Privacy Policy

The short version

• We collect what you type into MeOS so the app can work. Nothing more.
• We never sell your data. We never share it with advertisers. There are no ads.
• Your data is yours: you can export it or delete your account (and everything in it) by emailing us.
• Integrations (calendar, banking, health) are off by default, opt-in only, and each one tells you exactly what it reads before you connect it.

1. What we collect

Account information. Your email address and a password (or your Google account identity if you sign in with Google), plus the invite code you used to join the beta.

Profile. Display name, role line, and an optional portrait photo you upload for your player card.

Life data you enter. MeOS is a manual-entry life dashboard. Everything below exists only because you typed it in: your pillars, target levels, XP and levels; daily do's (habits) and check-in history; quests and badges; dreams and bucket-list items (including images you attach and target dates); 12-week goals, 10-year visions, campaigns, strategies, and weekly execution records; personal metrics (a name, a current value, a target — e.g. "weight: 185 → 175"); and calendar events you create.

People you add (your personal CRM). MeOS lets you keep a private contact list: names, phone numbers, email addresses, birthdays, relationship notes, and interaction history for people in your life. This information is visible only to you — never to the people listed, never to other MeOS users, never to anyone else. You are responsible for the information you record about others; enter what you'd be comfortable with them seeing.

What we do NOT collect. No advertising trackers, no analytics profiles sold to third parties, no location tracking, no contact-list scraping from your phone. During the beta MeOS collects nothing automatically from any outside service.

2. How we use it

Solely to run MeOS for you: computing your pillar healths and Life Score, awarding XP and badges, powering your streaks, countdowns, follow-up nudges, and dashboards; and to contact you about your account or material changes to the service. That's the whole list.

3. Sensitive-by-nature data

Some of what you might choose to enter — a metric like body weight, a financial goal, a spiritual habit — can reveal health, financial, or religious information. MeOS treats all your life data with the same rule: it is private to your account, used only to render your own dashboard, and never analyzed, shared, or monetized.

4. Future integrations (opt-in, not yet live)

We plan optional paid integrations, each off until you explicitly connect it, each revocable at any time, and each collecting only what's listed here:

• Google Calendar — reads your calendar events to display them in the MeOS calendar. Use of Google user data will comply with the Google API Services User Data Policy, including its Limited Use requirements: calendar data is used only to show your calendar inside MeOS, never for ads, and never transferred to third parties.
• Plaid (banking) — reads account balances and transactions to power your Financial pillar. We receive data through Plaid; we never see or store your bank credentials.
• Oura (health) — reads sleep, readiness, and activity scores to power your Physical and Emotional pillars.
• Macros First (nutrition) — reads your nutrition log to power Physical-pillar metrics.
• Follow Up Boss (CRM) — reads your contact and activity data to power Social/Professional pillars.

When each launches, this policy will be updated with the specifics, and connecting will require your affirmative action. Disconnecting an integration stops all collection from it; you can also ask us to delete the historical data it brought in.

5. Where your data lives, and who can touch it

MeOS runs on Lovable (hosting) and Supabase (database, authentication, and file storage) — our service providers, which process data only to provide their infrastructure. Every record is tied to your account, and database-level row security ensures one user cannot read another's data. Data is transmitted over HTTPS. No system is perfectly secure, but we don't hold anything we don't need.

We disclose data only: to those service providers; if the law requires it; or to protect the rights and safety of users. If MeOS is ever acquired or reorganized into a company, your data goes with the service under this same policy (or you'll be notified with a chance to delete first).

6. Your rights and choices

Email joshuagparish@gmail.com to: get a copy of your data (export), correct it, delete specific records, or delete your account and all associated data. We'll act within 30 days, usually much faster. You can edit or delete almost everything yourself inside the app. Depending on where you live (e.g., EEA/UK GDPR, California CCPA), you may have additional statutory rights — the email above is how you exercise any of them, and we do not discriminate against you for doing so. We do not sell or share personal information as those terms are defined in the CCPA.

7. Retention, children, changes

We keep your data while your account exists and delete it when you ask (backups purge on the provider's normal cycle, ≤90 days). MeOS is for adults: you must be 18 or older, and we don't knowingly collect data from anyone under 18 — if we learn we have, we delete it. If this policy materially changes, we'll notify you by email or in-app before the change takes effect.