Privacy Policy

1. Information we collect

• Account data: email, name (optional), password (stored hashed), optional birth year / generation, optional phone and location if you provide them, subscription status.
• Life OS data: goals, tasks, habits, reflections, voice transcripts, coaching preferences, and progress you choose to save.
• Kashu (Cash-Flow Intelligence) financial data (optional): if you use Kashu, we store operating balances, payday settings, safety floor / emergency buffers, bill and commitment entries, uploaded statement text (PDF/CSV/paste), parsed transactions, recurring suggestions you confirm or dismiss, and Transition Mode checklist notes. Kashu does not require bank login or bank aggregation — you upload or enter data yourself. Financial data stays on your account and is not shared with other users. See Kashu.
• KINZO AI (MyMotiveFamily) location & household data (optional): if you join a household and enable location sharing, we collect GPS coordinates, accuracy, speed, heading, battery level (when available), presence status (e.g. stationary / moving / driving), a phone-in-use while driving signal (on Android: screen on and unlocked; on iOS: MotiveLife open on screen), place labels you or your household configure, trip and place-history signals used for family intelligence, vehicle details you enter for fuel estimates, and household membership / invite information. See Section 2.
• Calendar data (optional): if you connect Google Calendar at Integrations, we access read-only event titles, times, and locations from calendars you authorize to personalize briefings. We do not modify or delete your calendar events.
• Health data (optional, Android Health Connect by Android): if you choose Sync Health Connect in the Android app after an in-app disclosure, we read only the types you authorize: steps, sleep sessions, resting heart rate, heart rate, heart rate variability, exercise sessions, active calories burned, and distance. We use those metrics for Vitalu wellness tracking and Life Score. MotiveLife and Vitalu are general wellness software, not a medical device. They do not diagnose, treat, cure, or prevent any disease or medical condition. Consult a healthcare professional for medical advice, diagnosis, or treatment. We do not sell health data, use it for advertising, or share it with third parties for their own marketing. MotiveLife does not write any records to Health Connect. Weight is not requested on Android. Steps cadence, cycling pedaling cadence, total calories burned, and exercise routes are not requested. You can deny or revoke Health Connect permissions anytime in Android settings. See Health Connect.
• Profile photo (optional): if you add a photo, we store the image you select (or capture) for your Life Circle / Family Map profile. On Android we use the system photo picker / camera for one-time selection — we do not request broad access to your entire photo library.
• Microphone (optional): used for Voice Organize when you choose to speak notes; audio is processed to create transcripts/tasks you save.
• Payment data: processed by Stripe (web) or Apple / Google in-app purchase systems (native apps). We receive subscription status — not full card numbers from those stores.
• Technical data: session cookies (essential for login on web), device/browser or app version, server logs for security, and aggregated page-view analytics on web (see below). Analytics are not used inside the native App Store / Play shells for advertising tracking.
• Consent records: timestamps when you accept Terms, Privacy Policy, and optional marketing consent.

2. KINZO AI (MyMotiveFamily) location sharing

KINZO AI (MyMotiveFamily) is optional. Location is collected only after an in-app disclosure, when you grant OS location permission and enable sharing for a household you belong to. MotiveLife collects your precise location to show a live pin to household members, even when the app is closed or not in use, if you choose Always / Allow all the time. You can leave sharing at While Using only, or turn sharing off anytime. Android may show an ongoing notification while background sharing is active.

• Who can see your location: members of the household (or location circle) you join, subject to your sharing level. We do not publish your live location publicly.
• Sharing levels you control: Precise, Approximate, Destination only, ETA only, Driving status only, or Off. Additional toggles may limit driving data, place history, routine learning, and family insights.
• How to change or stop sharing: set sharing to Off or a narrower level in Family Map privacy controls, revoke OS location permission in system Settings, leave the household, or delete your account.
• What we store in the cloud: your latest shared position and related presence fields on your household member record, plus short-lived location events, recent trips, places, and routine aggregates used for family intelligence. Household owners and members should only invite people who consent to this sharing.
• On-device drive history: richer route history (paths, day/month/year browse, fuel and speed insights) can be saved in your browser / app storage on this phone while live sharing is on. That history stays under your control on the device — you can delete individual drives or clear all of it anytime. It is not the same as continuous background tracking.
• Children & teens: MotiveLife is not directed to children under 13. Guardians who add younger household members are responsible for appropriate consent and for using age-appropriate sharing levels.
• Map display: KINZO AI renders the live map with MapLibre GL on OpenStreetMap vector tiles from OpenFreeMap (custom KINZO style). Leaflet raster (Esri streets, or CARTO when a key is configured) is a fallback only. Optional Esri satellite imagery may be used. Tile requests are based on the map viewport; they are not a sale of your personal location data.

Health Connect by Android

MotiveLife and Vitalu are general wellness software, not a medical device. They do not diagnose, treat, cure, or prevent any disease or medical condition. Consult a healthcare professional for medical advice, diagnosis, or treatment.

On Android, Vitalu can read Health Connect only after you Accept an in-app disclosure and grant access in the Health Connect permission sheet. We request read access for these types because each one powers a core Vitalu feature:

• Steps: Shows today's step count on Vitalu Overview and Activity so you can see progress toward your step target and Vital Score. Read-only. Not sold.
• Sleep: Shows last-night sleep duration on Vitalu Overview and Sleep so recovery and today's plan can use it. Read-only. Not sold.
• Resting heart rate: Shows recent resting heart rate on Vitalu Activity as optional recovery context — not diagnosis. Read-only. Not sold.
• Heart rate: Shows today's heart-rate average on Vitalu Activity as optional wellness context — stored separately from resting HR. Read-only. Not sold.
• Heart rate variability: Shows overnight HRV (RMSSD) on Vitalu Activity as optional recovery context — not diagnosis. Read-only. Not sold.
• Exercise: Shows workout duration as Active Minutes on Vitalu Overview and Activity so today's movement plan can adapt. We do not read cycling cadence. Read-only. Not sold.
• Active calories burned: Shows today's active calories on Vitalu Activity so you can compare movement load with your nutrition plan. Read-only. Not sold.
• Distance: Shows today's walking/running distance on Vitalu Activity. This is Health Connect distance, not live GPS. Read-only. Not sold.

MotiveLife does not write any records to Health Connect. Weight is not requested on Android. Steps cadence, cycling pedaling cadence, total calories burned, and exercise routes are not requested.

3. How we use information

We use your information to provide MotiveLife and KINZO AI (MyMotiveFamily) (briefings, reviews, voice organize, coaching, household map and family intelligence), process subscriptions, secure the service, comply with law, and — only if you opt in — send product emails. We do not sell your personal information, including location.

4. AI & voice processing

MotiveLife may send excerpts of your goals, tasks, voice transcripts, and reflections to OpenAI (US) to power optional AI features. You can still use rule-based features without AI. We do not sell your personal information.

Voice captures may contain sensitive personal information. We ask for explicit consent at signup before enabling AI features. You may still use rule-based features when AI limits are reached or AI is disabled.

5. Analytics

We use Vercel Analytics and Google Analytics for website traffic measurement, including page views, referrers, and device/browser information. Google Analytics is configured for the public web experience and is not loaded inside the MotiveLife iOS or Android native shell. We do not use analytics for cross-app advertising tracking or to make automated decisions about you. We also record anonymized page paths on our servers to understand feature usage.

6. Service providers

• Stripe — payments (US)
• OpenAI — optional AI processing (US)
• Google — optional Sign in with Google for account creation/login; optional Calendar OAuth (calendar access when you connect); Google Analytics for public website traffic measurement; Android Health Connect on-device APIs when you sync health metrics; Google Play Billing for Android subscriptions
• Apple — optional Sign in with Apple for account creation/login; App Store / In-App Purchase for iOS subscriptions when you purchase in the iOS app
• Supabase — database hosting (including Family Map location records you choose to share)
• Vercel — application hosting and analytics
• OpenStreetMap / OpenFreeMap — building-footprint vector tiles for KINZO AI display; CARTO — optional keyed street basemap; Esri — street / dark canvas tiles and optional satellite imagery

Data may be stored or processed in Canada, the United States, or other countries where these providers operate. We use contractual and technical safeguards appropriate for cross-border transfers.

Account & data deletion

Signed-in users can permanently delete their account in Settings → Delete account. Full instructions (including help if you cannot sign in) are on our data deletion page. Deleting your account removes associated MyMotiveFamily household membership and location records tied to that account, subject to legal retention needs. You may also email help@mymotivelife.com.

7. Your rights (Canada — PIPEDA)

You may request access to, correction of, or deletion of your personal information, subject to legal exceptions. You may withdraw consent for optional processing (such as marketing, analytics where applicable, calendar connection, Family location sharing, or AI) where applicable. Contact us at help@mymotivelife.com. You may file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

8. U.S. residents

Depending on your state (e.g., California, Virginia, Colorado), you may have rights to know, access, delete, or correct personal information, and to opt out of certain processing. We do not sell personal information. To exercise rights, email help@mymotivelife.com. We will verify your request before responding.

9. Marketing (CASL — Canada)

We only send promotional emails if you opt in at registration or later. Every marketing email includes an unsubscribe link. Transactional emails (billing, security, service updates) may still be sent.

10. Children

MotiveLife is not directed to children under 13 (U.S. COPPA). You must confirm you are at least 13 to register. We do not knowingly collect data from children under 13. Contact us to request deletion if you believe a child has registered. Household features that reference younger members must be used only with appropriate parental / guardian consent.

11. Retention & security

We retain account data while your account is active and for a reasonable period afterward for legal, tax, and fraud-prevention purposes. Billing records may be retained as required by law. Family location: live pins update while you share; GPS breadcrumbs are kept about 35 days (enough to redraw recent drive routes); finished drives and place stays are kept about 90 days on free live map, or about 12 months with MyMotiveFamily, then removed automatically. You can clear your own cloud history anytime in Family Map. Data is also removed or dissociated when you leave the household or delete your account (subject to short-term backups and legal holds). We use encryption in transit, hashed passwords, and access controls — no system is 100% secure.

12. Subscriptions

MotiveLife offers MyMotiveLife Pro ($14.99 CAD/month after a 14-day free trial) for one person, and KINZO AI ($19.99 CAD/month; billing SKU MyMotiveFamily) for a household — 6 members included · Expandable to 10 with optional +2 seat packs at $5.99 CAD/month each — including full Life Pro for the account owner and Family Intelligence for invited members (they do not each need individual Pro). Invited members join without a Pro trial; while their household is on KINZO AI they can unlock full private Pro for $9.99 CAD/month (household discount), or subscribe to standalone Pro at $14.99. Paid plans renew until you cancel in Settings, the Stripe billing portal, or (on iOS) Apple ID → Subscriptions. Web Pro checkout is processed by Stripe; App Store purchases are charged to your Apple ID.

13. Changes

We may update this policy. Material changes will be posted here with a new version date. Continued use after changes constitutes acceptance where permitted by law.

14. Contact

Privacy inquiries and general support: help@mymotivelife.com