Full Privacy Policy

Effective date: July 29, 2026 · Version 1.0

This is the complete privacy notice. A plain-language summary lives at /privacy. If anything here conflicts with the summary, this document controls.

1. Who We Are

Motive LLC, a Utah limited liability company (“Motive,” “we,” “us,” or “our”), operates the mōtive mobile application, the joinmotive.app website, and any related services (the “Service”). This Privacy Policy explains what information we collect, how we use and share it, and the choices available to you.

This Privacy Policy applies to information collected through the Service. It does not apply to information collected by third-party services (such as Apple, Google, Supabase, PostHog, Sentry, and Resend) except as described in this Policy. For our full contract terms, see the Full Terms of Service.

2. Information We Collect

Plain-English summary: The information you give us (email, profile photo, city, phone, Instagram handle, event content, messages), the information we collect automatically when you use the app (device, IP, usage), one selfie for identity verification, and profile info from Google or Apple if you sign in that way.

2.1 Information you provide directly.

• Account and profile information: email address, display name, age, city, bio, interests, profile photo, and optional phone number and Instagram handle;
• Verification Selfie: a short selfie image submitted at signup to confirm you are a real person consistent with your profile photo (biometric information — see Section 8);
• Event and social Content: Events you create or RSVP to, messages you post in event group chats or direct messages, and other Content you share on the Service;
• Communications with us: when you email us, report a problem, or submit feedback.

2.2 Information collected automatically.

• Device information: device type, operating system, browser, language, and (where you grant permission) push notification tokens;
• Log and usage information: IP address, general location inferred from IP, timestamps, pages and screens viewed, actions taken, and diagnostic data;
• Cookies and similar technologies: essential cookies to keep you signed in. We do not use advertising cookies or cross-site tracking cookies.

2.3 Information from third parties.

• OAuth providers. If you sign in via Google or Apple, we receive the profile information the provider makes available (typically name, email, and profile photo).

3. How We Use Information

We use information for the following purposes:

• To provide the Service — creating and maintaining your Account, showing you Events, delivering messages, and enabling other features you use;
• Safety and moderation — reviewing Content and conduct, investigating reports, verifying identity via the Verification Selfie, and enforcing our Terms and Community Guidelines;
• Product improvement — analyzing usage in aggregate to understand how the Service is used and where users get stuck;
• Communications — sending transactional messages about your Account, events, chats, and safety; sending occasional product updates (which you can opt out of);
• Legal and compliance — complying with law, enforcing our agreements, protecting rights, and responding to lawful requests.

4. Legal Bases for Processing

Where required by applicable law (such as the EU/UK GDPR), we rely on the following legal bases: (a) contract — to provide the Service you have requested and to take steps at your request before entering into a contract; (b) legitimate interests — to secure the Service, prevent fraud, moderate Content, and improve our product, provided those interests are not overridden by your rights; (c) consent — for the Verification Selfie, marketing communications, and other processing for which we ask your consent; and (d) legal obligation — to comply with law.

5. How We Share Information

Plain-English summary: We share information with other Users when you post something visible to them, with the third-party service providers that help us run the app, when the law requires it, and if the company is ever acquired. We do not sell your data. We do not run advertising.

5.1 With other Users. Your public profile (display name, age, city, bio, interests, profile photo, and verification status) is visible to other Users. Your Events, RSVPs, and messages in an Event's group chat are visible to other participants. Your direct messages are visible to the recipient. Your phone number and Instagram handle are visible only to Users you have accepted as friends.

5.2 With service providers (subprocessors). We share information with third-party service providers under contractual terms that limit their use of the information to providing services to us. Our current subprocessors include:

• Supabase — hosted Postgres database, storage, and authentication (United States);
• Vercel — application hosting and edge network (United States);
• PostHog — product analytics (United States);
• Sentry — application error monitoring;
• Resend — transactional email delivery;
• Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) — push notification delivery;
• Google and Apple — sign-in via OAuth, if you choose those methods.

5.3 For legal reasons. We may share information with law enforcement, government agencies, or other third parties when we believe in good faith that disclosure is required by law, necessary to enforce our Terms, or necessary to protect the rights, property, or safety of Motive, our Users, or the public.

5.4 Business transfers. If Motive is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. We will provide notice before information becomes subject to a different privacy policy.

5.5 Aggregated or de-identified information. We may create and share aggregated or de-identified information that cannot reasonably be used to identify you, for any purpose.

5.6 No sale of personal information. Motive does not sell personal information as that term is defined under the California Consumer Privacy Act or any comparable state law. Motive does not share personal information for cross-context behavioral advertising.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, unless a longer retention period is required by law. Specific retention periods include:

• Account and profile data: retained while your Account is active. When you delete your Account, this data is deleted or de-identified within thirty (30) days, except information required to comply with law, resolve disputes, or enforce our agreements;
• Event and chat Content: retained while the related Event exists and for up to ninety (90) days after the Event ends;
• Direct messages: retained until the earlier of deletion by the sender, deletion by the recipient, or thirty (30) days after either party's Account is deleted;
• Verification Selfies: approved selfies are deleted ninety (90) days after review; rejected selfies are deleted fourteen (14) days after review. The moderation decision (approved / rejected) is retained as an audit record;
• Application error logs (Sentry): up to thirty (30) days;
• Analytics events (PostHog): up to twelve (12) months;
• Backups: data may persist in encrypted backups for a short period after primary deletion and will be overwritten in the normal backup rotation.

Retention periods may be extended where required by law, in response to legal process, or to enforce our agreements.

7. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information:

• Access — request confirmation that we process your information and a copy of it;
• Correction — request that inaccurate information be corrected;
• Deletion — request deletion of your information;
• Portability — request a copy of your information in a machine-readable format;
• Objection or restriction — object to or ask us to restrict certain processing;
• Withdrawal of consent — withdraw consent for processing based on consent, without affecting the lawfulness of processing before withdrawal;
• Opt out of marketing — opt out of marketing communications through the unsubscribe link in those emails or by writing to us.

You can exercise many of these rights directly in the app: edit your profile, delete Content, unfriend or block Users, and delete your Account via the account deletion page. For requests we cannot fulfill in-app, email info@joinmotive.app. We may need to verify your identity before fulfilling a request. Where applicable law provides for appeals, we will describe the appeal process in our response to your request.

8. Biometric Information — Verification Selfies

Plain-English summary: The selfie you submit at signup is used only to verify you're a real person matching your profile photo. It is not used for training, marketing, or resale. It is deleted after review.

The Verification Selfie may constitute biometric information under certain state laws (such as the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, and the Washington Biometric Privacy Act). By submitting a Verification Selfie, you consent to Motive's collection, use, and storage of the image for the exclusive purpose of identity verification during Account signup. Motive will not sell, lease, trade, or otherwise profit from the Verification Selfie, and will not use it to train facial-recognition or machine-learning models. Retention periods are described in Section 6.

9. Children's Privacy

The Service is intended solely for individuals eighteen (18) years of age or older. We do not knowingly collect personal information from children under 13 (or under the applicable age of consent in your jurisdiction). If we learn that we have collected personal information from a child, we will delete it promptly. Parents or guardians who believe their child has provided information to us may contact safety@joinmotive.app. See also our Child Safety Standards.

10. State-Specific Rights (U.S.)

10.1 California (CCPA / CPRA). California residents have the right to know what personal information we collect, use, disclose, and sell or share; to request deletion or correction of their personal information; to opt out of the “sale” or “sharing” of personal information (Motive does not sell or share personal information for cross-context behavioral advertising); and to limit the use of sensitive personal information. California residents will not be subject to discrimination for exercising these rights. To submit a request, email info@joinmotive.app. An authorized agent may submit a request on your behalf with appropriate authorization.

The categories of personal information we collect are described in Section 2; the purposes of use are described in Section 3; recipients are described in Section 5; and retention is described in Section 6.

10.2 Other states. Residents of Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Texas (TDPSA), and other states with comprehensive privacy laws have similar rights of access, correction, deletion, and portability, and the right to opt out of targeted advertising, the sale of personal information, and certain profiling. Motive does not engage in targeted advertising or the sale of personal information. To exercise your rights, email info@joinmotive.app.

11. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, processed, and stored in the United States. Where applicable, we rely on standard contractual clauses or other approved transfer mechanisms for cross-border transfers.

12. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, encryption at rest through our infrastructure providers, access controls, and application-layer authorization (row-level-security policies). No system is completely secure; we cannot guarantee that unauthorized access, disclosure, or loss will never occur. In the event of a breach affecting your personal information, we will notify you and applicable authorities as required by law.

13. Automated Decision-Making

We use automated systems to help detect spam, abuse, and policy violations, but decisions with a significant effect on you (such as Account suspension or termination) are reviewed by a human moderator before they are enforced. You may contact info@joinmotive.app to request human review of a decision that affects you.

14. Third-Party Links and Services

The Service may contain links to third-party websites, services, or content that we do not own or control. This Privacy Policy does not apply to those third parties; their practices are governed by their own privacy policies.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email at least thirty (30) days before the changes take effect, unless a shorter period is required by law. The effective date at the top of this Policy indicates when it was last revised.

16. Contact Us

Privacy requests and questions: info@joinmotive.app
General inquiries: info@joinmotive.app
Safety concerns: safety@joinmotive.app

Motive LLC · Utah, United States