Privacy Policy

1. Introduction

Welcome to MOTUS. We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your personal information. This Privacy Policy applies to the MOTUS application and related services (collectively, "the App").

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use MOTUS, you may provide:

• Account information (name, email address, phone number)
• Physical characteristics (age, sex, height, weight, body fat percentage)
• Fitness goals and preferences (program type, training days, experience level, equipment availability)
• Race and event details (race distance, target time, current pace, goal dates)
• Strength goals (current and target lifts)
• Dietary preferences, restrictions, and nutrition goals
• Workout logs, exercise performance data, and training history
• Meal logs, food items, and nutrition data
• Vacation and travel dates for program scheduling
• Feedback, bug reports, and support messages

Coach Accounts — Additional Data

If you register as a coach on the MOTUS platform, additional information is collected to facilitate payouts and comply with financial regulations:

• Identity verification: Legal name, date of birth, and government-issued ID — collected and processed directly by Stripe via their Express onboarding flow. MOTUS does not store this data.
• Bank account information: Routing and account numbers for payout — collected and processed directly by Stripe. MOTUS does not store bank credentials.
• Tax information: SSN or EIN for 1099-K reporting — collected and processed directly by Stripe.
• Business information: Coach handle, bio, profile photo, and service description — stored in MOTUS's database and displayed publicly on your coach profile.

2.2 Photos and Images

With your action, the App may access your device camera or photo library to:

• Meal photos: Photos of food you take or select are sent to our AI provider (Anthropic) for nutritional analysis. These images are processed in real time and are not stored on our servers after analysis.
• Nutrition label photos: Photos of nutrition labels are sent to Anthropic for text extraction and macro calculation. These images are not stored after processing.
• Feedback screenshots: When you submit feedback, you may optionally capture a screenshot of the current screen. Screenshots are stored securely and used solely for debugging and improving the App.

2.3 Barcode Scans

When you scan a food barcode, the barcode number is sent to third-party food databases (FatSecret and Open Food Facts) to retrieve nutritional information. Barcode lookup results may be temporarily cached to improve performance.

2.4 Information from Third-Party Services

With your explicit consent, we may collect data from connected services:

• Strava: Workout activities, exercise data, distance, duration, pace, heart rate
• Garmin: Activity data, sleep data, heart rate, stress levels, body composition
• Google Calendar: Calendar events, workout scheduling, timezone information. MOTUS creates and manages workout events on your calendar and can read life events (races, travel) to adjust your program.

2.5 Automatically Collected Information

We automatically collect:

• Device information (device type, operating system, browser user agent)
• IP address (used for rate limiting; not stored persistently)
• App usage data (features used, pages visited)
• Log data (access times, errors, performance data)

2.6 Local Device Storage

MOTUS stores a copy of your profile, program, meal logs, and workout data in your browser's local storage as a performance cache. This data remains on your device and is synchronized with our servers.

2.7 Apple Health (HealthKit)

On iOS devices, you may choose to connect MOTUS to Apple Health. This integration is entirely opt-in — MOTUS will never access Apple Health data unless you explicitly enable the connection in your Profile settings. You can disconnect at any time.

Data we read from Apple Health:

• Workouts (type, duration, energy burned, heart rate)
• Active and basal energy burned, steps, distance
• Heart rate, resting heart rate, heart rate variability (HRV)
• Sleep analysis (duration and stages)
• Body measurements (weight, body fat %, height, BMI, lean body mass, waist circumference)
• VO2 max

Data we write to Apple Health:

• Workouts logged in MOTUS (with heart rate zones and energy burned)
• Nutrition data (meals with calories and macronutrients)
• Body weight updates

Raw health samples (heart rate, HRV, sleep stages) remain on your device and are not transmitted to our servers. Only derived metrics — such as recovery scores and BMR/TDEE recalculations — are synced to our cloud database. MOTUS never uses HealthKit data for advertising, marketing, or data mining, and never shares it with third-party services. This includes AI assistants you connect to MOTUS: no HealthKit data, and no value derived from or filled in from it, is ever made available to them (see Section 3.1).

2.8 Connected Wearables (Oura, WHOOP, Google Health)

You may connect an Oura Ring, a WHOOP band, or Google Health (Google Fit) to MOTUS. Each connection is opt-in, is authorised by you through that provider's own OAuth consent screen, and is preceded in the App by a disclosure listing exactly what we read and what it is used for. That disclosure stays available afterwards under Profile → Integrations → "What we read, and what it changes".

Data we read, per provider:

• Oura: daily readiness score, total sleep duration, average overnight HRV, lowest overnight heart rate, average blood oxygen (SpO2), daily steps, active calories, and sessions you record in Oura.
• WHOOP: daily recovery score, HRV, resting heart rate, total sleep duration, calories burned, and workouts you record in WHOOP.
• Google Health (Google Fit): heart rate (used as resting heart rate), sleep duration, daily steps, calories burned, weight, body fat percentage, and your Google account name and email address (used only to link the connection to your MOTUS account). Google Health does not provide HRV to MOTUS.

We read only; we never write data back to these providers. Each sync retrieves the most recent seven days and runs roughly hourly. Readings are stored in MOTUS's Supabase database (see Section 5.1) in a table associated with your account.

What this data is used for:

• Generating your training program. A summary of your previous 14 days of readings is included in the prompt sent to Anthropic when your program is generated, with an instruction to calibrate starting volume, intensity, recovery spacing, deload sensitivity and nutrition targets. See Section 3.
• Prefilling your training profile. MOTUS fills in your resting heart rate, HRV, average sleep, readiness or recovery score, daily step count, weight and body fat from the previous 14 days rather than asking you to estimate them. Your step average determines your activity level, which is an input to your calorie and macronutrient targets.
• Building your training history. Sessions and workouts recorded on Oura or WHOOP are imported as MOTUS workouts and count toward your weekly training load.
• Coach visibility. If you subscribe to a coach, that coach can see a 30-day summary of these readings. See Section 5.4.

These readings shape your program at the point it is generated. They do not currently trigger automatic changes to an already-prescribed session — readiness-driven daily session adjustment exists in the App but is not enabled. The Recovery Score shown on the dashboard is calculated from Apple Health data (Section 2.7), not from Oura, WHOOP or Google Health.

Wearable health data is never sold, never used for advertising, marketing or user profiling, and never shared with third parties beyond the service providers listed in Section 5.1. Apart from the program-generation summary described above, it is not sent to any AI provider. It is never made available to AI assistants you connect to MOTUS (Section 3.1), and neither are workouts imported from these providers or profile values filled in from them.

Disconnecting and deletion. You can disconnect any of these providers at any time in Profile → Integrations. Disconnecting deletes MOTUS's copy of your access and refresh tokens immediately and stops all further syncing. Readings that were already synced remain in your MOTUS account so your history and charts are preserved. To have previously synced wearable data deleted as well, email privacy@motusprogram.com, or use Profile → Delete Account, which deletes your account and its associated data.

3. Artificial Intelligence and Data Processing

• Program generation: Your profile information (age, sex, weight, height, training history, goals, experience level) is sent to generate your personalized training program. If you have connected a wearable, a summary of your recent readings — resting heart rate, HRV, average sleep, readiness or recovery score, daily steps, calories burned and blood oxygen — is included so the program can be calibrated to them. See Section 2.8.
• AI Coach chat: Your profile, current program details, subscription status, AI conversation messages, and recent workout performance data are sent to the AI to provide automated coaching responses. This is distinct from messaging with a human coach — see Section 5.4 below.
• Food analysis: Meal photos you take are sent as images for nutritional estimation.
• Nutrition label reading: Photos of nutrition labels are sent for text extraction.
• Meal plan generation: Your calorie targets, dietary preferences, and restrictions are sent to generate meal plans (via Spoonacular).

Anthropic processes this data according to their privacy policy and data handling practices. MOTUS sends only the minimum data necessary for each feature. AI-generated content (programs, coaching advice, food analysis) is provided for informational purposes and should not be considered medical or professional advice.

3.1 AI Assistants You Connect

We are building a way to connect an AI assistant you already use, such as ChatGPT (OpenAI), Claude (Anthropic) or Muse (Meta), to your MOTUS account. It is not available yet; this section describes how it will work once it is, and applies from the moment you connect one. This is separate from MOTUS's own use of Anthropic described above: the assistant is one you chose, running on your account with that provider, and it is not a MOTUS service provider. Connecting is optional and happens only when you start it.

How it connects. You sign in to MOTUS on motusprogram.com and approve the specific permissions the assistant asks for (for example, reading your plan, or adding meals and workouts). Where the connection shares health or fitness data, we ask for your consent to share it with that assistant and keep a record of it.

What a connected assistant can read, within the permissions you approved:

• Athletes: your goals and profile answers, your training program and today's session, your nutrition targets, and the meals and workouts you logged in MOTUS.
• Coaches: your own studio: profile, methodology, coaching voice, brand, positioning and prices, and any drafts of them.

What a connected assistant can never access through MOTUS:

• Apple Health (HealthKit) data, or any value derived from or filled in from it (Section 2.7)
• Readings from Oura, WHOOP or Google Health, workouts imported from them, or profile values filled in from them (Section 2.8)
• Messages between athletes and human coaches (Section 5.4)
• Uploaded bloodwork and progress photos
• Payment details
• For coaches: any data about your clients

What a connected assistant can add. Answers, goals, meals and workouts an assistant submits are saved to your account with a label showing they came from that assistant. Anything that would change your training program, or anything a coach's clients or the public would see, is saved as a draft. It takes effect only after you review and approve it in MOTUS.

The assistant provider's policy applies. Once MOTUS shares data with an assistant you connected, that provider (for example OpenAI, Anthropic or Meta) processes it under its own privacy policy and your settings with that provider. MOTUS does not control how the provider stores or uses it.

Disconnecting. You can disconnect an assistant at any time in your MOTUS settings, or by removing MOTUS in the assistant's own settings. Disconnecting revokes its access immediately. Data it already added stays in your MOTUS account; to have it deleted, email privacy@motusprogram.com or use Profile → Delete Account.

4. How We Use Your Information

We use your information to:

• Generate personalized, AI-powered workout programs
• Provide AI coaching responses tailored to your program and progress
• Analyze food photos and nutrition labels for macro tracking
• Track your fitness progress and nutrition goals
• Calculate caloric needs and macro recommendations
• Sync workouts and events with your connected services
• Share the data you choose with AI assistants you connect, and save what they add on your behalf (Section 3.1)
• Process referral rewards and challenge participation
• Facilitate athlete subscriptions to coach plans and process related payments via Stripe Connect
• Display your training progress and profile data to coaches you have subscribed to
• Improve our services and develop new features
• Send important updates about your account or our services
• Respond to feedback and support requests
• Comply with legal obligations

5. How We Share Your Information

We do NOT sell your personal information.

We share data with the following categories of service providers, solely to operate and improve the App:

5.1 Third-Party Service Providers

• Anthropic (Claude AI): Processes your profile, program, chat messages, workout data, and food/label photos to power AI features. See Section 3.
• Supabase: Cloud database and authentication provider. Stores your account, profile, program, meal, workout, subscription, and feedback data.
• RevenueCat: Subscription management and entitlement tracking across platforms. Receives your anonymous user ID and subscription status. See RevenueCat's privacy policy for details.
• Apple App Store / Google Play: Subscription billing for iOS and Android Motus Pro plans. Payment credentials are handled directly by Apple and Google.
• Stripe: Payment processor for web subscriptions and all coach marketplace transactions. Stripe processes and stores coach identity verification data (name, SSN/EIN, bank account details, government ID) through their Stripe Express onboarding. MOTUS does not store this sensitive financial data — it is handled directly by Stripe in accordance with PCI DSS and Stripe's privacy policy. Athlete payment methods are stored by Stripe, not MOTUS.
• FatSecret & Open Food Facts: Food and nutrition databases used for barcode lookups and food search.
• Spoonacular: Meal plan generation based on your calorie targets and dietary preferences.
• Resend: Email delivery service used to route feedback submissions to our support team.
• Vercel: Application hosting and serverless function execution.
• Google (OAuth & Calendar API): Authentication and calendar sync when you connect Google Calendar.
• Oura, WHOOP & Google Health (Google Fit): Wearable and health-platform APIs. MOTUS reads the data listed in Section 2.8 from these providers with your authorisation and writes nothing back to them.
• Apple HealthKit: On-device health data store. Data flows bidirectionally between MOTUS and Apple Health with your explicit permission. No HealthKit data is transmitted to our servers beyond derived metrics (e.g., recovery scores, BMR recalculations). See Section 2.7.

5.2 Twilio

MOTUS uses Twilio to send SMS notifications for certain account events (e.g., subscription confirmations and coach alerts). Your phone number may be transmitted to Twilio for the purpose of message delivery. Twilio does not use your phone number for any purpose other than delivering messages on our behalf.

5.3 Connected Fitness Platforms

When you connect Strava, Garmin, Google Calendar, or other platforms, data flows bidirectionally as authorized by you. Oura, WHOOP and Google Health are read-only connections — see Section 2.8. Each platform has its own privacy policy governing their use of your data. You can disconnect any integration at any time.

5.4 Coach-Athlete Data Sharing

When you subscribe to a coach's channel on the MOTUS platform, your coach will have access to certain data about you in order to provide coaching services:

• Your display name and profile photo (if set)
• Your current training program and workout history
• Your logged workouts and performance metrics
• Messages you send within the coach's channel
• A 30-day summary of readings from a connected wearable (Oura, WHOOP, Google Health) — latest and recent values per metric
• Body measurements, check-ins, nutrition summaries, supplements, uploaded bloodwork, and progress photos

Each of these categories is governed by a separate sharing permission on your account, and all of them are enabled by default when you subscribe to a coach. At present, progress photos are the only category with an in-app switch; to turn off any other category — including wearable data — while remaining subscribed, email privacy@motusprogram.com. Unsubscribing from the coach revokes all of it at once. Coaches do not have access to your food photos, payment details, or any data outside the categories listed above. By subscribing to a coach's plan you consent to the enabled categories being visible to that coach.

Messages between athletes and human coaches are stored in MOTUS's database and are visible to both parties. These messages are not sent to Anthropic or any AI provider, and are never made available to AI assistants you connect to MOTUS (Section 3.1). MOTUS support staff may access messages in connection with a dispute or abuse investigation.

5.5 AI Assistants You Connect

Once connecting an AI assistant is available (Section 3.1), if you connect one such as ChatGPT, Claude or Muse, MOTUS shares with it only the data described in Section 3.1, only within the permissions you approved. That assistant's provider is not a MOTUS service provider; its own privacy policy governs what it does with the data.

5.6 Referral Program

When you share your referral code and someone uses it, we store a record linking your account to the referred user for the purpose of crediting referral rewards. Your first name may be displayed to users who sign up using your referral link.

Coach public profiles (handle, bio, profile photo) are visible to all app users and are indexed by search engines. If you are a coach, ensure your profile contains only information you are comfortable sharing publicly.

6. Data Security

We implement industry-standard security measures:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication protocols (OAuth 2.0, OTP verification)
• API rate limiting to prevent abuse
• Access controls limiting who can view your data
• Payment data handled exclusively by Stripe (PCI-compliant)

7. Your Rights and Choices

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data directly in-app (Profile → Delete Account)
• Disconnect third-party services and AI assistants at any time
• Export your data in a portable format
• Opt out of marketing communications
• Decline to provide photos for AI analysis (you can log meals manually instead)

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you use the in-app account deletion flow (Profile → Delete Account), we delete your account and associated data, except where retention is required by law. When you disconnect an AI assistant, we delete its access tokens immediately; data it added to your account is kept like any other account data until you delete it or your account. Cached data in your browser's local storage can be cleared by you at any time.

9. Children's Privacy

MOTUS is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

10. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through the App or via email. The effective date at the top of this page indicates when the policy was last revised. Your continued use of MOTUS after changes constitutes acceptance of the updated policy.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to deletion, and the right to opt-out of the sale of personal information. As stated above, we do not sell personal information.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your local data protection authority.