Privacy

Person in charge of personal information

The person in charge of the protection of personal information at MoveNexx is [Clement Lemouzy, Founder]. Write to [clemtosfitnesstraining@gmail.com] for any question, access or correction request, consent withdrawal or complaint. We answer within 30 days.

What we collect

Account: your email address, password (stored only in hashed form by our authentication provider), display name and preferred language.

Coach profiles: the name, photo, biography, activities, specialties, languages, places and schedules, links and training you choose to enter. Documents you upload to prove a credential stay private and are seen only by you and our administrators.

Facilities: the facility’s details, and the names and roles of the people who manage it.

Requests and moderation: claims, facility proposals, affiliation requests, profile reviews and the notes our administrators attach to them.

Reports: when anyone reports a profile, we keep the reason they give and a one-way, keyed fingerprint of their network address (never the address itself), so we can limit abuse.

Technical information: session cookies that keep you signed in, and the server logs our hosting providers keep for security and troubleshooting.

Why we use it

We use your information only to: create and secure your account; publish the profiles and facilities you choose to make public; review profiles, claims and relationships before they appear; send you the emails the service needs (confirmation, password recovery, decisions on your requests); handle reports and prevent abuse and bots; and keep the service working and secure.

We do not sell your information, show advertising, or use it for profiling or automated decisions. We do not use analytics or advertising trackers.

What becomes public

Nothing you enter is public until you publish it, and a coach profile’s first publication is approved by an administrator. Once published, the profile content you entered can be seen, shared and copied by anyone, including search engines when indexing is on. You can unpublish at any time; we then remove the public photos, though copies others already made, or cached copies, can remain briefly.

Your email address, credential documents, requests and reports are never public.

Consent and cookies

By creating an account and publishing a profile, you consent to the uses described here. You can withdraw consent at any time by unpublishing your profile or asking us to delete your account.

We use only cookies that are strictly necessary to sign you in. Sign-up, sign-in and password recovery forms use Cloudflare Turnstile, which checks your browser for signs of automation in order to block bots.

Who we share it with

We use service providers that process information on our behalf, under contracts that require them to protect it and use it only for our service:

Supabase (database, authentication and file storage), hosted in Canada.
Vercel (website hosting and delivery), which may process requests in the United States and other countries.
Resend (sending emails), in the United States.
Cloudflare (Turnstile bot check), in the United States and other countries.

Some of your information is therefore processed outside Quebec. Before doing so we assessed that these providers offer adequate protection. We may also disclose information when the law requires it.

How long we keep it

We keep your account and profile while your account is open. When you ask to delete your account, your profile is unpublished immediately and we delete your information within 30 days, except records we must keep by law or to settle a dispute, which we keep no longer than necessary.

Unfinished uploads are deleted within a few hours. Report fingerprints are kept for at most one year. Hosting providers keep technical logs for their own limited periods.

Security

Access to each piece of information is limited to the people who need it, enforced by database rules. Connections are encrypted, passwords are hashed and private files are only reachable through short-lived links. If an incident creates a risk of serious injury, we will notify the Commission d’accès à l’information and the people concerned.

Your rights

You can ask to access the personal information we hold about you, to correct it, to receive it in a structured, commonly used technological format, to stop its distribution, to withdraw your consent and to have it deleted. Most of your information can be edited directly in your account. For anything else, write to [clemtosfitnesstraining@gmail.com]. We may need to confirm your identity first. These requests are free.

Complaints

If you are not satisfied with our answer, you can file a complaint with the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Changes

We will update this page when our practices change and change the date above. If a change affects how we use information you already gave us, we will tell you by email before it applies.