Motion privacy information

The five apps share one Motion account. Your email address and password go to Supabase Auth for sign-up, sign-in, email confirmation and password recovery; an optional display name is stored in your Motion profile. A random account ID links your session and app access. The apps do not put your password in practice history. Paid sales are disabled in the first release of all five apps. If subscriptions are enabled, an individual subscription is designed to cover its app and Motion+ all five.

Supabase Auth stores a salted password hash produced with bcrypt to verify your password. This authentication record is linked to your account and used for account sign-in and security.

Requests to Motion account services can add your IP address, user agent, operating system, platform and runtime versions, and request and authentication metadata to operational logs retained by Supabase and service providers. These are technical service details; the apps do not send a unique device ID. Provider logs also contain approximate country, region and city information based on the IP address. This location does not come from GPS, and the apps do not request location permission.

Log records can be associated with you through an account ID or IP address. Account and provider data are used for authentication, security, operating the service and investigating technical issues; they are not used for advertising or advertising tracking.

The apps cannot start subscription purchases in the first release. If paid membership is enabled later, the store product and transaction evidence are verified with Apple or Google. That flow is designed to store the app ID, store, product, transaction reference, entitlement status, and expiry/verification times against your account; a Google transaction reference can contain a purchase token. Verification requests go to the store provider. Motion does not receive your payment card details.

Camera coaching is disabled in the first release of all five apps; the courses do not require camera permission. Camera video is not recorded or uploaded to Motion servers. In Ostinato's guitar course, you choose to start optional single-note observation and grant microphone permission. The approximate note observation does not produce a correctness or mastery score or complete a lesson. Audio is processed only in device memory; raw audio files are not recorded or uploaded. The microphone stops when you stop observation, change account, or the screen or app leaves the foreground; returning does not restart it. You can complete the course without it; the other four Motion apps' first courses do not request microphone access. Reading, practice and self-reported course progress are not a camera skill score. Course progress and practice history created by an app stay in that app's local device storage; they are not synced to your Motion account. Guest history is not automatically moved into an account when you sign in. Motion account records are stored in its Frankfurt Supabase project, with HTTPS in transit. The apps contain no advertising or behavioral tracking SDK.

Motion products are being developed to support movement and practice. They are not medical devices; they do not diagnose, prescribe treatment, or give medical advice. If you have a health condition, consult your physician.

The applications are not directed at children and do not knowingly collect data from children.

You can view your account profile and correct your display name in the app. Send requests to access, correct or delete data to support@yulalab.com with your account email and app name. Applicable rights under Turkish data protection law (KVKK) and GDPR remain available.

If we update this policy we will change the date above. If there is a material change in how we handle data, we will notify you inside the application.

Data Controller: YULA Lab — Mustafa Kaan Koçak
Email: support@yulalab.com
Location: Türkiye