Privacy Policy

Stored on your account (so the app works across your devices and so we can send the reminders you turn on):

• Your email, to sign you in with a code and tie your purchase and your record to your account. If you set a username and password, we store the username and a hashed form of the password that cannot be turned back into it.
• Your purchase record: that you bought The 62, received it as a gift, or were granted access, and when. Stripe handles the payment. We never see or store your card.
• Your visualization record: each date you finished a recording, which recording and which voice, morning or evening, how long you listened, the one action you chose, the obstacle and response you wrote, when you marked the action done, and the morning and evening notes and reflections you write.
• Your vision: the life you want, what it means to you, and the scene you picture. It is saved to your account so it follows you across devices. It is never public and never shown to anyone else.
• Your notes, up to 20,000 characters, saved to your account.
• Your player choices: the voice you picked and your audio settings.
• Your reminder settings: morning and evening times, your time zone, whether you want email or text, and, for texts, your mobile number and the record of your consent (see Text messages below).
• Your ratings: the stars you give a recording and the comment you write with them.
• If you buy a gift: the email address you send it to, the note you add, the amount, and whether it was opened. The recipient sees your email address and your note.
• Usage events: which screens you open, which recording you play or finish, checkout started or completed, and the link you arrived from (for example a code that names an Instagram post). Each event carries an anonymous device id and, once you sign in, your account id. Events never carry your IP address or anything you type. See Cookies and measurement below for when these are stored.

Kept only on your device: where you paused in a recording, the link you arrived from until you check out, your cookie choice, and your language. Clearing your browser data removes them.

What we never do in The 62. Nothing you write is sent to an AI. The recordings are prerecorded with AI-generated voices and are the same for every member. Nothing is generated for you while you listen. We do not sell or rent any of the above.

Dictation. If you tap the microphone in a field, your own browser turns your speech into text using its maker's speech service (Apple or Google, depending on your device), under that maker's privacy policy. We receive only the text that ends up in the field.

When you first visit, a banner asks whether we may count visits. Until you tap Accept, no third party measurement runs, no device id is stored, and the visit is counted under a throwaway id for that page only. If you tap Decline, that stays the case.

If you Accept: we store an anonymous device id in your browser so repeat visits count as one person, our own usage events (described above) are kept, and Vercel Web Analytics counts page views for us. Vercel Web Analytics sets no cookie and does not track you across other sites.

Cookies we set: your language choice, a yes or no marker that you have used MORI62 before (so a returning member lands on the app instead of the front page), and, if you arrived through a partner's link, the partner cookie described under Partner referrals. We run no ad pixels.

We also keep a short lived, hashed record of IP addresses to limit abuse of our sign-in and checkout routes. It is not linked to your account and expires on its own.

Stored on your account (so the app works across sessions and devices, and so we can send your reminders):

• Your email, to log you in and tie your progress to your account, and — where you gave it to us for that (a quiz result, your onboarding plan, a funnel, a partner invite request) — to send you product email and letters. Every marketing email has a one-tap unsubscribe. We never sell your address.
• Your goal and its details, your streak and daily check-offs, and your Voice Anchor script.
• Your own voice backups. If you choose “Save across my devices,” we store your original recording and its details in your private account. See “Voices” below for how backups and local copies work.
• Your Record — your daily Moves and their outcomes, and the short answers and notes you save while using the app's tools (for example a reflection you keep, a sentence you finish in the Rule Audit, or the answers that sharpen your goal). These are stored in your own words so your record can follow you across devices.
• Your proof. When you are signed in and you prove a daily hard thing, the photo (or a single still frame from a video) and the short text of that day's hard thing are stored privately on our servers, with the time you recorded it. This is what lets your record survive across devices and be verified. Your proof photos are never public. A coach or organization sees a photo only if you choose to send them a proof card that includes it. If you are not signed in, your proof stays on your device only. You can delete all of it anytime by deleting your account (see below).
• Emergency petitions. If you ask us to protect a missed Campaign day after an absolute emergency, we store the date, the category you choose, and the short explanation you submit. A MORI62 owner reviews it and records an approval or denial. Do not send medical records, documents, or other sensitive proof. Petition records are private and are deleted when you delete your account.
• Usage events (which screens get used, where people drop off) to run and improve the app — never the words you type. See Cookies and measurement above.

Kept only on your device — not sent to our servers:

• Your journal and your letters.
• The list of invisible rules you name, and the self-doubt you share at the start.
• Your own voice recordings unless you choose “Save across my devices.” Any journal or vision photos that are not part of a signed-in daily proof.

These items stay on your device unless you choose to back up your own recording. Clearing your browser data removes the local copies. Everything else you write in the app can be saved to your account when you are signed in (that is how it follows you across devices). AI features you use send the text they need to our AI provider — see below — and if you said yes to personalization, the app may also run an occasional background AI pass over your saved record to suggest insights; say no and it does not run. Onboarding and quiz answers are sent to us when you ask us to email you a plan or a result, described next.

Sent to us when you ask us to email you something:

• If you give us your email on our onboarding, a quiz, or a landing page so we can send you your plan or result, we store that email together with the answers you typed on the way there(for example the goal you named, the thing you keep dodging, and your first name, if you gave it) — so that the plan we email you is actually yours and not a template. You can ask us to delete this at any time by replying to any email from us, and we delete it automatically if you create an account and then delete it.

• To provide the app and sync the account data above across your devices. (In the original app, your journal, letters, and the other on-device items listed above do not sync; they stay on the device you wrote them on.)
• To understand, in aggregate, where people get stuck so we can improve MORI62. Our usage analytics carry no free text you type.
• To communicate with you about your account, and to send the reminders you turn on.
• To tell ourselves a purchase, a gift, or a rating happened. We relay the buyer's email and the amount, the giver's email, and the stars (never the comment) to a private operations channel on Telegram so we can respond quickly.

We do not sell your personal information.

Where GDPR/UK-GDPR applies to you, we rely on one of these bases for each thing we do with your data:

• Contract (Art. 6(1)(b)) — running your account: syncing your record across devices, processing your purchase or subscription, sending the reminders you turn on, and sending you the emails your account needs to function.
• Consent (Art. 6(1)(a)) — cookies and measurement, marketing email, text reminders, the optional AI-personalization pass over your saved record in the original app, sharing your status with a cohort organization, and a partner's referral cookie. You can withdraw any of these at any time (an unsubscribe link, an in-app toggle, or the account screen), and withdrawing never affects the lawfulness of anything already done under it.
• Legitimate interests (Art. 6(1)(f)) — keeping the app secure and free of abuse, aggregate product analytics that never carries your free text, and administering the referral/partner program. We balance this against your rights: we never use this basis for your sensitive free-text entries (journal, hard-thing text, reflections, notes) beyond what a feature you are actively using needs.
• Legal obligation (Art. 6(1)(c)) — keeping accounting records (purchases, refunds, partner commissions and payouts, 7 years) and responding to lawful requests from authorities.

• The 62: your account, purchase record, visualization record, vision, notes, player choices, reminder settings, ratings, and gifts you bought: until you delete your account.
• The 62: reminder send markers. Each time we send a reminder we keep a small marker (your account id, the date, morning or evening) so we never send the same one twice. It holds no words of yours. It is not shown anywhere and is not removed with your account.
• The 62: the purchase event. Our usage log keeps a row that a purchase happened, with your account id, so our sales count stays right. When you delete your account the row stays, and nothing else we hold links that id to you.
• Payment records at Stripe: as long as Stripe and accounting law require.
• Account data (Campaign, Record, moments, proofs, Voice Anchor script) — until you delete your account.
• Proof photos and video-poster frames — until you delete your account.
• Your own voice backups. Until you delete your account. Making a new local recording does not delete older backups. Copies downloaded to another device may remain there until you clear that device's local app data.
• Voice deletion markers. We keep a hashed account marker after deletion to block old upload requests. It has no scheduled expiry. We keep random operation identifiers and hashed links to affected accounts while an upload's outcome is unresolved. Those operation records do not expire automatically. We remove them when completion or recovery is confirmed.
• Emergency petitions — until you delete your account (the no-account fallback also expires automatically after about 400 days regardless).
• Emails we have sent you (content and delivery record) — until you delete your account.
• Email opt-out records. We retain unsubscribe records after account deletion to honor your request to stop marketing email. We also keep a hashed email record to prevent adding you to outreach again after deletion.
• Text message opt-outs. If you reply STOP, our text provider keeps your number on its opt-out list so we cannot text you again, even after you delete your account.
• A quiz or onboarding lead that never became an account — until you ask us to delete it (reply to any email), or automatically if you later create and delete an account with that email.
• Cohort membership, status, and organization access-log rows — until you leave the cohort, delete your account, or the program's records are pruned on a routine retention schedule (currently 24 months for the access log).
• Aggregate or anonymized analytics events — kept indefinitely in de-identified form (your account link is removed when you delete your account, except the purchase event noted above).
• Partner / affiliate commission and payout records — 7 years, as required accounting records, even after you close your affiliate account or delete your MORI62 account.
• Push notification subscription — until you turn notifications off or delete your account.

• Supabase. Database, login and private file storage, including the recordings you stream.
• Vercel — hosting, and page view counts after you accept cookies.
• Upstash. A small fast store for reminder send markers, short lived abuse limits, and, in the original app, hashed voice deletion markers and unresolved upload operation records.
• Anthropic (Claude) — original app only. When you use one of its AI features, the text that feature needs (for example your goal, your answers, or saved record entries the feature draws on) is sent to Anthropic's AI to generate the result. Under our agreement with Anthropic, this data is not used to train AI models. The 62 sends nothing to Anthropic.
• Stripe — payments: The 62, a gift of it, and Premium in the original app. Your card details go directly to Stripe; we never see or store them. Stripe sends you the receipt.
• Resend / Amazon SES — to email you sign-in codes, reminders, and gift emails.
• Twilio — to send the text reminders you turn on. Twilio receives your mobile number and each message.
• Telegram — internal operations alerts only. A purchase, a gift, or a rating sends the buyer's or giver's email, the amount, or the stars to our private ops channel. When you request organization access or a pilot, your email and form answers are relayed the same way so we can reply within a day.

If you arrive through a partner's link, we set a first-party cookie for up to 90 days so we can credit that partner if you buy or subscribe. We record the click with a one-way hashed fingerprint of your IP address and browser type (we never store the raw values) and, if you sign up, we link your account to that partner so we can pay them a commission on your payments. This never exposes your name, email, or activity to the partner: partners see only aggregate numbers (clicks, signups, conversions, earnings).

Some partners promote through private campaign links that do not show you the partner's name or handle. When you click one, we record the same pseudonymous click information as any partner link (the one-way hashed signal above) along with an internal reference to the partner and campaign so the referral can be credited. We do not build a profile of you from this, we do not store your raw IP address, and this information is deleted when the partner closes their account.

You can join MORI62 through an organization: a gym, a workplace, a coach, or a program. When you do and you choose to share, that organization can see a fixed set of your progress: the name you pick for their roster, your day number, whether you did today's move, how many days you've kept this week, and whether you're on track. They can see a proof only if you tap to send that one card. They never see what you write, your notes, your photos, your Record, your email, or how you pay.

You can choose to share more, in levels, from your account. Level 1 adds your Momentum score and how fast you started. Level 2 adds the name of what you chase and your milestones. Level 3 sends your daily proof card for you. Each level is your choice, the default shares none of this, and lowering the level stops it right away. Your organization can also send you a one-tap nudge to move today; you can mute nudges any time, and the organization is told they are muted rather than left guessing.

The organization is its own company. It decides how it uses what it sees, and it should have its own privacy terms with you. We share only the fixed list above, and only after you agree.

If the organization pays for your Premium, we keep a record that it did and for how long, so that stays separate from any referral rewards. The organization pays us for the service, never for your information.

The organization can also see totals for the group, like how many people joined, are active, or finished. It never sees singled-out individuals this way, and small groups are hidden.

We keep a record of when the organization looks at member status, so access stays accountable. We keep cohort status and these records only as long as the program needs them, and we delete them on a set schedule. You can stop sharing at any time in your account. That hides you from the organization right away and clears the status it held. Deleting your account removes you from every cohort and erases these records.

If you turn on text reminders in Account, we store your mobile number, the date and time you agreed, and the exact consent words you agreed to. We use your number only to send the visualization reminders you asked for, at your reminder times: up to 2 texts a day. Twilio delivers the texts for us.

We do not sell, rent or share your mobile number, or your consent to receive texts, with any third party or affiliate for their marketing or promotional purposes. The only companies that receive your number are the service providers that deliver our texts.

Reply STOP to any text, or turn text reminders off in Account, and the texts stop. Reply HELP for help. Your number is deleted when you delete your account.

The 62. Your vision, your notes, your reflections and your rating comments may touch your faith, your money, your health, or your relationships. They are saved to your account so they follow you across devices. They are never public, never shown to anyone else, never sent to an AI, and never sold.

Original app. Your journal, your letters, your named rules, and your opening self-doubt stay on your device and are not uploaded. Other things you write while using the tools — reflections you keep, sentences you finish, answers that sharpen your goal — are saved to your account when you are signed in, so your record can follow you across devices. They are never public, never shown to coaches or partners, and never sold. If you choose to use an AI feature, the text that feature needs is sent to our AI provider to produce your result and, under our agreement, is not used to train AI models.

Your own recordings. Mori keeps your recording on the device where you make it. Keeping or playing a local recording does not upload it. If you choose “Save across my devices,” Mori uploads the original audio and recording details to your private account. You can then play that backup on your other signed-in devices. Mori does not send this recording to a voice-generation provider or make a synthetic voice from it.

Your backup stays in your account until you delete your account. Making a new local recording does not delete older backups. Playing a backup on another device downloads a copy to that device. Account deletion removes the server recordings and clears the app's local data on the device where you delete the account. Copies cached on other devices may remain until you clear their local app data.

You can ask a person to record a line for you. The invitation link shares the line or lines you chose, the invitation label and an account reference used to route the recording to you. Their recording is stored privately for you and only you can play it. Deleting your account deletes it.

If you lend your voice we show your name and your one line and your sample to members. The lines you record for a member go to that member only. You can pause new requests. Deleting your account removes your voice profile and sample. Recordings already delivered to another member remain in that member's account until they delete the recordings or their account.

No recording is ever used to make a synthetic voice.

When deletion is pending. We block new voice uploads before removing your recordings. If an upload is still running or its outcome is unknown, deletion stays pending until we can confirm it has stopped. Your account remains available so you can retry deletion.

We keep a hashed deletion marker to stop an old upload request from restoring voice data after deletion. The marker contains no recording, words, name or email. It is a derived account identifier. It has no scheduled expiry. We also keep random operation identifiers and hashed links to affected accounts while an upload's outcome remains unresolved. We remove those operation records when completion or recovery is confirmed.

You can edit or delete your entries in the app. Your account screen has these self-serve controls:

• Export your notes and visualization history (in The 62) or Download my data (original app). Downloads your account records as one data file: in The 62, your purchase record, visualization record, vision, notes, ratings and the gifts you bought. The download does not include audio files or the usage event log. You can contact us below to request access to other personal data we hold.
• Delete my account. Requests permanent erasure of your personal data. In The 62 it erases your account, purchase record, visualization record, vision, notes, ratings, gifts, reminder settings and mobile number, and ends your access to the recordings. It is not a refund request; if you want a refund, write to us first (see the Terms). In the original app it also cancels your subscription. We confirm completion only after the required deletion steps finish. A failed or unresolved upload can keep deletion pending. Retained records include the reminder send markers and the purchase event described under “How long we keep it”, the hashed voice deletion marker, email and text opt-out records, required accounting records and usage counts that are no longer tied to you. Recordings you delivered to another member stay in their account as described in “Voices.”

Wherever you live, you may ask us to access, correct, opt out of marketing, or delete the personal data we hold about you by emailing the address below — we will act on it within 30 days (or sooner). We do not sell or share your personal information (see California Privacy Rights below for what that means precisely), and there is no fee for making a request and no penalty for exercising any of these rights — we will never give you a different level of service because you asked.

If you are in the EU, the EEA, the UK, or another place with similar law, you also have the right to:

• Access the personal data we hold about you and get a copy.
• Correct data that is wrong or incomplete.
• Erase your data (the Delete my account control does this; the records we must keep are listed above).
• Restrict or object to processing that rests on our legitimate interests.
• Take your data with you in a common machine-readable form (the Export control gives you a JSON file).
• Withdraw consent at any time for anything that rests on it, without affecting what was done before.
• Complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk). We would rather hear from you first, so we can fix it.

No automated decisions. We make no decision about you by automated means that has a legal or similarly significant effect on you. MORI62 has no scoring, profiling, or ranking of members.

Do Not Track and Global Privacy Control. We do not sell or share your data, so a Global Privacy Control signal has nothing to opt you out of. We do not change what we do in response to a browser's Do Not Track header; the cookie banner is your control for measurement, and Decline is honored.

If you are a California resident, this section applies to you specifically, using the categories the law defines.

Categories of personal information we collect, and where each comes from:

• Identifiers. Email, username, account ID, and the mobile number you give for text reminders. We also create hashed account markers and random operation identifiers to coordinate voice uploads and deletion in the original app.
• Commercial information — purchase of The 62, gifts you buy, and, in the original app, subscription history and gift codes (from you, via Stripe).
• Internet or network activity — which screens get used, which recordings play, referral clicks (pseudonymous, hashed; automatically, from your use of the app, after you accept cookies).
• Audio or visual information. Original app only: proof photos, a still frame from a proof video, and voice recordings you choose to back up or submit.
• Professional or employment-adjacent information — a partner applicant's optional discovery answers and resume (from you, only if you apply to the partner program).
• Sensitive personal information (as CPRA defines it) — free text you write that may touch health, finances, or religious belief, including your vision and notes in The 62 (we treat all free text as sensitive-adjacent, whether or not it meets the legal definition; from you, directly).

Business purposes we use it for: providing and improving the app, account security and fraud prevention, customer support, processing payments, sending the emails and texts you asked for or that your account needs, and administering the referral/partner program.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (CPRA's defined meaning of “share”). We run no ad-tech, no ad pixels, and no cross-site ad-targeting integration. Because we do not sell or share, there is no “Do Not Sell or Share My Personal Information” link — that mechanism exists to let you opt out of a sale or share that would otherwise happen, and none does.

Your California rights: to know what we collect and why, to delete it, to correct it, and to opt out of sale or share (moot today, since none occurs) — with no discrimination for asking. Email the address below to exercise any of these; see “Your choices and your rights” above for the self-serve controls and deletion timing.

Everything between your device and MORI62 travels over HTTPS. Our providers encrypt stored data at rest. Passwords are stored only as salted hashes. Sign-in codes expire after a few minutes. Database access is limited by row-level rules so one member's data never answers another member's request. Only the owner of 3Fold LLC can read member records, and only to run the service or answer your request. No method of storage is 100% secure, but we work to protect your information.

If a security breach puts your personal data at risk, we tell you and any authority the law names without undue delay, and within 72 hours where the GDPR applies, with what happened and what we are doing about it.