Privacy Policy
FirstMove
Last updated: February 11, 2026
Overview
Penguin Labs ("we," "us," or "our") operates FirstMove, an iOS application designed to help ambitious women close the gap between dreaming and doing through daily micro-actions, progress tracking, and community features.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FirstMove application. Please read this policy carefully. By using FirstMove, you consent to the data practices described in this policy.
Information We Collect
Account Information
When you create an account, we collect:
- Name and email address
- Profile avatar (if uploaded)
- Authentication credentials via Firebase Authentication or Apple Sign-In
- Onboarding preferences (selected path, goals)
Usage & Progress Data
As you use FirstMove, we collect:
- Challenge completion status and progress
- Streak data and daily engagement history
- Badges earned and milestones achieved
- Path selections and progress through growth paths
User-Created Content
FirstMove allows you to create content including:
- Wins Journal entries (text captions and optional photos)
- Profile photos and avatars
Automatically Collected Information
- Device type, operating system version, and unique device identifiers
- App usage analytics via Firebase Analytics
- Crash reports and performance data
- Subscription status via RevenueCat
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the FirstMove app experience
- Track your challenge progress, streaks, and personal growth journey
- Deliver personalized daily challenges based on your selected path
- Process and manage your subscription through RevenueCat
- Send push notifications for daily challenges, streak reminders, and milestones
- Analyze app usage patterns to improve features and user experience
- Respond to your requests, comments, or questions
- Detect and prevent fraud or technical issues
Third-Party Services
FirstMove integrates with the following third-party services, each governed by their own privacy policies:
Firebase (Google)
Authentication, Cloud Firestore database, Cloud Storage for user media, Cloud Messaging for push notifications, and Analytics.
RevenueCat
Subscription management and in-app purchase processing. RevenueCat may collect anonymous purchase data and device identifiers.
Apple
Sign In with Apple for authentication and App Store for payment processing. Apple manages all payment transactions directly.
Data Storage & Security
Your data is stored securely using Google Firebase infrastructure. We implement appropriate security measures including:
- Firebase Security Rules that restrict data access to authenticated users and their own data
- Encrypted data transmission using HTTPS/TLS
- Firebase Storage security rules ensuring users can only access their own uploaded media
- No plain-text storage of sensitive credentials
- Regular review of access controls and security configurations
Push Notifications
FirstMove uses Firebase Cloud Messaging (FCM) to send push notifications. These may include:
- Daily challenge reminders
- Streak maintenance alerts
- Badge and milestone celebrations
- Weekly progress summaries
You can disable push notifications at any time through your device's Settings app.
Subscriptions & Payments
FirstMove offers premium features through auto-renewable subscriptions managed by RevenueCat and processed through Apple's App Store. We do not directly collect or store your payment information. All payment processing is handled by Apple.
RevenueCat receives anonymous transaction data from Apple to manage subscription status. This does not include your credit card or bank details.
Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your data in a portable format
- Opt out of push notifications
- Withdraw consent for data processing at any time
To exercise any of these rights, please contact us at the email address below. Account deletion requests will be processed within 30 days.
Children's Privacy
FirstMove is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the app and updating the "Last updated" date. Your continued use of FirstMove after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at info@penguinlabs.cc