Privacy Policy

Stored on your account (so the app works across sessions and devices, and so we can send your reminders):

• Your email, to log you in and tie your progress to your account, and — where you gave it to us for that (a quiz result, your onboarding plan, a funnel, a partner invite request) — to send you product email and letters. Every marketing email has a one-tap unsubscribe. We never sell your address.
• Your goal and its details, your streak and daily check-offs, and your Voice Anchor script.
• Your own voice backups. If you choose “Save across my devices,” we store your original recording and its details in your private account. See “Voices” below for how backups and local copies work.
• Your Record — your daily Moves and their outcomes, and the short answers and notes you save while using the app's tools (for example a reflection you keep, a sentence you finish in the Rule Audit, or the answers that sharpen your goal). These are stored in your own words so your record can follow you across devices.
• Your proof. When you are signed in and you prove a daily hard thing, the photo (or a single still frame from a video) and the short text of that day's hard thing are stored privately on our servers, with the time you recorded it. This is what lets your record survive across devices and be verified. Your proof photos are never public. A coach or organization sees a photo only if you choose to send them a proof card that includes it. If you are not signed in, your proof stays on your device only. You can delete all of it anytime by deleting your account (see below).
• Emergency petitions. If you ask us to protect a missed Campaign day after an absolute emergency, we store the date, the category you choose, and the short explanation you submit. A MORI62 owner reviews it and records an approval or denial. Do not send medical records, documents, or other sensitive proof. Petition records are private and are deleted when you delete your account.
• Anonymous usage data (which screens get used, where people drop off) to run and improve the app — not tied to your private entries.

Kept only on your device — not sent to our servers:

• Your journal and your letters.
• The list of invisible rules you name, and the self-doubt you share at the start.
• Your own voice recordings unless you choose “Save across my devices.” Any journal or vision photos that are not part of a signed-in daily proof.

These items stay on your device unless you choose to back up your own recording. Clearing your browser data removes the local copies. Everything else you write in the app can be saved to your account when you are signed in (that is how it follows you across devices). AI features you use send the text they need to our AI provider — see below — and if you said yes to personalization, the app may also run an occasional background AI pass over your saved record to suggest insights; say no and it does not run. Onboarding and quiz answers are sent to us when you ask us to email you a plan or a result, described next.

Sent to us when you ask us to email you something:

• If you give us your email on our onboarding, a quiz, or a landing page so we can send you your plan or result, we store that email together with the answers you typed on the way there(for example the goal you named, the thing you keep dodging, and your first name, if you gave it) — so that the plan we email you is actually yours and not a template. You can ask us to delete this at any time by replying to any email from us, and we delete it automatically if you create an account and then delete it.

• To provide the app and sync the account data above across your devices. (Your journal, letters, and the other on-device items listed above do not sync; they stay on the device you wrote them on.)
• To understand, in aggregate, where people get stuck so we can improve MORI62. Our usage analytics carry no free text you type.
• To communicate with you about your account.

We do not sell your personal information.

Where GDPR/UK-GDPR applies to you, we rely on one of these bases for each thing we do with your data:

• Contract (Art. 6(1)(b)) — running your account: syncing your Campaign and Record across devices, processing your subscription, and sending you the emails your account needs to function.
• Consent (Art. 6(1)(a)) — marketing email, the optional AI-personalization pass over your saved record, sharing your status with a cohort organization, and a partner's referral cookie. You can withdraw any of these at any time (an unsubscribe link, an in-app toggle, or the account screen), and withdrawing never affects the lawfulness of anything already done under it.
• Legitimate interests (Art. 6(1)(f)) — keeping the app secure and free of abuse, aggregate product analytics that never carries your free text, and administering the referral/partner program. We balance this against your rights: we never use this basis for your sensitive free-text entries (journal, hard-thing text, reflections) beyond what a feature you are actively using needs.
• Legal obligation (Art. 6(1)(c)) — keeping accounting records (partner commissions and payouts, 7 years) and responding to lawful requests from authorities.

• Account data (Campaign, Record, moments, proofs, Voice Anchor script) — until you delete your account.
• Proof photos and video-poster frames — until you delete your account.
• Your own voice backups. Until you delete your account. Making a new local recording does not delete older backups. Copies downloaded to another device may remain there until you clear that device's local app data.
• Voice deletion markers. We keep a hashed account marker after deletion to block old upload requests. It has no scheduled expiry. We keep random operation identifiers and hashed links to affected accounts while an upload's outcome is unresolved. Those operation records do not expire automatically. We remove them when completion or recovery is confirmed.
• Emergency petitions — until you delete your account (the no-account fallback also expires automatically after about 400 days regardless).
• Emails we have sent you (content and delivery record) — until you delete your account.
• Email opt-out records. We retain unsubscribe records after account deletion to honor your request to stop marketing email. We also keep a hashed email record to prevent adding you to outreach again after deletion.
• A quiz or onboarding lead that never became an account — until you ask us to delete it (reply to any email), or automatically if you later create and delete an account with that email.
• Cohort membership, status, and organization access-log rows — until you leave the cohort, delete your account, or the program's records are pruned on a routine retention schedule (currently 24 months for the access log).
• Aggregate or anonymized analytics events — kept indefinitely in de-identified form (your account link is removed when you delete your account).
• Partner / affiliate commission and payout records — 7 years, as required accounting records, even after you close your affiliate account or delete your MORI62 account.
• Push notification subscription — until you turn notifications off or delete your account.

• Supabase. Database, login and private file storage.
• Vercel — hosting.
• Vercel KV / Upstash. Hashed voice deletion markers and unresolved upload operation records.
• Anthropic (Claude) — when you use AI features, the text that feature needs (for example your goal, your answers, or saved record entries the feature draws on) is sent to Anthropic's AI to generate the result. Under our agreement with Anthropic, this data is not used to train AI models.
• Stripe — payments, if you subscribe to Premium. Your card details go directly to Stripe; we never see or store them.
• Resend / Amazon SES — to email you login codes.
• Telegram — internal operations alerts only. When you request organization access or a pilot, your email and form answers are relayed to our private ops channel so we can reply within a day.

If you arrive through a partner's link, we set a first-party cookie for up to 90 days so we can credit that partner if you subscribe. We record the click with a one-way hashed fingerprint of your IP address and browser type (we never store the raw values) and, if you sign up, we link your account to that partner so we can pay them a commission on your payments. This never exposes your name, email, or activity to the partner: partners see only aggregate numbers (clicks, signups, conversions, earnings).

Some partners promote through private campaign links that do not show you the partner's name or handle. When you click one, we record the same pseudonymous click information as any partner link (the one-way hashed signal above) along with an internal reference to the partner and campaign so the referral can be credited. We do not build a profile of you from this, we do not store your raw IP address, and this information is deleted when the partner closes their account.

You can join MORI62 through an organization: a gym, a workplace, a coach, or a program. When you do and you choose to share, that organization can see a fixed set of your progress: the name you pick for their roster, your day number, whether you did today's move, how many days you've kept this week, and whether you're on track. They can see a proof only if you tap to send that one card. They never see what you write, your notes, your photos, your Record, your email, or how you pay.

You can choose to share more, in levels, from your account. Level 1 adds your Momentum score and how fast you started. Level 2 adds the name of what you chase and your milestones. Level 3 sends your daily proof card for you. Each level is your choice, the default shares none of this, and lowering the level stops it right away. Your organization can also send you a one-tap nudge to move today; you can mute nudges any time, and the organization is told they are muted rather than left guessing.

The organization is its own company. It decides how it uses what it sees, and it should have its own privacy terms with you. We share only the fixed list above, and only after you agree.

If the organization pays for your Premium, we keep a record that it did and for how long, so that stays separate from any referral rewards. The organization pays us for the service, never for your information.

The organization can also see totals for the group, like how many people joined, are active, or finished. It never sees singled-out individuals this way, and small groups are hidden.

We keep a record of when the organization looks at member status, so access stays accountable. We keep cohort status and these records only as long as the program needs them, and we delete them on a set schedule. You can stop sharing at any time in your account. That hides you from the organization right away and clears the status it held. Deleting your account removes you from every cohort and erases these records.

Your own recordings. Mori keeps your recording on the device where you make it. Keeping or playing a local recording does not upload it. If you choose “Save across my devices,” Mori uploads the original audio and recording details to your private account. You can then play that backup on your other signed-in devices. Mori does not send this recording to a voice-generation provider or make a synthetic voice from it.

Your backup stays in your account until you delete your account. Making a new local recording does not delete older backups. Playing a backup on another device downloads a copy to that device. Account deletion removes the server recordings and clears the app's local data on the device where you delete the account. Copies cached on other devices may remain until you clear their local app data.

You can ask a person to record a line for you. The invitation link shares the line or lines you chose, the invitation label and an account reference used to route the recording to you. Their recording is stored privately for you and only you can play it. Deleting your account deletes it.

If you lend your voice we show your name and your one line and your sample to members. The lines you record for a member go to that member only. You can pause new requests. Deleting your account removes your voice profile and sample. Recordings already delivered to another member remain in that member's account until they delete the recordings or their account.

No recording is ever used to make a synthetic voice.

When deletion is pending. We block new voice uploads before removing your recordings. If an upload is still running or its outcome is unknown, deletion stays pending until we can confirm it has stopped. Your account remains available so you can retry deletion.

We keep a hashed deletion marker to stop an old upload request from restoring voice data after deletion. The marker contains no recording, words, name or email. It is a derived account identifier. It has no scheduled expiry. We also keep random operation identifiers and hashed links to affected accounts while an upload's outcome remains unresolved. We remove those operation records when completion or recovery is confirmed.

You can edit or delete your entries in the app. Your account screen has these self-serve controls:

• Download my data. Downloads your Campaign, Record and other supported account records as one data file. The download does not include audio files. You can contact us below to request access to other personal data we hold.
• Delete my account. Requests permanent erasure of your personal data and cancellation of your subscription. We confirm completion only after the required deletion steps finish. A failed or unresolved upload can keep deletion pending. Retained records include the hashed voice deletion marker, email opt-out and outreach suppression records, required accounting records and usage counts that are no longer tied to you. Recordings you delivered to another member stay in their account as described in “Voices.” See “How long we keep it” above.

Wherever you live, you may ask us to access, correct, opt out of marketing, or delete the personal data we hold about you by emailing the address below — we will act on it within 30 days (or sooner). We do not sell or share your personal information (see California Privacy Rights below for what that means precisely), and there is no fee for making a request and no penalty for exercising any of these rights — we will never give you a different level of service because you asked.

If you are a California resident, this section applies to you specifically, using the categories the law defines.

Categories of personal information we collect, and where each comes from:

• Identifiers. Email and account ID. We also create hashed account markers and random operation identifiers to coordinate voice uploads and deletion.
• Commercial information — subscription and purchase history, gift codes (from you, via Stripe).
• Internet or network activity — which screens get used, referral clicks (pseudonymous, hashed; automatically, from your use of the app).
• Audio or visual information. Proof photos, a still frame from a proof video, and voice recordings you choose to back up or submit.
• Professional or employment-adjacent information — a partner applicant's optional discovery answers and resume (from you, only if you apply to the partner program).
• Sensitive personal information (as CPRA defines it) — free text you write that may touch health, finances, or religious belief (we treat all free text as sensitive-adjacent, whether or not it meets the legal definition; from you, directly).

Business purposes we use it for: providing and improving the app, account security and fraud prevention, customer support, processing payments, sending the emails you asked for or that your account needs, and administering the referral/partner program.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (CPRA's defined meaning of “share”). We run no ad-tech, no ad pixels, and no cross-site ad-targeting integration. Because we do not sell or share, there is no “Do Not Sell or Share My Personal Information” link — that mechanism exists to let you opt out of a sale or share that would otherwise happen, and none does.

Your California rights: to know what we collect and why, to delete it, to correct it, and to opt out of sale or share (moot today, since none occurs) — with no discrimination for asking. Email the address below to exercise any of these; see “Your choices and your rights” above for the self-serve controls and deletion timing.