Privacy Policy

My Morning Five · operated by Cactus Living Home LLC
Effective 7 August 2026 · Last updated 7 August 2026

My Morning Five helps a real estate agent stay in touch with the people they already know. To do that, the app holds notes about those people, birthdays, how you met, what someone mentioned last time you spoke. Most of that information is about other people, entered by you, and it never agreed to be there. We take that seriously, and this policy is written to be specific rather than reassuring.

The short version. Your sphere lives on your phone. It is sent to our servers only if you turn on cloud sync. When you ask the app to draft a message, the recipient’s first name and the notes relevant to that message are sent to an AI provider to write it. Mailing a physical card sends that person’s name and address to our printing partner. We do not sell data, we do not advertise, and we do not track you across other apps or websites.

1. Who we are

My Morning Five is operated by Cactus Living Home LLC, a limited liability company organized in the United States. In this policy, “we”, “us”, and “our” refer to Cactus Living Home LLC. “You” means the agent using the app. “Your contacts” means the people you add to your sphere.

Questions, requests, or complaints: support@mymorningfive.com.

2. What the app stores on your device

By default, everything you enter stays on your phone and is not transmitted anywhere. That includes the households and people you add, their birthdays and anniversaries, phone numbers, email addresses, mailing addresses, the memories and notes you write, your outreach history, and your settings.

Data held only on your device is not something we can read, export, or produce in response to a legal request. If you never sign in and never enable cloud sync, the only information that leaves your phone is described in sections 4, 5, and 6.

3. What we store on our servers

If you create an account

Signing in is optional. If you do sign in, we store your email address, a session record, and the times you signed in. We use email codes rather than passwords, so we never hold a password for you.

If you turn on cloud sync

Cloud sync is off unless you enable it. When enabled, a copy of your sphere, including your contacts’ names, dates, contact details, mailing addresses, your notes about them, and your outreach history, is stored on our servers so it can be restored or used on a second device. This is the single largest category of personal information we hold, and it is entirely under your control.

Membership and purchases

We store your membership status, the dates it starts and renews, and a record of any card credits you buy and use. We never see or store your card number. Payment details are collected by Stripe on our website; we receive only a customer reference and the outcome.

Physical cards

When you mail a card, we retain a record of that order: the recipient’s name and mailing address, your return address, and the text you wrote. We keep these as receipts for mail that was physically sent on your behalf.

Crash reports

Crash reporting is off by default. We ask only at the moment a crash happens, and only send a report if you say yes. Before sending, the app strips email addresses, phone numbers, long number sequences, quoted text, and file paths from the error, so a client’s name that appeared in an error message is removed before it reaches us. A report contains the error, the technical stack trace, and which screen you were on.

4. Information sent for AI drafting

When you ask the app to draft a message, suggest what to ask about someone, or pull facts out of a note you wrote, that request is sent to an AI language model provider to produce the text.

What is included: the recipient’s first name, the reason for reaching out (for example “birthday” or “we have not spoken in five months”), the notes you have written that are relevant to this particular message, a short summary of your recent contact, and your own first name for the sign-off.

What is not included: phone numbers, email addresses, and mailing addresses are never sent for drafting. Neither is your wider sphere, only the person being written to.

The AI provider processes the request to generate the draft. We do not use your data, or your contacts’ data, to train AI models, and we do not permit our providers to do so.

5. Voice notes

If you dictate a note, the recording is sent to our server, converted to text by a transcription service, and then destroyed once the text is returned, including when transcription fails. We do not keep an archive of recordings. The resulting text is treated like any note you typed.

6. Your phone’s contacts

The app can import from your phone’s address book, but only if you choose to run an import and grant permission. We read contacts only during that import, and only the entries you select are added to your sphere. We do not scan or upload your address book in the background, and permission can be withdrawn in your phone’s settings at any time.

7. Third parties who receive data

We name each one, and what it receives. We do not share personal information with anyone else.

Third partyWhat it receivesWhy
AI language model providerRecipient’s first name, reason for outreach, relevant notes, your first nameTo write the draft you asked for
Speech-to-text providerThe voice recording you dictatedTo convert speech to text
Handwrytten (printing and mailing)Recipient’s name and full mailing address, your return address, the card’s textTo write and mail the physical card
StripeYour email and payment details, collected directly by StripeTo take payment and manage membership
ResendYour email address and the sign-in codeTo email you a sign-in code
Hosting and database providerAny data described in section 3To run our servers and store synced data

Handwrytten deserves particular attention. To mail a card, a third party’s full home address must be given to a printing company. That is the most sensitive single transfer in the product, it happens only when you choose to send a card, and it is unavoidable if you want physical mail sent.

8. What we do not do

We do not sell personal information, and never have.

We do not show advertising and we share nothing with advertising networks.

We do not track you across other apps or websites. The app contains no advertising or analytics SDKs.

We do not use your data or your contacts’ data to train AI models.

We do not request or store your location.

We do not read your text messages or email. When you send a message from the app, it opens your own Messages or Mail app with the draft in it, and you press send. We never see whether or what you sent unless you tell the app.

9. How long we keep things

DataRetention
Data on your deviceUntil you delete it or remove the app
Synced sphere dataUntil you turn off sync and delete your account
Account and sign-in recordsUntil you delete your account
Voice recordingsDestroyed immediately after transcription
Sign-in codesExpire within minutes and are then removed
Card order receiptsRetained after account deletion, with your name detached, as a record of mail physically sent and money taken
Crash reportsKept while we investigate; only exist if you opted in

10. Your choices and rights

Getting your data out

Settings includes an export that writes your entire sphere to a file you keep. It works whether or not you have an account, and it works even if your membership has lapsed. We do not hold your relationships hostage to a payment.

Erasing this device

Settings, then Erase this device, removes everything stored locally. If you have cloud sync on, this does not remove the synced copy; use account deletion for that. The app says so on the screen.

Deleting your account

Settings, then Delete account, permanently deletes your account and everything we hold: your synced sphere, your account record, your sign-in history, your credit ledger, and any crash reports. It also cancels an active subscription first, so you are never left being billed for an account that no longer exists. This is immediate and cannot be undone, which is why the app asks you to type your email to confirm and offers an export first. Receipts for cards already mailed are kept with your name detached, as described above.

Withdrawing consent

You can turn off cloud sync, turn off crash reporting, or revoke the contacts and microphone permissions in your phone’s settings, at any time, without losing access to the app.

US state privacy rights

Depending on where you live, you may have rights to know what personal information we hold, to obtain a copy, to correct it, to delete it, and not to be discriminated against for exercising those rights. The export and deletion features above satisfy most such requests immediately. For anything else, write to support@mymorningfive.com and we will respond within 45 days. We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of in that respect.

11. Your responsibilities toward your contacts

This section is unusual for a privacy policy, and we think it belongs here. The people in your sphere did not sign up for this app. You are entering information about them, and in most jurisdictions that makes you responsible for handling it lawfully and decently. Keep notes you would not be embarrassed for that person to read. Do not record health details, financial circumstances, or anything sensitive that you were told in confidence. If someone asks you to remove their information, remove it. The app lets you delete any person, note, or date at any time.

12. Security

Traffic between the app and our servers is encrypted in transit. Sign-in uses one-time emailed codes rather than passwords, and codes are stored hashed. Access to production data is limited to those who need it to operate the service. No system is perfectly secure, and we will not pretend otherwise; if a breach affects your information, we will notify you and any regulator as required by law.

13. Children

My Morning Five is a professional tool for licensed real estate agents and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has used the app, contact us and we will delete the account.

14. Where data is processed

We operate in the United States, and our service providers process data in the United States and potentially other countries where they operate. By using the app you understand your information may be processed in the United States.

15. Changes to this policy

If we change how we handle your information, we will update this page and change the “Last updated” date above. For changes that meaningfully affect your privacy, we will tell you in the app rather than relying on you to re-read this page.

16. Contact

Cactus Living Home LLC
support@mymorningfive.com

If you are a person whose information an agent has entered into this app and you want it removed, write to us. We will help, though in most cases the fastest route is to ask the agent directly, since the data may live only on their phone.

My Morning Five is a product of Cactus Living Home LLC.
This policy describes the app’s actual behavior as of the effective date above.