Privacy
Motus keeps your fitness numbers so it can show them back to you. It doesn't sell them, show ads or use trackers.
Last updated 4 November 2026.
What Motus keeps
- Account Your email (to send sign-in codes), and the name, username, picture and goals you choose.
- Your numbers What you connect or import: steps, energy, food, protein, weight and sleep from Apple Health; workouts from Hevy or files; and from WHOOP, sleep, recovery (score, HRV, resting heart rate), strain, cycle steps and workouts.
- Connections Your Hevy API key and WHOOP sign-in tokens, kept encrypted. Shortcut and ChatGPT links, sign-in codes and sessions are kept only as hashes. Motus never sees your WHOOP password.
- Not kept No location, contacts, heart rate from Apple Health, medical records, analytics or advertising IDs. The only cookie is your sign-in.
What it's used for
- Your dashboard Charts, weeks, workouts, suggestions and boosts, worked out from your own numbers.
- Ask When you ask a question, your numbers are sent with it to the AI model that answers (on Cloudflare Workers AI, or Anthropic's Claude). Motus doesn't store your questions.
- Nothing else No selling, renting or sharing for ads, and no training of AI models on your data.
Who else sees it
- Friends People you accept as friends see your dashboard. If you make your profile public, people signed in to Motus can too. Nobody sees your email or connections.
- ChatGPT, Claude Only if you connect them: they can then read your numbers and log your weight, under their own privacy policies. Disconnect any time in Profile.
- Services Motus runs on Cloudflare (hosting, database, Ask), Anthropic (when Claude answers Ask) and Brevo (sends the sign-in emails; Google's Gmail if Brevo is down). Motus asks Hevy and WHOOP for your data only with your permission.
Your control
- Disconnect Profile → Integrations: disconnecting WHOOP revokes Motus's access at WHOOP and deletes its data from Motus; disconnecting the Shortcut cancels its token.
- Delete Email the address below from your account's email: your account and everything in it are deleted, and WHOOP's access revoked, within 30 days.
- How long Your data stays until you remove it or delete your account. Sign-in codes expire in minutes; unused sessions are dropped after about a year.
- Security Everything travels over HTTPS. Connection keys are kept encrypted, and sign-in codes, sessions and links only as hashes.
Questions
Email poweredbyvisualizing@gmail.com. If this page changes, the date above changes with it.