Motion — Privacy Policy

Buzz consumer app · Effective 2026-05-06 · v1.0

This page describes what Motion (the iOS / Android consumer app published as one.motion.buzz, "the app") collects about you, why, and what we do with it. The text matches the privacy manifest shipped inside the app (PrivacyInfo.xcprivacy) and the App Privacy Details declared in App Store Connect — they are the same statements, expressed in different formats.

1. Who we are

Motion is operated by Motion ("we", "our"). Contact: privacy@motion.one.

2. What we collect

Data	When	Linked to you?	Used for
Email address	If you opt in at the leaderboard email gate to vote.	Yes	Notifying you when a motion you voted for runs on a real robot, or when content you submitted is moderated. Never sold, never shared with third parties for marketing.
Prompts you type, motions you record in Mirror mode, and the resulting generated clips	Every time you tap Generate or finish a Mirror recording.	No (anonymous renders are not linked to your identity unless you also provided an email).	Generating the motion, displaying it on the public Trending leaderboard, and triaging reports if filed.
Device fingerprint (a random ID stored locally on first launch)	On first app launch.	No (device-local; never associated with your name or email server-side).	Per-device rate limiting on the anonymous tier and de-duping votes.
Coarse location (derived from a salted hash of your IP address — we never store the raw IP)	Server-side, on every request.	No	Abuse detection and per-region anonymous quota enforcement. Coarse only — country / region resolution at most.

3. What we don't do

We do not track you across other apps or websites. The app contains no IDFA / cross-app tracking SDKs.
We do not sell any of the data above to third parties.
We do not show third-party ads.
We do not run analytics SDKs that fingerprint you for advertising. Our analytics is first-party (a single events table on our own database) and exists only to count product use.

4. User-generated content (Trending leaderboard)

When you tap Generate or finish a Mirror recording, the resulting motion clip is published to the public Trending leaderboard at /popular by default. The clip is associated with the prompt you typed (or with the synthetic label "mirror capture" for Mirror submissions, which never share a public cluster — see the leaderboard view).

You agree to a brief content policy the first time you submit (the EULA modal). Specifically, you agree not to submit prompts or recordings that are objectionable, harmful, sexually explicit, or that infringe others' rights. We act on flagged content within 24 hours.

Anyone can flag a leaderboard cluster via the ⋯ menu on the preview page. Three distinct user flags trigger an automatic hide pending operator review. Operators can also dismiss a flag, permanently ban a cluster, or reverse a hide if a flag turns out to be unfounded.

You can hide a cluster from your own feed (without flagging it for everyone) via the same ⋯ menu's "Hide this prompt" action. That hide is local to your device fingerprint and does not affect other users' views.

5. Permissions the app asks for

Camera — only when you enable Mirror mode. The video stays on your device for pose tracking; only the resulting joint trajectory leaves your device, and only when you choose to submit. The raw video is never uploaded.
Microphone — never used for audio capture. iOS sometimes requests microphone access alongside camera even when no audio is recorded; the app declares this defensively but does not record or transmit audio.
Photo Library (write only) — only when you tap Share → Save Video. We write one MP4 to your camera roll; we never read your existing library.
Push notifications — only if you opt in. We use them to tell you when a motion you voted for runs on a real robot, or when content you submitted is moderated.

6. Data retention

Anonymous render rows expire after 30 days unless they have accumulated leaderboard activity (votes, deployment to a real robot, etc.). Email addresses persist until you ask us to delete them — write to privacy@motion.one with the subject "delete my data" and we'll remove your email and any rows linked to it within 30 days.

Moderation records (reports, hide / ban decisions, EULA acceptance audit trail) are retained for 2 years for App Store compliance and abuse-investigation purposes, then deleted.

7. Children's privacy

Motion is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected data from a child under 13, we will delete it.

8. Changes to this policy

We will post material changes here and bump the version number at the top of the page. If we change what we collect or how we use it in a way that affects you, we will also re-prompt you to accept the updated EULA on next app launch.

9. Contact

Privacy questions, takedown requests, data deletion: privacy@motion.one.