1. Information We Collect
1.1 Information You Provide
When you create an account, we collect:
- Email address: Required for account creation and service delivery
- Password: Stored securely using industry-standard hashing (never stored in plain text)
- Delivery preferences: Your chosen delivery time for daily reflections (optional)
1.2 Automatically Collected Information
When you use our service, we automatically collect:
- Account activity: Login timestamps, subscription status changes
- Service usage: Email delivery status, reflection access patterns
- Technical data: IP addresses (for security purposes only), browser type, device type
1.3 What We Don't Collect
We deliberately do not collect:
- Personal identifying information beyond email address
- Payment information (our service is free)
- Browsing history outside our service
- Location data beyond country-level for email delivery compliance
- Social media profiles or connections
2. How We Use Your Information
We use your information exclusively for:
Service Delivery:
- Sending your daily Stoic reflections
- Managing your account and preferences
- Communicating service updates or important changes
Security and Integrity:
- Protecting against unauthorized access
- Detecting and preventing abuse or fraud
- Maintaining service reliability and performance
2.1 What We Don't Do With Your Data
We explicitly do not:
- Sell your email address or personal information to anyone
- Share your data with third-party marketers
- Use your email for marketing purposes beyond our own service
- Track your behavior across other websites
- Create user profiles for advertising purposes
- Share data with social media platforms
3. Data Security
We implement industry-standard security measures to protect your information:
3.1 Encryption
- In transit: All data transmitted between your device and our servers uses TLS/HTTPS encryption
- At rest: All stored data is encrypted using AWS encryption services
- Passwords: Secured using bcrypt hashing with per-user salts
3.2 Access Controls
- Least privilege principle: System access is restricted to minimum necessary permissions
- No human access: Our team cannot view your password (it's cryptographically hashed)
- Automated systems: Service operations use secure, limited-scope credentials
3.3 Infrastructure Security
- AWS cloud infrastructure: Hosted on Amazon Web Services with enterprise-grade security
- Regular updates: Security patches applied promptly
- Monitoring: Automated security monitoring and logging
4. Data Retention
4.1 Active Accounts
We retain your account information as long as your account remains active and you continue to use our service.
4.2 Account Deletion
When you delete your account or unsubscribe:
- Your email delivery stops immediately
- Your account data is marked for deletion within 30 days
- Backup copies are purged within 90 days
- We may retain minimal data required for legal compliance or security (e.g., fraud prevention)
4.3 Reflection History
Daily reflections sent to subscribers are retained for up to 3 years to enable our public reflection archive. These contain no personal information and are not linked to individual user accounts.
5. Data Sharing and Disclosure
5.1 Service Providers
We use trusted third-party services to operate Morning Meditation:
- Amazon Web Services (AWS): Cloud infrastructure and email delivery (Amazon SES)
- Anthropic: AI service for generating daily reflections (no personal data shared)
These providers have access only to data necessary for their specific functions and are contractually obligated to protect your information.
5.2 Legal Requirements
We may disclose your information if required by law, such as:
- Responding to valid legal process (subpoenas, court orders)
- Enforcing our Terms of Service
- Protecting the rights, property, or safety of Morning Meditation, our users, or the public
- Detecting and preventing fraud or security issues
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options for your account.
6. Your Privacy Rights
You have the following rights regarding your personal information:
6.1 Access and Portability
- Request a copy of your personal data
- Export your account information
- Review your delivery preferences and account settings
6.2 Correction and Update
- Update your email address or delivery preferences at any time
- Change your password through account settings
- Request correction of inaccurate information
6.3 Deletion
- Delete your account at any time through account settings
- Request immediate data deletion (subject to legal retention requirements)
- Unsubscribe from emails via the link in any reflection
6.4 Objection and Restriction
- Opt out of non-essential communications
- Request restriction of data processing (may limit service functionality)
7. Cookies and Tracking
7.1 Essential Cookies
We use minimal cookies for:
- Authentication (keeping you logged in)
- Security (preventing CSRF attacks)
- Session management
7.2 What We Don't Use
We do not use:
- Advertising cookies
- Social media tracking pixels
- Third-party analytics (e.g., Google Analytics)
- Cross-site tracking
8. Third-Party Links
Our reflections may occasionally reference external resources or philosophical texts. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any sites you visit.
9. Children's Privacy
Morning Meditation is intended for adults. We do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly. Parents who believe their child has provided information should contact us immediately.
10. International Users
Our service is hosted in the United States. If you access our service from outside the US, your information will be transferred to and stored in the United States. By using our service, you consent to this transfer and storage.
11. Changes to Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending an email notification for significant changes
Continued use of the service after changes indicates acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
Email: reflections@morningmeditation.io
We will respond to privacy-related inquiries within 30 days.
13. Your Consent
By creating an account and using Morning Meditation, you consent to the collection, use, and storage of your information as described in this Privacy Policy.