Protection of personal data by Moov Insights SRL

Last updated: 4 September 2026

This version is intended for publication on the Formyfit website and to inform users of the application.

1. Purpose and scope

This policy explains how Moov Insights SRL collects, uses, stores and protects personal data processed in connection with the www.formyfit.com website, the Formyfit mobile application and related services.

It applies to users of the application, visitors to the website, people who contact us and participants in services offered to companies, educational institutions, healthcare organisations, sports clubs, associations and public or private institutions.

Formyfit is the name of an application and a product developed and operated by Moov Insights SRL. Formyfit is not the corporate name of a separate company.

2. Data controller

For processing activities whose purposes and means it determines, the data controller is:

Moov Insights SRL
Chemin d’Hollaye 5
7750 Anseroeul (Mont-de-l’Enclus)
Belgium
Company number registered with the Crossroads Bank for Enterprises: 1011.509.466
VAT number: BE 1011.509.466
Email: contact@formyfit.com
Telephone: +32 476 95 50 18

When Formyfit is made available through a client or partner organisation, the allocation of responsibilities between that organisation and Moov Insights depends on the processing activity concerned and the applicable agreement. The organisation may be the controller for certain processing activities that it determines, while Moov Insights may act as a processor on its behalf. Moov Insights remains the controller for processing activities whose purposes and means it determines, including those relating to the security and general operation of the platform.

3. Personal data we may process

Depending on the features used and the context in which Formyfit is made available, we may process the following categories of data:

• Identification and contact data: first name, surname, date of birth, email address, language, account identifier, profile photograph and information relating to the user’s organisation or group.
• Connection and security data: password in protected form, IP address, technical logs, connection dates and times, and information relating to the device, operating system and version of the application.
• Profile and preference data: goals, motivations, preferences, settings, programmes and answers provided within the application.
• Physical activity data: type, date, duration, distance, pace, number of steps, estimated calories, sessions, test results, sensor data and indicators calculated from this information.
• Location data: GPS position and activity route when the user activates the relevant feature, as well as approximate location that may be inferred from an IP address.
• Fitness and well-being data: including height, weight, waist measurement, heart rate, perceived exertion, sleep, recovery, goals and other information provided to personalise support. Some of this information may constitute health data under the GDPR.
• Images and image-analysis data: photographs, videos, body landmarks or analysis results when the user selects a feature that requires them.
• Data from connected services or devices: data imported from Apple, Google or other compatible services after the user has authorised the connection.
• Service and communication data: contact requests, messages, activity registrations, questionnaire responses and participation in training, an audit or a support programme.
• Transaction data: payment status, subscription plan, transaction reference and information required for invoicing. Full payment-card details are processed by the relevant payment providers and are not stored by Moov Insights.
• Website data: consent choices, cookies and similar technologies, pages viewed and interactions, in accordance with the preferences selected through the cookie management tool.

Mandatory fields are identified at the time of collection. If mandatory information is not provided, it may not be possible to create an account or use the relevant feature.

4. Purposes and legal bases

We process personal data only for specified purposes and on an appropriate legal basis.

Where processing is based on consent, consent may be withdrawn at any time for the future. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. Some features may, however, be unable to operate without the data they require.

5. Health data and other sensitive data

Some information used by Formyfit may reveal details about a person’s fitness or health. Where required by the GDPR, such data are processed on the basis of the user’s explicit consent or another clearly applicable legal exception.

Users choose which features they activate and may withdraw their consent through the available settings or by contacting Moov Insights. Withdrawal may result in the relevant personalisation or feature being discontinued.

Formyfit is a physical-activity and prevention support tool. It does not replace medical advice, diagnosis or treatment.

6. Client and partner organisations

When a company, school, healthcare organisation, sports club, association or institution provides access to Formyfit, the data visible to that organisation depend on the service ordered, the settings enabled, the information provided to participants and the contractual allocation of responsibilities.

In a workplace context, Moov Insights prioritises collective, aggregated or anonymised reporting. Individual health data, GPS routes and detailed heart-rate data are not disclosed to an employer unless a separate arrangement is in place that is based on a valid legal basis, strictly necessary, clearly explained to the person concerned and accompanied by appropriate safeguards.

Certain limited administrative data may be required to allocate a licence, verify account activation or organise a programme. Before data are collected, participants must receive appropriate information identifying the controller, explaining which data are accessible to the organisation and stating the purpose of that access.

Pseudonymised data remain personal data if they can be linked to an individual. Data will be described as anonymous only when re-identification is not reasonably possible.

7. Recipients and service providers

To the extent necessary, personal data may be accessed by authorised members of Moov Insights and by service providers that assist us with hosting, infrastructure, development, maintenance, support, security, communications and payments.

The application infrastructure and databases use Microsoft Azure services. The website is hosted using Elementor Hosting services and their infrastructure providers. Cloudflare services may be used for website security and delivery.

Payments for individual subscriptions may be processed by Stripe, Apple or Google, depending on the channel selected. These providers process certain information in accordance with their own privacy policies and, depending on the service, under their own responsibility.

Data may also be disclosed to an authority, adviser or court where required by law or where necessary to defend legal rights. Moov Insights does not sell personal data.

Where data are used for a scientific or research project, they are anonymised whenever possible. If the data remain personal data, including where they have only been pseudonymised, the processing is based on a separate legal basis and is subject to the required information.

8. Transfers outside the European Economic Area

Some service providers may process personal data outside the European Economic Area. In such cases, Moov Insights ensures that the transfer relies on a mechanism recognised under the GDPR, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with additional safeguards where necessary.

Further information about the applicable safeguards may be requested by emailing contact@formyfit.com.

9. Retention periods

Personal data are retained for as long as necessary for the relevant purpose and are then deleted or anonymised, unless a legal obligation or the need to preserve evidence requires certain data to be retained. The following criteria apply:

• Account, profile and activity data: while the account is in use, followed by a limited period required for closure, technical deletion, backup management and the defence of legal rights.
• Data associated with a client organisation: for the duration of the programme or agreement and subsequently in accordance with the instructions and responsibilities agreed with that organisation, subject to Moov Insights’ own obligations.
• Contact data and commercial enquiries: for the time required to process the request and reasonably follow up the relationship.
• Invoicing data and accounting records: for the applicable statutory retention periods.
• Direct marketing and newsletters: until consent is withdrawn or the individual objects, with inactive contacts reviewed periodically.
• Security logs: for a period proportionate to security and investigation needs.
• Cookies: for the period stated in the consent management tool.

A deletion request does not necessarily result in the immediate erasure of data that must be retained by law or are necessary to establish, exercise or defend legal claims.

10. Cookies and similar technologies

The website uses cookies and similar technologies that are necessary for its operation, as well as, depending on your choices, functional or measurement technologies and technologies associated with third-party content such as embedded videos.

Non-essential cookies are activated only after you have given your consent. You may accept, refuse or customise your choices through the banner displayed on your first visit and subsequently change them using the Manage my cookies tool available on the website.

The current list of cookies, their providers, purposes and retention periods is available through that management tool. Refusing non-essential cookies does not prevent access to the website’s main features, although some third-party content may not be displayed.

11. Automated recommendations and analyses

Formyfit may calculate indicators and suggest goals, programmes or recommendations based on information provided by the user and their activity. This processing is used to personalise the user experience and support provided.

It is not intended to produce a decision based solely on automated processing that has legal effects or similarly significantly affects the user. Questions or objections concerning a recommendation may be sent to contact@formyfit.com.

12. Security

Moov Insights implements technical and organisational measures appropriate to the risks in order to preserve the confidentiality, integrity and availability of personal data. These measures include access management, protection of communications, technical monitoring, backups and incident-management procedures.

No system can guarantee absolute security. In the event of a personal data breach that presents a risk to individuals, Moov Insights complies with the notification and communication obligations imposed by applicable law.

13. Your rights

Subject to the conditions laid down in the GDPR, you may request:

• access to your personal data and a copy of them;
• the correction of inaccurate or incomplete data;
• the deletion of your personal data;
• restriction of processing;
• the portability of data that you have provided, where this right applies;
• to object to processing based on legitimate interests;
• to object to direct marketing at any time;
• to withdraw your consent at any time for the future.

You may exercise your rights by emailing contact@formyfit.com or writing to Moov Insights SRL, Chemin d’Hollaye 5, 7750 Anseroeul (Mont-de-l’Enclus), Belgium. Please state the subject of your request and the email address associated with your account. Proof of identity may be requested only where necessary to prevent disclosure to an unauthorised person.

We will respond within the period prescribed by applicable law. If your request concerns processing determined by a client organisation, it may be forwarded to that organisation or handled in cooperation with it, depending on the allocation of responsibilities.

14. Complaint to the supervisory authority

If you believe that the processing of your personal data does not comply with applicable law, we invite you to contact us so that we can investigate your request. You may also lodge a complaint with:

Belgian Data Protection Authority
Rue de la Presse 35
1000 Brussels
Belgium
Email: contact@apd-gba.be
Website: www.dataprotectionauthority.be

15. Children and young people

The minimum age for using the Formyfit application is 12. Use by a minor must comply with the rules governing their legal capacity, the service concerned and, where applicable, the conditions of the organisation providing access to the application.

In Belgium, where processing connected with an online service is based on the consent of a child under the age of 13, that consent must be given or authorised by the person holding parental responsibility. Additional safeguards may be required depending on the circumstances, particularly for health data, use in an educational setting or a paid subscription.

If we become aware that data have been collected without the required authorisation, we will take appropriate steps to remedy the situation or delete the relevant data.

16. Third-party services and external links

The website and application may contain links, embedded content or connections to third-party services. When you use these services, their own terms and privacy policies may apply. We encourage you to review them before authorising a connection or providing personal data.

17. Changes to this policy

This policy may be updated to reflect changes to the services, processing activities or applicable law. The date of the latest update appears at the beginning of the document. If a material change is made, appropriate notice will be provided on the website, within the application or through another suitable channel.

18. Contact

If you have any questions about this policy or the processing of your personal data, please email contact@formyfit.com or write to Moov Insights SRL, Chemin d’Hollaye 5, 7750 Anseroeul (Mont-de-l’Enclus), Belgium.