Data controller
The data controller is the publisher of the MotivMe service. For any question about your data: [email protected].
Scope
This policy covers the entire MotivMe service: the landing site motivme.app and the MotivMe mobile app (iOS and Android). The data collected differs depending on whether you browse the site or use the app; each section makes this clear.
Data collected
On the landing site
- Email address: only if you join the waitlist or contact us via the form.
- First name and message: if you use the contact form.
The site uses cookieless audience measurement (PostHog, European Union instance): page views and clicks on signup buttons, with no identifier persisting between visits and no form data (your email is never sent to PostHog). No third-party cookies, no sensitive information.
To understand how pages are navigated and improve the site, we also record your browsing activity (PostHog "session replay"): cursor movements, clicks, and scrolling. These recordings always mask everything you type (form fields, email): the content you enter is never captured. They run without cookies or any identifier kept between visits, and your IP address is anonymized.
In the app
- Account: your email address and authentication data, depending on your sign-in method: a password (hashed, never stored in clear text), or sign-in with Apple (Sign in with Apple) or Google.
- Content you create: objectives, routines, tasks, focus sessions, and journal entries. This content can be personal; it remains yours.
- Technical data: device identifier, model, operating system, and app version, used for operation, support, and crash reporting (via Sentry, European Union). Reminders are scheduled locally on your device, with no remote push service.
- Product analytics: usage events (screens viewed, key actions) via PostHog, with a pseudonymous identifier and no content or free text. An approximate location (country, region, city) is derived from your IP address server-side. Used to understand usage and improve the app.
Purposes of processing
On the site, your data is used only to send you launch information (waitlist) and to respond to your contact request.
In the app, your data is used to:
- create and manage your account;
- provide the service and sync your objectives, routines, tasks, focus sessions, and journal across your devices;
- measure usage in order to improve the product;
- ensure security and prevent abuse;
- manage your Inferno subscription (see the terms of sale);
- send you the reminders you schedule (routines, tasks) and, if you enable them, system notifications (quotes, nudges, summaries).
We do not sell, rent, or share your data for advertising purposes.
Legal bases (GDPR)
- Your consent: contact form and waitlist, product analytics, push notifications.
- Performance of the contract: creating and running your account, providing the service, managing the subscription.
- Our legitimate interest: security, abuse prevention, service improvement, and recording of browsing activity on the site (session replay, with typed fields masked and IP anonymized).
You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
Data retention
- Waitlist and contact: until the app launches or until you request deletion, for a maximum of 2 years from collection.
- Account and app content: kept as long as your account is active. Upon account deletion, your data is erased within 30 days.
- Analytics: the site's session recordings (session replay) are kept for 30 days. Usage events (site and app) are kept for 24 months, then deleted or anonymized.
- Billing: subscription-related data is kept for 7 years, as required by Belgian accounting and tax obligations.
Processors and third-party services
To provide the service, we rely on providers that process certain data on our behalf:
- Cloudflare: hosting and delivery of the site (cloudflare.com).
- Web3Forms: processing contact form messages (Web3Forms privacy policy).
- Supabase: app database and authentication, hosted in the European Union (Frankfurt).
- PostHog: product analytics, on the European Union instance (eu.posthog.com).
- Sentry: application crash reporting, on the European Union instance.
- Scaleway Transactional Email: sending the app's transactional emails (account confirmation, password reset), hosted in the European Union.
- Apple App Store / Google Play: app distribution and processing of subscription payments (Apple and Google act as sellers).
- RevenueCat: technical subscription management (purchase validation, subscription status) on top of Apple and Google payments.
- Self-hosted fonts: the Inter font is served from our own servers. No third-party request, no data (including your IP address) sent to Google Fonts.
Transfers outside the European Union
Some of these providers may be located outside the European Union; where applicable, such transfers are covered by appropriate safeguards (standard contractual clauses or the EU-US Data Privacy Framework).
Your rights
Under GDPR, you have the following rights:
- Right of access to your data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to object to processing
- Right to data portability
To exercise these rights: [email protected]. You can also delete your account directly from the app.
Security
Exchanges between the app and our servers are encrypted in transit (HTTPS/TLS) and access to your data is restricted. As no system is infallible, we cannot, however, guarantee absolute security.
Changes to this policy
This policy may change. In the event of a material change, we will inform you (by email or in the app). The date of the latest update appears at the top of this page.
Complaints
For any question: [email protected].
If you believe your data is not being processed lawfully, you may lodge a complaint with the Belgian Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels, [email protected], autoriteprotectiondonnees.be. If you reside in another EU country, you may also contact your local supervisory authority.