Privacy policy

The short version

TikTok helps us measure app installs and sales.

MoreLife needs an account so your goal, your schedule and your history follow you to a new phone. Beyond that, almost everything you do in the app stays on your phone. The exceptions: what you type to the coach is processed by AI services to generate replies, what you say to it is turned into text by a transcription service, one future image is created by an AI image service, an idea you send us is stored so we can read it, a subscription is handled by Apple or by RevenueCat and Stripe on the web, and crash reports and usage counts help us fix what is broken. We don’t sell your data. You can erase everything yourself, in the app, at any time.

Your account

Signing in stores your email address and your first name. Accounts are held by Supabase, the sign-in and database service we use. If you sign in with Apple you can use Apple’s private relay address, and we never see your real one. Apple gives us your name only the very first time you authorize, so if you change it later, change it in the app. If you sign in with Google, Google gives us your email address and your name, and nothing else.

Your data

Your schedule and blocks, check-in history, streak record, remembered coach facts, progress photos, preferences, and your North Star live on your phone, and the app reads and writes them locally, offline included. A copy is also backed up to your account, held by Supabase, so a new phone can restore it. Progress photos are the exception and are never included in that backup.

Progress photos

Progress photos are stored inside the app and are never sent to us. Deleting the app destroys everything inside it, so the app offers to save a copy of each photo into a MoreLife album in your own Photos library. iOS asks first. The app uses your library only to let you pick a photo and to add copies to that album; it never browses or uploads anything else. If you say yes, those copies behave like any other photo you own, which means iCloud Photos, Memories and People can include them. If you say no, nothing is copied and the photos stay in the app.

Coach conversations

Your messages, goals, onboarding answers, schedule, activity, streaks, settings, chat history, and schedule-item names are sent through our Railway server to Qwen by Alibaba Cloud through OpenRouter. The coach uses this information to write replies, and schedule-item names can be used to choose an emoji.

Our server acts as a relay: it enforces rate limits and spending caps and keeps short-lived operational logs. Requests are tied to your account, because that is how the limits are counted, but we do not build a profile of you from them. Each provider we hand your words to is bound by terms that hold it to at least the protection this policy describes. Even so, don’t include information in a chat that you wouldn’t want processed this way.

The app asks for your permission before the first conversation, and you can withdraw it at any time in Settings under “AI and your data”. The coach, voice and the future pictures stop until you say yes again.

Your conversations with the coach are also kept on your phone, so the coach can remember what you have already talked about, and they are included in the backup attached to your account.

Your conversations with the coach are also kept in Supabase for 30 days, so I can read how the coach is doing and make it better. They are tied to your account only so they can be deleted with it, they are never used to build a profile of you, and they are never sold or shared.

Voice

Voice recordings are sent through our Railway server to OpenAI for transcription and are not saved. The resulting text enters the conversation like anything you typed.

The pictures MoreLife makes of your future

MoreLife shows two pictures of where you are headed. One is a bundled photograph of what staying where you are looks like. To create the future image, your dream description and obstacles are sent through our Railway server to OpenAI for safety screening and Google Gemini for image creation. The image comes back to your phone and is stored there. Your photos are never sent, and the people in the generated image are not you and are not real.

Ideas you send us

Settings has a box for sending us an idea. What you write in it is stored on our server, attached to your account so we can tell one person’s idea from another’s and answer you if it needs an answer. It is never published, never shown to another user, and there is no list, no vote and no score anywhere in the app. Deleting your account deletes what you sent.

Crash reports

If the app crashes or hits an error, a diagnostic report (stack trace, device model, OS version, app version) is sent to Sentry, a crash-reporting service, so we can find and fix the bug. Each report carries a random id that identifies your installation, so repeated crashes can be recognized as coming from one phone rather than many. It is not your name, your email, or an account, and reinstalling the app generates a new one. We declare that id as an identifier in our App Store privacy label, and we never set it to your MoreLife account id, so crash reports stay unlinked to your account. These reports are not used for advertising or profiling.

Product analytics

You can turn it off anytime in Settings → Share usage data. Turning it off stops future analytics collection.

I count what people do in the app: opening it, finishing a step of setup, ticking off a block. It tells me which parts people actually reach. These events use your account ID. They never include anything you or the coach wrote. It does include the multiple-choice answers you tap during setup (how you found the app, how long you have been putting this off, who you are doing it for, the five questions about your pattern, your notification choice). No coach message, no goal, no name, no note and no photo is ever sent to analytics, and we do not send your email address. There is no session recording and no screen recording.

PostHog links app use and payment events with your MoreLife account ID. Payment events include purchases, renewals, refunds and plan changes. Turning off Share usage data stops app events right away. It stops future billing events once your phone sends the change to our server. We never use these events for ads or share them with data brokers. PostHog receives your IP address through the network connection. We turn off its location lookup.

Notifications

Reminders are scheduled locally on your device. If you decline notification permission, nothing is scheduled. You can turn them off any time in Settings or in iOS Settings.

Payments

MoreLife sells plans that renew until you cancel. You can pay through Apple in the app. Where web checkout is offered, you can pay through RevenueCat and Stripe. These services handle your payment details. We do not receive your full card number.

RevenueCat uses your MoreLife account ID, plan and purchase status to keep your access in sync. For web purchases, RevenueCat and Stripe also process the email and billing details you give at checkout. We can see purchase and billing records to help with payment issues. We do not send coach messages, goals or photos to these payment services. Prices are shown before you pay. Apple handles App Store refunds. For web payment help, contact support@themorelifeapp.com.

Our website

The MoreLife website has no user accounts. With your permission, we use Google Analytics cookies to measure page visits, button clicks, device information and approximate location. If you also choose audience insights, Google may combine website activity with information from your signed-in Google account to provide aggregated age-range, gender and interest reports. We do not receive your Google identity or send your name, email address, form entries or app conversations to Google Analytics. We do not use this data for personalized advertising. You can reject optional cookies or change your choice at any time through Privacy choices.

User-level and event-level Analytics data is retained for two months; aggregated reports may remain longer. Google explains how it processes data at https://policies.google.com/technologies/partner-sites. Google account activity controls are at https://myactivity.google.com/.

Cloudflare also provides website performance and traffic statistics through its Web Analytics service, which Cloudflare describes as not collecting visitors' personal data. Details: https://developers.cloudflare.com/web-analytics/about/.

If you enter an email address in the Android waitlist, Buttondown stores it so I can tell you when MoreLife arrives on Android and occasionally send other MoreLife news. Every email has an unsubscribe link. Contact and support links open your own email app.

Deleting your data

Settings → Wipe everything erases all MoreLife data on your device: schedule, check-ins, streaks, photos, coach memory. Everything. Deleting the app does the same. Neither one touches your account or the backup attached to it on our server, so use “Delete my account” below to remove those. Operational server logs expire on their own.

Deleting your account

Settings has “Delete my account”. It deletes the account and the backup attached to it on our server, not just this phone.

Deleting your account does not cancel your plan. For an Apple purchase, open iPhone Settings, tap your name, then Subscriptions. For a web purchase, use the manage subscription link in your receipt email. You can also contact support@themorelifeapp.com for help.

Children

MoreLife is not for children under 13. If you are under 18, use MoreLife with a parent or guardian’s knowledge and consent.

Not a medical service

The coach is not a doctor, therapist, or crisis service, and nothing it says is medical or mental-health advice. If you are in crisis or thinking about harming yourself, stop and reach out for real help: call or text 988 (US & Canada) or your local emergency number.

Changes and contact

If this policy changes in a way that matters, the app will say so. Questions or requests: support@themorelifeapp.com.