Privacy policy

When you save an entry, we store your writing, selected mood and life area, date, tomorrow priority, and update time. Goals include your goal, next step, completion status, and creation time. These records are associated with your MinuteAhead member ID.

Clerk manages email/password sign-in, email verification and password recovery. Your verified identity is linked to a MinuteAhead member ID. Journal requests are checked on the server and return only records associated with your signed-in user ID. Site operators with infrastructure access may access stored records; this is not an end-to-end encrypted diary.

Sign-in makes your provider identity, email address, and available display name accessible to MinuteAhead to identify your account. Archive searches send your search text to our server to find matching entries in your account; we do not keep a separate search-history table.

While you write, an unfinished entry may be kept in this browser’s local storage for recovery for up to 24 hours. It is associated with your signed-in account, stays on this device, and is removed here when you save, discard it, sign out, delete your writing, or close your account. Expired drafts are removed when you next open the app. Other devices do not receive these drafts; use Save to keep writing in your account. Browser storage is not an encrypted vault, so protect access to your device.

Entries and goals remain saved across sessions. The journal home shows the most recent 366 entries and up to 100 goals. The Archive page provides paginated browsing and search across all saved entries, with editing and deletion. The Account page provides a complete JSON export, deletion of writing, and account closure on every plan. Deleting an entry also removes saved coaching text derived from it; editing does not regenerate earlier reflections.

Free journal follow-ups repeat the priorities you wrote. Saving an entry does not send it to a language-model API. Plus members can separately choose AI coaching as described below. Automated emails and push reminders are not connected.

Voice is optional and asks for microphone permission and your agreement before recording. Each recording is limited to three minutes. When you choose Stop & transcribe or reach the recording limit, your audio is sent through MinuteAhead to OpenAI’s transcription service. Your journal history, email, and user ID are not included in that request. You may discard a recording before sending it.

MinuteAhead processes audio in memory and does not save recordings to its database or file storage. The transcript is returned to your browser for review. It becomes saved journal text only after you add it to your draft and choose Save. Transcription does not enable AI coaching or send your other entries to a coach. OpenAI’s data controls describe its handling of transcription requests.

We retain voice usage records: your MinuteAhead member ID, request ID, submitted duration rounded up to the next second, request time and status, consent version, model, reserved cost, and reported token usage when available. Neither audio nor transcript text is stored in these usage records. Submitted attempts, including failures, count toward the 120-minute UTC monthly allowance. These records are included in your account export; deleting writing keeps usage limits in place, and account closure replaces the user identifier on retained voice usage with a random identifier.

Plus includes optional AI coaching and progress reviews calculated from your saved check-ins. Progress charts do not send your writing to OpenAI. AI coaching requires your explicit permission and a configured server connection. When you request a reflection or reply, we send OpenAI your question, up to 14 included journal excerpts (the first 2,000 characters each), moods, priorities, life areas, up to 20 active goals, 20 memory notes you wrote, and up to six relevant exchanges from the last 14 days. Context is shortened to fit a bounded request, prioritizing your latest entry and current question. Weekly reviews use this week’s entries, beginning Monday UTC, without earlier coaching conversations. Your email and user ID are not included in the coaching prompt.

Generated reflections, questions, source dates, and memory notes are saved with your MinuteAhead member ID. AI can be mistaken and does not diagnose or monitor emergencies. There is no background analysis, automatic memory extraction, or automatic contact with other people.

You can turn off AI coaching permission in Account. On the Coach page, you can edit or remove memory notes and exclude entries from future coaching. Excluded entries and prior exchanges derived from them are omitted from future prompts. These choices do not remove existing reflections; use “Clear coaching content” to delete saved AI text and memory notes and turn permission off. Requests already sent to OpenAI cannot be recalled. Your original journal and goals remain.

We request that OpenAI not store Responses API application state by setting store to false. This does not mean zero retention: OpenAI may retain abuse-monitoring logs under its API data policies. Read OpenAI’s API data controls.

Coaching content remains stored until cleared or deleted by the operator; the interface shows the most recent 40 reflections. After clearing, operational records (user ID, request ID, activity type, date, status, model, token counts, reserved request cost, and estimated API cost) remain to enforce allowances and the monthly service budget. These records no longer contain your prompt, generated text, or source dates. Account closure removes your writing and linked Life Audit and launch-list data. It replaces the user identifier on retained AI usage records with a random identifier. A minimal record of your MinuteAhead member ID and closure time remains to block stale requests and support an explicit fresh start. Existing billing records may remain for billing and support obligations; contact the operator for questions about those records.

Choose “Report response” beneath a saved AI response to flag harmful, offensive, inaccurate, or otherwise concerning content. Before submitting, you choose a reason and agree to share that response and an optional note with MinuteAhead’s owner for review. The response may quote your writing. Original journal entries, your question, conversation history, and account identity are not attached to the owner’s report view.

We store the report linked to your account and the saved response, with its reason, note, submission time, review status, review time, and outcome. We use reports to review content concerns and improve the service. Reports are included in your data export. Clearing the associated coaching content, deleting an entry that removes the response, deleting your writing, or closing your account also removes the report. Reporting does not send an email or start a live conversation, and is not an emergency service.

If you request a launch notification on the Plans page, we save your MinuteAhead member ID, signed-in email address, requested product (Plus or Android), and request time. This is a request for a product launch email, not a paid subscription. No payment information is collected.

You can remove either notification request from the Plans page while signed in. Removing it deletes that launch-list record; it does not affect your journal. We keep launch requests until you remove them or the relevant launch communication is completed. Automated launch emails are not currently active.

Current collection covers the journal, coaching, launch requests, and billing information described on this page. The former Life Audit assessment is retired and no longer accepts answers, email submissions, or assessment analytics.

We do not intentionally persist IP addresses, full card numbers or bank account details, passwords, or third-party advertising identifiers in the MinuteAhead database. Journal entries may contain personal information you choose to write.

We use this information to:

• Save your journal, goals, preferences, and requested coaching.
• Provide your progress reviews and manage your subscription.
• Record product launch notifications you explicitly request.
• Protect, troubleshoot, and operate the site.
• Show the operator aggregate writing activity, launch-list interest, and subscription metrics without displaying journal text in the launch dashboard.

Automated product launch and marketing emails are not currently active.

If you used the former Life Audit, historical records may include your submitted email, profile and score, early-access interest, timestamps, and assessment interactions. Those interactions used random first-party visitor and session identifiers, with identifiers stored in your browser. Removing the assessment does not itself erase previously saved records; the retention and deletion controls below still apply.

We do not use advertising pixels, third-party analytics vendors, or cross-site advertising identifiers.

MinuteAhead runs on a Cloudflare Worker, and application records are stored in a Cloudflare D1 database. Cloudflare processes data as our infrastructure provider when it delivers and protects the site.

Cloudflare may process network and security information, including IP addresses, as part of operating its infrastructure under its own terms and privacy practices. MinuteAhead does not intentionally write visitor IP addresses to its D1 application tables.

We do not retain validation data indefinitely. Records from the retired assessment remain subject to these retention limits:

• Anonymous funnel-event data is retained for up to 90 days.
• If you explicitly request early access, we may retain your lead record for up to 12 months from your most recent meaningful interaction with MinuteAhead.

If you request deletion, we will delete your associated lead data and reasonably identifiable associated funnel data as soon as practical after taking any reasonable steps needed to verify the request.

These periods may be revised later if the product, legal requirements, or business needs materially change. If they do, we will update this policy and its “Last updated” date.

Stripe checkout on the website is currently disabled. Stripe receives the signed-in email and account reference needed to associate a subscription when checkout is enabled; MinuteAhead stores customer and subscription identifiers, plan, status, period dates, verified billing-event timestamps, and cancellation/refund request records (time, amount, payment reference, and processing status). We also retain checkout agreements (account reference, terms version, selected plan and amount, currency, acceptance time, and checkout reference) as billing records to document recurring-payment consent; they are included in your account export. Card details are entered on Stripe and are not stored by MinuteAhead. Test and live billing records are kept separate. Test purchases do not charge real money. We do not sell personal information.

In the Android app, Google Play handles Google Play purchases and payment details under Google’s privacy policy. MinuteAhead receives and stores the purchase token, product, subscription status, renewal information, expiration time, and verification times linked to your MinuteAhead account. We send purchase references to Google to verify purchases, restore Plus access, and check cancellation or expiration. We do not receive your full card number or bank account details from Google Play. Only designated Google Play test purchases may be accepted when test verification is configured; no real payment is collected.

We use Clerk and Cloudflare as needed to sign in, host, store, deliver, and protect the service. We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, or protect the rights and security of MinuteAhead and others.

Authorized app reviewers can use a review access code to start an isolated review account without a purchase. A signed, secure browser cookie identifies that account for up to 30 days. We store the review account identifier, selected Free or Plus view, and session expiration. Reviewers should use fictional writing. Journal, coaching, voice, and deletion handling otherwise follow this policy.

Exiting review mode removes the browser session; session expiration does not automatically erase saved review writing. Reviewers can use Account to delete writing or close their review account before exiting.

We use reasonable technical and access safeguards appropriate for this service. Cloudflare states that D1 data is encrypted in transit and at rest. No online service can promise perfect security, and we cannot guarantee that information will never be accessed, lost, or misused.

You can use Account to export data, delete writing, or close your MinuteAhead account, or use the account deletion page without installing the app. Active subscriptions must end before account closure; deleting writing is available while subscribed and does not cancel billing. A recently opened checkout may temporarily delay closure to prevent a payment completing against a closed account. Closing MinuteAhead removes its content and keeps a minimal identity link so sign-in can reopen an empty journal. You may also ask a privacy question or request that we locate, correct, or delete the information associated with your email. We may need to verify that you control the email address before acting on a request. When we can reasonably identify the related session, a deletion request can include the lead record and its associated funnel events.

Contact us at support@minuteahead.com.

MinuteAhead is intended for adults aged 18 and older and is not directed to children. People under 18 should not use this service or provide an email address. If we learn that we collected information from a person under 18, please contact us so we can take appropriate steps, including deletion where applicable.

We may update this policy as MinuteAhead changes. We will post the revised policy here and update the “Last updated” date. Material product changes may require additional notice or choices.