PRIVACY POLICY (DRAFT: not legal advice; resolve every [bracket] and have counsel review before publishing)
Privacy Policy
Last updated: October 2, 2026
Who we are: Micromentum, operated by Benjamin Lovett. Contact: support@micromentum.app [confirm this mailbox exists].
1. What this policy covers
This policy explains what information the Micromentum iPhone app and the website micromentum.app collect, how we use it, and your choices.
2. Information we collect
- Account: your Sign in with Apple identifier and, if you choose to share it, your email address (which may be Apple's private relay address).
- Task data from the apps you connect (Todoist, Google Tasks): task titles, descriptions, due dates, priorities, labels, and completion status. We read this to rank your tasks. When you tap Done, we mark the task complete in the connected app.
- [Keep only if calendar ships at launch] Calendar data: if you connect Google Calendar or allow Calendar access on your iPhone, we read event times so we can avoid interrupting you during meetings.
- Your settings: time zone, active hours, optional energy profile, and pause settings.
- Activity: the notifications we send you and your responses (Done, Stuck, Too much).
- Device information: your push notification token, app version, and platform environment.
- Purchases: subscriptions are handled by Apple. We receive your subscription status, not your payment details.
- Technical logs: IP address, request identifiers, and error reports, used for security and reliability. Task titles are not written to our logs.
We do not collect your contacts, precise location, health data, or advertising identifier.
3. How we use information
To choose and send your hourly tasks, to write completions back to your task apps, to operate and secure the service, to provide support, and to fix problems and improve reliability. We do not sell your personal information, we do not share it for advertising, and we do not use it for advertising or profiling.
[Include only when AI features ship] AI features: for some features, task text is sent to our AI provider [NAME] to classify effort or suggest a small first step. We [do not allow the provider to train on it; verify against the provider's terms] and we send the minimum needed.
5. Security
We use encryption in transit. Tokens that connect your task apps are encrypted at rest. Access to your data is limited to your account. No system is perfectly secure, so we cannot guarantee absolute security.
6. Retention
We keep personal information only for as long as it is needed for the purposes described in this policy:
- Account identifiers, settings, open task data, device information, and subscription status are kept while your account is active.
- Tokens that connect a task app are kept until you disconnect that app or delete your account.
- Completed or deleted task records and notification-response history are kept for up to 90 days so we can maintain sync, personalize task selection, and investigate delivery problems.
- Technical logs are kept for up to 30 days, unless a longer period is necessary to investigate a security incident.
- Support correspondence is kept for up to 24 months after the issue is resolved.
When you delete your account, we delete your account data from our active systems. Encrypted backups are overwritten within 30 days and are not used for ordinary business operations.
7. Your choices and rights
- Disconnect a task app in Settings at any time; this revokes our access.
- Delete your account and data in the app (Settings > Delete account) or by emailing us.
- Request a copy of your data in the app or by emailing us.
- Depending on where you live (for example California and other U.S. states), you may have rights to access, correct, delete, or opt out of the sale or sharing of your personal information. We do not sell or share it. To exercise a right, email us; we will not discriminate against you for doing so.
8. European Union and United Kingdom
If EU or UK data protection law applies to you, Benjamin Lovett is the controller of your personal information. We rely on the following legal bases:
- Performance of a contract: to create and operate your account, rank and send tasks, sync with connected services, and provide subscription features you request.
- Consent: for optional access or processing when we specifically ask for your permission. You may withdraw consent at any time without affecting processing that already occurred.
- Legitimate interests: to secure, troubleshoot, and improve the reliability of Micromentum, where those interests are not overridden by your rights and interests.
- Legal obligations: when processing is necessary to comply with applicable law.
You may have rights to access, correct, erase, restrict, or object to processing of your information, and to receive portable information you provided to us. Where processing is based on consent, you may withdraw it. These rights can depend on the circumstances and legal basis. To exercise a right, email us.
Our service providers may process information outside the EU, European Economic Area, or UK. Where transfer rules apply, we use a legally recognized mechanism, such as an adequacy decision or approved contractual safeguards, including the EU Standard Contractual Clauses or the applicable UK transfer addendum or agreement. You may contact us for information about the safeguard used for a transfer.
You may lodge a complaint with the data protection authority where you live or work, or where you believe a violation occurred. In the UK, this is the Information Commissioner's Office.
9. Children
Micromentum is not for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
10. This website
micromentum.app does not use cookies, analytics, or third-party trackers.
11. Changes
We will post updates here and change the date above. For material changes, we will tell you in the app or by email.