Start free →My Morning Five helps you stay in touch with people you know. It holds information you enter about those people, including names, contact details, dates, memories and notes. Much of that information concerns people who are not users of the app. This policy explains how we handle it.
Your setup and relationships are saved on our servers, including when you use the free workspace before creating an account. Signing in lets you open your saved information on supported devices. AI writing is optional: before sharing information with Anthropic, the company that provides Claude, we ask for separate permission. We do not sell personal information, use it for targeted advertising, or send messages to your contacts automatically.
My Morning Five is operated by Cactus Living Home LLC, an Arizona limited liability company. “We,” “us” and “our” mean Cactus Living Home LLC. “You” means the person using the service. “Your contacts” means people whose information you add.
Contact us about privacy at support@mymorningfive.com. You can also reach the app's help address at info@mymorningfive.com.
Depending on the features you use, we collect and store:
Account information: your email address, account identifier, verification and session records, and security records needed to manage sign-in. We use emailed one-time codes rather than account passwords. Verification codes are stored as hashes, not as readable codes.
Setup and preferences: your onboarding answers, time zone, routine days, reminder preferences and membership selection.
Relationship information: people and household names, relationships and household membership, phone numbers, email addresses, mailing addresses, cities, social profile links, optional photos, birthdays, anniversaries and other dates.
Your content: notes, memories, profile details, follow-ups, outreach history, drafts, writing instructions, clarification answers and messages you choose to save or record in the app.
Membership and payment records: plan and subscription status, renewal or access dates, payment-provider references, and records of purchased or used card credits. Stripe collects payment details on its checkout pages. Our app does not receive or store your full payment card number or card security code.
Optional card-service information: delivery and return addresses, card text, handwriting choices, sample requests and order details, when those features are available and you choose to use them.
Support information: the messages and other information you send us when asking for help. If you report an AI suggestion, this includes the suggestion text you choose to submit, your selected reason, optional explanation, message type, account or free-workspace identifier, and submission time.
Please enter only information you are entitled to keep and share. Avoid health details, financial circumstances, immigration information and other sensitive or confidential information about your contacts.
Server saving is part of the service. It is not an optional cloud-sync switch. Setup information is sent to our service as you continue through onboarding. Once you open the free workspace, changes to your relationships save there automatically. Information associated with your account also saves automatically so supported signed-in devices can open the same account.
The native app uses an encrypted local relationship database for signed-in accounts. Server relationship archives, account history and guest-workspace content are encrypted at rest by our application. Connections to our service use encryption in transit. These protections are not end-to-end encryption: our service must be able to process information to provide account saving, exports and features you request.
The browser version needs a network connection to load and save relationships. Some previously loaded information may remain in memory while a page is open. It does not provide an equivalent offline encrypted database. Native offline access depends on what is already saved on the device and your current access status. AI writing, sign-in, server saving and card services require a connection.
No system is perfectly secure. We limit access to production information to people and service providers who need it to operate, secure or support the service. We will provide notices of a security incident when required by law.
AI writing uses Anthropic's Claude service. Account saving, importing contacts and writing your own messages do not by themselves authorize AI sharing.
Before your first AI writing request, the app explains the provider and the information involved and offers an affirmative choice to allow sharing or keep writing without AI. Permission is saved for your account or free workspace. If you decline, you can continue writing and editing manually. You can review or withdraw permission in Settings under Privacy and your account. Withdrawal stops new AI requests; it cannot recall a request already sent. We ask again if the disclosed sharing scope changes in a way that requires new permission.
When you allow AI sharing and request writing help, we send the context for the selected person or household. That context can include full names, relationship descriptions, household names and members, city, saved profile details, notes, memories, follow-ups, dates, relevant outreach history or prior saved drafts, and the writing instructions, edited draft and clarification answers you supply. We limit the amount of history included in a request; we do not send your whole address book simply because you use AI writing.
Structured phone, email and street-address fields are not automatically added to the drafting context. However, those details or other personal information can be sent if you put them in a name, note, memory, draft or instruction. Do not include information you do not want processed by the AI provider.
We use the response to show suggestions or clarification questions. You decide what to use. AI drafts can be inaccurate or inappropriate. Nothing is automatically sent to the person or household you are writing about.
You can use Report this suggestion to ask our team to review an inappropriate response. Before submitting, you can review and edit the suggestion text and explanation. We do not automatically attach your full client record or drafting instructions, and do not send these reports to Anthropic as model-training feedback. Authorized team members can review reports, record their response, and restrict AI access for serious or repeated misuse. A report alone does not automatically restrict the person reporting it. AI restrictions leave manual writing and privacy controls available. Contact support@mymorningfive.com about a report or an AI access restriction.
We do not train our own AI models on your information. We use Anthropic's commercial API; Anthropic states that commercial API inputs and outputs are not used for model training by default. Anthropic has its own retention and safety rules. Its standard API retention is generally up to 30 days, with exceptions such as legal or abuse-prevention obligations. We do not promise zero retention or immediate deletion from a provider after a request has been processed. Learn more at privacy.claude.com.
Contacts. Importing device contacts is optional and requires the device permission requested by that feature. You choose which entries to add. Imported entries become part of your saved relationships; the app does not continuously import your address book in the background. Revoke access in your device settings. Revoking permission does not delete entries you already imported; remove them in the app if you no longer want to keep them.
Photos. Adding a contact photo is optional. The photo you select becomes part of that saved relationship and is stored with it. You can remove or replace it in the app.
Dictation. In the native iOS app, supported dictation uses on-device speech recognition. The browser version uses the browser's speech-recognition capability, which may involve a service operated by the browser or device provider. My Morning Five does not upload or keep an audio-recording archive. The resulting text is saved and handled like text you type. Microphone and speech permissions can be changed in your device or browser settings.
Reminders. If you enable notifications, the native app can schedule local morning reminders. Notification permission is optional and can be changed in device settings.
Text and email. When you choose to open a message, the app hands the draft to your device's messaging or email app or opens an external composer. You review it and complete sending there. We do not read your message inbox, email inbox or call history. Opening a composer is not proof that a message was delivered. Outreach history reflects actions and information recorded in My Morning Five.
Address suggestions. When you use address lookup, the text you enter for that lookup is sent to the Photon address-search service operated by Komoot. It can contain an address or part of one. You can enter an address manually instead. We do not request GPS location permission or continuously track your physical location. Addresses and cities you choose to save are still personal information we store.
Cards. Where card ordering is enabled, submitting a card shares the recipient's name and mailing address, your return-address details, the approved message and production choices with Handwrytten to prepare physical mail. A sample request can also be sent to the My Morning Five operator by email so it can be reviewed and fulfilled. A card already submitted to the provider, a notification email already sent, or physical mail already dispatched cannot be recalled through account deletion. The provider, operator and postal services may retain information needed for fulfillment, payment, support or legal obligations.
Card features may be unavailable while being configured. Saving a card draft is separate from placing an order or buying card credits.
Third parties that receive personal information from My Morning Five are required to provide the same or equivalent protection described in this policy and required by Apple’s App Review Guidelines. We remain responsible for selecting providers and configuring their services to support these protections.
We use providers for specific service functions:
Railway: hosting and database infrastructure for the account, guest-workspace, security and content information described in this policy.
Anthropic (Claude): the writing context you authorize and submit for AI help, as described in section 4.
Resend: your email address and verification email content; optional service or sample-request notifications where those features are used.
Stripe: checkout and billing information, subscription and card-credit payment records, and the identifiers needed to reconcile those payments.
Handwrytten: card content and mailing information when you submit a physical-card order.
Komoot's Photon service: address-search text when you use address suggestions.
Webflow: hosting for our public website and policy pages, with ordinary website request and infrastructure information.
Your device, browser, messaging and email providers: information processed when you use their permissions, speech recognition or external composing features.
We may also disclose information when legally required, to protect the service or people's rights and safety, with your instructions, or as part of a business transfer subject to appropriate protection. We do not sell personal information or share it with advertising networks for targeted advertising.
We use account and device identifiers, session credentials and security controls to authenticate requests, synchronize changes, manage access, prevent abuse and diagnose service failures. Our hosting and delivery providers can process ordinary request information such as IP addresses, browser or device information, request times and delivery results.
The website uses necessary session cookies for sign-in and the free workspace. A separate browser routing preference can remember whether you started joining. These support the service; they are not advertising cookies. Deleting browser cookies or removing the app can remove access to an anonymous workspace without deleting its server copy, so use the in-app deletion control first when you want that copy removed.
The current rebuilt app does not offer a user-submitted crash-report flow. Ordinary operational and security logs can still exist. We do not intentionally include relationship notes, drafts, audio, full payment-card details or readable verification codes in those logs.
Unfinished, unclaimed onboarding is available for seven days. It becomes unavailable after expiry and is removed by the scheduled cleanup process, which normally runs hourly. You can delete saved setup sooner from onboarding.
An opened free workspace is not covered by that seven-day expiry. It remains on our servers until you delete it or transfer it to your account. Use Settings > Privacy and your account > Delete my free workspace before clearing the app or browser credentials if you want its server copy removed.
Your account and automatically saved relationship information remain while you keep the account, including if membership lapses. Current account data and in-app recovery history are removed from active storage when account deletion completes.
AI permission remains until you withdraw it, delete the relevant account or workspace, or a changed notice requires a new choice. Anthropic's handling of requests already sent is described in section 4.
AI suggestion reports are kept for up to 180 days after submission. Internal review notes are kept for up to 180 days after the recorded action. Scheduled cleanup normally runs hourly, so expiry and physical removal may not occur at the same instant. Minimal AI access-restriction records remain while the restriction applies. Deleting the relevant account or free workspace removes its reports, review notes and AI restriction from active app storage; independent recovery copies have the limits described below.
Sign-in and deletion-confirmation codes expire after ten minutes. Codes have attempt limits; account deletion removes the account's challenge and session records. Expiry does not mean every technical database row is erased at the exact expiry time.
After account deletion, we retain a minimal deletion record so a prior account is not reopened or restored. A hashed deletion-confirmation receipt lets the app confirm a deletion if a response is interrupted. It expires after 30 days and is removed by scheduled cleanup, which normally runs hourly. We also retain necessary billing and credit-transaction records for accounting, disputes, fraud prevention or legal obligations. These do not retain your relationship archive, card message or mailing-address content in our active app records.
Copies already held by a payment, AI, mailing or email provider follow that provider's applicable retention obligations. Deletion cannot recall a message, card or information already delivered outside My Morning Five.
Independent exports and operational recovery archives created before deletion are separate from the active database. Deletion does not rewrite an exported file. Recovery must respect the retained deletion record rather than reactivate a deleted account. Keep your own exports secure and delete them when you no longer need them.
Export and correction. Settings includes a CSV export of your relationships, including when membership is inactive. Account recovery tools also provide a more complete recovery archive. Use the available in-app controls to edit or remove individual records. Some individual editing or removal actions require a current membership. If a control is unavailable or your membership is inactive, email support@mymorningfive.com for help correcting or removing personal information. You do not need an active membership to delete your account or free workspace. Removing an individual record can leave a previous version in account recovery history until that history is removed or the account is deleted; it does not retract copies already shared externally.
Free-workspace deletion. In an anonymous free workspace, open Settings > Privacy and your account > Delete my free workspace, review the warning, and confirm. This deletes the server workspace and its AI permission without requiring you to create an account. During unfinished onboarding, use Delete saved setup and confirm.
Account deletion. In a signed-in account, open Settings > Privacy and your account > Delete my account. The same control is available from the membership screen. Review the consequences, request a new email code, enter it, and confirm permanent deletion. An active membership is canceled and open recorded checkout sessions are closed before deletion completes. If cancellation cannot be confirmed, the app reports an error and keeps the account available so you can retry. Cancellation may already have taken effect if a later step fails; check membership status if you retry.
When deletion completes, we remove the account's relationship content, in-app history and recovery copies, guest data attached to it, AI permission, sign-in sessions and private card or sample content from active app storage. We replace its email with a non-identifying deletion marker. The app signs you out and clears that account's encrypted local database and key on the device completing deletion. Other signed-in native devices clear their local account database if they reconnect and confirm deletion while their former session can still be recognized. A device that remains offline, or whose old session can no longer be recognized, may retain an encrypted local copy until you remove the app or otherwise clear that device. An offline device cannot be remotely erased before it connects. Copies you exported or sent to another app remain under your control. Necessary retained records are described in section 9.
Deletion is permanent. Access ends and unused card credits are lost. Deletion does not automatically request a refund; the separate refund promise in our Terms still applies to an eligible request.
AI and device permissions. You can withdraw AI sharing permission in the app's Settings. You can revoke contacts, microphone, photo or notification permissions in device or browser settings. Revocation does not automatically remove information already saved.
Other privacy requests. Depending on where you live, you may have rights to access, correct, obtain a copy of or delete personal information and to exercise applicable privacy rights without unlawful discrimination. Email support@mymorningfive.com for requests the app cannot complete. We may need to verify your identity and authority. We aim to respond within 45 days, or the period required by applicable law. We do not sell personal information or share it for targeted advertising, so we do not offer a sale or targeted-advertising opt-out for activities we do not perform.
If someone has added your information to My Morning Five, you can ask that person to correct or remove it, or contact us for help. We may need enough information to identify the relevant account and verify the request without exposing another person's private information.
Accounts are for people 18 or older. The service is not directed to children. If you believe a child has created an account, contact us so we can investigate and remove it where appropriate.
We operate in the United States, and our providers can process information in countries where their infrastructure and personnel operate. Those countries may have different privacy laws from your own.
We update this policy when our handling of information changes and show the date above. We will give appropriate notice of material changes in the app or by email. A change to the AI provider or sharing scope that requires new permission will require a new affirmative choice before the affected AI sharing begins.
Cactus Living Home LLC
My Morning Five
1106 W Lynwood St
Phoenix, AZ 85007
support@mymorningfive.com
App help: info@mymorningfive.com