JVB Health & Wellness Privacy Policy
Effective date: September 4, 2026 Version: 5 Applies to: the MOVEMENT app (iOS and Apple Watch),
the MOVEMENT web dashboard, and JVBWellness.com
JVB Health & Wellness ("JVB," "we," "us") builds MOVEMENT, a service that turns your daily step and
sleep data into an hourly movement inactive hours/movement consistency score. This policy explains what
we collect, why, how long we keep it, and the choices you have. It is written to be read, not skimmed. If
anything here is unclear, email info@jvbwellness.com.
We will post notice of any materially significant change to this policy on JVBWellness.com and inside the
MOVEMENT app before it takes effect.
1. What we collect
Account information. When you register we collect a username, an email address, and a password. The
password is stored only as a salted hash; we cannot read it.
Health and activity data from the device you choose. MOVEMENT works with exactly one primary
device per account. You choose it at registration and can change it later. Depending on your choice we
receive:
• Apple Health (iPhone and Apple Watch): step counts, sleep sessions, workouts, and heart rate during
workouts, read from Apple Health on your phone with your permission and sent to our servers by the
MOVEMENT app.
• Garmin: step counts, sleep sessions, and activities, delivered to our servers by Garmin's push service
after you authorize the connection in your Garmin account.
• Google Health (Fitbit and Pixel Watch): step counts, sleep sessions, and workout sessions (type,
start time, end time, and duration), read from the Google Health API after you sign in with Google and
grant consent. We request only the activity_and_fitness.readonly and sleep.readonly
scopes and nothing else.
Time zone. Your device reports its time zone so that steps are placed in the correct hour of your day. We
keep a history of time-zone changes so that days spent traveling are scored correctly.
Technical information. App version, device model, and diagnostic logs from the app and watch that help
us find and fix bugs. These logs contain step counts and timestamps; they do not contain your name or
email.
Challenge and community information. If you join a challenge, your username, daily scores, and
championship results are visible to other participants in that challenge.
We do not collect location, contacts, photos, or any health data type other than those listed above.
2. How we use it
We use your information to:• Show you your dashboard, hourly boxes, sleep windows, and scores
• Run the challenges you choose to join
• Send you account messages: registration, password reset, sync problems, and important service
changes
• Improve MOVEMENT through aggregated, anonymized usage analysis
• Comply with the law and enforce our Terms of Service
We do not:
• Sell, rent, or license your data to anyone
• Use your data for advertising, or serve advertisements
• Send marketing communications without your consent
• Use your health data to train machine-learning models
• Share your health data with any third party except as described in Section 5
3. Google user data — Limited Use disclosure
MOVEMENT's use of information received from Google APIs adheres to the Google API Services User
Data Policy, including the Limited Use requirements. Specifically:
• We use your Google Health data only to provide and improve the features you see in MOVEMENT.
• We do not transfer it to third parties except as necessary to provide the service, to comply with the law,
or as part of a merger or acquisition (Section 5).
• Humans at JVB do not read your individual Google Health data except with your explicit permission, for
security or abuse investigation, to comply with the law, or in aggregated, anonymized form.
• We do not use it for advertising or for creditworthiness or lending decisions.
You can revoke MOVEMENT's access to your Google data at any time at
myaccount.google.com/permissions. Revocation stops new data from arriving; to delete data already
stored, see Section 7.
4. Where and how it is stored
Your data is stored in a database hosted on Heroku (Salesforce) in the United States, encrypted at rest
and in transit. Connection credentials for Apple, Garmin, and Google are stored as opaque tokens and are
never displayed, logged, or shared. Access to production systems is limited to JVB's operator.
We take reasonable, industry-standard steps to protect your data, but no system is perfectly secure and
we cannot guarantee absolute security. If we learn of a breach affecting your data, we will notify you as
required by law.
5. When we share information
We share your information only:• With the device platform you connected, to the extent required to receive your data (for example,
Google receives a request from our servers when you tap Refresh).
• With service providers who host or operate MOVEMENT on our behalf (Heroku for hosting, Amazon
Web Services for email delivery, Apple for push notifications). They may process data only as we
instruct.
• With other challenge participants, limited to what is described in Section 1.
• When required by law, such as in response to a subpoena, court order, or other legal process, or when
we believe in good faith that disclosure is necessary to enforce our Terms, respond to claims that
content violates the rights of others, or protect the safety of JVB, its users, or the public.
• In a business transfer. If JVB or substantially all of its assets are acquired, user information would be
one of the transferred assets. We would notify you and give you the opportunity to delete your account
before the transfer takes effect.
6. How long we keep it
We keep your data for as long as your account is active, so that your history and challenge records remain
available to you.
• Health and activity data is retained for the life of your account.
• Diagnostic logs are retained for up to 90 days and then deleted automatically.
• Connection tokens are deleted immediately when you disconnect a device or delete your account.
• Inactive accounts with no sync activity for 24 months may be deleted after notice to the email on file.
We comply with the data-retention and data-protection laws that apply to our users, including the EU/UK
General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and
other applicable state, national, and international laws. Where a law requires a shorter retention period
than stated here, the law controls.
7. Your rights and choices
Regardless of where you live, you can:
• See your data — your dashboard shows everything we hold about your activity; email us for a complete
export.
• Correct it — the Edit Hours and Verify Sleep tools let you correct your own records.
• Disconnect a device — remove MOVEMENT's access in your Apple Health, Garmin, or Google
settings at any time.
• Delete your account and data — you can delete your entire account yourself at any time from the
Profile page in the MOVEMENT app. Deletion removes your account, your health data, your device
tokens, and your challenge history. If you prefer, email info@jvbwellness.com from the address on file
and we will delete it for you within 30 days and confirm by email. Aggregated, anonymized statistics that
cannot identify you may be retained.
• Object or restrict — if you are in a jurisdiction that grants these rights, we honor them on request.• Complain to a regulator — if you are in the EU/UK you may contact your local data-protection
authority.
We do not discriminate against anyone for exercising these rights.
8. Children
MOVEMENT is not directed to children under 13, and we do not knowingly collect information from them. If
we learn that an account belongs to a child under 13, we will delete it. If you believe a child has registered,
email info@jvbwellness.com.
9. International users
JVB operates from the United States. If you use MOVEMENT from outside the United States, you
understand that your data will be transferred to, stored in, and processed in the United States, where
privacy laws may differ from those in your country. By using MOVEMENT you consent to that transfer. For
users in the EU/UK, we rely on your consent and on standard contractual safeguards with our service
providers as the legal basis for that transfer.
10. Third-party links
MOVEMENT and JVBWellness.com may link to third-party sites and apps, including Apple, Garmin, and
Google. Their privacy practices are their own; this policy does not cover them. Read theirs.
11. Changes to this policy
We may update this policy. When we make a materially significant change, we will post notice on
JVBWellness.com and in the app before the change takes effect, and where required by law we will ask for
your consent again. The effective date at the top always reflects the current version.
12. Contact
JVB Health & Wellness info@jvbwellness.com