Privacy Policy

We collect the following categories of information:

We use the data we collect to:

• Operate, secure, and improve the Service.
• Send you transactional emails (password reset, security alerts, account changes, goal-related notifications you've opted into).
• Send you weekly digests and re-engagement emails (only if you haven't opted out of that category).
• Investigate abuse, violations of our Community Guidelines, or illegal activity.
• Respond to legal requests when required (see Section 8).

We do not use your data for automated decision-making that meaningfully affects you (e.g. credit scoring, insurance). We don't profile you for advertising. We don't sell it.

We do not sell, rent, or trade your personal information. We share it only with the following categories of recipients, and only what's necessary:

The Service uses the browser's localStorage to persist your session token (so you stay signed in across page reloads). We do not set any tracking cookies or share cookie data with third parties.

If we ever add analytics that require cookies, we'll update this policy and ask for your consent where required by law (e.g. under the ePrivacy Directive in the EU).

GoMotivateMe is operated from Ireland. Our service providers (Convex, Vercel, Resend, Cloudflare) may process data in the United States, the European Economic Area, or other regions.

For transfers from the EEA, UK, or Switzerland to the United States, we rely on the European Commission's Standard Contractual Clauses and the provider's data processing agreements. You can request a copy by emailing us.

We keep your account data for as long as your account is active. When you delete your account:

• Account profile, goals, updates, and messages are deleted from our primary database within 30 days.
• Backups are aged out within 90 days. Backups are encrypted and access-controlled.
• Some records may be retained longer if we have a legal obligation (e.g. tax records, abuse investigations).

You can do the following at any time (most are one-click in Settings):

• Access — request a copy of your data (we'll email you a JSON + CSV export within 7 days).
• Correct — update your email, name, handle, bio, or any other profile field.
• Delete — delete your account. Your data is removed per Section 6.
• Restrict processing — ask us to stop using your data for a specific purpose (e.g. disable analytics on your account).
• Object — if we ever use your data in a way you disagree with, you can object and we'll review.
• Port — export all your data in a machine-readable format.
• Withdraw consent — for any optional processing, like marketing emails. Unsubscribe links are in every email, or use the in-app toggle.
• Complain — if you're in the EU, you can also lodge a complaint with your local data protection authority. We'd prefer you email us first so we can try to fix it.

We use industry-standard security practices: HTTPS everywhere, hashed passwords (scrypt with per-user salt), encrypted backups, principle-of-least-access for staff, and prompt patching of dependencies.

No system is perfectly secure. If you discover a security issue, please email security@gomotivateme.com. We respond to security reports within 48 hours and run a disclosure program as we grow.

The Service is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, email hello@gomotivateme.com and we'll delete the account.

We may update this policy. If we make a material change, we'll let you know by email and post a notice on the Service. The "Last updated" date at the top of this page will change too.

If you keep using the Service after a change takes effect, you accept the new policy.

Questions or requests? Email hello@gomotivateme.com. We respond within 7 days.

For data protection requests specifically (access, deletion, portability), please use privacy@gomotivateme.com so we can route them to the right person.