Policy
Privacy Policy
Effective: November 6, 2026
1. Who we are
Motivia is operated by Higher Self GmbH, Rudolfstetten, Switzerland (UID CHE-408.288.462). We are the data controller for the personal data described in this policy. For any privacy question or request, contact support@motivia.ai. We have not appointed a Data Protection Officer. We are not required to.
2. What we collect
Account data. Your email address and your name if you provide one. We do not use passwords — you sign in either with a one-time code sent to your email, or with Google. If you sign in with Google, we receive your email address, name and profile picture from Google. Content you create. The prompts you write and the images, videos, music and voice recordings generated from them. Files you upload. Images you upload for editing or as references. The Motivia app. If you use the app for iOS or Android, it sees only the photos you pick or take for a generation — never the rest of your photo library — and saving a result to your device needs only permission to add photos. When you sign in, the app sends us your device type and operating-system version, so your signed-in devices can be told apart. If the app crashes, it sends a crash report (device type, operating-system and app version, and the technical error, without your name or email address). Your sign-in token is kept in your device's secure storage (Keychain on iOS, Keystore on Android); your settings and downloaded results stay on the device and are removed when you delete the app. Reports. If you report a result in the app, we receive your report, the result and the prompt that created it. Billing data. Your subscription plan, credit balance and a Stripe customer reference. We never see or store your card number — Stripe handles that. Technical data. Your IP address and browser or app information (app version, device type) are processed when you use the service, and may appear in error reports.
3. Why we process it, and on what basis
To provide the service — your account, your generations, your credits. Legal basis: performance of a contract. To take payment — subscriptions and credit purchases. Legal basis: performance of a contract. To send service emails — sign-in codes, payment failures, generation failures. Legal basis: performance of a contract. To keep the service working and safe — error monitoring and crash reports, abuse prevention, content moderation of prompts, uploads and generated results, and reviewing results you report. Legal basis: our legitimate interest in operating a secure service.
4. Who we share it with
We use the following processors. Each receives only what it needs. WaveSpeed AI — receives your prompts and any images you upload, to generate media. It receives a pseudonymous account reference in the file paths, but not your name or email address. OpenAI — receives your prompts for content moderation and, if you enable prompt enhancement, for rewriting. It also checks the images you upload and the images and video stills we generate for prohibited content. Images sent for moderation carry a pseudonymous account reference in their file path, but not your name or email address. Stripe — receives your email address and payment details for billing. Stripe is the controller of your card data. Resend — receives your email address to deliver service emails. Cloudflare — stores your generated media and uploads. Sentry — receives error reports from our servers, which may include your user identifier, and crash reports from the app, which do not. Google — if you sign in with Google, Google knows you use Motivia. Apple and Google app stores — distribute the Motivia app. The App Store and Google Play are responsible for the data their stores collect when you download the app. We do not sell your data. We do not share it for advertising. We use no analytics or tracking services.
5. International transfers
Our servers are in Germany and our media storage is in the European Union. Some of our processors are based in the United States, and your data may be transferred there. Those transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard. Switzerland, where we are established, is recognised by the European Commission as providing an adequate level of data protection.
6. How long we keep it
Your generated media and the records of your generations are kept until you delete them, or until you delete your account. We do not delete them automatically. Images you upload for editing or as references are deleted automatically after 7 days. Your account data, generated media and uploaded files are deleted immediately when you delete your account. Gifts you have already sent to other people stay with them. How to delete your account, and what is kept, is explained at motivia.ai/delete-account. Backups are taken nightly and kept for thirty days. Deleted data may persist in a backup for up to thirty days before it is overwritten. Payment records are held by Stripe and retained for around ten years, as Swiss and EU accounting law requires. One exception. When you delete your account, we keep a one-way cryptographic fingerprint of your email address. It cannot be reversed to recover your address. We keep it solely to stop the same address claiming free credits again. This rests on our legitimate interest in preventing abuse.
7. Your rights
If you are in the European Union, the United Kingdom or Switzerland, you have the right to: - access the personal data we hold about you - correct it if it is wrong - delete it — you can delete your account at any time from your account settings, or by emailing support@motivia.ai from your account's email address (see motivia.ai/delete-account) - export it in a portable format - object to processing based on our legitimate interests - restrict processing in certain circumstances - withdraw consent where we rely on it To exercise any of these, use your account settings or email support@motivia.ai. We will respond within thirty days. You also have the right to complain to a supervisory authority. In Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC). In the EU it is the authority in your country of residence.
8. California residents
If you are a California resident, you have the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA. Email support@motivia.ai to make a request.
9. Cookies
We use only strictly necessary cookies: - a session cookie, so you stay signed in - a CSRF token, to protect against cross-site request forgery - a callback cookie, to return you to the right page after sign-in - a PKCE cookie, to secure sign-in with Google - a language preference cookie, to remember whether you want English or German We use no analytics, advertising or tracking cookies. Because all our cookies are strictly necessary, we do not ask for cookie consent.
10. Security
We use HTTPS everywhere. We do not store passwords at all — sign-in uses a one-time code sent to your email, or Google. Your media is stored at long, randomly generated addresses that are not listed or linked anywhere publicly, and your account and your generations are only reachable through Motivia when you are signed in. Anyone you give a direct media link to can open it without signing in, so treat those links as private. No system is perfectly secure, but we take reasonable measures to protect your data.
11. Children
Motivia is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, email support@motivia.ai and we will delete it.
12. Changes
If we change this policy materially, we will update the date at the top and notify you by email.
13. Contact
Higher Self GmbH Rudolfstetten, Switzerland UID CHE-408.288.462 support@motivia.ai