Privacy Policy — YNM (Your Next Move)

Effective date: 16 July 2026

Last updated: 14 October 2026

YNM ("Your Next Move", "we", "us") is a training-plan service operated by Russell Nugent, trading as Energy Lab Athletic Company, Bloemfontein, South Africa ("the responsible party" under the Protection of Personal Information Act, 2013 (POPIA)).

Information Officer: Russell Nugent — privacy@yournextmove.run

This policy explains what personal information we collect through the YNM app (iOS, Android and web at yournextmove.run), why we collect it, and your rights. By creating an account you consent to processing as described here.

1. What we collect

Account information. Name, email address, password (stored as a secure hash — we never see it), your date of birth (used to confirm you are 18 or older), and your sign-in activity.

Athlete profile and training data. Information you provide to generate a training plan: goal race and date, recent race results and times, weekly running volume, training history, injury notes you choose to share, available training days and preferences. Your generated plans, logged runs, notes you leave for your coach, training feedback and progress.

Health-related information. Some intake fields (e.g. injury notes) constitute health information, which POPIA treats as special personal information. We process it only with your explicit consent, given when you complete the intake form, and only to build and adjust your training plan. You may leave these fields blank; plans can be generated without them.

Notes for your coach. You can leave a short note on a workout or run for your coach. Notes are free text and may include health information (for example, pain, illness or how you slept). We treat them as special personal information and process them only under the explicit consent you give at intake, to review and support your training. Notes can be edited for 24 hours after you write them and are deleted with your account.

Device and activity data (optional). If you connect a sports watch or platform (e.g. Polar, Suunto, Garmin), we receive activity data you authorise — runs, distances, durations, and where you permit it, heart-rate data. You can disconnect a device at any time in Settings, which stops further syncing.

Payment information. Subscriptions are processed by PayFast (web), Apple (App Store) or Google (Play Store). We never receive or store your card number or banking details. We receive confirmation of payment, the subscription plan, and its status. Subscription entitlements across platforms are managed by RevenueCat on our behalf.

Technical information. Device type, app version, diagnostic logs, and the country and timezone your device reports, which our notification provider derives from your connection. YNM does not request or use device location.

Notifications. If you enable them, a push token for your device so we can send training reminders and service messages. You can disable notifications at device level at any time.

2. What we use it for

• Generating and adjusting your personal training plan
• Producing your automated training analysis after each run, and letting your coach and our head coach review your plan, runs and notes so they can support you
• Syncing and displaying your training activity
• Managing your subscription and account
• Sending service messages (plan updates, payment notices) and, with your consent, training-related notifications
• Improving the reliability and safety of the service
• Meeting our legal obligations

We do not sell your personal information. We do not use your personal information for third-party advertising.

3. Who we share it with

We use a small number of service providers ("operators" under POPIA) to run YNM:

• Supabase — database and authentication hosting
• Netlify — application hosting
• PayFast — payment processing (web subscriptions)
• Apple / Google — payment processing (in-app subscriptions)
• RevenueCat — subscription entitlement management
• OneSignal — push notification delivery
• Resend — transactional email delivery
• Anthropic — AI processing that generates your automated training analysis (your run data, plan context and, where present, your notes for your coach). Anthropic does not use this data to train its models.
• Polar / Suunto / Garmin — only if you connect your device, and only as authorised by you

Your coach. The coach you choose in YNM, and our head coach, can view your plan, training data and notes for your coach, and may leave you a personal note. If you haven't chosen, your coach is our head coach. Coaches access this only through YNM's coaching tools, each access is logged, and coaches are bound by confidentiality.

Some of these providers store data outside South Africa (including the European Union and United States). Where personal information is transferred across borders, we ensure the recipient is bound by obligations providing a substantially similar level of protection, as required by section 72 of POPIA.

We may disclose information where required by law or to protect the rights and safety of our users.

4. How long we keep it

Your account and training data are kept while your account is active. If you delete your account, personal information is deleted or anonymised within 30 days, except records we must retain by law (e.g. payment records, retained for 5 years under tax legislation). You may request deletion at any time (see section 6).

5. Security

Data is encrypted in transit (HTTPS/TLS) and at rest. Access to production data is restricted, and access to your account is protected by your credentials. No system is perfectly secure; if we become aware of a breach affecting your personal information we will notify you and the Information Regulator as required by POPIA.

6. Your rights (POPIA)

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information (most profile fields are editable in the app)
• Delete your account and personal information
• Object to processing, or withdraw consent for optional processing (e.g. health fields, device sync, notifications) — noting some features cannot work without the related data
• Complain to the Information Regulator (South Africa): complaints.IR@justice.gov.za · inforegulator.org.za

To exercise any of these rights, email privacy@yournextmove.run. We respond within a reasonable time and at most within the periods POPIA prescribes.

7. Children

YNM is intended for users 18 years and older. We do not knowingly process the personal information of children without the consent of a competent person as required by POPIA. If you believe a child is using YNM without such consent, contact us and we will delete the account.

8. Energy Lab members

If you access YNM through an Energy Lab Athletic Company club membership, your YNM training data is processed as described in this policy. Club-related features (events, leaderboards, community) are governed by the Energy Lab privacy policy at energylabapp.co.za.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by email before they take effect. The current version is always available at yournextmove.run/privacy.

10. Contact

Russell Nugent t/a Energy Lab Athletic Company

Bloemfontein, South Africa

privacy@yournextmove.run