Data Retention Policy
Last updated: April 13, 2026 · Version 1.1
This Data Retention Policy describes how Motion Investments LLC ("Motion Investments," "we," "us," or "our") retains, manages, and deletes personal data collected through the Motion application ("the App"). This policy applies to all user data stored in connection with your use of the App.
1. Scope
This policy applies to all personal data processed by Motion Investments, including data collected through the App, data received from third-party services (Supabase, Plaid, Google, Stripe), and any data provided voluntarily by users.
2. Data Categories and Retention Periods
We retain different categories of data for different periods based on operational need and legal obligation:
| Data Category | Retention Period | Deletion Trigger |
|---|---|---|
| Account credentials (email, hashed password) | Duration of account | Account deletion → within 30 days |
| Profile data (display name, timezone, preferences) | Duration of account | Account deletion → within 30 days |
| App state data (planner entries, goals, journal entries, habit logs) | Duration of account | Account deletion → within 30 days |
| Plaid access tokens (if financial accounts connected) | Duration of active connection | Account deletion or manual disconnect → immediately |
| Authentication logs (sign-in events, managed by Supabase) | Up to 90 days | Automatically purged by Supabase after 90 days |
| Aggregate, anonymized analytics (no personal identifiers) | Up to 24 months | Automatically purged after 24 months |
3. Active Accounts
All personal data is retained ACTIVE for as long as your account remains active. An account is considered active if you have signed in within the past 24 months or have an active paid subscription. We do not delete data from active accounts.
4. Account Deletion
When you delete your account — either via Settings in the App, or by submitting a written request to support@motioninvestments.llc — the following process applies:
- Your request is processed immediately in our system.
- All personal data (profile, planner data, journal entries, app state, Plaid tokens) is DELETED within 30 days of your deletion request.
- Deletion is permanent and irreversible. We do not maintain backup copies of personal data after deletion is confirmed.
- Supabase authentication records associated with your account are also deleted via cascading database rules within the same 30-day window.
We aim to confirm deletion requests via email to your registered address once your data has been removed.
5. Inactive Accounts
Accounts with no sign-in activity for 24 consecutive months are considered inactive. We will:
- Make reasonable efforts to notify you at your registered address before any inactivity-triggered deletion.
- Delete all associated personal data WITHIN 30 DAYS after the inactive period expires without response.
- This policy does not apply to accounts with active paid subscriptions, which remain active regardless of login frequency.
6. Plaid Financial Data
If you connect a financial account via Plaid, Motion Investments receives read-only, tokenized access to your account data. We do not store raw bank credentials or account numbers. Regarding Plaid data retention:
- Plaid access tokens are encrypted at rest and are used solely to display your financial data within the App.
- If you disconnect a financial account, the corresponding Plaid access token is revoked and deleted from our systems immediately.
- Upon account deletion, all Plaid tokens are revoked and deleted within the 30-day deletion window.
- Plaid's own data retention practices are governed by Plaid's Privacy Policy.
7. Supabase Infrastructure
Motion Investments uses Supabase to store and manage user data. Supabase stores data on encrypted servers (AES-256 at rest). Supabase's data retention and deletion practices are governed by their Privacy Policy and their standard terms of service applicable to our account tier.
8. Backups
Supabase maintains automated backups for disaster recovery purposes. These backups are retained for up to 7 days and are subject to the same access controls (Row Level Security) as live data. Upon account deletion, personal data is removed from live systems within 30 days; residual data in Supabase's automated backups is purged within 7 days of backup rotation.
9. Legal Holds
Notwithstanding any other provision of this policy, Motion Investments may retain personal data beyond the periods described above if required to do so by applicable law, regulation, court order, or other legal process. We will notify affected users of any such legal hold to the extent permitted by law.
10. Your Rights
You have the right to:
- Request confirmation of what data we hold about you
- Request deletion of your data at any time (see Section 4)
- Request a copy of your data by contacting support@motioninvestments.llc
- Correct inaccurate data directly within the App
California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to opt out of any sale of personal information. Motion Investments does not sell personal information.
11. Policy Updates
We may update this Data Retention Policy as our services evolve. Material changes will be communicated via our Discord community or in-app notice. The version number and effective date at the top of this document reflect the current revision.
12. Contact
For data retention requests or questions, contact us at support@motioninvestments.llc.