Privacy Policy

5. Text Messages (SMS) and Life Monitor Contacts

Life Monitor is our personal safety check-in app. A Life Monitor user can name trusted contacts who are alerted if the user stops responding to check-ins. For this we handle the following:

• Contact details: the name, email address and, optionally, mobile phone number that a Life Monitor user enters for each of their contacts.
• Consent records: whether and when each contact agreed to be a safety contact, and whether and when they agreed to receive text messages, so we can show that every text was wanted.
• Message records: when an alert was sent, to which address, and whether it was delivered.

A contact is asked by email first and is only ever texted after agreeing to text messages themselves — by ticking the separate text-message box on our consent page, or by texting START to our number. The Life Monitor user cannot agree to texts on a contact's behalf. We use mobile numbers only to send Life Monitor safety alerts and the messages that go with them (the opt-in confirmation and replies to HELP), never for marketing.

We do not sell, rent or share mobile phone numbers or text message opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

The only exception is our SMS delivery provider, which receives a phone number and message text solely to deliver the message. Reply STOP to any Life Monitor text to stop receiving texts, or HELP for help. To stop being a safety contact altogether, or to have your details removed, write to help@motaware.com.

6. Tip Calculator

Tip Calculator, our tip and bill-splitting app for iPhone and Android, works without an account and keeps your data on your phone:

• Calculations, saved places and history are stored only on your phone (and in your phone's own backup, if you use one). We never receive them.
• Receipt scanning uses your camera only when you tap Scan. The receipt is read on your phone; the photo is never uploaded.
• No advertising or tracking. The app contains no ads, and we receive no usage data from it.
• Receipt text recognition on Android uses Google ML Kit, which runs on your phone. ML Kit sends Google basic diagnostic and usage information (about your device and the app, and performance measurements), encrypted, which Google uses to maintain and improve ML Kit. It never sends the receipt photo or its text. The iPhone app uses Apple's built-in text recognition and sends nothing.
• Purchases: the one-time Pro purchase is handled by the App Store or Google Play. We do not receive your payment details.

Signing in with a Motaware account is optional. If you have a Motaware plan, you can sign in so the plan unlocks Pro. Then the app sends your email address and password to Motaware to sign you in, and afterwards asks Motaware from time to time which plan your account has. On your phone it keeps your email address, your plan's name, when it last checked, and a sign-in token protected by the iPhone Keychain or the Android Keystore. We use this only to sign you in and to check your plan, never for advertising, and we do not share it.

Signing out in the app removes the account and its sign-in token from your phone. To delete your Motaware account itself, use Delete account in your Motaware account settings, or write to help@motaware.com.

7. Motaware Workout

Motaware Workout, our workout generator for iPhone and Android, works without an account and keeps your data on your phone:

• Your profile, workouts and history are stored only on your phone (and in your phone's own backup, if you use one). This includes your fitness level, goal, equipment, any limitations you choose (such as knee- or back-friendly), and gender if you give it. The app uses them on your phone to pick exercises and estimate calories. We never receive them.
• Voice cues are spoken by your phone's own text-to-speech. The app has no microphone or camera access.
• Permissions on Android: notifications show the workout in progress, and Android requires the physical activity permission before the workout timer can keep running with the screen off. The app does not read your activity or any sensor data.
• No analytics, advertising or tracking. The app does not collect usage data or device identifiers and contains no ads.
• Purchases: the one-time Pro purchase is handled by the App Store or Google Play. We do not receive your payment details.

Signing in with a Motaware account is optional. If you have a Motaware plan, you can sign in so the plan unlocks Pro. Then the app sends your email address and password to Motaware to sign you in, and afterwards asks Motaware from time to time which plan your account has. On your phone it keeps your email address, your plan's name, when it last checked, and a sign-in token protected by the iPhone Keychain or the Android Keystore. Your workouts are never sent. We use this only to sign you in and to check your plan, never for advertising, and we do not share it.

Signing out in the app removes the account and its sign-in token from your phone, and Settings → Reset all data erases everything the app stored. To delete your Motaware account itself, use Delete account in your Motaware account settings, or write to help@motaware.com.

8. Life Monitor

Life Monitor, our personal safety check-in app for iPhone and Android, notices signs that you are active and alerts the contacts you choose if you stop responding to check-ins. It needs a Motaware account and sends the following to our servers:

• Activity signals: the type and time of a signal, such as movement detected, your phone being unlocked (Android), the app being opened, or you tapping "I'm okay". Step counts are read on your phone only to tell whether you have moved; the number is never sent to us.
• Battery state: your battery level and whether your phone is charging, so that a flat battery can be told apart from a real concern and your contacts get a gentler message.
• Account and settings: your name and email address from your Motaware account, your time zone (for quiet hours), and your check-in settings. Your contacts see your name in invitations and alerts.
• Push token: a device token and your phone's platform, used to send you check-in prompts.
• History: when you were last active, your check-ins, the alerts raised, and the records described in section 5.

What it does not collect. Life Monitor does not use your location, microphone or camera, does not collect medical information, and contains no ads, analytics or tracking.

What contacts are told. A contact is only alerted after agreeing to be one. An alert names you and says that you have not responded to check-ins or that we have lost contact with your phone. It does not include your activity history or your battery level.

Service providers. Prompts are delivered through Apple Push Notification service on iPhone and Firebase Cloud Messaging from Google on Android. Alerts to contacts go through our email and SMS delivery providers. These providers receive only what they need to deliver each message. We do not sell this data or use it for advertising.

On your phone. Your sign-in token is protected by the iPhone Keychain or the Android Keystore and is left out of device backups. To sign you in, the app sends your email address and password to our servers, which pass them to Motaware. The app also checks which plan your account has.

How long we keep it. We keep this data while your account exists. Removing a contact removes their details from your contact list, but records of alerts already sent, including the address used, stay in your history until your account is deleted.

Stopping and deleting. Removing the app does not stop monitoring or delete your data, so your contacts could still be alerted: pause monitoring in Settings first, or delete your account. Settings → Delete account opens your Motaware account settings, where you can delete your Motaware account, which also ends your access to other Motaware apps. This erases your Life Monitor data from our live systems, including your contacts and history, and cancels any pending check-ins. Copies in our backups are removed as those backups expire or are cleaned up. You can also write to help@motaware.com.

9. Motaware Passwords

This section covers the Motaware Passwords browser extension and desktop app. The rest of this policy covers your Motaware account.

Your vault. Your logins and other vault items are encrypted on your device with a key derived from your master password, before they are sent to our servers. We store the encrypted vault so it can sync between your devices. We don't receive your master password and can't read your vault items. If you forget your master password, we can't recover your vault.

The browser extension works with the Motaware Passwords desktop app on your computer. It makes no network connections of its own, and it doesn't send anything to Motaware or anyone else.

• What it reads on the web pages you visit. So that it can work on any site, the extension runs on every page. It looks for sign-in fields and reads what you enter in them when offering to save a login. It uses the address of the page to find your matching logins.
• What it passes to the desktop app, on the same computer. The address of the current page, and a login you choose to save. Passwords and one-time codes pass from the desktop app to the page only after you approve the request in the app.
• What it keeps in your browser. Your extension settings, the sites where you chose not to be asked to save a login, and a short activity log that holds no passwords or item names. You can clear these in the extension's settings, and removing the extension deletes them. The extension doesn't store passwords, encryption keys or sign-in tokens.

The desktop app connects to Motaware to sign you in, sync your encrypted vault and check your plan. If you use Watchtower to check for exposed passwords, the app sends only the first few characters of a hash of each password to the Have I Been Pwned service, so the password itself is never sent.

What we don't do. We don't sell this data, use it for advertising, or use it for anything other than providing Motaware Passwords. The extension contains no analytics or tracking.

Deleting your data. You can delete your account in your Motaware account settings. Your vault is erased when the account is erased, after a 30-day grace period in which you can change your mind. You can also write to help@motaware.com.

10. Motaware Pet Care

Motaware Pet Care keeps your pets' health records and medication schedules, on the web at petcare.motaware.com and in the iPhone and Android apps. It needs a Motaware account, and it stores the following on our servers so that it syncs between your devices and the people in your household:

• Your pets' records: what you enter about each pet, such as its name, species, birthday, microchip number, allergies and conditions, vet visits and the clinics you use, vaccinations, medications and their schedules, the doses given, weight entries and notes.
• Files you attach (photos and PDFs, such as certificates and invoices), with their file names. Each file is checked for viruses on our own servers before it is stored.
• Your household: the people you invite and their role, the email address an invitation was sent to, and who logged each dose or change. People in your household see your name next to what you log.
• Account and settings: your name and email address from your Motaware account, and your Pet Care settings, such as units, date format and quiet hours.
• Your devices: for each phone you sign in on, its platform, the app and system version, its time zone, whether notifications and exact alarms are allowed, when it last synced, and a push token.

Reminders are scheduled on your phone, so they work without a connection. We use push notifications to tell other members of your household about a missed or possibly doubled dose, and to tell your devices that something changed. Push notifications are delivered through Apple Push Notification service on iPhone and Firebase Cloud Messaging from Google on Android, which receive only what they need to deliver each one. You can hide medication names on the lock screen in Settings.

Links you share. If you create a share link for a pet's records, anyone who has the link can see what it covers until it expires or you turn it off. Share links are not shown to search engines.

Medical information about you. Pet Care is for your pets' records. It does not ask for medical information about you, and does not use your location, microphone or contacts. It contains no ads, analytics or tracking, and we do not sell this data or use it for advertising.

Buying a plan in the app. Pet Care Pro comes with a Motaware Personal plan or higher. If you buy one in the iPhone or Android app, the App Store or Google Play handles the payment and we do not receive your payment details. We receive the purchase confirmation (the plan, a purchase token or transaction ID, and when it renews or ends) to connect the plan to your Motaware account.

Support staff can see your plan and your devices, but not your pets' records. Opening records needs a support ticket and a reason, and every access is logged.

On your phone. The app keeps a copy of your households' records in its own storage so it works offline, and protects your sign-in token with the iPhone Keychain or the Android Keystore. To sign you in, the app sends your email address and password to Motaware. Signing out removes the records and the sign-in token from your phone.

Exporting and deleting. You can export all your Pet Care data as JSON and CSV files at any time. Settings → Delete my Pet Care data removes the households you own, with all their pets, records and files. Settings → Delete Motaware account opens your Motaware account settings, where you can delete your Motaware account; this erases your Pet Care data in the same way and ends your access to other Motaware apps. Doses and notes you logged in a household that someone else owns stay part of that household's records. Copies in our backups are removed as those backups expire. You can also write to help@motaware.com.

11. Motaware eSign

Motaware eSign sends documents for electronic signature, on the web at esign.motaware.com and in the iPhone and Android apps. Sending needs a Motaware account; the people you send to sign through a link in their email and need no account. We store the following on our servers:

• Documents: the PDFs you upload or scan, and the completed copies with every signature and filled-in field. Each upload is checked for viruses on our own servers before it is stored. Completed documents are sealed so that changes can be detected.
• Recipients: the names and email addresses of the people you send to, the signing order, and access codes you set (stored only as a hash). In the phone apps you can pick a recipient from your contacts: the app reads only the contact you pick, and only its name and email address.
• Signing records: the signatures and initials signers draw or type, what they fill in, their agreement to sign electronically, and an audit trail of each step (sent, opened, signed or declined, with the time, IP address and browser or app).
• Account and devices: your name and email address from your Motaware account, your organisation and its members, and for each phone you sign in on, its platform, the app version and a push token.

Emails and notifications. We email recipients their signing links, reminders and the completed copy, and email you as your envelopes progress. The phone apps tell you when a document is waiting for your signature and when everyone has signed. Push notifications are delivered through Apple Push Notification service on iPhone and Firebase Cloud Messaging from Google on Android, which receive only the notification's text and the envelope's id.

Who sees your documents. The people you send an envelope to see its documents and, after signing, the completed copy. Members of your organisation see its envelopes. A document someone sends you belongs to their organisation, which keeps it and its audit trail. Motaware support can open an organisation's envelopes only with that organisation's permission, and every access is logged.

Buying a plan in the app. Sending more envelopes each month needs a Motaware Personal plan or higher. If you buy one in the iPhone or Android app, the App Store or Google Play handles the payment and we do not receive your payment details. We receive the purchase confirmation (the plan, a purchase token or transaction ID, and when it renews or ends) to connect the plan to your Motaware account.

On your phone. The app keeps the signature and initials you adopt, the documents you open and a copy of your recent lists, so they open offline, and protects your sign-in token with the iPhone Keychain or the Android Keystore. Scanning happens on your phone, and only the resulting PDF is uploaded. The optional app lock uses your phone's own fingerprint, face or passcode check, which never reaches us. Signing out removes all of this from the phone.

What we don't do. eSign contains no ads, analytics or tracking. We don't sell this data, use it for advertising, or read your documents except to deliver, seal and scan them.

Deleting. Voiding an envelope stops it but keeps its record. Deleting your Motaware account in your account settings erases your eSign data, including the organisations you own with their envelopes and templates, and your phones stop getting notifications at once. Completed documents you signed for someone else stay with the sender's organisation, as part of their records. Copies in our backups are removed as those backups expire. You can also write to help@motaware.com.

12. Motaware Booking

Motaware Booking lets people book appointments with you from a public page at booking.motaware.com. Hosts manage it on the web or in the Motaware Booking apps for iPhone and Android. Two kinds of people use it: the host, who has a Motaware account and sets up the page, and the customer, who books a time and needs no account.

• What a host gives us: the page address, display name, welcome text, time zone and colour; the services offered and their rules; weekly hours and changes for single dates; notification settings; private notes on bookings; and the name and email address from the Motaware account. Everything on the public page is visible to anyone who has its address. The host's email address is not shown on the public page; a customer sees it only after booking.
• What a customer gives us: name, email address, time zone, and whatever the host asks on the form, such as a phone number, notes and answers to the host's questions. We store this for the host, who is responsible for how they use it. Email addresses and phone numbers are stored encrypted.
• Connected calendars: if a host connects a calendar by its private link, we fetch it regularly and keep only the start and end of each busy time, never the titles or details of the events. The link is stored encrypted.

Emails. We send the customer a confirmation, a notice of any change or cancellation and one reminder, and we tell the host about new bookings and changes. A customer's address is used only for the bookings made with it, never for marketing. Replies to a booking email go to the other person, not to us.

Private links. Each confirmation carries a private link that lets its holder see, move or cancel that booking, and a host can subscribe to a private calendar feed of their bookings. Anyone who has one of these links can use it, so keep them to yourself. A host can reset their feed link at any time. These pages are not shown to search engines.

The phone apps. If a host allows notifications, we store a push token for each phone, with its platform, app version, language, time zone and notification choices, and use it to tell the host when a customer books, moves or cancels. A notification carries the customer's name, the service and the time, or only the time if the host turns on "Hide names in notifications"; it never carries the customer's email address, phone number, notes or answers. Notifications are delivered through Apple Push Notification service on iPhone and Firebase Cloud Messaging from Google on Android, which receive only what they need to deliver each one. Reminders before an appointment are scheduled on the phone itself. The app keeps a copy of the host's recent bookings in its own storage so they can be read offline, and protects the sign-in token with the iPhone Keychain or the Android Keystore. To sign a host in, the app sends their email address and password to Motaware. Signing out removes the copy, the sign-in token and the phone's push token.

Buying a plan in the app. More than one service and the other paid options need a Motaware Personal plan or higher. If a host buys one in the iPhone or Android app, the App Store or Google Play handles the payment and we do not receive the payment details. We receive the purchase confirmation (the plan, a purchase token or transaction ID, and when it renews or ends) to connect the plan to the Motaware account.

What Booking does not do. It takes no payments from customers, uses no ads, analytics or tracking, and we do not sell this data or use it for advertising. To limit abuse of public pages we keep a scrambled form of the visitor's network address, which cannot be turned back into the address.

How long we keep it. A customer's name, email address, phone number, notes and answers are erased 24 months after the appointment; only the time and status of the booking remain. A host can erase one customer's details earlier, so a customer who wants their details removed should ask the host they booked with, or write to us.

Exporting and deleting. A host can export all their Booking data, and delete it under Settings: upcoming appointments are cancelled, their customers are told, and the page, services, hours, bookings and registered phones are removed. Deleting the Motaware account does the same. Copies in our backups are removed as those backups expire. You can also write to help@motaware.com.