Privacy Policy
Last updated: June 2026
1. Who We Are & Applicable Law
MovementQuest is operated from the Republic of South Africa and is subject to the Protection of Personal Information Act, 4 of 2013 (POPIA). Where applicable — for example, when processing data of individuals in the European Economic Area — we also comply with the General Data Protection Regulation (GDPR). By using MovementQuest you consent to the collection and processing of your personal information as described in this policy.
2. Information We Collect
We collect information you provide directly (name, email address, date of birth, phone number) and information generated through your use of the Service. This includes health-related data such as injury details, affected body regions, pain level ratings (0–10 scale), exercise session logs, and rehabilitation progress records. We also collect technical data such as device type, IP address, and usage analytics to improve the platform. Health data is classified as a special category of personal information under POPIA and is processed only for the purpose of delivering your rehabilitation experience.
3. How We Use Your Information
Your personal and health data is used to: provide and personalise the physiotherapy exercise service; track your progress, streaks, and goals; send reminders and notifications (with your consent); process payments; and improve the platform. We do not sell your personal information to third parties. We may share data with trusted service providers (hosting, payment processing, analytics) under contractual data-processing agreements that require them to protect your information. Anonymised, aggregated data may be used for research purposes.
4. Your Rights
Under POPIA and, where applicable, the GDPR, you have the right to: access the personal information we hold about you; request correction of inaccurate data; request deletion of your data (subject to our legal obligations); object to or restrict certain processing; and lodge a complaint with the Information Regulator of South Africa or your local supervisory authority. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
5. Data Retention & Security
We retain your personal and health data for as long as your account is active or as required by South African law. Health-related data (pain levels, injury assessments, session logs) is encrypted at rest and in transit. Access is restricted to authorised personnel. You may delete your account at any time from the app settings, which will initiate removal of your personal data within 30 days, except where retention is required by law. For questions about our security practices or to report a concern, contact [email protected].
Questions? Contact us at [email protected]