Privacy Policy
Draft — last updated 2026-09-29. This is not legal advice; it describes what the app actually does today and should be reviewed by a lawyer before real users rely on it, particularly given Quebec's Law 25 requirements around minors' data.
Who this applies to
Mouvyo is built for competitive gymnasts, their parents/ guardians, and the coaches, family and recruiters who follow them. Many users are minors — this policy and the app's defaults are written with that in mind.
What we collect
- Account info: name, email, and a hashed password (we never store your actual password — only a one-way hash).
- For a gymnast profile: date of birth (private — never shown publicly), bio, club, level, country/city, profile photo.
- Content you upload: training videos, competition results, and performance videos.
- For a parent-managed (under-14) account: the parent's own name/email/password, and the child's name and date of birth — the child never has a separate login.
- For a parent account: a 6-digit parental PIN, stored only as a one-way hash, which protects everything that changes the child's profile when she uses the parent's account.
Official competition results and hidden profiles
Mouvyo displays official results already published by Gymnastique Québec (gymqc.ca). To let each gymnast find her results, Mouvyo creates a profile from them — name, birth year (never the full date), club and scores. These profiles are hidden: they don't appear in search and can't be opened by anyone until the gymnast (14 or older) or her parent claims them.
A profile can be claimed with a one-time code handed to the family by Gymnastique Québec, or through a request reviewed by our team. Under 14, only a parent account can claim a profile, and it stays private by default. Any exchange of member information with Gymnastique Québec will be governed by a written agreement.
What we don't do
No third-party analytics, advertising trackers, or social-media pixels are embedded in this app today. We don't sell or rent your data to anyone.
Visibility is yours to control
Every athlete profile has a visibility setting (Public / Private). Training videos can individually be marked Public or Only Me. A parent managing a child's profile has two extra switches — Allow following and Allow video sharing — both off by default.
Where data lives
Account and profile data is stored in Azure SQL Database. Photos and videos are stored in Azure Blob Storage. We don't store video files in the database itself.
Cookies
A session cookie keeps you signed in. On a parent account, a second cookie remembers, on that device only and for a limited time, that the parental PIN was entered. Your language and background-colour preferences are stored in your browser, not sent anywhere. No advertising or cross-site tracking cookies are used.
Access, correction, and deletion
You can edit most of your own profile information directly in the app. Any parent — with or without a Mouvyo account — can ask for a profile and its results to be deleted, using the deletion request form. We verify the requester's identity by email, then delete the profile, its results and its videos permanently, and we keep only an irreversible fingerprint (never the name) so that a future import of official results doesn't recreate it. Self-service account deletion isn't built yet — contact us for that.
Reporting a problem
Any signed-in user can report a profile for review by our team from the profile's menu.
Contact
privacy@mouvyo.dev — placeholder address; replace with a real, monitored contact before this policy goes live for real users.