MOTRA Privacy Policy

1. Introduction

We built MOTRA for people who train with purpose. This Privacy Policy explains what data we collect about you, why we collect it, how we use it, how we store it, and with whom we may share it. We are committed to protecting your privacy and handling your personal data responsibly. Where processing requires consent, MOTRA asks you to make a clear choice before that processing begins.

The Data Controller responsible for your personal data is MOTRA APP LTD, with its registered address at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. You can contact us with any questions or concerns at support@motraapp.com

2. What We Collect (Categories of Personal Data)

When you use MOTRA, we collect data to track your effort and deliver value back to you. We only collect information that is necessary for our stated purposes. This includes:

• Account Information: Your email address, username, and wallet address.
• Activity Data: This includes data collected via sensors and data you directly input related to your fitness and wellness activities, such as heart rate zones, workout duration, type of movement, elevation, average heart rate, and distance. Please note that heart rate data, movement data, and GPS information (if enabled) are often considered 'special category data' or sensitive health data under data protection laws like GDPR, requiring a higher level of protection and explicit consent for processing.
• Usage Data: If you choose to share app-use and diagnostic data, we collect limited information about app screens, setup steps, feature actions, outcomes, app sessions, country or territory, app version, crashes, performance, and limited technical device and operating-system details needed for diagnostics. This optional data is associated with a random app-installation identifier and is not linked to your MOTRA account.
• Service Operations Data: We record limited categorical events needed to operate, secure, and support MOTRA, such as whether a connected-source sync, workout import, notification delivery, subscription-state update, or account-deletion step succeeded or failed. These records use a pseudonymous subject reference and exclude health readings, route or precise-location data, Coach content, wallet addresses, payment amounts, and transaction identifiers.
• Optional Data: Profile photo and fitness goals, if you choose to share them.

We do not collect anything we do not need for the provision and improvement of our services.

3. Why We Collect It and Our Lawful Bases for Processing

We use your data for the following purposes and rely on the corresponding legal bases as required by data protection regulations such as the GDPR:

We do not sell your data for advertising or profit. This commitment is a core principle of MOTRA.

4. How We Store and Protect Your Data (Data Security)

Your data is stored securely using encrypted systems and we maintain a comprehensive security program designed to protect the security, privacy, confidentiality, and integrity of your covered data against both internal and external risks, such as unauthorised access, or unintended or inappropriate disclosure.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot guarantee its absolute security. The safety and security of your information also depends on you; please keep your password confidential and do not share it.

In the unlikely event of a data breach that presents a high risk to your rights and freedoms, we will notify the appropriate data protection authorities and affected users within 72 hours of becoming aware of the breach, where required by law.

5. Data Retention

We only keep your personal data for as long as it's needed for your account to function and to fulfill the purposes for which it was collected, or as long as required by law or regulatory obligations. We have internal policies for data retention and determine retention periods based on the amount, nature, and sensitivity of the personal data, the potential risk of harm, the purposes for processing, and applicable legal requirements. Detailed optional app-use and diagnostic events are retained for up to 14 months. De-identified, aggregated product statistics may be retained for up to 36 months. If you delete your account, MOTRA deletes or de-identifies the account data it can identify, except records that must be retained by law and immutable public blockchain records. Pseudonymous service operations records are retained only as needed to run, secure, and troubleshoot the service, and are deleted or de-identified with your account where they can still be associated with it.

Optional analytics installations are deliberately not linked to your MOTRA account. Account deletion can remove telemetry for the current installation when it is available to the deletion flow, but telemetry from an old or unavailable installation cannot be identified as belonging to you. It remains installation-level data and is included only in de-identified reporting.

6. Sharing Your Data

We only share your data when necessary and under strict controls. This may include sharing with:

• Fitness platforms to import your activity data.
• Wallet services to handle your rewards.
• Trusted infrastructure providers, including Google Cloud and Firebase, to host, secure, monitor, and operate our services. Such providers are contractually bound to use data only for designated purposes and maintain appropriate data security.
• Communication and Support Platforms to facilitate in-app messaging and customer service.
• Google Firebase Analytics, Crashlytics, and Performance Monitoring when you choose to share optional app-use and diagnostic data.
• Payment Processors for managing your transactions.
• AI Partners (if applicable and with your consent) to provide personalised coaching insights.
• If legally required – and only then with proper due process, such as to comply with a court order, law, or regulatory request.

International Data Transfers: We predominantly process your personal data in the UK or the EEA. However, some of our trusted partners or services may operate outside of these regions. Where we transfer your personal data outside the UK or EEA, we ensure that an adequate level of protection is maintained. This may involve using specific safeguards such as Standard Contractual Clauses approved by the UK Government or the European Commission, or transferring to countries deemed to provide adequate protection.

We never share your information for advertising or profit. We prohibit the sale of covered data to advertising platforms, data brokers, or information resellers, even with express consent.

Garmin Connect Data

MOTRA only collects Garmin data after you choose to connect Garmin Connect and authorise MOTRA through Garmin's OAuth authorisation flow. If you do not connect Garmin, we do not collect Garmin Connect data.

Garmin data MOTRA may collect or process includes:

• Garmin user identifiers.
• Garmin connection and permission status.
• Workout and activity summaries and details.
• Route, distance, duration, pace, elevation, calories, and similar activity metrics where available.
• Heart-rate samples and summary metrics where available.
• Wellness metrics such as heart rate variability (HRV), resting heart rate, and sleep where available.
• Training API workout and schedule status for planned workouts sent to Garmin.

We use Garmin data to:

• Import workouts into MOTRA.
• Calculate Effort Points.
• Show activity and wellness trends.
• Personalise MOTRA Coach insights and training plans.
• Send planned workouts to compatible Garmin devices through the Garmin Training API.
• Support troubleshooting, fraud prevention, security, and service reliability.

Garmin access and refresh tokens are encrypted at rest. Garmin-derived app data is stored securely in Google Cloud/Firebase infrastructure. MOTRA uses appropriate technical and organisational safeguards to protect Garmin data against unauthorised access, disclosure, alteration, or loss.

Garmin data is retained only while needed to provide the MOTRA service or meet legal, security, or fraud-prevention obligations. If you disconnect Garmin or delete your MOTRA account, MOTRA stops further Garmin syncing and deletes or anonymises Garmin-derived personal data unless retention is legally required.

MOTRA does not sell Garmin data and does not share Garmin data for advertising, data brokerage, or resale. Garmin data may be processed by contracted service providers used to operate MOTRA, including Google Cloud/Firebase for hosting and database infrastructure. Garmin-derived activity or wellness context may be processed by OpenAI only when you use MOTRA Coach features that rely on that context. These processors are used only to provide MOTRA functionality.

Future Privacy Policy changes relating to Garmin data will be submitted to the Garmin Connect Developer Program team for written approval before implementation, where required by Garmin's developer requirements.

Samsung Health Data

Where the connection is available, MOTRA reads Samsung Health data through the Samsung Health Data SDK on a supported Android phone, only after you choose your workout or wellness sources and grant the relevant Samsung Health permissions. This is separate from Health Connect. Samsung Health history imported on Android can also appear in your MOTRA account on iOS; iOS does not connect directly to Samsung Health. MOTRA does not write data to Samsung Health.

Permitted information may include workout types, times, duration, distance, calories, pauses and recorded heart rate; daily steps and heart-rate summaries; and sleep duration and stages. Routes are optional and are read only if Samsung has approved exercise-location access and you grant that permission. We also process source record identifiers, permission choices, installation and SDK information, and sync status to manage your connection, recover missing imports and prevent duplicate workouts.

Imported information is stored with your MOTRA account in Google Cloud/Firebase. Subject to Samsung's approval of these uses and your choices, we use it for workout history, activity and recovery summaries, the existing Effort Points calculation and your share of monthly MOT token rewards. Eligible measured workout heart rate is required; average heart rate alone does not establish Effort Points. Selected workout or wellness context may be processed by OpenAI when you choose to use MOTRA Coach features that rely on it. Workouts and derived leaderboard results are shared through the sharing features you choose. Raw health records are not placed on a blockchain.

Samsung health readings, workout details and routes are excluded from optional product analytics. MOTRA does not sell Samsung Health data or use it for advertising, data brokerage or resale. MOTRA is responsible for its service and use of your data; this policy does not imply Samsung's approval or endorsement. Availability and permitted data uses remain subject to Samsung's approval.

Disconnecting Samsung Health in MOTRA stops new imports and keeps your imported MOTRA history until deleted. You can also revoke MOTRA's device permissions in Samsung Health. Deleting your MOTRA account removes Samsung-derived personal data and pending work through our account-deletion process, subject to the legal retention exceptions described in this policy. Neither action deletes your original Samsung Health records. Contact support@motraapp.com to request deletion of specific imported information.

Google Health (Fitbit and Pixel Watch) Data

Where the connection is available, MOTRA reads Google Health data only after you choose what to share and authorise access with Google. You can choose workouts, wellness (daily activity and recovery), or both, and grant only some requested permissions. This connection is limited to Fitbit and Pixel Watch wearable records; it does not import phone-only, manually entered or third-party recordings, request GPS routes, or write data to Google Health.

The read permissions cover activity and fitness (workouts, steps, distance and active energy), health metrics (measured heart rate, resting heart rate and heart-rate variability). Availability depends on your device and the permissions you grant. Google Health HRV is retained as RMSSD, not SDNN. This connection does not request sleep access or import new Google Health sleep records. Previously imported Google Health sleep history, if any, follows the retention and deletion choices below.

MOTRA processes these records and your Google Health account identifier in Google Cloud/Firebase for activity history, effort and recovery trends. Eligible measured workout heart rate is used under MOTRA's existing Effort Points rules and can contribute to monthly MOT token rewards. Summary heart rate does not substitute for measured samples. Matching recordings from other connected sources count as one workout.

If you enable AI coaching, selected workout and wellness context may be sent to OpenAI to personalise your coaching. Workouts and leaderboard results are shared only through the sharing features you choose. Google Health information is not sold or used for advertising or to train general-purpose AI models. Health measurements, credentials, provider identifiers and raw records are excluded from optional product analytics.

Access and refresh tokens are encrypted at rest and kept on the server. Disconnecting in Data Sources stops new imports and removes the connection credentials once disconnection finishes. Where MOTRA offers “Disconnect and keep history”, this option keeps your imported workouts, details, wellness history and existing Effort Points. You can later choose “Delete imported data” to remove this source's data and associated Effort Points from all Google Health accounts saved in your MOTRA account, including a currently connected account. Independent copies from other sources remain. Older app versions and connections without the keep-history option continue to delete imported data when you disconnect. Check the confirmation shown before proceeding.

When you accept the keep-history disclosure during connection or reconnection, revoking access at Google also stops imports while keeping saved history and existing Effort Points. Earlier connections without that acceptance continue to remove Google Health-derived data on revocation. MOTRA shows when disconnection or deletion is still finishing. If Google cannot confirm revocation, remove MOTRA in your Google account connections. Deleting your MOTRA account removes imported personal data through our account-deletion process, subject to the retention exceptions described in this policy. None of these actions deletes your Google account or your original wearable records.

Connecting another Google Health account after keeping history preserves both accounts' saved records. Matching workouts still count once for Effort Points. For overlapping wellness days, MOTRA shows the most recently connected account with saved data for that day; it does not add overlapping accounts' daily totals together. Retained records remain associated with the MOTRA account that imported them to prevent duplicate rewards across accounts.

MOTRA's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, and applicable Google Health developer requirements. Features remain subject to Google's verification and approval; this policy does not imply that Google has approved or endorsed MOTRA.

Wahoo Data

Workout data provided by Wahoo.

MOTRA reads Wahoo data only after you connect your Wahoo account and authorise access through Wahoo. Available information depends on your device, recording settings, permissions and workouts shared by Wahoo. This connection imports recorded workouts; it does not import daily wellness or sleep data, or send planned workouts to Wahoo.

We process your Wahoo account identifier, profile display name, connection and permission status, and information needed to manage syncing and prevent duplicate connections. Workout information may include activity types, start times, duration, heart-rate readings, distance, speed, routes, elevation, calories, laps, pauses, cadence and power where available.

We use this information to display your workout history, calculate Effort Points through MOTRA's existing scoring rules, support reward eligibility, recover incomplete imports and prevent duplicate workouts and rewards. Relevant workout context may be processed by OpenAI when you use MOTRA Coach features that rely on it, subject to your Coach consent.

Wahoo access and refresh tokens are encrypted at rest. Imported data is stored in Google Cloud/Firebase infrastructure. Credentials, health readings, workout details, routes and precise location are excluded from optional product analytics. MOTRA does not sell Wahoo data or share it for advertising, data brokerage or resale.

Disconnecting Wahoo stops new imports and removes MOTRA's connection credentials once disconnection finishes. Where MOTRA offers “Disconnect and keep history”, this option keeps your imported workouts, details and existing Effort Points. You can later choose “Delete imported data” to remove Wahoo-derived data and associated Effort Points from all Wahoo accounts saved in your MOTRA account, including a currently connected account. Independent copies from other sources remain. Older app versions and connections without the keep-history option continue to delete imported data when you disconnect. Check the confirmation shown before proceeding.

When you accept the keep-history disclosure during connection or reconnection, revoking access at Wahoo also stops imports while keeping saved history and existing Effort Points. Earlier connections without that acceptance continue to remove Wahoo-derived data on revocation. Connecting another Wahoo account after keeping history preserves both accounts' saved records. Matching workouts still count once for Effort Points. Retained records remain associated with the MOTRA account that imported them to prevent duplicate rewards across accounts.

MOTRA shows when disconnection or deletion is still finishing. If Wahoo cannot confirm revocation, remove MOTRA's access in your Wahoo account settings. Deleting your MOTRA account removes Wahoo-derived personal data and pending work through our account-deletion process, subject to the legal retention exceptions described in this policy. None of these actions deletes your Wahoo account. Contact support@motraapp.com to request deletion of specific imported information.

Polar Data

MOTRA collects Polar data only after you connect your Polar account and authorise access through Polar. The information available depends on the permissions you grant, your device, and the data synced to Polar Flow. You can choose Polar separately as your workout source and your wellness source in MOTRA.

Depending on your permissions, MOTRA may process:

• Your Polar profile display name, stable Polar account identifier, connection and permission status, and information needed to manage syncing. We use the account identifier to prevent the same Polar account from being connected to multiple MOTRA accounts at once.
• Workout summaries and details, including activity types, start times, duration, pauses, heart-rate readings, distance, pace, routes, elevation, calories, laps, and individual sports within a session.
• Sleep duration, stages and Polar sleep scores; Polar recovery measurements, including nightly heart-rate variability and beat-to-beat intervals; and daily activity and heart-rate information where available.

We use this information to import and display your workouts, calculate Effort Points and support the existing monthly reward process, show activity and wellness trends, and provide relevant MOTRA Coach insights and training plans. We also use connection and sync status to recover missing information, prevent duplicate imports and rewards, and support service reliability. Polar-specific scores and measurements are identified by their source; they are not treated as interchangeable with differently calculated measurements from other providers.

Polar access and refresh tokens are encrypted at rest. Imported data is stored in Google Cloud/Firebase infrastructure. Polar-derived activity or wellness context may be processed by OpenAI when you use MOTRA Coach features that rely on that context, subject to your Coach consent. Polar health data and routes are excluded from optional product analytics. We do not sell Polar data or share it for advertising, data brokerage, or resale.

Disconnecting Polar in MOTRA stops new imports and removes the Polar credentials held by MOTRA. Workouts and wellness information already imported into your MOTRA history remain until deleted. To complete revocation of MOTRA's access at Polar, remove MOTRA in your Polar Flow account settings. Disconnecting in MOTRA does not itself revoke access at Polar. Deleting your MOTRA account removes Polar-derived personal data through our account-deletion process, subject to the legal retention exceptions described in this policy; the Polar Flow revocation step still applies. To request deletion of specific imported information, contact support@motraapp.com.

Suunto Data

When the Suunto connection is available to your account, MOTRA only collects Suunto data after you connect and authorise access through Suunto. You choose whether to use it for workouts, wellness and planned workout delivery. Available information depends on your watch, recording settings, permissions and Suunto service access.

• Workout information may include activity types, times, active and elapsed duration, heart-rate readings, distance, speed, routes, elevation, calories, laps, pauses, sport segments, cadence and power.
• Wellness information may include daily activity and energy, heart rate, sleep duration and stages, overnight heart-rate variability, Suunto sleep scores, resources, stress state and available blood oxygen measurements, with their source and recording dates.
• Connection identifiers, encrypted access and refresh tokens, sync progress and error information support account access, history recovery and duplicate prevention. If you enable planned workouts, MOTRA sends session instructions, targets and scheduled local dates to Suunto and stores the identifiers needed to update or remove MOTRA-created Guides.

MOTRA uses these data for workout history, the existing Effort Points and reward-eligibility process, recovery information and coaching. Suunto-native scores remain labelled by source. Overnight HR is not treated as resting HR, and an unverified HRV measurement is not substituted for SDNN. Daily activity does not separately earn workout Effort Points.

Imported information is stored in Google Cloud/Firebase. Relevant activity or wellness context may be processed by OpenAI when you use Coach features that rely on it, subject to your Coach consent. Credentials, health readings, routes and precise location are excluded from product analytics. MOTRA does not sell Suunto data or share it for advertising, brokerage or resale.

Disconnecting stops new imports and removes MOTRA's stored credentials. MOTRA attempts to remove its planned Guides and revoke access; if Suunto cannot confirm this, MOTRA explains the remaining action in your Suunto account. Imported history remains until deleted. Deleting your MOTRA account removes imported Suunto data, connection information and pending work through our account-deletion process, subject to this policy's legal retention exceptions. It does not delete your Suunto account. Contact support@motraapp.com to request deletion of specific imported information.

HUAWEI Health Data

Where Huawei integration is available, MOTRA reads HUAWEI Health data only after you connect and authorise the requested access. You choose workouts, wellness and supported running-course export separately. Availability depends on your device, account region, permissions and the information shared with HUAWEI Health cloud services.

Authorised information may include workout times and types, detailed heart rate, distance, routes, laps and pauses; daily activity, sleep, resting heart rate and Huawei HRV measurements. We also process connection identifiers, encrypted credentials, permission choices and sync status to secure access, recover missing imports and prevent duplicate workouts. Course export sends supported session instructions and targets to Huawei and stores the identifiers needed for updates.

We use this information for workout history, existing Effort Points and reward eligibility, recovery information and personalised training. Huawei RMSSD remains labelled separately from MOTRA's SDNN signal. Imported data is stored in Google Cloud/Firebase; relevant context may be processed by OpenAI when you use Coach, subject to your Coach consent. Health readings, routes and credentials are excluded from optional product analytics. We do not sell Huawei data or share it for advertising or data brokerage.

Disconnecting stops new imports and removes MOTRA's connection credentials. Imported history remains until deleted. If revocation cannot be confirmed, remove MOTRA from HUAWEI Health or your Huawei account settings. Exported courses may require removal in HUAWEI Health. Deleting your MOTRA account removes imported personal data and pending work through our account-deletion process, subject to the legal retention exceptions in this policy; it does not delete your Huawei account. Contact support@motraapp.com to request deletion of specific imported information.

7. Your Rights

Under applicable data protection laws, particularly if you are in the UK or EEA, you have certain rights regarding your personal data. We make it easy to exercise these rights. You can:

• Right to Access: Ask what personal data we hold about you and receive a copy of your data.
• Right to Rectification: Request correction of any incomplete or inaccurate information we hold about you.
• Right to Erasure (Right to be Forgotten): Request deletion of your account and personal data where there is no good reason for us to continue processing it. If we decline to delete, we will provide reasons.
• Right to Restriction of Processing: Ask us to suspend the processing of your personal data under certain conditions.
• Right to Data Portability: Request to receive your data in a structured, commonly used, and machine-readable format and to transmit it to another service provider where technically feasible.
• Right to Object to Processing: Object to the processing of your personal data where we are relying on a legitimate interest as our lawful basis.
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on it to process your data, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: Lodge a complaint with a supervisory authority (e.g., the Information Commissioner's Office in the UK) if you believe our processing of your personal data infringes data protection law.

To exercise any of these rights, please go to your account settings or contact us directly at support@motraapp.com

8. Cookies & Analytics

MOTRA uses only essential storage unless you choose to share optional app-use and diagnostic data. The iOS and Android apps keep Google Firebase Analytics, Crashlytics, and Performance Monitoring disabled until you make that choice. You can change it later under Data Sharing in MOTRA Settings.

When enabled, this optional measurement helps us understand where setup is confusing, which app features are useful, where consenting installations become inactive, and where crashes or slow operations occur. It may include screen names, feature actions and outcomes, session timing, app and operating-system versions, device category, crash diagnostics, performance timing, and country or territory inferred by the service. Google Firebase processes this information on MOTRA's behalf.

Optional product analytics never includes your name, email address, MOTRA account identifier, Apple Health or Health Connect readings, workout or route details, precise location, MOTRA Coach messages, feedback text, wallet addresses, balances, amounts, or transaction identifiers. MOTRA does not use this information for advertising, cross-app tracking, or data brokerage.

Independently of that optional setting, MOTRA records the limited service operations events described in Section 2 when needed to deliver, secure, and troubleshoot the service. These operational records are not used for advertising or cross-app tracking and do not contain the optional screen-by-screen app-use stream.

The types of browser storage we may use include:

• Strictly Necessary Cookies: Essential for the operation of the app.
• Analytical/Tracking Cookies: Allow us to understand app usage and measure effectiveness.

You can control or block cookies through your device or browser settings. We ask for consent before using non-essential storage where required. Declining optional mobile-app analytics and diagnostics does not limit MOTRA's core functionality.

9. Age Limits

MOTRA is only for users aged 16 and over. Our services are not intended for children under this age, and we do not knowingly collect personal data from anyone under 16. If we become aware that we have collected personal information from someone under this age, we will promptly delete that information and terminate the account. If you believe we have collected personal information from someone under the age of 16, please contact us.

10. Changes to Our Privacy Policy

If we make material changes to how we treat our users' personal data or if we change this policy, we'll let you know clearly and directly. We will post any changes to our Privacy Policy on this page with an updated date at the top, and if significant changes are made, we will notify you by email or through a prominent notice within the app. You are responsible for ensuring we have an up-to-date email address for you and for periodically reviewing this Privacy Policy for any updates.

11. Questions?

If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy or otherwise need to contact us, please email us at support@motraapp.com