Privacy Policy
Last updated: 20 August 2026
This policy explains what information the What Matters Most App ("the App", "we", "us") collects, how it is stored and protected, and the choices you have. It applies to the App only.
We keep this plain on purpose. If anything here is unclear, contact us using the details at the end.
- We collect only what the App needs to work.
- Your entries are private to you and tied to your own account. We do not sell them, share them with third parties, report them to your employer, or use them to train AI.
- We do not run behavioural tracking, advertising, or analytics profiles.
- You can delete your data at any time.
To use the App you create an account with an email address and a password. Authentication is provided by Supabase. Your password is handled by the authentication system and is not stored by us in readable form.
Within the App you may record:
- Decisions: the situation, the signal, why it matters, the decision, your rationale, and optional category and stakes.
- Confidence and Pressure: captured at the moment of the decision and then locked.
- Outcome: captured at your first reflection and then locked.
- Reflections: text you add later, over time.
- A minimal profile: a display name (optional) and a flag recording whether you have completed onboarding.
You decide what to record. Nothing is preserved until you give explicit consent at the point of capture; if you choose "Not now", the draft is discarded.
Please do not store sensitive material
Your entries are encrypted in transit and at rest by our hosting provider, and access is restricted so that only your own account can read them. Even so, the App is a personal reflection tool rather than a system of record. Do not use it to store proprietary, confidential or commercially sensitive information, or the personal information of other people. You may be under obligations to an employer or a client that no app can discharge on your behalf, and because we never read or monitor your entries, this boundary depends on you. You are responsible for what you choose to record, and entries are treated as personal reflections rather than formal records.
Your account and your entries are stored in the cloud, in a managed database (Supabase) tied to your account. They are not stored only on your device.
- Access is restricted by row-level security, so you can only ever read or write your own records. Other users cannot see your data.
- Your data is encrypted in transit (TLS) and at rest (AES-256) by our hosting provider.
- Your data is stored in Australia, in our hosting provider's Sydney region.
- Operational data generated by our hosting provider in the course of running the service, such as service logs and diagnostics, may be processed outside Australia, including in the United States and Singapore. Your entries are not part of that.
We use your information only to provide and support the App:
- to run your account and let you sign in;
- to store and show you your own decisions and reflections;
- to present descriptive, historical patterns drawn only from your own entries;
- to maintain the security and reliability of the service.
The App does not score, rank, benchmark, advise, predict, or optimise. Any patterns it shows are descriptive and drawn only from your own data.
- We do not sell your information.
- We do not share your entries with third parties.
- We do not report your entries to your employer or anyone else.
- We do not use your entries to train artificial intelligence.
- We do not run behavioural tracking, advertising networks, or analytics profiles.
- We do not create public profiles, social features, or contact-syncing.
The current App does not send your entries to any AI service, and does not use AI to judge, advise, score, or decide. If we introduce AI assistance in future (for example, optional tag suggestions or summarising your own entries for recall), it will be triggered by you, limited to supporting your own reflection, and never used to judge or advise you or to train external AI models. We will update this policy before any such feature is released.
We use a small number of trusted providers to operate the App. They process information on our behalf, under their own security and privacy obligations, only to the extent needed to provide their part of the service:
- Supabase: account authentication and database storage.
- Resend: delivery of account emails such as sign-up confirmation and password reset. It receives your email address only, never your entries. Delivery infrastructure for our sending domain is located in Japan.
- Apple: App distribution through the App Store and TestFlight, and subscription payments. If you choose to share diagnostics with developers in your iOS settings, Apple may provide us with crash and performance reports. We do not add any separate analytics or tracking. We do not see or store your card details; payments are handled by Apple.
- Access and correct: you can view your entries in the App at any time, and update your profile and account details.
- Delete: you can delete individual entries, or your whole account and its data, at any time. Deleting your account removes your stored entries.
To make any of these requests, contact us using the details below.
If you are outside Australia
The App is available in Australia, New Zealand, the United Kingdom and the United States. Your account and your entries are stored in Australia, in our hosting provider’s Sydney region, so using the App means your information is held outside your own country. Our hosting provider is engaged under a data processing agreement that provides the safeguards required for those transfers.
United Kingdom. We process your information to provide the service you have subscribed to, which is our contractual basis, and to keep that service secure and reliable, which is our legitimate interest. You have the right to access, correct, erase, restrict or object to our use of your information, and to receive a copy of it. If you are not satisfied with our response, you may complain to the Information Commissioner’s Office (ico.org.uk).
New Zealand. You have the right to access and correct your information under the Privacy Act 2020. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (privacy.org.nz).
United States. We do not sell your personal information and never have. Depending on your state, you may have rights to access or delete it. Contact us and we will action the request.
Data retention
We keep your account and entries while your account is active. When you delete an entry it is removed; when you delete your account, your stored entries are removed. We may retain limited records where we are required to by law.
Age
The App is intended for adults (18 and over). It is not directed at children, and we do not knowingly collect information from anyone under 18.
Changes to this policy
If we change how we handle information, we will update this page and change the "Last updated" date above. Where the change is significant, we will take reasonable steps to let you know.
If you have a question or request about your privacy or your data, contact us:
If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).