Privacy Policy
Minn Studio ("we", "us", or "our") operates the Motavi mobile application and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here. If you do not agree, please discontinue use of the Service.
Information We Collect
Account & Authentication Data
When you create an account or sign in, we collect the information you provide or that your chosen identity provider shares with us. Depending on the sign-in method, this may include:
- Email & password sign-in: your email address and a securely hashed password, managed by Firebase Authentication.
- Google Sign-In: your Google account email address, display name, and profile photo URL, as authorized by you through Google's OAuth flow.
- Sign in with Apple: your Apple ID email address (or the private relay address Apple generates on your behalf) and display name, as authorized by you.
We do not store your raw password. Firebase Authentication handles credential management in accordance with Google's security standards.
Goal & App Usage Data
Motavi is a goal-tracking application. When you use the Service, we store the goals, milestones, notes, and progress records you create. This content is associated with your account and is used solely to provide and improve the core features of the Service. We do not sell or share your goal data with third parties for advertising purposes.
Subscription & Purchase Data
If you subscribe to a paid plan, in-app purchases and subscription management are processed through Apple App Store or Google Play Store. Payment processing is handled by RevenueCat, our subscription management platform. We receive from RevenueCat anonymized subscriber identifiers, entitlement status (e.g., active, expired, trial), subscription tier, and renewal information. We never receive, process, or store your full payment card details or billing address — those remain with Apple, Google, or your payment provider.
Analytics & Diagnostic Data
We use Firebase Analytics to collect aggregated, pseudonymous usage data such as which features are used, session lengths, screen flows, and in-app events. We use Firebase Crashlytics to collect crash reports and diagnostic information (device model, OS version, stack traces) that help us identify and fix bugs. This data is linked to a randomly generated analytics identifier, not directly to your name or email address. You may opt out of analytics collection through your device's privacy settings.
Device & Log Data
When you access the Service, we may automatically collect certain technical information, including your device type, operating system version, app version, locale, time zone, and general network information. This data is used for compatibility testing, performance monitoring, and fraud prevention.
Information We Do Not Collect
We do not collect, store, or process audio recordings, photos, videos, or other media files from your device. The Service does not request access to your microphone, camera, or media library. We do not collect precise GPS location data or access your contacts.
How We Use Your Information
We use the information we collect for the following purposes:
- Providing the Service: authenticating your identity, syncing your goals and progress across devices, and delivering features you have access to based on your subscription tier.
- Subscription management: verifying your entitlements through RevenueCat and unlocking or restricting premium features accordingly.
- Improving the Service: analyzing aggregated usage patterns and crash reports to prioritize features, fix bugs, and optimize performance.
- Customer support: responding to your inquiries, diagnosing issues you report, and communicating important updates about the Service.
- Security & fraud prevention: detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other misuse of the Service.
- Legal compliance: meeting applicable legal obligations, responding to lawful requests from authorities, and enforcing our Terms of Service.
We do not use your personal information to serve targeted third-party advertisements, build advertising profiles, or sell your data to data brokers.
Data Storage & Security
Remote Storage
Account information and synced goal data are stored in Google Firebase (Firestore and Firebase Authentication), hosted in Google Cloud data centers. Firebase infrastructure is certified to ISO 27001, SOC 1, SOC 2, and SOC 3 standards. Data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256.
Local Storage on Your Device
The app uses Hive (a lightweight NoSQL database) and SharedPreferences to cache data on your device for offline access and to store non-sensitive user preferences (such as theme settings, onboarding state, and notification preferences). This local data remains on your device under the protection of the operating system's app sandboxing. Uninstalling the app removes this locally stored data.
Data Retention
We retain your account data and associated content for as long as your account remains active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention, dispute resolution, or legal compliance.
Security Practices
We implement administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure. We encourage you to use a strong, unique password and to protect access to your device.
Third-Party Services
The Service relies on the following third-party providers. Each has its own privacy policy that governs how they handle data on our behalf:
| Provider | Purpose | Data Shared |
|---|---|---|
| Firebase Authentication | Account identity & sign-in | Email address, auth tokens |
| Firebase Firestore | Cloud data storage & sync | Goal data, account metadata |
| Firebase Analytics | Usage analytics | Pseudonymous usage events, device info |
| Firebase Crashlytics | Crash & error reporting | Crash logs, device model, OS version |
| RevenueCat | Subscription management | Anonymous subscriber ID, entitlement status |
| Apple / Google | Payment processing & SSO | Governed by Apple / Google privacy policies |
We do not share your personal information with any other third parties except (a) with your explicit consent, (b) to comply with legal obligations, (c) to protect the rights and safety of Minn Studio or others, or (d) in connection with a merger, acquisition, or sale of assets (in which case you will be notified via email or prominent notice within the Service).
For more information on how our third-party providers handle data, please refer to their respective privacy policies: Firebase Authentication, Firebase Firestore, Firebase Analytics, Firebase Crashlytics, RevenueCat.
Your Rights
Depending on your country or region of residence, you may have certain rights regarding your personal information. These include:
- Access: you may request a copy of the personal data we hold about you.
- Correction: you may request that we correct inaccurate or incomplete personal data. You can update your display name and email address directly within the app's account settings.
- Deletion: you may request deletion of your account and associated personal data. You can delete your account directly in the app, or by contacting us at minndevstd@gmail.com. We will process your request within 30 days.
- Portability: you may request an export of your personal data in a structured, machine-readable format.
- Objection & restriction: in certain circumstances, you may object to or request restriction of our processing of your personal data.
- Opt-out of analytics: you may limit ad tracking and analytics on iOS via Settings → Privacy & Security → Tracking, and on Android via Settings → Google → Ads. Crashlytics can be disabled on iOS via Settings → Privacy & Security → Analytics & Improvements.
To exercise any of these rights, please contact us at minndevstd@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.
Children's Privacy
The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction — 16 in certain European countries). We do not knowingly collect personal information from children. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at minndevstd@gmail.com and we will promptly delete the information and, if applicable, the associated account.
International Data Transfers
Minn Studio operates globally and your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other countries where our third-party service providers maintain facilities. When we transfer data across borders, we rely on appropriate transfer mechanisms recognized by applicable law, such as Google Cloud's and RevenueCat's standard contractual clauses. By using the Service, you acknowledge that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your home country.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notice to the email address associated with your account or displaying a prominent in-app notification. We encourage you to review this policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: