Privacy Policy

Last updated: 10 October 2026

1. Introduction

Motiweights Limited (“us”, “we”, or “our”) operates motiweights.com, the Motiweights mobile and web application, and the Motiweights system installed in participating gyms (together the “Service”).

This Privacy Policy explains how we collect, use, safeguard and disclose information that results from your use of our Service. For the purpose of this Privacy Policy, we are the Data Controller of your data. We store data in Supabase-managed infrastructure hosted in Singapore.

By using the Service, you agree to the collection and use of information in accordance with this policy. Our Terms of Service (“Terms”) govern all use of our Service and, together with this Privacy Policy, constitute your agreement with us.

2. Types of Data Collected

Account Data. When you create an account we collect the email address or phone number you sign in with and, if you sign in through a third-party sign-in provider, the information that provider shares with us.

Biometric Data. With your consent, we create a face template from photos you take in the app and use it to recognise you on the cameras of participating gyms. The photos are deleted once the template has been created. You can withdraw your consent at any time (see section 7). Face recognition is necessary for the Service: if you withdraw your consent, we delete your face template and you will not be able to use the Motiweights application until you give your consent again.

Camera and Movement Data. In participating gyms, the Service processes camera images in order to recognise enrolled members and to measure exercise. This applies to everyone in view of the cameras, including people who have not enrolled, although we do not store a face template for anyone who has not enrolled. Camera video is not retained in normal operation. We retain data derived from it, and we may share de-identified images with our Service Providers.

Training Data. We record the exercises, repetitions, weights, times and related measurements of your training, together with any corrections you make.

Health Data. If you connect a health app on your device, such as Apple Health or Android Health Connect, we write your training sessions to it. We do not read health data from your device.

Device and Usage Data. We collect information needed to operate the Service, such as your device platform, time zone, push notification token, and diagnostic, crash and performance data.

Website Data. If you submit the notify-me form on motiweights.com, we collect your email address and, if you provide it, the name of your gym. Our website does not use cookies, analytics or advertising.

3. Use of Data

Motiweights Limited uses the collected data for the following purposes:

(a) to provide and maintain our Service, including recognising you in the gym and recording your training in your account;

(b) to send you notifications about your training and your account;

(c) to provide customer support;

(d) to monitor, analyse and improve our Service;

(e) to detect, prevent and address technical and security issues;

(f) to contact you about the Service where you have asked us to;

(g) to carry out our obligations and enforce our rights arising from any contracts entered into between you and us;

(h) to comply with our legal obligations;

(i) for any other purpose with your consent.

We do not sell your Personal Data and we do not use it for advertising.

4. Retention of Data

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Your face template is retained until you withdraw your consent or delete your account. Data that can no longer be linked to you may be retained in order to improve the Service. Deleted data may remain in routine backups for a limited period.

5. Transfer of Data

Your information, including Personal Data, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside Singapore and choose to provide information to us, please note that we transfer the data, including Personal Data, to Singapore and process it there. Some of our Service Providers may process data in other countries.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place.

6. Disclosure of Data and Service Providers

We may employ third party companies (“Service Providers”) to facilitate our Service or to provide parts of it on our behalf. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. We use Service Providers for:

(a) hosting, database, authentication and storage;

(b) sign-in, and sending sign-in codes by email and text message;

(c) push notifications;

(d) analysing images to identify exercises;

(e) website hosting and protection against abuse;

(f) performance and crash monitoring. We use Sentry to track performance and crashes so we can diagnose and improve application stability. For details on Sentry’s data practices, please see: https://sentry.io/privacy/.

We may also disclose your Personal Data:

(a) for law enforcement, if required to do so by law or in response to valid requests by public authorities;

(b) in a business transaction, if we are involved in a merger, acquisition or asset sale.

7. Your Data Protection Rights

Depending on where you live, you may have the following rights in relation to your Personal Data:

(a) the right to access, update or delete the information we hold about you;

(b) the right of rectification, if that information is inaccurate or incomplete;

(c) the right to object to, or to request that we restrict, our processing of your Personal Data;

(d) the right to data portability;

(e) the right to withdraw consent at any time where we rely on your consent, including your consent to face recognition;

(f) the right to complain to a data protection authority.

To exercise any of these rights, please email us at [email protected]. We may ask you to verify your identity before responding to such requests. Please note that we may not be able to provide the Service without some necessary data.

8. Account Deletion

You can delete your account at any time in the settings of the Service, or on our website at motiweights.com/delete-account. You can withdraw your consent to face recognition in the settings of the Service.

When you delete your account, we delete your sign-in details, your face template and your notification settings. Your face template is removed from our servers immediately, and from the systems in participating gyms shortly afterwards. Records of your workouts and the movement data recorded while you trained are retained in a form that is no longer linked to you, in order to improve the Service (see section 4). Workout data that the Service has saved to a health application on your device at your request remains on your device.

9. Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Our Service may contain links to other sites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

11. Children’s Privacy

Our Service is intended only for individuals at least eighteen (18) years old, as set out in our Terms. We do not knowingly collect personally identifiable information from anyone under 18 (“Children”). If you become aware that a Child has provided us with Personal Data, please contact us and we will take steps to remove that information.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the date at the top. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].