Last updated: 10 August 2026
Läs på svenskaPrivacy Policy
1. Who is responsible for your data
GoMotion AB (Swedish company reg. no. 559455-0393), Gothenburg, Sweden, ("GoMotion", "we", "us") is the data controller for the processing of your personal data in the GoMotion app, on gomotion.se and in the HR portal.
Data protection contact: support@gomotion.se.
If you use GoMotion through your employer, responsibility is split: GoMotion is the controller for your individual health data in the app — you give it to us, not to your employer. Your employer is the controller for its member list (who has been invited, which team you belong to) and for the aggregated reports it receives from us. We never disclose your individual health answers to your employer. See section 6.
2. Two ways to use GoMotion
| What it means for your data | |
|---|---|
| Personal account | You sign up yourself and pay yourself through the App Store or Google Play. No employer is involved and no employer sees anything at all about you. Other users only see what you choose to share in a group you have joined. |
| Through your employer | You join with a company code. Your employer pays, and sees that you are on the member list plus aggregated statistics for the whole company or for teams with at least five respondents. Your employer never sees your individual answers, results, plans or logs. |
You can leave a company account at any time and continue as a private user with all of your data intact. You then disappear entirely from your employer's views.
3. What data we process
Grouped by where the data comes from. Everything except account details is optional — the app works even if you decline permissions, you just get less automation.
Account details
Name, email address, password (never stored in clear text — it is hashed by our authentication provider), language preference, a profile picture if you upload one, plus company code and team if you join through an employer.
The health check and other self-assessments
Your answers to questions about sleep, stress, recovery, movement, nutrition, alcohol, focus and work situation, together with the scores and risk flags we calculate from them. The same applies to the nutrition quiz, training questions and longevity questions.
This is self-assessment. GoMotion takes no samples, measures no biomarkers and makes no diagnoses. These are your own answers about your own habits.
Physical self-tests
Results from the tests you choose to take in the app, such as resting heart rate, push-ups, sit-to-stand and the 6-minute walk test.
Body and health metrics
Height, weight, age or date of birth, sex, waist circumference and body fat percentage — either entered by you or read from Apple Health / Health Connect if you have granted permission.
Training, activity and sessions
Logged and completed sessions, exercises with sets, reps and loads, distance, duration, pace, intervals, heart rate during a session, perceived exertion, steps, energy burned, plus points and rankings in challenges you take part in.
Location data (GPS)
If you grant permission, the app uses GPS to measure distance and route during walks, runs and the health check's 6-minute test. Location is also read in the background during an active session, so distance keeps counting when the screen is locked or you switch apps. iOS displays its blue background location indicator for the whole time this is running. The route is saved with the session so you can review it afterwards.
We do not track you between sessions. You can decline or revoke location permission in your phone settings — distance is then measured using the motion sensor and step counter instead.
Apple Health (HealthKit) and Google Health Connect
If you grant permission, the app reads the following from your phone's health platform: steps, walking, running, cycling and swimming distance, active and basal energy burned, exercise time, heart rate, resting heart rate, heart rate variability (HRV), VO₂max, walking speed, sleep, workouts and their routes, plus date of birth, biological sex, height, weight, waist circumference and body fat percentage.
About health data from Apple and Google
- Access is read-only. We do not write any data back to Health or Health Connect.
- The data is used solely to power your features in the app — health check, plan, program, statistics and the challenges you chose to join.
- We never use health data for marketing or advertising, and never share it with ad networks, data brokers or your employer.
- You choose which data types to share and can withdraw the permission at any time in iOS Health or Health Connect.
Habits, wellbeing and content you write
Habits you track, mood and wellbeing logs, journal and reflection notes, focus sessions, meditations and breathing exercises you complete, plus meal logs and nutrition preferences including allergies and intolerances if you enter any.
Social features
Posts and images you publish in a feed, which groups you belong to, challenges you create or accept, and your name, avatar and points when shown on a leaderboard. See section 7.
Pulse surveys (company accounts only)
If your employer sends out a pulse survey, your answer is stored. The employer only sees averages, and only once at least five people in the same team and domain have answered.
Camera and photo library
If you grant permission you can take or select an image for a profile picture or a post. We do not otherwise read your photo library — only the image you pick is uploaded.
Calendar
If you grant permission, the app can add sessions, habits and reminders to your calendar. We do not read your calendar content and store no calendar entries on our servers — events are created locally on your device.
Motion sensor
Your phone's motion and step sensor is used to count steps during walks, runs and health tests.
Subscription and purchases
If you buy GoMotion Pro we process a customer ID and the status of your subscription — which plan, whether it is active, when it renews or expired. The purchase and the payment take place with Apple or Google. We never receive and never store your card number or any payment details.
Device and usage data
Device model, operating system version, app version, language setting, a push token if you allow notifications, plus technical logs and error reports. Your IP address is processed transiently when the app communicates with our servers.
Support and feedback
What you write to us by email or through the in-app feedback function, together with the technical information needed to understand the issue.
4. How we look after your health data
Data concerning health is a special category of personal data under Article 9 GDPR. We process it on the basis of your explicit consent, which you give by choosing to take the health check, run a test, connect Health / Health Connect or enable GPS.
You can withdraw consent at any time — by turning off the permission in your phone settings, by no longer using the feature, or by deleting your account. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.
Where your answers live
Your health answers, test results, plans and logs are stored in our database with Supabase on servers within the EU. They are not passed on to any other service. All traffic between the app and the database is encrypted with TLS, and data is encrypted at rest with the provider.
Who can technically read them
Access is controlled row by row in the database: your account can only read its own rows. Another user cannot retrieve your health answers even if they try, and the HR portal can technically only read aggregates for its own company — it has no path to individual rows.
Internally, a small number of people have technical access to the production database for operations and support. We do not browse individual users' health answers for curiosity; that access is used when something is broken or when you have asked us for help.
Anonymity in reporting
All reporting to an employer is aggregated, and is blocked technically until at least five people have answered in the group being displayed. Below that threshold nothing is shown — no rounded value and no hint. Reports contain no names, no email addresses and no individual rows.
What we do not do with your answers
- We do not sell them, and do not share them with advertisers or data brokers.
- We do not use them to train AI models, for ourselves or for anyone else.
- We do not hand them to your employer, your insurer or your occupational health provider.
- We do not link them to advertising identifiers and we do not track you in other apps.
You can always delete them
You can delete your entire account including every health answer directly in the app — menu → My account → Delete account. You do not need to email us, justify yourself or wait for processing. Deletion happens in that moment; backups are overwritten within 30 days. If you would rather just get a copy of your data, contact us and we will send it.
5. Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account, delivering the app's features, managing your subscription | Performance of a contract (Art. 6(1)(b)) |
| Building your health plan, training program and nutrition setup from your answers, tests and health data | Explicit consent (Art. 6(1)(a) + Art. 9(2)(a)) |
| Reading health data from Apple Health / Health Connect and measuring location during sessions | Explicit consent — given in the operating system dialog |
| Showing your progress over time, points, badges and leaderboards in challenges you take part in | Performance of a contract, and consent for anything based on health data |
| Sending reminders and notifications | Consent — you can turn them off in the app or in your phone settings |
| Producing aggregated statistics for your employer (company accounts only) | Legitimate interest in the employer's systematic work environment management, with an anonymity threshold so no individual can be identified |
| Security, fraud and abuse prevention, bot protection at sign-in, troubleshooting and stability | Legitimate interest (Art. 6(1)(f)) |
| Improving the service based on usage patterns and error reports | Legitimate interest (Art. 6(1)(f)) |
| Accounting and bookkeeping for company agreements | Legal obligation (Art. 6(1)(c)) |
What we never do
- We never sell your personal data.
- We never share health data with advertisers, ad networks or data brokers.
- We do not track you across other apps and websites, and the app contains no advertising.
- We never disclose your individual health answers to your employer.
6. What your employer sees — and never sees
This section only applies if you received GoMotion through your employer. With a personal account there is no employer involved at all.
What your employer can see
- That you are on the company's member list — your name, email address and which team you belong to. That is the list HR administers invitations with.
- Whether you have completed the health check or not, so HR can send reminders. That is participation — never the content of your answers.
- Your name, avatar, points and ranking in challenges and campaigns you take part in. That is the entire point of a competition, and it is visible to your colleagues as well.
- Aggregated statistics for the whole company or for a team: average score per health domain, share of active users, response rate, the group's combined steps or distance in a campaign.
What your employer never sees
- Your individual answers in the health check or in a pulse survey.
- Your individual health score or your sub-scores per domain.
- Your health plan, training program or nutrition setup.
- Your journal and wellbeing notes.
- Your detailed training logs, your GPS routes or your sessions.
- Data from Apple Health or Health Connect.
- Your body or health metrics.
Anonymity threshold
Aggregated data at team or domain level is only displayed once at least five people in that group have answered. Below five responses nothing is shown at all — no rounded value, no indication. This is enforced technically, not just promised in a policy.
If you leave the company, or move from a company account to a personal one, you immediately drop out of all company views, leaderboards and campaigns. Your own data comes with you.
7. What other users see
GoMotion has social features. What is visible to others is limited to the company or group you belong to — nothing is public on the internet and there are no open profiles.
- Your name and avatar are shown to other members of your company or group.
- Posts and images you publish are visible to the members of that same feed. You can delete your own posts.
- Points, rankings and completed sessions may appear on leaderboards and feeds for challenges you have chosen to join.
- Your health answers, plans, metrics, journal notes and GPS routes are never shared with other users.
Do not publish anything you would not want colleagues or group members to see. If you would rather not appear in the social parts at all, simply do not join groups and challenges — the rest of the app still works.
8. Who we share data with
We use a small number of providers to run the service. They process data on our behalf under data processing agreements, and only receive what they need.
| Provider | What they process |
|---|---|
| Supabase | Database, authentication and file storage. This holds your account, answers, plans, logs and uploaded images. Data is stored on servers within the EU. |
| Expo | Push notifications (via Apple APNs and Google FCM) and app updates. Receives a device token, not the content of your health data. |
| RevenueCat | Manages subscription status. Receives a customer ID and information about your purchase — never health data and never payment details. |
| Apple and Google | Sell the subscription, take payment and handle refunds. They are independent controllers for that, under their own terms. |
| Cloudflare | Bot protection (Cloudflare Turnstile) at sign-in and sign-up, to protect your account and stop mass email abuse. The check runs in invisible mode — you never have to click anything — and Cloudflare receives technical data such as your IP address and information about your browser or device in order to tell human traffic from bots. No health data is shared. See Cloudflare's Turnstile Privacy Addendum. |
| Vercel | Hosting for gomotion.se and the HR portal. |
| YouTube (Google) | Some exercises and meditations play through embedded video. When you start such a video, Google may set cookies and receive your IP address under its own policy. |
| Unsplash | Some background images are loaded directly from Unsplash when displayed, which means your IP address reaches their servers. |
Beyond this we only disclose data where required by law or by a decision of a public authority. Should GoMotion be acquired or merged into another company, we will inform you before data is transferred, and this policy continues to apply until you have been informed otherwise.
9. Transfers outside the EU/EEA
Our database is located within the EU. Some of the providers listed above — including RevenueCat, Expo, Cloudflare, Vercel, Apple and Google — are US companies and may process limited data outside the EU/EEA. Such transfers are made under the European Commission's Standard Contractual Clauses or an equivalent safeguard. Your health answers, plans and logs are not transferred there — they stay in the database within the EU.
10. How long we keep it
- For as long as you have an account, since the whole point is that you can follow your progress over time.
- When you delete your account, your account and data are removed from our active systems immediately. Backups are overwritten within 30 days.
- Accounting records — invoices for company agreements — are kept for seven years under the Swedish Accounting Act.
- Aggregated statistics that cannot be linked to you as an individual may remain after you delete your account.
Deleting your account does not automatically cancel a subscription bought through the App Store or Google Play — you cancel that there. See the Terms of Use.
11. Your rights
Under the GDPR you have the right to:
- Know what we process and request a copy of your data.
- Rectify inaccurate data — much of it you can change directly in the app.
- Erase your account and all your data. You can do this yourself in the app: menu → My account → Delete account. You do not need to contact us first.
- Restrict or object to processing based on legitimate interest.
- Receive your data in a machine-readable format and port it elsewhere.
- Withdraw your consent at any time, without affecting processing carried out beforehand.
Contact support@gomotion.se and we will respond without undue delay and at the latest within one month.
If you are unhappy with how we handle your data you have the right to lodge a complaint with the Swedish Authority for Privacy Protection, IMY, or with the supervisory authority in your country of residence.
12. Security
All communication between the app and our servers is encrypted over TLS. Passwords are stored hashed. Access to data in the database is controlled row by row, so an account can only read its own data and the HR portal can only read aggregates for its own company. The number of people at GoMotion with access to production data is limited to those who need it for operations and support.
Should a personal data breach occur that puts your rights at risk, we report it to IMY within 72 hours and inform you where the law requires it.
13. Children and age limit
GoMotion is not intended for children. You must be at least 16 years old to create an account. We do not knowingly collect data about children under 16. If we learn that such an account has been created, we delete it.
14. Automated decisions
Your health plan, training program and nutrition setup are generated automatically by an algorithm based on your answers, your test results and the health data you chose to share. That is automated processing — but it produces suggestions, nothing more. It has no legal effect and does not affect your employment, insurance, credit standing or anything similar. You can always change or ignore the suggestions, and you can contact us if you want a human to look at how a recommendation came about.
15. Medical disclaimer
GoMotion is a general wellness service and not a medical product or medical device. The app does not diagnose, treat, mitigate or cure any disease. The health check is a non-clinical self-assessment that produces lifestyle suggestions — it is not a medical test and does not replace assessment by a healthcare professional.
If you have symptoms, a known condition or concerns about your health, contact your healthcare provider. In Sweden, call 1177 for advice. In an emergency, call your local emergency number (112 in Sweden, 911 in the US).
17. Changes
We may update this policy as the service evolves. For material changes — for example if we start processing a new category of data or engage a new recipient — we will inform you in the app or by email before the change takes effect. The date at the top shows when the policy was last changed.
18. Contact
GoMotion AB
Company reg. no. 559455-0393
Gothenburg, Sweden
Email: support@gomotion.se
See also our Terms of Use.