Privacy Policy

MORE Mindful (“MORE”, “we”, “us”) is a free, privacy-respecting companion to Martin Vogt's book You're Not Lost, You're Here and the Good Grief by Martin 100 Days podcast. We built MORE so you can keep a daily mindful practice without handing over your life story. This policy explains what we collect, why, where it lives, and the control you have over it.

The short version

• You need an account to save your entries. You can sign up with an email address and a password, or continue with Google, Microsoft or Apple.
• We use your email address to identify your account. You can add an optional display name and country, which we use only to greet you. We don't use the name or photo your sign-in provider shares.
• We never sell your data, never show third-party advertising, and never run text analysis on what you write.
• You can ask us to delete your account and all your entries at any time. Here's how.
• Nothing you enter on the Try it page is stored.

Who we are

MORE Mindful is operated by Martin Vogt. For any privacy question or request, email mindbodyself10@gmail.com. For the purposes of the UK and EU GDPR, that contact acts as the data controller for MORE.

What we collect

Your account

An account is required to save entries. You can create one with an email address and a password, or continue with Google, Microsoft or Apple. Sign-in is handled for us by Firebase Authentication, a Google service. It stores your email address and, if you use a password, a securely hashed form of it. We never see your password. We use your email address to identify your account and, when you ask for one, to send you a password-reset link.

Signing in with Google, Microsoft or Apple

If you continue with Google or Apple, that provider shares your email address with Firebase Authentication and, depending on the provider, your name and profile photo. If you continue with Microsoft, Microsoft shares your basic Microsoft profile: your email address, name and Microsoft account ID and, for a work or school account, any job title, work and mobile phone numbers, office location and preferred language your organisation has filled in. Microsoft doesn't share a photo. We use the email address to identify your account. We don't use that name or photo anywhere in MORE, and MORE doesn't use or store those other details. If you'd like MORE to greet you by name, you choose the name yourself (see “Your profile” below). If you sign in with Apple and choose to hide your email, Apple gives us a private relay address that forwards to your own.

If you use more than one of these methods with the same email address, we connect them to one account, so you keep one history.

The provider you choose also knows that you signed in to MORE, and handles that under its own privacy policy: see Google's, Microsoft's and Apple's.

Your profile (optional)

On your Account page you can add a display name and your country. Both are optional. They're stored with your account and used only to greet you in the app. The name doesn't have to be your real name. You can change or remove either at any time on the Account page, and both are deleted with your account.

Until you first save your profile, the country starts on Australia. It's only saved if you press Save, and once you've saved your profile (including with “Prefer not to say”) we don't fill it in again.

The practice data you create

We store your daily check-ins so they are there when you come back: the score you give each category, any words you add under a category, your note for the day, and when each entry was saved. Your words are stored as you wrote them - we do not score, profile, or interpret them.

Trying MORE without an account

The Try it page lets you try the daily check-in before you sign up. Nothing you enter there is sent to us or stored. It is held in your browser only while the page is open, and it is gone when you leave or refresh.

Technical data

MORE does not currently use analytics. Your device's clock decides which day an entry belongs to; we don't store your time zone. Firebase Authentication records when your account was created and when you last signed in. Like most online services, Google and our hosting provider keep technical logs, such as IP addresses and browser type, to run and protect the service.

What we never do

• We do not sell or rent your data.
• We do not show third-party advertising or embed cross-site trackers.
• We do not run text analysis, sentiment-scoring, or AI profiling on anything you write.
• We do not require your real name. A display name is optional, and it can be any name you like.

Why we are allowed to use your data (legal bases)

Under the GDPR we rely on our legitimate interest to run the core service - keeping your account and saving your entries so the app is useful. If we ever add optional analytics or marketing email, we will ask for your consent first, and you will be able to turn them off at any time without losing access to the app.

Where your data is stored and who can access it

MORE runs on Google Firebase (Authentication and Firestore). Your data is encrypted in transit and at rest by Google. In the interests of being straight with you: MORE does not use end-to-end encryption, so the small team operating the app can technically access stored content, including the words you write, in order to run, support, and back up the service. We treat that content as confidential and access it only when necessary.

So MORE works offline, your browser also keeps a copy of your profile and the entries you have opened. Signing out clears that copy from this device.

Service providers

We use a few companies to run MORE. Each handles your data only as far as its part of the service needs:

• Google (Firebase Authentication and Cloud Firestore) signs you in and stores your account, your profile and your entries. It also provides Google sign-in, if you choose it.
• Vercel hosts the MORE website and app.
• Microsoft provides Microsoft sign-in, only if you continue with Microsoft.
• Apple provides Sign in with Apple, only if you continue with Apple.

These companies may process data outside your country, including in the United States. We don't share your data with anyone else unless the law requires it.

Cookies and storage on your device

MORE uses no analytics, advertising, or tracking cookies. It uses your browser's storage only for what the app needs to work: keeping you signed in, the offline copy of your entries, and the app's own files so it opens quickly. Google, Microsoft, and Apple may set their own cookies on their sign-in pages, under their own policies.

Your rights

You can, at any time:

• Access the data held about you.
• Erase your account and all your entries (GDPR Art. 17). See Deleting your account below.
• Export a copy of your data - request this by email and we will provide it.
• Object to a particular use of your data, or withdraw any consent you have given.

Email mindbodyself10@gmail.com and we will action any of the above. You also have the right to complain to your local data-protection authority.

How long we keep it

We keep your account, your profile and your entries for as long as your account exists. When you ask us to delete your account, we delete it, your profile and all your entries as described above.

Earlier versions of MORE let you check in without an account. Those check-ins were never linked to a name or email address, and they can no longer be opened from the app. We plan to delete them.

Children

MORE is intended for adults and is not directed at children. You must be at least 16 to create an account.

If you are outside the EU/UK

The same protections apply wherever you are. For California residents: we do not sell personal information, so the CCPA “Do Not Sell” right does not apply - there is nothing to opt out of.

Changes to this policy

We may update this policy as MORE evolves. We will announce material changes in-app and update the date at the top of this page.

Contact

Questions about your privacy? Email mindbodyself10@gmail.com.