MovingSteady

Privacy Policy

MovingSteady | Version 1.3 | Effective October 23, 2026

MovingSteady respects your privacy. This Privacy Policy explains how MovingSteady collects, uses, discloses, and protects information when you visit movingsteady.com, create or use an account, use participant or family-support features, purchase a subscription, view exercise content, or otherwise interact with MovingSteady (collectively, the “Service”).

MovingSteady is a general wellness and at-home exercise service. MovingSteady is not a healthcare provider, medical provider, physical therapy practice, or emergency service.

1. Information We Collect

We may collect the following categories of information.

Account and Contact Information

This may include your name, email address, account credentials, participant or support-profile name, and other information you provide when creating or managing an account.

Participant and Program Information

We may collect general information used to organize or suggest MovingSteady content, such as whether a participant prefers seated exercises, can exercise while standing with support, uses an assistive device, wishes to avoid certain movements, or selects particular weekly focus areas.

This information is used to organize a general wellness program. It is not used to diagnose a condition, conduct a clinical assessment, or create an individualized medical treatment plan.

Activity and Progress Information

We may collect information about use of the Service, including workouts assigned, workouts opened or completed, minutes of movement, weekly streaks, focus selections, exercise substitutions, and similar non-clinical activity information.

Family and Support-Profile Information

If an account includes a family or support profile, we may collect and display information needed to provide that feature, such as profile names, focus suggestions, and general activity or progress information shared within the account.

Subscription and Payment Information

Subscription payments are processed through Stripe. MovingSteady may receive information such as subscription status, plan, transaction status, billing history, payment method type, and limited payment-related details. MovingSteady does not intend to store complete payment-card numbers.

Legal Acceptance Records

When you accept Terms, waivers, disclaimers, or other agreements, we may retain information needed to document that acceptance, including the account or participant identifier, document title and version, date and time of acceptance, acceptance language presented, and the action used to indicate assent. We may also retain IP address and basic technical log information where appropriate.

Device, Log, and Analytics Information

When you use the Service, we and our service providers may automatically collect information such as IP address, browser type, device type, operating system, referring pages, pages viewed, session activity, approximate location derived from IP address, and diagnostic or performance information.

On selected public marketing pages, Microsoft Clarity may collect limited page views and basic interactions in cookieless mode before you choose optional tracking preferences. This mode does not set Clarity cookies or provide continuous multi-page session recordings. Google Analytics requires analytics consent, and full Microsoft Clarity session recording requires a separate recording choice.

Communications

If you contact MovingSteady, join a waitlist, submit a form, or communicate with support, we may collect the information you provide in that communication.

2. How We Use Information

We may use information to:

3. Wellness and Health-Related Information

MovingSteady may receive general information about a participant’s abilities, exercise preferences, support needs, or movements they wish to avoid. Some of this information may be health-adjacent or may be treated as consumer-health information under certain state laws.

MovingSteady does not use this information to diagnose, treat, or provide medical care. MovingSteady is not a HIPAA-covered healthcare provider merely because a user chooses to provide wellness-related information through the Service.

We use this information only as reasonably necessary to provide and improve the general wellness features requested by the user, operate the Service, maintain safety-related preferences, and comply with law.

4. How We Disclose Information

We may disclose information to service providers and vendors that help us operate the Service, including providers for:

These providers may process information on our behalf under their own contractual and privacy obligations.

We may also disclose information when reasonably necessary to comply with law, legal process, or government requests; protect the rights, safety, or security of MovingSteady, users, or others; investigate fraud or security incidents; enforce agreements; or complete a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction.

5. Family and Support Profiles

An account may permit a family member, caregiver, or support person using the same account to view general participant activity information such as workouts completed, minutes of movement, streaks, and focus selections.

Users should only provide account access to people they authorize to view this information. Support-profile information is intended for encouragement and general informational purposes and is not a clinical status report or medical-monitoring service.

6. Cookies and Similar Technologies

MovingSteady and its service providers may use cookies, local storage, pixels, and similar technologies to keep users signed in, remember preferences, maintain security, understand website and product usage, measure performance, and support analytics or advertising measurement.

The homepage does not display an arrival consent banner. On reviewed public marketing pages, limited cookieless Microsoft Clarity measurement may begin before a preference is saved. Selecting Sign in or Choose your plan offers separate choices for analytics, advertising, and full session recording; visitors may continue without optional tracking. Cookie preferences in the footer reopens these choices. Google Analytics, Meta Pixel, and full session recording remain off until affirmatively selected. A saved rejection and Global Privacy Control prevent even limited Clarity measurement under our product policy; this does not claim that every law requires such treatment. Necessary authentication, security and billing are unaffected. We remember choices for 180 days on this browser; earlier automatic preferences are not treated as consent. Withdrawal stops the affected tracking and may reload a page if an SDK was loaded, so unsaved entries may be lost. Changes propagate to other open tabs.

Our server uses only the hosting platform’s approximate country signal to select a regional policy group. This framework does not read or store raw IP addresses, add a location provider, or use browser language or URL parameters to infer location. Missing, unsupported or failed location lookup prevents Clarity and optional trackers from starting. Location is not proof of residency or legal compliance; U.S. location never grants permission for optional cookies or full session recording. Regional policy responses are not cached.

7. Advertising and Analytics

With separate advertising consent, Meta Pixel measures public page views, plan views, plan selection and limited engagement events. Recognized marketing-only URL parameters are removed in the current page without a redirect before external tracking begins. With analytics consent, a restricted source and medium plus numeric campaign, creative and term identifiers may be kept in this tab for up to 30 minutes of inactivity to measure campaign performance. Free-text campaign names and arbitrary parameters are not retained. With advertising consent, a valid Meta click identifier may be used in Meta’s attribution cookie. Unknown query parameters, unapproved fragments and potentially sensitive referrers still block third-party tracking. No actions are replayed from before consent; continuing a navigation after saving preferences is a new action under those preferences.

With analytics consent, MovingSteady also records first-party aggregate page-load, engagement, plan-selection and registration-start counts. These counts do not use visitor or session identifiers, raw IP addresses, form values, account IDs or health information. Campaign dimensions are limited as described above. Daily counters are deleted after 90 days when the next metric is processed. They represent browser events, not confirmed people. Registration, checkout and payment totals are also calculated from necessary account and billing records; those records are not sent to advertising providers, and outcomes without permitted attribution remain unattributed.

With a separate, optional choice at signup, MovingSteady links available restricted campaign IDs to the new account and verified billing outcomes for internal reporting. This consent is separate from cookie preferences and is not inferred from an earlier cookie choice. No participant, exercise, health, email, IP, or advertising click-ID values are included in this reporting link, and neither account identities nor purchase outcomes are sent to advertising platforms. The account identifier is held only in access-restricted first-party measurement tables. The link expires after 90 days and is deleted by the next daily maintenance run; expired links are excluded from reporting immediately. You can remove it sooner with Remove campaign reporting link in Account & billing. Deleting the link also disconnects earlier payment records from the account for campaign reporting; necessary billing records remain. Visitors who do not choose this, or whose campaign information is unavailable, cannot be reliably attributed to a campaign.

No third-party tracking SDKs load on account, dashboard, workout, assessment, payment, demo or other unapproved routes. The signup page includes a consented first-party registration-start counter and the separate optional account attribution choice described above. Plausible is not currently configured. With separate session-recording consent, Microsoft Clarity can capture interactions and replay visits on reviewed public pages. Before that choice, cookieless Clarity collects limited page views and basic interactions without persistent Clarity identifiers or full replays. Microsoft is an independent controller receiving data for its own purposes including Microsoft Advertising; this is third-party measurement, not anonymous first-party analytics. Recording does not extend to account, signup, workout or payment flows. Microsoft’s terms restrict sensitive content, including health care; consent alone does not override those restrictions.

MovingSteady does not sell personal information for money. Certain privacy laws may define some advertising-related disclosures more broadly as “sharing,” “targeted advertising,” or a similar concept. Where those laws apply, users may have rights to opt out as described below.

8. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain account and subscription records, preserve legal-acceptance records, resolve disputes, maintain security, comply with law, and enforce agreements.

Retention periods may vary by category of information. Legal-acceptance, transaction, fraud-prevention, and similar records may be retained longer where reasonably necessary to establish or defend legal rights or comply with legal obligations.

9. Data Security

MovingSteady uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No method of electronic transmission or storage is completely secure, and MovingSteady cannot guarantee absolute security.

Users are responsible for protecting account credentials and for notifying MovingSteady if they believe an account has been accessed without authorization.

10. Your Privacy Choices and Rights

Depending on where you live, you may have rights regarding your personal information, including rights to request access, correction, deletion, or a copy of certain information; to opt out of certain targeted advertising or sharing; or to appeal certain privacy-rights decisions.

To submit a privacy request, contact MovingSteady at info@movingsteady.com. We may need to verify your identity before completing a request. We may retain information when required or permitted by law, including records necessary for legal compliance, security, fraud prevention, transactions, or legal claims.

You may unsubscribe from non-transactional marketing emails using the unsubscribe method included in those messages. Transactional or service-related communications may still be sent when necessary to operate an account or subscription.

11. State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable privacy, consumer-data, or consumer-health-data laws. Where applicable, MovingSteady will honor legally required rights and opt-out requests.

If applicable law treats certain disclosures for advertising measurement as a sale, sharing, or targeted advertising, eligible users may request to opt out by contacting info@movingsteady.com or by using any privacy-control mechanism MovingSteady makes available.

MovingSteady will not discriminate against a user for exercising a privacy right protected by applicable law.

12. Children’s Privacy

MovingSteady is intended for adults. Users must be at least 18 years old to create an account or participate under the current Service model. MovingSteady does not knowingly collect personal information from children under 13 through the Service.

If MovingSteady learns that personal information from a child was collected in a manner inconsistent with applicable law, we will take reasonable steps to delete or otherwise address the information.

13. Third-Party Services and Links

The Service may contain links to, integrate with, or rely on third-party websites and services. Their privacy practices are governed by their own policies. MovingSteady is not responsible for the privacy practices of third parties except to the extent required by law.

14. International Users

MovingSteady is based in the United States and is currently designed primarily for users in the United States. Information may be processed and stored in the United States or other locations where our service providers operate.

15. Changes to This Privacy Policy

MovingSteady may update this Privacy Policy from time to time. The updated policy will state a new effective date. If changes are material, MovingSteady will provide additional notice or obtain consent where required by applicable law.

16. Contact Information

For privacy questions, requests, or concerns, contact:

MovingSteady
Website: movingsteady.com
Email: info@movingsteady.com
Office / mailing address: 13360 Ardroe Ave, Rosemount, MN 55068

17. Relationship to Other MovingSteady Documents

This Privacy Policy should be read together with the MovingSteady Terms of Use and Subscription Terms, Health and Exercise Disclaimer, and Participant Waiver, Assumption of Risk, and Release. If a separate consent or authorization is legally required for a specific data practice, MovingSteady will obtain that consent separately rather than relying only on this Privacy Policy.

Optional Google Ads Conversion Measurement — October 26, 2026

Advertising preferences now include Google Ads. Earlier cookie choices do not automatically enable this new Google Ads integration. If you enable Advertising in the updated Cookie preferences, Google may receive public-page ad interactions and use advertising cookies. We may retain a Google ad-click identifier (GCLID, GBRAID or WBRAID) in this browser for up to 30 days to attribute a conversion. Google receives routine browser/network information, including IP address, when its tag communicates with Google. Ad personalization is disabled in our tag configuration.

A separate, unchecked signup choice permits reporting a confirmed account signup and successful initial paid membership purchase to Google Ads. Both this account choice and the updated Advertising cookie choice are required. The account choice expires after 90 days. Conversion fields are the event, amount and currency, and a random identifier used to avoid duplicate counting. We do not send your name, email address, account identifier, Stripe identifier, exercise selections, health information or workout activity in these events. A clean confirmation page performs measurement; private portal pages do not load advertising or session-recording tags. Zero-dollar enrollments and renewals are not reported as initial purchases.

You can withdraw Google Ads conversion measurement in Account & billing, or turn off Advertising in Cookie preferences. Global Privacy Control prevents optional dispatch. Withdrawal stops future reporting and removes the account conversion queue; it does not delete data already received by Google. Earlier internal campaign-reporting choices remain internal and do not authorize Google Ads reporting. Ad blockers, cookie choices, switching browsers, closing the confirmation page, or delayed payments can prevent an eligible conversion from reaching Google. Internal payment records remain the source of truth.

Terms of Use and Subscription Terms · Health and Exercise Disclaimer · Participant Waiver