Privacy Policy

01Who we are

The Motivation Mall is run by The Motivation Mall Limited, a company registered in England and Wales (company number 12765162) with its registered office at Yewtree Manor, Nottingham Road, Coleorton, Coalville, England, LE67 8HN. We are the data controller for the personal information described in this policy.

For anything about your data, write to privacy@motivationmall.com. We answer within a month.

This policy covers the website at motivationmall.com, the installable web app and the Android app. They are one service and one account.

02What we collect

We collect what we need to help you show up for the people in your life, and little else:

• Account details — your email address, a password or the one-time codes we email you, the name you give us, and your time zone (so reminders arrive at the right hour).
• Your notes about the people in your life — the people you add, what you record about them, dates that matter, your intentions and plans, the ideas you keep, any photos you attach, and what you tell us you did.
• Voice notes — if you speak a note instead of typing it, the recording is transcribed and the text is kept. We do not keep the audio.
• Reminder devices — when you turn reminders on, a token that lets us reach that device, and a log of what we sent and whether it was opened.
• Purchases and bookings — what you ordered or booked and the payment record from Stripe. We never see or store your full card number.
• Sunday Pew Pal — the email address you subscribe with, and your name if you are signed in.
• Usage data — only if you allow analytics: which pages you visit and which features you use, and occasionally a masked replay of a session to find a fault.
• Messages you send us — by email or through a consultation.

03Why we use it, and our lawful basis

Data-protection law (the UK GDPR and, for people in the EU, the GDPR) asks us to say which legal ground we rely on for each use. In short: most of what we do is simply providing the service you signed up for. Analytics, ad measurement and reminders run only with your consent. Keeping the service secure and keeping the books rests on legitimate interests and legal obligations.

We do not make decisions about you by automated means that have legal or similarly significant effects. The ideas and drafts the service writes are suggestions for you to take or leave.

04When you keep notes about people in your life

The Service lets you keep private notes about the people you care about — what you’ve learned about how they tick, dates that matter, gestures that landed, things you want to remember. We treat what you record as yours: it is visible only to your account, and we use it solely to help you show up for them — sending the reminders you ask for, tailoring what we surface, and keeping your notes available to you.

Think of it as a private journal about how to care for the people in your life, not a profile we hold about them. You keep these notes for your personal and family life, and you decide what goes in them. We decide how the Service stores and processes them, so for that processing we are the controller and this policy applies.

Please record only what is appropriate — what the person would be comfortable with you keeping, and no more than you need. Some notes will touch on sensitive matters: faith, health, a bereavement, a hard season. When you choose to save such a detail you are asking us to store it and use it to help you show up for that person, and we treat that as your explicit consent. You can edit or delete any note, and any person and everything you kept about them, at any time.

05AI features

Several parts of the Service are written or matched by AI on our behalf: turning a note into the person’s details and intentions, suggesting ideas, drafting a message, transcribing a voice note, and finding catalogue items that fit. To do this, the text of the relevant note or request is sent to the provider, processed, and returned.

Our AI providers are OpenAI and Voyage AI (and Groq, for our own editorial tools, which never see customer data). Each of them provides these services to businesses under terms that do not allow them to use our users’ data to train their models. OpenAI may hold API inputs for up to 30 days to monitor for abuse and then deletes them. Nothing about you is sold, and we never use these features to identify you publicly.

06Reminders and communications

Reminders are optional and off until you turn them on. We send the reminders you set, the week’s-end review when you have a plan running, and essential messages about your account, orders and consultations. We send no marketing email. Sunday Pew Pal arrives only if you subscribed, and every edition carries an unsubscribe link. Our reminders are designed to be encouraging and easy to put off, never guilt-inducing.

07Who we share information with

We do not sell your personal information. We share it only with the providers that run the Service for us, each acting on our instructions and receiving only what it needs, and where the law requires.

When you follow a link to a shop, a video or a booking page, you leave the Service and that site’s own privacy policy applies.

08Where your data goes

We are in the United Kingdom. Our database, sign-in and file storage (Supabase) are hosted in the United States (North Virginia), and our other providers process data in the United States and elsewhere. Whenever personal information leaves the UK or the European Economic Area, we rely on the safeguards the law provides: the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or, where the provider is certified, the EU–US Data Privacy Framework and its UK Extension. You can ask us for details of the safeguard that applies to any provider.

09How long we keep it

The table above gives the period for each kind of information. The principles behind it:

• What you keep in the Service stays as long as your account does. Delete a person, a note or your whole account and it goes at once; our daily backups clear within 7 days.
• Analytics events are kept for 12 months and session replays for 1 month.
• Reminder devices are marked off the moment you turn reminders off, and never used again; the record goes with your account.
• Records of purchases are kept for 6 years because tax law requires it.

10Your rights

You have the right to:

• access the personal information we hold about you, and receive a copy;
• correct it if it is wrong;
• delete it — you can do this yourself, see below;
• restrict how we use it while a question is settled;
• object to uses based on our legitimate interests;
• take it with you in a portable form;
• withdraw consent at any time — analytics under Account → Privacy, reminders under Account → Notifications, Pew Pal by the link in any edition. Withdrawing does not affect what was done before.

To exercise any of these, email privacy@motivationmall.com from the address on your account. We answer within one month. You also have the right to complain to a supervisory authority: in the UK, the Information Commissioner’s Office (ico.org.uk, 0303 123 1113); in the EU, the authority in the country where you live or work. We would rather hear from you first and put it right.

11Analytics, cookies and your choice

Essential cookies and storage keep you signed in, hold your cart, remember your analytics choice and protect our forms. They are needed to run the Service and are always on.

Analytics. PostHog records which pages you visit and which features you use — anonymous until you sign in, then tied to your account so we can see whether the Service keeps being useful to you — and may replay a session to find a fault, with all text you see or type masked. The Meta Pixel, when we are advertising, tells Meta which visits came from our ads; it runs on the website only, never inside the Android app.

If you are in the UK, the European Economic Area or Switzerland, both are off until you say yes. We ask on your first visit; if you say no, or say nothing, neither loads. Elsewhere they run by default, on the basis of our legitimate interest in understanding how the Service is used, and you can turn them off in one tap. Either way, change your mind at any time under Account → Privacy. We work out which applies from the country your connection comes from, and keep that answer only on your device.

Vercel Web Analytics counts visits and where they come from without cookies or any identifier, so it runs without asking. We never use any of this to build advertising profiles, and we do not sell or share it for advertising.

12Keeping it safe

Your data is encrypted in transit and at rest, access to it is limited to the people who need it to run the Service, and the notes you keep are protected by row-level rules so that only your account can read them. Payments are handled by Stripe. No method of storage or transmission is perfectly secure, but we work to protect your information with reasonable, up-to-date safeguards, and we will tell you and the regulator promptly if something goes wrong.

13Age

The Motivation Mall is intended for adults (18+). We do not knowingly collect personal information from anyone under 18. The children in your life appear in the Service only as people you keep notes about. If you believe someone under 18 has opened an account, contact us and we will delete it.

14The app on your phone, and notifications

The Motivation Mall runs as a website, as an installable web app, and as an Android app from Google Play. They are the same service and the same account; nothing about your data changes with the door you come in by.

Reminders are optional and off until you turn them on. In a browser or the installed web app they are delivered by your browser’s push service; in the Android app by Google’s Firebase Cloud Messaging. To deliver them we keep a token that identifies your device, and a log of what we sent you and whether it was opened. Turn reminders off on the Account page at any time; the device is marked off at once and never used again.

The Android app opens outside links (a shop, a video, a payment page) in your phone’s own browser, never inside the app.

15Deleting your account

You can delete your account yourself at any time: sign in, open your Account page, and choose Delete my account. The deletion is immediate and cannot be undone. It removes your account, everyone you added and everything you recorded about them (notes, dates, intentions, plans and ticks, kept ideas, photos), your reminder devices and log, and your profile. Records of purchases and payments are kept as the law requires, with the link to your account removed. The steps are also described at motivationmall.com/account/delete. If you cannot sign in, email us from the address on the account and we will delete it for you.

16Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and post the revised policy on this page; if a change affects how we use what you have already given us, we will tell you directly.