Privacy Policy

1. Introduction

Welcome to MOTUS. We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your personal information. This Privacy Policy applies to the MOTUS application and related services (collectively, "the App").

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use MOTUS, you may provide:

• Account information (name, email address, phone number)
• Physical characteristics (age, sex, height, weight, body fat percentage)
• Fitness goals and preferences (program type, training days, experience level, equipment availability)
• Race and event details (race distance, target time, current pace, goal dates)
• Strength goals (current and target lifts)
• Dietary preferences, restrictions, and nutrition goals
• Workout logs, exercise performance data, and training history
• Meal logs, food items, and nutrition data
• Vacation and travel dates for program scheduling
• Feedback, bug reports, and support messages

Coach Accounts — Additional Data

If you register as a coach on the MOTUS platform, additional information is collected to facilitate payouts and comply with financial regulations:

• Identity verification: Legal name, date of birth, and government-issued ID — collected and processed directly by Stripe via their Express onboarding flow. MOTUS does not store this data.
• Bank account information: Routing and account numbers for payout — collected and processed directly by Stripe. MOTUS does not store bank credentials.
• Tax information: SSN or EIN for 1099-K reporting — collected and processed directly by Stripe.
• Business information: Coach handle, bio, profile photo, and service description — stored in MOTUS's database and displayed publicly on your coach profile.

2.2 Photos and Images

With your action, the App may access your device camera or photo library to:

• Meal photos: Photos of food you take or select are sent to our AI provider (Anthropic) for nutritional analysis. These images are processed in real time and are not stored on our servers after analysis.
• Nutrition label photos: Photos of nutrition labels are sent to Anthropic for text extraction and macro calculation. These images are not stored after processing.
• Feedback screenshots: When you submit feedback, you may optionally capture a screenshot of the current screen. Screenshots are stored securely and used solely for debugging and improving the App.

2.3 Barcode Scans

When you scan a food barcode, the barcode number is sent to third-party food databases (FatSecret and Open Food Facts) to retrieve nutritional information. Barcode lookup results may be temporarily cached to improve performance.

2.4 Information from Third-Party Services

With your explicit consent, we may collect data from connected services:

• Strava: Workout activities, exercise data, distance, duration, pace, heart rate
• Garmin: Activity data, sleep data, heart rate, stress levels, body composition
• Google Calendar: Calendar events, workout scheduling, timezone information. MOTUS creates and manages workout events on your calendar and can read life events (races, travel) to adjust your program.

2.5 Automatically Collected Information

We automatically collect:

• Device information (device type, operating system, browser user agent)
• IP address (used for rate limiting; not stored persistently)
• App usage data (features used, pages visited)
• Log data (access times, errors, performance data)

2.6 Local Device Storage

MOTUS stores a copy of your profile, program, meal logs, and workout data in your browser's local storage as a performance cache. This data remains on your device and is synchronized with our servers.

2.7 Apple Health (HealthKit)

On iOS devices, you may choose to connect MOTUS to Apple Health. This integration is entirely opt-in — MOTUS will never access Apple Health data unless you explicitly enable the connection in your Profile settings. You can disconnect at any time.

Data we read from Apple Health:

• Workouts (type, duration, energy burned, heart rate)
• Active and basal energy burned, steps, distance
• Heart rate, resting heart rate, heart rate variability (HRV)
• Sleep analysis (duration and stages)
• Body measurements (weight, body fat %, height, BMI, lean body mass, waist circumference)
• VO2 max

Data we write to Apple Health:

• Workouts logged in MOTUS (with heart rate zones and energy burned)
• Nutrition data (meals with calories and macronutrients)
• Body weight updates

Raw health samples (heart rate, HRV, sleep stages) remain on your device and are not transmitted to our servers. Only derived metrics — such as recovery scores and BMR/TDEE recalculations — are synced to our cloud database. MOTUS never uses HealthKit data for advertising, marketing, or data mining, and never shares it with third-party services.

3. Artificial Intelligence and Data Processing

• Program generation: Your profile information (age, sex, weight, height, training history, goals, experience level) is sent to generate your personalized training program.
• AI Coach chat: Your profile, current program details, subscription status, AI conversation messages, and recent workout performance data are sent to the AI to provide automated coaching responses. This is distinct from messaging with a human coach — see Section 5.4 below.
• Food analysis: Meal photos you take are sent as images for nutritional estimation.
• Nutrition label reading: Photos of nutrition labels are sent for text extraction.
• Meal plan generation: Your calorie targets, dietary preferences, and restrictions are sent to generate meal plans (via Spoonacular).

Anthropic processes this data according to their privacy policy and data handling practices. MOTUS sends only the minimum data necessary for each feature. AI-generated content (programs, coaching advice, food analysis) is provided for informational purposes and should not be considered medical or professional advice.

4. How We Use Your Information

We use your information to:

• Generate personalized, AI-powered workout programs
• Provide AI coaching responses tailored to your program and progress
• Analyze food photos and nutrition labels for macro tracking
• Track your fitness progress and nutrition goals
• Calculate caloric needs and macro recommendations
• Sync workouts and events with your connected services
• Process referral rewards and challenge participation
• Facilitate athlete subscriptions to coach plans and process related payments via Stripe Connect
• Display your training progress and profile data to coaches you have subscribed to
• Improve our services and develop new features
• Send important updates about your account or our services
• Respond to feedback and support requests
• Comply with legal obligations

5. How We Share Your Information

We do NOT sell your personal information.

We share data with the following categories of service providers, solely to operate and improve the App:

5.1 Third-Party Service Providers

• Anthropic (Claude AI): Processes your profile, program, chat messages, workout data, and food/label photos to power AI features. See Section 3.
• Supabase: Cloud database and authentication provider. Stores your account, profile, program, meal, workout, subscription, and feedback data.
• RevenueCat: Subscription management and entitlement tracking across platforms. Receives your anonymous user ID and subscription status. See RevenueCat's privacy policy for details.
• Apple App Store / Google Play: Subscription billing for iOS and Android Motus Pro plans. Payment credentials are handled directly by Apple and Google.
• Stripe: Payment processor for web subscriptions and all coach marketplace transactions. Stripe processes and stores coach identity verification data (name, SSN/EIN, bank account details, government ID) through their Stripe Express onboarding. MOTUS does not store this sensitive financial data — it is handled directly by Stripe in accordance with PCI DSS and Stripe's privacy policy. Athlete payment methods are stored by Stripe, not MOTUS.
• FatSecret & Open Food Facts: Food and nutrition databases used for barcode lookups and food search.
• Spoonacular: Meal plan generation based on your calorie targets and dietary preferences.
• Resend: Email delivery service used to route feedback submissions to our support team.
• Vercel: Application hosting and serverless function execution.
• Google (OAuth & Calendar API): Authentication and calendar sync when you connect Google Calendar.
• Apple HealthKit: On-device health data store. Data flows bidirectionally between MOTUS and Apple Health with your explicit permission. No HealthKit data is transmitted to our servers beyond derived metrics (e.g., recovery scores, BMR recalculations). See Section 2.7.

5.2 Twilio

MOTUS uses Twilio to send SMS notifications for certain account events (e.g., subscription confirmations and coach alerts). Your phone number may be transmitted to Twilio for the purpose of message delivery. Twilio does not use your phone number for any purpose other than delivering messages on our behalf.

5.3 Connected Fitness Platforms

When you connect Strava, Garmin, Google Calendar, or other platforms, data flows bidirectionally as authorized by you. Each platform has its own privacy policy governing their use of your data. You can disconnect any integration at any time.

5.4 Coach-Athlete Data Sharing

When you subscribe to a coach's channel on the MOTUS platform, your coach will have access to certain data about you in order to provide coaching services:

• Your display name and profile photo (if set)
• Your current training program and workout history
• Your logged workouts and performance metrics
• Messages you send within the coach's channel

Coaches do not have access to your meal logs, nutrition data, food photos, connected third-party services (Strava, Garmin, etc.), payment details, or any data outside the scope listed above. By subscribing to a coach's plan, you consent to this data being visible to that coach. You may unsubscribe at any time to revoke this access.

Messages between athletes and human coaches are stored in MOTUS's database and are visible to both parties. These messages are not sent to Anthropic or any AI provider. MOTUS support staff may access messages in connection with a dispute or abuse investigation.

5.5 Referral Program

When you share your referral code and someone uses it, we store a record linking your account to the referred user for the purpose of crediting referral rewards. Your first name may be displayed to users who sign up using your referral link.

Coach public profiles (handle, bio, profile photo) are visible to all app users and are indexed by search engines. If you are a coach, ensure your profile contains only information you are comfortable sharing publicly.

6. Data Security

We implement industry-standard security measures:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication protocols (OAuth 2.0, OTP verification)
• API rate limiting to prevent abuse
• Access controls limiting who can view your data
• Payment data handled exclusively by Stripe (PCI-compliant)

7. Your Rights and Choices

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data directly in-app (Profile → Delete Account)
• Disconnect third-party services at any time
• Export your data in a portable format
• Opt out of marketing communications
• Decline to provide photos for AI analysis (you can log meals manually instead)

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you use the in-app account deletion flow (Profile → Delete Account), we delete your account and associated data, except where retention is required by law. Cached data in your browser's local storage can be cleared by you at any time.

9. Children's Privacy

MOTUS is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

10. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through the App or via email. The effective date at the top of this page indicates when the policy was last revised. Your continued use of MOTUS after changes constitutes acceptance of the updated policy.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to deletion, and the right to opt-out of the sale of personal information. As stated above, we do not sell personal information.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your local data protection authority.