Privacy Policy

We collect the following categories of information:

We use the data we collect to:

• Operate, secure, and improve the Service.
• With your consent, measure traffic sources, page use, and a deliberately limited set of conversion events so we can understand which parts of the Service help people return and make progress.
• Send you transactional emails (password reset, security alerts, account changes, goal-related notifications you've opted into).
• Send goal activity summaries and accountability reminders according to the choices in your email settings.
• Send the optional Discover newsletter featuring approved public goals only after you affirmatively choose Daily or Weekly. It is off by default and can be turned off at any time.
• Feature content from approved public goals in discovery surfaces, including the optional Discover newsletter. Private, unlisted, anonymous, rejected, and sensitive-category goals are excluded from that newsletter.
• Investigate abuse, violations of our Community Guidelines, or illegal activity.
• Respond to legal requests when required (see Section 8).

We do not use your data for automated decision-making that meaningfully affects you (e.g. credit scoring, insurance). We don't profile you for advertising. We don't sell it.

We do not sell, rent, or trade your personal information. We share it only with the following categories of recipients, and only what's necessary:

The Service uses essential browser storage for authentication, security, consent choices, and reaction integrity. With your permission, DataFast sets analytics cookies with durations ranging from 30 minutes to one year and loads its tracking script. It remains blocked if you reject analytics.

You can change or withdraw that choice at any time through Cookie settings in the footer. Withdrawal stops the tracker and removes its cookies from this site. Our separate Cookie Policy lists the technologies, purposes, and durations in detail.

GoMotivateMe is operated from Ireland. Our service providers (Convex, Vercel, Resend, Cloudflare, and DataFast where you consent) may process data in the United States, the European Economic Area, or other regions.

Where information is transferred outside the EEA, UK, or Switzerland, we use the safeguards made available by the relevant provider and our data processing agreements, which may include Standard Contractual Clauses. You can request more information by emailing us.

We keep your account data for as long as your account is active. When you delete your account:

• Account profile, goals, updates, and messages are deleted from our primary database within 30 days.
• Backups are aged out within 90 days. Backups are encrypted and access-controlled.
• Analytics cookies expire after 30 minutes to one year. Analytics events are retained in our DataFast account according to our active service plan and deletion settings, or deleted earlier when required to honour a valid request.
• Some records may be retained longer if we have a legal obligation (e.g. tax records, abuse investigations).

You can do the following at any time (most are one-click in Settings):

• Access: request a copy of your data (we'll email you a JSON + CSV export within 7 days).
• Correct: update your email, name, handle, bio, or any other profile field.
• Delete: delete your account. Your data is removed per Section 6.
• Restrict processing: ask us to stop using your data for a specific purpose (e.g. disable analytics on your account).
• Object: if we ever use your data in a way you disagree with, you can object and we'll review.
• Port: export all your data in a machine-readable format.
• Withdraw consent: for any optional processing. Use Cookie settings for analytics; for marketing email, use the unsubscribe link in every message or the in-app email setting.
• Complain: if you're in the EU, you can also lodge a complaint with your local data protection authority. We'd prefer you email us first so we can try to fix it.

We use industry-standard security practices: HTTPS everywhere, hashed passwords (scrypt with per-user salt), encrypted backups, principle-of-least-access for staff, and prompt patching of dependencies.

No system is perfectly secure. If you discover a security issue, please email security@gomotivateme.com. We respond to security reports within 48 hours and run a disclosure program as we grow.

The Service is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, email hello@gomotivateme.com and we'll delete the account.

We may update this policy. If we make a material change, we'll let you know by email and post a notice on the Service. The "Last updated" date at the top of this page will change too.

If you keep using the Service after a change takes effect, you accept the new policy.

Questions or requests? Email hello@gomotivateme.com. We respond within 7 days.

For data protection requests specifically (access, deletion, portability), please use privacy@gomotivateme.com so we can route them to the right person.