Privacy Policy
What Motivo stores, who can see it, and how to get it back or delete it.
Version 2026-10-18
Draft — pending legal review. This document has not yet been reviewed by a qualified lawyer. It describes how Motivo actually behaves today, and it will be replaced by a reviewed version before it is relied upon.
What is stored
Your account is an email address and a password, held by Supabase. Motivo never sees your password.
Everything you log is stored against your account: food entries, training sessions, body weight and measurements, goals and targets, tasks and notes, and any health data you explicitly connect.
Who can see it
You can. Nobody else can, except in the two cases below.
An account you have ACCEPTED as a friend can see your activity summary — the figures the Friends screen shows: recent weight trend, goal and start weight, training phase, step counts, gym adherence and your last two weeks of daily scores. You choose what friends see in Settings → Friends, for all friends at once or for one friend at a time; anything you switch off is withheld by Motivo's servers, not merely hidden on their screen. A pending friend request grants nothing at all: asking to be your friend is not a way to see your data. Removing a friendship closes that access again.
Any signed-in account can find you by handle or display name, and see your handle, display name, avatar, score, streak and any social links you have added. That is what makes it possible to add a friend. It does not include the health and training data above — no weight, no goals, no phase, no step counts, no gym adherence and no split.
Health data
Health data from Apple Health or Google Health Connect is read only after you switch each data type on, and only the types you switched on.
It is used to show your own figures back to you, and — only if you turn on "Let IVO use my health data" — summarised for the assistant as described below. Deleting your account deletes it.
Live heart rate from a chest strap or watch is shown while you train and is not stored or sent anywhere.
AI features and third parties
When you use an AI feature, your request is sent to our AI provider, Anthropic, to produce the answer. What travels with it depends on the feature.
Label scan, meal estimate and recipe import send only what you submitted for that request: the text you typed or pasted, or the photograph you attached.
The assistant also sends context about the subject you asked about, and only that subject: your recent food log and daily totals, your calorie and macro targets, your training programme and recent sessions, your Task Tracker entries, weigh-ins you typed into Motivo, and the handles and display names of friends it needs to name. The weekly check-in explanation and the plateau investigator send figures about your logging, your targets and the period they are explaining.
Data imported from Apple Health or Google Health Connect — steps, sleep, weight readings, and nutrition from a connected app — is never sent to an AI provider, except the summaries below if you choose to turn them on. Where a figure Motivo worked out from imported data would give it away, that figure is withheld too: your weight trend, and the energy estimate behind your targets. The one thing that still goes is the rounded daily calorie figure your plan sets, where the feature needs it to answer at all.
IVO and your health data (optional). If you turn on "Let IVO use my health data" in Health settings, then when you ask the assistant a question, Motivo also sends short summaries: your sleep duration (last night and your 7-day average), your HRV and resting heart rate compared with your own usual, your recovery score, and how recent those readings are. It never sends raw readings, times of day, device or app names, steps or weigh-ins. It is off unless you turn it on, and you can turn it off at any time in Health settings; it stops from your next question.
Photographs are stripped of embedded metadata, including location, on Motivo's server before they are sent to the provider.
Voice notes for the assistant are turned into words before anything is sent, and only the words go to the provider; Motivo does not keep the recording. In the phone app the words are made on your phone where it can do that, and otherwise by Apple's speech recognition on an iPhone or Google's on Android, which then receive the audio to do it. On the website your browser does it, and some browsers use their maker's speech service in the same way.
The same applies when you use the microphone to dictate into a text box, such as describing your split: speech is turned into words in the same way, nothing is recorded, and only the words you then choose to send reach the provider.
Payment details are handled by Stripe and never reach Motivo's own storage.
Getting your data out, and deleting it
You can download a copy of your data from Settings → General → Your data.
You can delete your account from Settings. Deletion removes the account and the data held against it, including health data and the activity summary friends could see. Deletion cannot be undone.
Consent records
When you accept the Terms of Use or this policy, Motivo records which document you accepted, which version of it, and when. That record is kept against your account so the acceptance survives signing out, changing device or reinstalling.
Contact
Questions, corrections or a request about your data: motivo@motivo-fit.com.
MOTIVO