud hosting and infrastructure providers
• Analytics platforms (e.g., Firebase, Mixpanel)
• Email delivery services
• Customer support tools
• Crash reporting and performance monitoring services
• Push notification services

Rewards Partners

Limited account and points data (your name, email, and redemption details) solely to fulfill gift‑card or donation requests

Payment Processors

To process subscription payments securely (we do not store your payment card information)

Reaction Wellness Affiliates

For operational support, legal compliance, and fraud prevention

Legal Authorities

• When required by law, court order, or government request
• To protect our rights, safety, and property
• To investigate fraud or security incidents

6. Cookies & Tracking Technologies

We use cookies, SDKs, and similar tools to:

• Authenticate and secure your sessions
• Measure and improve app performance
• Enable fraud detection and analytics
• Collect crash and diagnostic data
• Deliver push notifications

We do NOT use tracking technologies for:

• Cross-app or cross-website tracking for advertising
• Sharing data with data brokers
• Third-party targeted advertising

7. Your Privacy Rights

Subject to local laws, you may have the right to:

• Access: request a copy of your personal data
• Correction: update or correct inaccurate information
• Deletion: request erasure of your data (subject to legal retention obligations)
• Portability: obtain your data in a structured, commonly used format
• Objection or Restriction: object to or request limitation of certain processing (e.g., direct marketing, analytics)
• Withdraw Consent: at any time for processing based on consent

To exercise these rights, contact us at dpo@reaction-club.com. We will respond within applicable legal timeframes (typically 30 days).

Managing Your Data in the App

You can also:

• Update your profile information directly in the app
• Disconnect HealthKit/Google Fit integrations via device settings
• Opt out of marketing emails via the unsubscribe link
• Delete your account through app settings or by contacting support

8. Data Retention

We retain your personal data only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account & Profile Data: retained while your account is active and for up to 24 months after deactivation, then securely deleted or anonymized
• Health & Activity Data: retained for up to 24 months after your last activity, then aggregated or anonymized for analytics
• User-Generated Content: retained while your account is active; deleted within 90 days after account deletion
• Usage, Diagnostic & Performance Data: retained for up to 24 months, then deleted or anonymized
• Transactional & Support Records: retained for up to 7 years to meet financial and legal requirements
• Marketing Communication Records: retained until you unsubscribe or for 24 months after your last interaction

9. International Transfers

Your data may be transferred to and stored on servers located in Israel and to third‑party service providers in other countries (e.g., the U.S., EU). Some of these countries may not offer the same level of data protection. When transferring data outside your jurisdiction, we use safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements that require equivalent protections
• Adequacy decisions where applicable

10. Security

We implement industry‑standard technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS) and at rest
• Access controls and authentication requirements
• Regular security assessments and vulnerability scans
• Policies and training to ensure secure handling of data
• Secure device storage for HealthKit data (as required by Apple)

HealthKit Data Security: Health and fitness data from HealthKit is stored securely on your device and in our secure systems. We do not store HealthKit data in iCloud or share it with third parties except as disclosed in this policy.

However, no system is completely secure. We cannot guarantee absolute security of your information.

11. Children's Privacy

Move Club is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a minor without verification of parental consent, we will promptly delete that information.

12. Third-Party Services and Links

Our app may contain links to third-party websites or integrate with third-party services (such as Apple Health, Google Fit, or payment processors). This Privacy Policy does not apply to those third-party services. We encourage you to review their privacy policies before providing them with your information.

13. Apple-Specific Requirements

For iOS users:

• HealthKit Data: We only use HealthKit data to provide fitness tracking features within Move Club. We do NOT use HealthKit data for advertising, marketing to third parties, or data mining. HealthKit data is not stored in iCloud.
• App Tracking Transparency: We do not track users across other companies' apps or websites for advertising purposes. We do not require tracking permissions to use Move Club.
• Push Notifications: Push notifications are optional and can be disabled in iOS Settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. If we make material changes, we will notify you by:

• Email to your registered email address
• In-app notification or message
• Prominent notice in the app

Material changes will be notified at least 14 days before they take effect. Your continued use of Move Club after the effective date constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

15. Contact Information

If you have questions, concerns, or wish to exercise your privacy rights, please contact us at:

• General Support: hello@reaction-club.com
• Data Protection Officer: dpo@reaction-club.com
• Mailing Address: Reaction Wellness Ltd., Sapir 7, Herzeliya, Israel