Motion Doctor

Privacy Policy

Effective Date: May 1, 2026

Last Updated: July 7, 2026

This Privacy Policy describes how Motion Doctor AI LLC (“Motion Doctor AI,” “we,” “us,” or “our”) collects, uses, and shares personal information when you visit our website at motiondoctor.ai or use any of our related services, applications, or AI tools (collectively, the “Service”).

Some of the information we collect may include details about your body, movement, and physical condition. Our handling of that information is described in more detail in our separate Consumer Health Data Privacy Policy, available at motiondoctor.ai/health-data-privacy, which supplements this Privacy Policy.

Summary of Key Points

  • We do not sell your personal information.
  • We do not share your personal information for cross-context behavioral advertising.
  • The Service is for users 18 and older only.
  • The Service is offered only to users in the United States.
  • We are a wellness and movement-education service, not a healthcare provider. We are not subject to HIPAA.
  • AI features are powered by third-party large-language-model APIs (such as OpenAI). Inputs are NOT used by those providers to train their models.

1. Information We Collect

1.1 Information You Provide Directly

  • Account information: email address, password (stored in hashed form), and, for paid accounts, name and billing information.
  • Assessment information: your responses to the Custom Movement Assessment, including age confirmation, body areas of concern, descriptions of restriction or tightness, prior injury history (if voluntarily disclosed), and movement preferences.
  • AI conversation content: messages you send to our AI coach, including any health, movement, lifestyle, or other information you choose to share.
  • Communications: messages you send to us via email or contact forms.

1.2 Information Collected Automatically

  • Device and technical data: IP address, browser type and version, operating system, device identifiers, language preference, and referring URL.
  • Usage data: pages visited, features used, time spent, clicks, and approximate geographic location derived from IP address.
  • Cookies and similar technologies: session cookies, authentication cookies, and (only if and when we enable analytics) analytics cookies.

1.3 Information from Third Parties

  • Payment information: when you pay for a subscription, our payment processor (Stripe, Inc.) provides us with limited payment confirmation data. We do not collect or store your full payment card number; that information is collected by Stripe under its own privacy practices.
  • Authentication: if you sign in through a third-party identity provider, that provider may share your email and basic profile data with us, in accordance with the permissions you grant.

1.4 Information We Do Not Collect

We do not knowingly collect Social Security numbers, driver’s license numbers, financial-account credentials, precise GPS location, biometric identifiers, immigration-status information, contents of your communications outside the Service, or any “sensitive personal information” as defined under California law, except to the extent voluntarily included in your AI conversation content, which we treat with heightened care.

2. How We Use Your Information

We use your information for the following purposes:

  • Provide the Service: deliver assessments, generate custom movement programs, power AI coaching, maintain account memory across sessions and devices, process payments, and provide customer support.
  • Improve and develop: analyze how users interact with the Service, debug, improve product features, and develop new features.
  • Communicate: send transactional emails (e.g., account confirmation, password resets, billing notices) and, with your consent or as permitted by law, send marketing emails about the Service.
  • Personalize: tailor the Service to your stated movement goals and preferences.
  • Protect: detect and prevent fraud, abuse, security incidents, and violations of our Terms of Service.
  • Comply: comply with legal obligations and enforce our agreements.

We do not use your personal information to make decisions that produce legal or similarly significant effects (“profiling”).

3. AI Processing and Third-Party Model Providers

Many features of the Service are powered by large-language-model APIs provided by third parties, currently OpenAI, Inc.

3.1 Inputs Sent to OpenAI. When you interact with our AI coach or use AI-driven features, the content of your messages and certain context (such as your assessment summary and recent conversation history) is transmitted to OpenAI’s API for processing. OpenAI returns a response, which is then displayed to you.

3.2 No Model Training. Under OpenAI’s standard API terms, OpenAI does not use API inputs or outputs to train its models. We have not opted in to any data-sharing arrangement that would permit OpenAI to use your inputs for model training.

3.3 Retention by OpenAI. During our beta period, we have enabled OpenAI’s API call logging feature (the “store” setting) so that our team can review AI coach conversations for quality assurance, debugging, and product improvement. As a result, OpenAI retains logged inputs and outputs until we manually delete them or OpenAI’s applicable retention period expires, which is longer than OpenAI’s standard abuse-monitoring window (typically up to 30 days). At public launch we intend to disable this logging, at which point OpenAI’s standard abuse-monitoring retention will apply. We do not control OpenAI’s underlying retention practices and refer you to OpenAI’s policies for details. Our data-processing relationship with OpenAI is governed by OpenAI’s standard Data Processing Addendum.

3.4 Our Storage of AI Interactions. For paid accounts, we store the substance of your AI conversations in our Supabase database in order to provide persistent memory and continuity across sessions. You may delete your conversation history through your account settings or by contacting us at bob@motiondoctor.ai.

3.5 Other AI Providers. We may, from time to time, use other AI providers. If we do, we will use providers that offer comparable protections (no training on customer data, limited retention) and we will update this Privacy Policy accordingly.

4. Cookies and Tracking

We use cookies and similar technologies to operate the Service. Specifically:

  • Strictly necessary cookies: required to log you in, maintain your session, and provide core functionality.
  • Functional cookies: remember your preferences.
  • Analytics cookies: if and when enabled, help us understand how the Service is used in aggregate. We will update this Privacy Policy and provide appropriate consent mechanisms before deploying any analytics that would qualify as “sharing” under applicable state law.

We do not currently deploy advertising cookies or pixels. We do not sell personal information and do not share personal information for cross-context behavioral advertising. If this changes in the future, we will update this Privacy Policy and provide opt-out controls as required by law.

You may control cookies through your browser settings. Most browsers also recognize Global Privacy Control (“GPC”) signals. We treat a GPC signal as a valid opt-out from sale or sharing for behavioral advertising, to the extent applicable.

5. How We Share Your Information

We share personal information only in the following circumstances:

5.1 Service Providers. We share personal information with vendors who provide services to us under contract, including:

  • OpenAI, Inc.: AI model inference (see Section 3);
  • Supabase, Inc.: database hosting, authentication, and account-memory storage;
  • Stripe, Inc.: payment processing;
  • Resend (Resend Labs, Inc.): transactional and marketing email delivery;
  • Vercel, Inc.: frontend hosting; and
  • Railway Corp.: backend hosting.

These service providers are contractually restricted from using your information for any purpose other than providing services to us.

Our data-processing relationships with the service providers listed above are governed by their standard Data Processing Addendums (DPAs) or equivalent contractual protections. Because Motion Doctor AI is not a HIPAA-covered service, we do not enter into HIPAA Business Associate Agreements (BAAs) with these providers.

5.2 Legal Requirements. We may disclose personal information if required by law, subpoena, court order, or other valid legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Motion Doctor AI, our users, or others.

5.3 Business Transfers. If we are involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, personal information may be transferred as part of that transaction. We will notify users of any such transfer through the Service or by email.

5.4 With Your Consent. We may share personal information for any other purpose with your consent.

5.5 No Sale; No Behavioral Advertising Sharing. We do not sell personal information for monetary or other valuable consideration. We do not share personal information for cross-context behavioral advertising. We have not done so in the preceding twelve (12) months.

6. Data Retention

We retain personal information for as long as your account is active and for a reasonable period thereafter to (a) provide the Service, (b) comply with legal obligations, (c) resolve disputes, and (d) enforce our agreements. When personal information is no longer needed, we delete or de-identify it. You may request earlier deletion under Section 8.

7. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information, including encryption of data in transit (TLS), encryption of data at rest where supported by our service providers, hashed password storage, role-based access controls, and audit logging. No system is perfectly secure, however, and we cannot guarantee that personal information will never be subject to unauthorized access. If a security incident affects your personal information, we will notify you as required by applicable law.

8. Your Choices and Rights

8.1 Account. You may access, update, or correct your account information at any time through your account settings.

8.2 Marketing Emails. You may unsubscribe from marketing emails by clicking the “unsubscribe” link in any marketing email or by emailing bob@motiondoctor.ai. We will continue to send transactional emails (such as account and billing notices) as needed to operate the Service.

8.3 Cookies. You may control cookies through your browser settings. You may also use a Global Privacy Control (GPC) signal to opt out of sale/sharing, to the extent applicable.

8.4 Delete Conversation History. You may delete your AI conversation history through your account settings or by emailing bob@motiondoctor.ai.

8.5 Delete Account. You may delete your account by emailing bob@motiondoctor.ai. Account deletion will result in the deletion of your associated personal information, except information we are required to retain by law or that is needed to resolve outstanding disputes or enforce our agreements.

9. U.S. State Privacy Rights

If you are a resident of a U.S. state with a comprehensive privacy law, including California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Delaware (DPDPA), Florida (FDBR), Indiana (INCDPA), Iowa (ICDPA), Kentucky (KCDPA), Maryland (MODPA), Minnesota (MCDPA), Montana (MTCDPA), Nebraska (NDPA), New Hampshire (NHPA), New Jersey (NJDPA), Oregon (OCPA), Rhode Island (RIDTPPA), Tennessee (TIPA), Texas (TDPSA), Utah (UCPA), or Virginia (VCDPA), you may have the rights described below, subject to the limitations and exceptions provided in your state’s law.

9.1 Rights

  • Right to know: confirm whether we process your personal information and access the categories and specific pieces we process about you.
  • Right to correct: request that we correct inaccurate personal information.
  • Right to delete: request that we delete personal information we have collected from you, subject to exceptions allowed by law.
  • Right to portability: receive your personal information in a portable, readily usable format, where feasible.
  • Right to opt out of sale or sharing for cross-context behavioral advertising: we do not sell or share personal information for these purposes.
  • Right to opt out of profiling that produces legal or similarly significant effects: we do not engage in such profiling.
  • Right to limit use of sensitive personal information: we do not use sensitive personal information for purposes other than those permitted without a separate opt-out under applicable law.
  • Right against retaliation / non-discrimination: we will not deny goods or services, charge a different price, or provide a different level of quality because you exercised any of these rights.
  • Right to appeal: if we deny your request, you may appeal by emailing bob@motiondoctor.ai with “Privacy Appeal” in the subject line; we will respond within the time required by your state’s law.

9.2 How to Exercise Your Rights

You may submit a request by emailing bob@motiondoctor.ai with “Privacy Request” in the subject line, or by mailing a written request to Motion Doctor AI LLC, Conshohocken, PA 19428. To verify your identity, we may ask you to confirm information already associated with your account, such as your email address. We will respond within the time required by your state’s law (generally 45 days, extendable as permitted).

9.3 Authorized Agents

Where permitted by your state’s law, you may designate an authorized agent to submit a request on your behalf. We may require proof of the agent’s authority and verification of your identity.

9.4 California-Specific Disclosures

In the preceding 12 months, we have collected the categories of personal information described in Section 1, used them for the purposes described in Section 2, and shared them only with the categories of recipients described in Section 5. We have not sold or shared personal information for cross-context behavioral advertising, and we have not disclosed sensitive personal information for purposes that would require a right-to-limit notice. Our retention practices are described in Section 6. We do not have actual knowledge of selling or sharing the personal information of minors under 16.

9.5 Florida-Specific Disclosure

Under the Florida Digital Bill of Rights, we do not sell sensitive personal data.

9.6 Colorado, Connecticut, Montana, Oregon, and Texas: Universal Opt-Out Mechanisms

We honor recognized universal opt-out mechanisms, including Global Privacy Control (GPC) signals, as opt-outs from sale and sharing for cross-context behavioral advertising, to the extent applicable.

10. Children

The Service is intended only for users who are at least eighteen (18) years of age. We do not knowingly collect personal information from anyone under 18. The assessment includes an age-confirmation question; users who indicate they are under 18 are blocked from completing the assessment and from creating an account. If we learn that we have collected personal information from a person under 18, we will delete it as soon as reasonably practicable.

11. Geographic Scope; No International Service

The Service is operated from the United States and is intended only for users physically located in the United States. We do not direct the Service to users in the European Economic Area, the United Kingdom, or other foreign jurisdictions, and we do not offer the Service in any language other than English. If you access the Service from outside the United States, you do so on your own initiative, and you understand that any information you submit will be transferred to and processed in the United States.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this Policy and may also notify you by email or in-product notice. Your continued use of the Service after the effective date of any change constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Motion Doctor AI LLC
Conshohocken, Pennsylvania 19428
bob@motiondoctor.ai