This Privacy Policy explains how Metanoia ("we," "our," or "us") collects, uses, shares and protects personal data when you use Metanoia OS — the web app, the mobile app, and the metanoiaos website (the "Platform"). It forms part of, and should be read with, our Terms of Service.
Metanoia is a personal development platform, which means much of what it holds is written by you and is about you. We have tried to write this document the way the product is meant to work: specifically, and without hiding the parts that matter.
01Who We Are
Metanoia is the controller of the personal data described in this policy. You can reach us at hello@metanoiaos.com about anything in it, including exercising your rights.
Registered entity and address: [Registered Business Address] — the same detail pending in our Terms of Service.
02What We Collect
Things you give us directly — your email address and the name you choose to be called; optionally your full name and date of birth; your profile, handle, bio and avatar; and anything you write into the Platform, including journal entries, reflections, goals, assessment answers, and the notes attached to habits, tasks and projects.
Things the Platform records as you use it — completed habits, tasks and routines; experience points, levels and progress across your life domains; check-ins covering mood and energy; and the ordinary interaction data any app produces, such as which screens you opened.
Things you tell us before you have an account — if you request early access, we hold the email address you gave, the name you optionally supplied, and anything you wrote about what you are hoping to change.
Payments — handled by our payment processors. We receive confirmation that a payment succeeded and what it was for. We never receive or store your full card number.
Technical data — standard server logs, including IP address and device or browser type, kept for security and to keep the service running.
03Health and Other Special-Category Data
Some of what Metanoia holds is special-category data under the GDPR (Article 9) and equivalent laws — data given a higher level of protection because of how personal it is.
- Health and wellbeing entries — mood, energy, sleep, hydration, vitals, symptoms and medication you choose to record;
- Menstrual cycle data — period dates, flow, symptoms and related settings, if you use the cycle tracker;
- Reflections that touch on beliefs, mental state or personal history — because personal development work often does.
We process this only on the basis of your explicit consent, given when you choose to use the feature that records it. You are never required to use those features, and declining does not restrict the rest of the Platform. You can withdraw consent by deleting the entries, switching the feature off, or deleting your account.
We do not sell this data. We do not use it for advertising. We do not share it with other users unless you deliberately share it yourself.
04Why We Use It, and Our Legal Basis
To provide the Platform — showing you your own data, tracking progress, running assessments and keeping your account working. Legal basis: performance of our contract with you.
To operate special features you switch on, including health tracking, cycle tracking and AI assistance. Legal basis: your explicit consent.
To keep the service secure and working — preventing abuse, diagnosing faults, and keeping records of administrative actions. Legal basis: our legitimate interests in running a safe service.
To communicate with you — service messages such as your early-access confirmation and approval, password resets, and notices about changes. Legal basis: performance of our contract and our legitimate interests.
To send product updates, if and only if you asked for them. Legal basis: your consent, withdrawable at any time.
To meet legal obligations, such as tax and accounting records for payments. Legal basis: legal obligation.
05How AI Is Used
Metanoia OS includes an AI assistant and AI-generated insights. When you use them, the relevant parts of your data are sent to Anthropic, our AI provider, to generate a response. They are processed to answer your request and are not used to train anyone's models.
You control what the assistant can see. Settings → Assistant lists every source it may read — your levels and domains, your direction, your talents, your quests, what you have open, and recent activity — with a switch for each. Turning one off removes that source from the assistant's context and from the tools it can call.
Turning AI off entirely is a single answer. Refusing the AI consent — during onboarding, or afterwards in Settings — switches every source off at once. Your cycle and detailed health entries are never sent to the AI assistant at all.
AI output is generated text. It can be wrong, and it is never medical, psychological or professional advice — see the Health & Wellness Disclaimer in our Terms.
07What Other People Can See
Nothing you write is visible to anyone else unless you choose to share it. Journals, reflections, assessment results, health and cycle data are private to your account by default.
When you take part in the community — guilds, pacts, shared posts or a public profile — the things you deliberately share become visible to the people you shared them with, along with your display name and avatar. Sharing is always a deliberate act, and you can stop.
08International Transfers
Our providers operate internationally, so your data may be processed outside your own country, including in the European Union and the United States. Where data leaves a jurisdiction whose laws would otherwise protect it, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
09How Long We Keep It
While your account exists, your data stays — that is the point of a tool that shows you your own history over years.
When you delete your account, we delete it. Deletion is immediate and cascading: your profile, entries, health and cycle records, assessments, progress and community content are removed from our live systems, not merely hidden. Backups age out on their ordinary cycle.
We keep a narrow set of records longer where the law requires it — chiefly payment and tax records — and we keep security and administrative logs for a limited period. Early-access requests are kept until the beta closes or you ask us to remove yours.
10Your Rights
Depending on where you live — including under the GDPR, UK GDPR and CCPA — you have rights over your personal data. Two of them are built into the product and need no request:
- Export — Settings → Account → Your Data produces a file containing the data we hold about you.
- Deletion — the same screen deletes your account and its data permanently.
You also have the right to access your data, to correct it, to object to or restrict its processing, to withdraw consent at any time (including for AI processing, health features and product emails), and to complain to your data protection authority. For anything not covered by the self-serve controls, email hello@metanoiaos.com and we will respond within 30 days.
We do not use your data for automated decision-making that produces legal effects. Withdrawing consent does not affect processing that already happened lawfully.
11Security
Data is encrypted in transit and at rest. Access to your records is enforced at the database level, so one account cannot read another's. Administrative access is limited, authenticated and logged.
No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal data and is likely to put your rights at risk, we will notify you and the relevant authority as the law requires.
12Cookies and Local Storage
We use browser storage to keep you signed in and to remember preferences such as your theme and where you were in a flow. These are necessary for the Platform to work.
We do not use advertising cookies, and we do not run third-party tracking or advertising networks.
13Children
Metanoia OS is for adults. You must be at least 18, or the age of legal majority where you live, to hold an account. We do not knowingly collect data from children; if we learn that we have, we delete it.
14Changes to This Policy
We may update this policy as the Platform changes. If a change materially affects how we handle your data, we will tell you by email and in the app at least 14 days before it takes effect. The Effective date above always reflects the current version.
15Contact Us
For any question about this policy, or to exercise a right the app does not already give you a button for:
Metanoia
Email: hello@metanoiaos.com
Website: https://metanoiaos.com
Address: [Registered Business Address]
See also our Terms of Service and Community Guidelines.