Privacy Policy

Motion (“Motion,” “we,” “us”) is an AI-powered local adventure-planning app operated by Motionflow Labs LLC. This policy explains what information we collect when you use Motion, why we collect it, who we share it with, and the choices you have.

Account information. When you sign up, we collect your email address and, if you use Google Sign-In, your name and profile photo as provided by Google. If you sign up with email and password, your password is handled entirely by our authentication provider (Supabase) — we never see or store it ourselves.

Profile and preferences. Display name, home city, currency, and planning preferences (dietary needs, standing filters) you choose to set.

Content you create. Adventures you generate or build, saved places and albums, photos you upload, comments, reviews, and any notes you add. If you make an adventure public, its content (title, description, stops, and any photos you attach) is visible to other users.

Location input.The city, neighborhood, or zip code you type in when planning — we do not access your device's precise GPS location unless a specific feature asks for it and you grant permission.

Usage data.Basic product-analytics events (which features you use, general navigation) if analytics is enabled for your session, so we can understand what's working and fix what isn't.

Social features.Friend connections, invites, and any adventures you're invited to.

• To generate and personalize your adventure itineraries
• To operate your account: authentication, saved content, your friend graph
• To show you real places (hours, photos, ratings) alongside AI-generated plans
• To send account-related email: confirmation, password reset, sign-in links
• To moderate reported content and keep the community usable
• To understand product usage and improve the app

We do not sell your personal information. We do not use your content to train third-party AI models beyond the single request needed to generate your plan.

Motion is built on top of a small set of third-party services, each doing one job. We share only what each one needs to do that job:

• Supabase — our database, authentication, and file storage provider. Your account data, content, and uploaded photos are stored here.
• OpenAI— when you generate an adventure, your filters (location, vibe, budget, preferences) are sent to OpenAI's API to produce the itinerary. OpenAI processes this request but it is not used to identify you personally.
• Google Places API — we look up real businesses (names, hours, photos, ratings) to build and verify your itinerary stops. Your search location is sent to Google for this lookup.
• Google OAuth— if you choose “Continue with Google” to sign in, Google shares your basic profile (name, email, photo) with us, governed by Google's own privacy policy.
• Ticketmaster— event listings shown in Discover come from Ticketmaster's public event data.
• Resend — our email provider, used only to deliver account emails (confirmation, password reset, sign-in links) to the address you registered with.
• PostHog— optional, privacy-conscious product analytics, if and when it's enabled. It is not active by default and collects usage events, not your content.

We do not share your information with data brokers or advertisers. We may disclose information if required by law, or to protect the rights, safety, or property of Motion or our users.

Motion uses the minimum cookies needed to keep you signed in (managed by Supabase Auth) and, if analytics is enabled, a small number of analytics cookies. We don't use third-party advertising cookies.

We keep your account and content for as long as your account is active. You can delete your account at any time from Settings — this removes your profile, saved content, and personal data from our systems, aside from anything we're legally required to retain (such as records needed for tax or fraud-prevention purposes). Content you made public and that other users saved or interacted with may persist in an anonymized form.

• Access, update, or correct your profile information at any time in Settings
• Delete individual pieces of content (adventures, places, photos) whenever you want
• Delete your entire account, which removes your personal data as described above
• Turn a public adventure private, removing it from Discover
• Contact us to ask what data we hold about you

If you're in the EU/UK or California, you may have additional rights under GDPR or CCPA (such as data portability or the right to know what categories of data are collected) — contact us and we'll help.

Motion is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we'll remove it.

We rely on Supabase's infrastructure (encrypted storage, row-level security policies scoping every table to its owner) to protect your data. No method of storage or transmission is 100% secure, but we take reasonable steps to protect your information.

We may update this policy as Motion changes. If we make material changes, we'll update the date at the top of this page. Continuing to use Motion after a change means you accept the update.

Questions about this policy or your data: reach us at privacy@motionflow.app.