Privacy Policy

Last updated: 21 August 2026

1. Who we are

Motus is a physiotherapy home-exercise prescription platform operated by Fernando Esteban Silva (ABN 71 454 919 024), operating the Motus service under the Avlis brand, based in Western Australia, Australia ("Motus", "we", "us", "our"). This Privacy Policy explains how we collect, use, disclose, store, and protect personal information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").

If you are a patient, the physiotherapy clinic treating you is responsible for your care and for the records it keeps about you. Motus does not receive or handle your medical records, clinical history, or any of the clinic's other information about you. What Motus holds is what is created in the Motus app itself: the short exercise demonstration videos, GIFs or sound models your clinician records; the exercise dosage; a minimal set of contact details (a name, and optionally an email or phone used only to send you the program link); anything you report back through your program link, such as how much pain or effort an exercise caused; any recordings you make in response to a sound model; and the notes and measurements your clinician writes against those exercises. Some of that is health information about you. Motus stores this limited information on the clinic's behalf, only as its service provider, and never decides how it is used. (A separate, optional Community add-on for outreach practitioners is described in section 10A.)

2. Who this policy applies to

This policy applies to physiotherapists and clinic staff who hold a Motus account, and to patients who access exercise programs through the Motus patient portal.

3. What we collect

From physiotherapists and clinic accounts: name, email, login credentials (handled by our authentication provider), clinic/group membership, and billing identifiers (for subscription payments, handled by Stripe).

About patients: a name; optionally an email or phone number used only to share the program link (the clinic may instead send the link via its own EMR/practice software); optional free-text notes and a profile photo; the prescribed exercises (demonstration videos/GIFs, which may show the patient); and records of exercise completion and outcomes. For speech-pathology exercises Motus also uses the device microphone to record short voice clips: the clinician's spoken model of an exercise, and the patient's practice attempt sent back to their clinician. Recording is always started by the person tapping record, never in the background, and the clip is stored as part of the clinical record because for speech work the voice IS the content.

Motus is separate from the clinic's EMR/practice-management software and is free for patients — we hold no patient payment details. We do not collect clinical histories, diagnoses, or government identifiers. (The only exception is the optional Community add-on described in section 10A, where the practitioner using the add-on — not Motus — records and is the custodian of that information.)

Automatically, we record basic technical and access information (IP address, device type, timestamps) for security and audit (consent and deletion records), and diagnostic/usage events linked to your account (for example, "exercise added"), used only to operate and support the service.

4. How and why we use information

We use information to provide and maintain the service and patient portal; to let physiotherapists prescribe and patients view their programs; to record adherence and outcomes; to keep the service secure and maintain audit records; to manage clinic subscriptions; and to improve the product using non-identifying usage data. We do not sell or rent personal information, and we do not use patient information for advertising, profiling, or AI training.

5. Consent

Health information is "sensitive information" under the APPs. Before a patient can view any content, Motus presents a clear, versioned consent step and records that consent with a timestamp. Patients can withdraw consent and request deletion at any time (see section 9).

6. Disclosure and third parties

We disclose personal information only to the treating clinic and its authorised practitioners; to a small number of trusted service providers who operate the platform on our behalf — Google / Firebase (database, authentication and media storage, in Australia), Vercel (application hosting, with server-side processing in Australia), Apple (push notifications to a practitioner's own device, which may include a patient's first name), Resend (email to practitioner and clinic accounts only — patient records are never emailed), and Stripe (clinic billing only; patients do not enter payment details); and where required or authorised by law. We do not disclose patient information to any party for marketing.

7. Storage, security and data location

We protect personal information with encryption in transit (TLS/HTTPS) and at rest on Google Cloud Platform infrastructure; individual authenticated accounts for physiotherapists with server-side controls so a physiotherapist can access only their own or their clinic's patients; private, randomly-generated secure links for the patient portal and exercise media (media is not publicly readable — token-less access by path is denied); audit records of consent and deletion; per-patient retention schedules, automatic deletion of patient records after six months of inactivity, deletion on request and on account deletion; and immediate deletion of all of your data when you delete your account.

Patient data is stored in Australia (Sydney region) — both the database (names, contact details, notes, consent, outcomes) and the exercise media. Limited transient processing by our hosting providers may occur in other regions; where that happens we take reasonable steps to ensure it is handled consistently with the APPs.

As the platform operator we have the technical ability to access stored data only to run, maintain and support the service, as is standard for any hosted software provider. We do not access patient content for any other purpose.

8. Data retention

Inactive patient records are automatically deleted after 6 months of inactivity, so data is not kept indefinitely. Clinic account information is retained while the account is active and for a reasonable period afterward, or as required by law. Audit certificates (consent and deletion records) are retained as evidence of compliance.

9. Your rights

Under the APPs you may access the personal information we hold about you; request correction; request deletion (patients can delete their own data from the portal at any time; clinics can also delete a patient's data on request); and withdraw consent to the patient portal. To make a request, contact us (section 11) or your treating clinic.

10. Cookies, analytics and children

Motus uses essential cookies/local storage to keep you signed in and operate the service, and diagnostic and usage events linked to your account, used only to operate and support the service. We do not use product-analytics SDKs, advertising trackers, or any cross-app tracking. Where a patient is a minor, the clinic is responsible for obtaining consent from a parent or guardian as required.

10A. Community add-on (limited testing)

Community is an optional add-on to a Motus subscription, currently in a limited testing phase, enabled per account only by the Motus administrator. This section applies only to accounts with the Community add-on enabled; nothing in it changes how the standard Motus service handles data.

Community is a private field tool in which a clinic's practitioners keep a shared working list of outreach patients — which may include names, patient or NDIS identifiers, community and lot locations, recall notes, priorities and visit notes. This information is entered by the practitioner, not collected by Motus, and the practitioners using the add-on and the clinic they work for are its custodians — never Motus: they are responsible and accountable for having the right and any required consents to record it, for its accuracy, and for deleting it when no longer needed. Before first use, each Community user must accept a Data Custodianship Agreement stating these responsibilities.

Community information is accessible only to the Community-designated members of the clinic that recorded it, and only through the Motus platform — it is not visible to Motus users outside that clinic, to other clinics, or to the public, is kept as a separate dataset from Motus exercise-prescription patients, and has no export or patient-facing surface. It is protected by the same authentication, server-side security rules, encryption and infrastructure described in section 7, and is deleted with the account (or earlier on request). Motus does not use Community information for any purpose other than hosting it for the clinic.

11. Contact and complaints

Privacy contact: contact@avlis.group. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Changes

We may update this policy from time to time. The current version is always available at https://motus.avlis.group/privacy, and the date shown on this document reflects the latest version.