1. Summary
MotiveX is an iOS fitness and habit app featuring HealthKit-powered step and active energy tracking, XP/streaks/levels gamification, leagues and duels, and an optional AI coach. We process aggregated activity metrics, manual and custom activities, account and profile information, and (only if you enable it) AI coach messages and activity summaries. We do not use advertising, analytics, or crash-reporting tools, do not collect usage statistics, and never sell or rent your personal or health data.
2. Data we collect
We collect only what is needed to run the service:
- Health Data: Steps, active energy, and other health metrics from Apple HealthKit. Raw health records stay on your device in HealthKit. Aggregated activity metrics (daily and hourly step totals, active energy, and distance and pace for the Live Activity) and progress derived from them (XP, streak, league points) sync to your account (Firebase Firestore) encrypted in transit and at rest.
- Activity Data: Manual activity logs and custom activities you create, plus activity multipliers and preferences, synced to Firebase Firestore (encrypted in transit and at rest) for cross-device access.
- Account Information: Email address and authentication data via Firebase Authentication (including Sign in with Apple and Google Sign-In).
- Profile and Social Information: Optional display name and profile photo (stored with your account if uploaded). Your display name, profile photo, and step totals are visible to other users in the leagues, duels, and friend lists you join.
- AI Coach Data (optional): If you explicitly enable the AI coach, the messages you write and an activity summary (step count and goal, streak, level, recent activities, your goals, league, program and challenge status, notes the coach remembers about you, and your mood if shared) are sent to Google Gemini API to generate replies.
- Subscription Status: Processed via Apple App Store purchases and RevenueCat.
- Usage and Location Data: We do not use advertising, analytics, or crash-reporting tools, and we do not collect usage statistics. Your location is used only on your device to keep the Live Activity up to date and is never sent anywhere.
3. How we use your data
We use your information for the following purposes:
- To provide and improve our services.
- To calculate your XP, levels, streak, league points, and progress.
- To sync your data across devices.
- To provide personalized motivational messages and AI coach replies based on your mood, activity summary, and goals.
- To track goal progress, leagues, duels, and achievements.
4. Legal bases (GDPR)
Performance of a contract (Art. 6(1)(b)) to provide the core app, sync, leagues, and duels; explicit consent (Art. 9(2)(a) and Art. 6(1)(a)) given when granting Apple HealthKit permissions and before enabling the optional AI coach; legitimate interests (Art. 6(1)(f)) for service security and integrity; and legal obligations (Art. 6(1)(c)).
5. Who we share data with
We do not sell or rent your personal data. Your data is shared only with the service providers listed below, solely to provide the MotiveX service:
- Google Firebase (Firestore, Authentication, App Check, Cloud Functions) — account management, cross-device data synchronization, and server operations.
- Google Sign-In — authentication if you sign in with your Google account.
- Google Gemini API — generates AI coach replies (only if you turn on the AI coach and grant explicit permission).
- RevenueCat — subscription status management.
- Upstash — short-lived cache for activity history and profile summaries.
- Apple — Sign in with Apple, App Store purchases, and on-device HealthKit access.
6. HealthKit and your health data
MotiveX reads steps, active energy, and other health metrics from Apple HealthKit. Raw health records stay on your device in HealthKit. Our servers store only aggregated activity metrics (daily and hourly step totals, active energy, and distance and pace for the Live Activity) and the progress derived from them (XP, streak, league points), encrypted in transit and at rest, so your progress can be shown across devices. If you join leagues or duels, your step count is visible to other participants, and if you turn on the AI coach, your activity summary is sent to the coach as described in section 7. Your health data is never sold or used for ads; it is only used for the app's features (daily tracking, Coach, leagues, duels).
7. AI Coach and your data
Using the AI coach is optional, and we ask for your explicit permission before first use. If you allow it, the messages you write and an activity summary (step count and goal, streak, level, recent activities, your goals, league, program and challenge status, notes the coach remembers about you, and, if you shared it, your mood) are sent to the third-party AI provider Google (via the Google Gemini API) so the coach can reply. Your name, email address, and location are not sent. This data is processed only to generate the reply. If you do not allow it, the coach does not work, and the rest of the app is unaffected.
8. Location
Your location is used only on your device to keep the Live Activity up to date; it is never sent anywhere.
9. Data retention
How long your data is retained:
- Health Data: Raw health records remain on your device until you delete them via HealthKit; aggregated activity metrics on our servers are deleted when you delete your account.
- Activity Data: Retained until you delete your account.
- Account Data: Deleted immediately upon account deletion.
- Cached Data: Activity history and profile summaries in Upstash are stored only as a short-lived cache.
10. International transfers
Our service providers (Google, RevenueCat, Upstash, Apple) may process data outside Türkiye, including in the United States. Transfers rely on appropriate safeguards (such as Standard Contractual Clauses) and, where required, your explicit consent.
11. Your rights and account deletion
Under GDPR, KVKK, and applicable privacy laws, you have rights over your personal data:
- Access your data via the Export feature in Profile.
- Export your data in JSON format via the Export feature in Profile.
- Delete your account and all associated server data (aggregated health metrics, activity data, and account data are deleted upon account deletion).
- Opt out of data collection by not using the app, or refrain from enabling optional features such as the AI coach.
- Contact us at mustafa@mustafaevleksiz.com for any privacy questions or requests.
12. Children
MotiveX is not intended for children under 13. We do not knowingly collect data from children under 13.
13. Security
We safeguard your data using industry-standard security measures: aggregated health metrics and activity data are encrypted in transit and at rest in Firebase Firestore, account data is stored securely via Firebase Authentication, and server operations are protected with Firebase App Check.
14. Changes
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the Last updated date.
15. Contact
If you have questions about this Privacy Policy, please contact us at mustafa@mustafaevleksiz.com.