Privacy Policy
Version 1.1 · effective from July 12, 2026
1. Data controller
The controller of your personal data is Maksymilian Nowak, operator of the MotPat app (motpat.com). For matters concerning personal data you can contact us at motpat@proton.me.
2. What data we process
- Account data — email address and encrypted authentication credentials.
- Content — goals, steps, descriptions, settings and progress you enter in the App.
- League name — an optional nickname shown to other users in the ranking.
- Technical data — visit statistics, performance data and error reports.
- Analytics data — product-usage data, heatmaps and session recordings (form inputs are masked), collected via PostHog and Microsoft Clarity.
3. Purposes and legal bases of processing
- providing the service (running the account, saving goals and progress) — Art. 6(1)(b) GDPR (performance of a contract);
- ensuring security, detecting bugs and abuse, and developing the App — Art. 6(1)(f) GDPR (legitimate interest);
- analytics on how the App is used (statistics, heatmaps, session recordings) to improve it — Art. 6(1)(f) GDPR (legitimate interest); you can object at any time;
- sending streak reminder emails unless you disable them — Art. 6(1)(f) GDPR;
- fulfilling legal obligations (e.g. handling complaints) — Art. 6(1)(c) GDPR.
4. Processors (providers)
We use trusted providers that process data on our behalf solely to run the App:
- Supabase — database hosting and authentication (storing the account and Content).
- Vercel — App hosting and cookieless visit/performance analytics (Web Analytics, Speed Insights).
- Sentry — error and stability monitoring for the App.
- PostHog — product analytics, heatmaps and session recordings (data processed in the EU).
- Microsoft Clarity — heatmaps and session recordings.
- DeepSeek — AI model provider. When you use the “Motek” assistant, the text you enter is sent to DeepSeek to generate a response.
- Resend — sending emails (confirmations, password resets, reminders).
Some providers may process data outside the EEA — in that case it takes place on the basis of appropriate safeguards (e.g. standard contractual clauses).
5. Artificial intelligence (Motek)
The AI features send the text you enter to an external model provider (DeepSeek) to generate suggestions. Please do not enter sensitive or confidential data into the App.
6. Cookies
We use essential cookies needed for login and keeping your session. We also use analytics cookies and similar technologies (PostHog, Microsoft Clarity) to analyze how the App is used and to build heatmaps and session recordings. You can disable them in your browser settings.
7. Retention period
We keep account data and Content for as long as you have an account. After you delete your account in the App settings, the associated data is permanently removed. Error reports and technical statistics are kept for a limited time.
8. Your rights
Under the GDPR you have the right to:
- access your data and obtain a copy of it;
- rectify, erase or restrict processing;
- data portability;
- object to processing based on legitimate interest;
- lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO).
To exercise these rights, write to us at motpat@proton.me. You can also delete your account yourself in the App settings.
9. Security
We apply technical and organizational measures to protect data, including encrypted transmission (HTTPS) and database access controls (row-level security).
10. Changes to this policy
We may update this Policy, e.g. due to the App's development or changes in law. We will notify you of material changes in the App or by email.