Privacy Policy

What stays on your device

Motivator processes and stores the following in its local app container:

• Completed runs, including distance, duration, pace, splits, calories, route, pauses, and any name or notes you add.
• Training plans, coach comments, pace samples, preferences, and recovery information.
• Up to three photos you choose for a run.
• Cached coach audio, which is bounded and expires automatically.

Motivator does not operate a cloud backup or sync service for this detailed history. It does not send your route coordinates, photos, heart rate, or full run history to the developer’s servers.

Apple Health and location

With your permission, Motivator reads past running workouts to compare today’s run with your recent history, reads available live heart rate and active energy, and writes completed running workouts and routes to Apple Health. Only a rounded comparison derived from recent running may be included in an online coaching request; the underlying Health workout is not uploaded.

Precise location is used while an outdoor run is active, including in the background, to calculate distance and pace and save your route locally and to Apple Health. Coordinates are never included in online coaching or analytics requests.

Health and location access are optional, although the features that depend on them will not work without permission. Motivator does not use Health or location data for advertising and does not sell it.

Online coaching

For a personalised generated coach voice, Motivator sends a short, bounded request to its coaching service hosted by Supabase in the EU. The request may include elapsed time, distance, pace, the coaching event, selected coach, preferred units, a small number of recent coach lines, limited running-history comparisons, and limited context about today’s planned session.

The service sends the bounded request to OpenRouter to generate a coach line, then sends only that line to either ElevenLabs or Deepgram to create speech, according to the coach you selected. Requests do not include your name, email address, contacts, advertising identifier, route coordinates, photos, Health identifiers, or free-form run notes. Technical request records may be processed for authentication, security, entitlement verification, reliability, and rate limiting, but are not stored as a copy of your run history.

Anonymous account

Motivator creates an anonymous Supabase account when it prepares a subscription purchase or first requests a generated coach voice. The account is a random identifier and contains no name, email address, password, or profile information. It is used to protect the coaching service from abuse, count introductory voice runs, and connect a purchase to the correct anonymous entitlement.

You do not register or provide credentials to Motivator. The anonymous account is not a cross-device social or login profile.

Subscriptions and RevenueCat

Apple processes purchases and payment details through the App Store. Motivator uses RevenueCat to load subscription options, complete and restore purchases, and determine whether Motivator Premium is active. RevenueCat may process an anonymous app user identifier, App Store product and transaction or receipt information, and technical app, device, and network information needed to provide and secure those services.

Before a purchase, Motivator associates RevenueCat with the same random identifier used by the anonymous coaching account. Motivator does not give RevenueCat your name, email address, payment-card details, route, photos, Health data, run history, or coaching words. RevenueCat is not used for advertising or cross-app tracking. Apple remains responsible for billing and subscription management. See RevenueCat’s privacy policy and Apple’s privacy policy for their own processing practices.

Optional anonymous analytics

Analytics is off until you make an explicit choice after onboarding. If you opt in, Motivator’s first-party analytics client sends a small, fixed set of product interactions to PostHog’s EU service. Examples include opening the app, completing onboarding, choosing a coach, starting or finishing a run, reaching a first split, viewing the paywall, and completing a purchase.

Events may include categorical context such as coach, free or premium tier, coaching frequency, whether a run was planned, or subscription period. They never include route or coordinates, Health data, heart rate, pace, distance, duration, coaching words, notes, photos, your name or email address, or the Supabase account identifier.

A random installation identifier is created only after consent. PostHog is instructed not to create a person profile and not to derive location from your IP address. You can turn analytics off at any time in Settings → Data & privacy; doing so deletes the analytics identifier stored by Motivator. Motivator does not include the PostHog SDK, session replay, autocapture, advertising, or cross-app tracking. See PostHog’s privacy notice for its own processing practices.

Notifications and other Apple services

If you enable training reminders, Motivator stores the schedule locally and asks iOS to deliver the notifications. Apple also processes information when you use HealthKit, Maps, Live Activities, iCloud device backup, or the system share sheet. Sharing occurs only when you choose it.

Deleting your data

In Settings → Data & privacy, Delete local run history removes local runs, photos, recovery data, and saved coach audio. Delete account and all data also asks the coaching service to delete the anonymous account and its associated service data. Turning analytics off separately deletes Motivator’s local analytics identifier.

Apple Health workouts remain in the Health app and must be managed there. Subscription and transaction records remain subject to Apple’s and RevenueCat’s legal and operational retention requirements. Removing the app may not remove data held in iCloud device backups that you control.

Security, children, and changes

Motivator relies on Apple’s app sandbox, uses iOS data protection for sensitive local files, and sends network requests over encrypted HTTPS connections. No storage or transmission method can be guaranteed completely secure.

Motivator is not directed to children under 13 and does not knowingly collect personal information from them. Material changes to this policy will be reflected in the effective date and, where appropriate, in release notes.