Privacy policy

The controller of your personal data is Carlos Villadiego, based at Mz 32 Lote 22, Barrio Rancho Grande, Montería, Córdoba (Colombia), owner of the Moti app and of the site motiapp.online.

You can write to us about any privacy matter at devcarlos93@gmail.com.

This policy is governed by Law 1581 of 2012 and Decree 1074 of 2015, which regulate the protection of personal data in Colombia. It covers the Moti mobile app and this website, but not third-party services you may reach from them, such as the app stores, which have their own policies.

Moti is designed to work with as little data as possible. These are the categories we may process:

Data you give us

• Goals and missions. The text you write describing what you want to achieve, the steps of each mission and any changes you make to them.
• Preferences. Active companion, length of sessions and breaks, sounds and ambiences, language and notification settings.
• Communications. The content of messages you send us when contacting support, including your email address.

Data generated by using the app

• Progress. Completed sessions, minutes focused, experience, level, streak and evolution stage of each companion.
• Technical and diagnostic data. Device model, operating system version, app version and crash reports. These are aggregated or pseudonymised wherever possible.

Purchase data

• Subscription status. Whether you have Premium active, which plan, and when it expires or renews.

We process your data only for the purposes listed below. Any other use would require asking you for a fresh authorisation.

• Providing the service: creating missions, timing sessions and saving your progress.
• Generating mission suggestions with artificial intelligence when you ask for them.
• Managing your subscription and verifying purchases with the relevant store.
• Answering your support enquiries and complaints.
• Detecting errors and improving app stability.
• Sending the reminder notifications you have enabled.
• Meeting legal, accounting and tax obligations.

We do not sell your personal data and we do not share it with third parties for advertising. We also do not build commercial profiles from your goals.

In Colombia, processing personal data generally requires the data subject's prior, express and informed authorisation. By creating your first mission and accepting this policy, you authorise us to process your data for the purposes described above.

We keep proof of that authorisation and can provide it to you on request, as article 8 of Law 1581 of 2012 allows.

You can revoke your authorisation at any time by writing to devcarlos93@gmail.com. Revocation does not affect the lawfulness of earlier processing, and in some cases we may keep certain data where a legal or contractual duty requires it, such as billing records.

When you ask Moti to break a goal into steps, the text you wrote is sent to a language model provider acting as a data processor, under contract and following our instructions. The provider returns a suggested mission and does not use your text to train its models.

The feature is optional: you can create your missions by hand, write the steps, reorder them and adjust the timings without any information leaving your device for this purpose.

Moti is a tool for organisation and focus. It is not a medical device and does not replace professional advice from a doctor, psychologist or educator.

We only share data with providers that deliver services necessary for Moti to work. They all act as data processors, following our instructions and contractually bound to protect the information:

• Apple and Google, for distributing the app and processing purchases and subscriptions.
• A cloud infrastructure provider, for hosting the service and its backups.
• A language model provider, for generating missions, as described in the section above.
• An error reporting provider, for diagnosing app failures.

We may also disclose data to public authorities, judges and courts where we are legally required to do so.

You can ask us at any time for the current list of processors by writing to devcarlos93@gmail.com.

Some of our providers are located outside Colombia, so your data may be transferred to other countries, mainly the United States and the European Union.

Article 26 of Law 1581 of 2012 prohibits transferring data to countries that do not offer adequate levels of protection, unless one of the exceptions applies — among them that the data subject has given express and unequivocal authorisation. By accepting this policy you authorise those transfers, which are in any case covered by data transmission contracts with each processor.

• Goals, missions, preferences and progress: for as long as you use Moti. If you delete the app or ask us to erase your data, it is deleted within a maximum of 30 days, except for backups, which are overwritten on their usual cycle.
• Support messages: for 12 months after the enquiry is resolved.
• Diagnostic data: a maximum of 90 days.
• Billing data: for the periods required by tax and commercial law, generally 6 years.

After those periods, data is deleted or irreversibly anonymised.

The security principle in article 4 of Law 1581 of 2012 requires us to protect your information against tampering, loss, or unauthorised access or use. Among other measures:

• encryption in transit via TLS for all communication with our servers;
• encryption at rest for databases and backups;
• role-based access control, following least privilege, with two-factor authentication for staff with access to production systems;
• access logging and periodic permission reviews;
• encrypted backups and restore testing;
• data minimisation: we do not ask for information the app does not need to work.

No system is invulnerable. If an incident affecting your data occurs, we will report it to the Superintendency of Industry and Commerce under article 17 of Law 1581 of 2012 and inform you directly where the risk justifies it.

If you find a vulnerability, we would be grateful if you wrote to us at devcarlos93@gmail.com before disclosing it publicly.

As the data subject, article 8 of Law 1581 of 2012 grants you the following rights:

• Know, update and rectify your personal data, particularly where it is partial, inaccurate, incomplete or misleading.
• Request proof of the authorisation you gave us, except where the law does not require it.
• Be informed, on request, about how we have used your data.
• File complaints with the Superintendency of Industry and Commerce for breaches of the law.
• Revoke your authorisation or request erasure of your data where the legal principles, rights and guarantees are not respected.
• Access free of charge the data that has been processed.

These rights may be exercised by the data subject, their successors, their representative or attorney, and those acting under a stipulation in favour of another. Exercising them is free.

To exercise any of those rights, write to us at devcarlos93@gmail.com giving your name, the reason for the request and a contact address. The deadlines are those set by law:

• Enquiries (article 14): we reply within a maximum of ten business days. If that is not possible, we will tell you why and when we will answer, no later than five business days after the first deadline expires.
• Complaints (article 15): we handle them within a maximum of fifteen business days, extendable by eight more business days, telling you the reason for the extension. If a complaint is incomplete, we will ask you to complete it within the following five days.

Processing the data of children and adolescents has reinforced protection in Colombia and is only lawful where it respects their best interests and fundamental rights, under article 7 of Law 1581 of 2012 and Constitutional Court judgment C-748 of 2011.

Moti is not aimed at minors. If you are under 18, you need authorisation from whoever holds parental responsibility or custody in order to use the app, and that person must give the processing authorisation on your behalf.

If we become aware that we have processed a minor's data without the corresponding authorisation, we will delete it. If you are a parent or legal representative and believe this has happened, write to us at devcarlos93@gmail.com.

We may update this policy to reflect changes in the app or in the law. The version in force is always the one published on this page, with its last-updated date in the header.

If a change substantially affects the purposes of processing, we will tell you inside the app and, where the law requires it, ask for a fresh authorisation before it takes effect.

For any question about this policy or about how your data is processed, write to us at devcarlos93@gmail.com.

You can also read our terms and conditions.