Account Privacy Policy

Last updated: 13 October 2026

This policy applies to the xMotion account — the single sign-in of the Micromotion platform operated by xMotion ("we", "us") at sso.xmotion.me — and to the web products that use it (for example Pink, Rawi, MyClaw, Suqai, Educatalyst, Mamydays and the xMotion admin console). It explains what we collect when you create an account or sign in, including when you choose Sign in with Google. The separate Apps Privacy Policy covers our offline mobile apps.

Information we collect

• Account details you give us: email address and/or mobile number, name, preferred language and a password (stored only as a salted one-way hash).
• Sign in with Google: if you choose it, Google shares your Google account identifier, email address, whether that email is verified, your name and language. We do not receive your Google password, contacts, files or any other Google data, and we do not request any other Google permission.
• Security and session data: sign-in time, IP address, browser/user agent and the sessions you have open, used to keep your account secure and to let you see and end your sessions.
• Organization memberships: the workspaces (for example a salon or a company) you belong to and your role in them, as set by their administrators.

How we use it

• to create your account, sign you in and keep you signed in across our products (single sign-on);
• to recognize the same person across products, including linking a Google sign-in to an existing account that has the same verified email address;
• to send messages you need: verification codes, password resets and security notices;
• to protect accounts: rate limits, detecting suspicious sign-ins and audit logs.

We do not sell personal information and we do not use your account data for advertising. Information received from Google is used only to sign you in and keep your account details up to date, in line with the Google API Services User Data Policy, including its Limited Use requirements.

Sharing

A product you sign in to receives only what it needs: your account identifier, name, email and your role in it. Administrators of an organization you belong to can see your name, email and role in that organization. We use service providers (for example hosting and email/SMS delivery) under confidentiality obligations, and we disclose information when the law requires it.

Retention and deletion

We keep your account while it is active. You can sign out of all sessions and change your sign-in methods from your account page. To delete your account, email us from the address on the account; we delete or anonymize your account data within 30 days, except records we must keep by law (for example tax invoices issued by a business you used).

Security

Connections are encrypted (HTTPS), passwords are hashed with modern algorithms, signing keys are encrypted at rest and two-step verification is available.

Children

xMotion accounts are not directed to children under 13, and we do not knowingly create accounts for them.

Changes

We may update this policy. The latest version is always at xmotion.me/account-privacy.html with its "last updated" date.

Contact

Questions or deletion requests: [email protected].