Privacy Policy

Last updated: 17 September 2026

This policy explains what MR CEO (“the app”, “we”, “us”) collects, why, and how it is protected. It is written to match what the app actually does — not generic boilerplate.

Contact: support@mrceo.app

1. Using MR CEO without an account

MR CEO works fully as a guest, with no sign-up required. In guest mode, the personal content you enter — CEO Moves, Notes, Reminders, Goals, Wishlist items, Vision Board items, Night Reviews, Weekly Reviews, your Morning Routine checks and your reflections, plus the day’s Mindset and guidance ids — is stored in a local database on your device and is not uploaded to MR CEO’s cloud database. We have no copy of it.

The app may still send limited technical and usage information to the services described in section 4 (for example Firebase Analytics and crash reporting), in guest mode as well as when signed in. That information does not include the content you type into MR CEO.

2. Account information and cloud sync

Account identity. If you create an account, what we store depends on how you sign in:

• Email + password — your email address and a securely hashed password, or
• Sign in with Apple — the email Apple shares (or Apple’s private relay email if you chose to hide yours), plus a name if you provide one, or
• Google Sign-In — the email and name associated with your Google account.

We never see or store your Apple ID or Google account password — sign-in is handled by Apple or Google, and we receive a token confirming who you are.

Cloud sync is part of MR CEO Pro. Creating an account does not by itself upload your content. While your plan includes cloud sync — a Pro subscription or a Pro trial — the content listed in section 1 is synced to MR CEO’s cloud database so it can be restored if you reinstall the app and accessed across your devices. On the Free plan, your content stays on your device even when you are signed in. If Pro ends, sync stops; content that was already synced stays in your account until you delete it.

What a signed-in account stores even without Pro. Your account details above; your subscription status as reported by RevenueCat; a push notification token if you enable notifications (section 5); when you last opened the app; and, on the Free plan, usage counters that enforce Free-plan limits — how many CEO Moves you created in the current period, not what they say.

3. Your personal content

Everything you write in MR CEO is yours. We do not use the content you enter for advertising or analytics. It is processed only as needed to provide, secure, maintain, and support MR CEO — for example to sync it to your other devices when your plan includes cloud sync, or to help you if you contact support. We do not routinely access or review your personal content.

4. Analytics and diagnostics

Usage analytics. We use Firebase Analytics to understand which features are actually used, so we can improve the app. This is usage data, not the content you type: for example which tab you open, that a goal was created (not what it says), that a Free-plan limit was reached, or that the Pro screen was shown. We also label this data with your account type (guest or signed in), your plan (Free or Pro), your app language, and your platform. Firebase collects standard technical information automatically — device model, OS version, app version, approximate country or region, and an installation identifier — under Google’s own Firebase data practices. We do not use advertising identifiers.

Crash and diagnostic information. We use Firebase Crashlytics and Firebase Performance Monitoring to collect crash reports and technical diagnostic information — such as app version, device type, operating-system version, technical details about a crash, and how long parts of the app take to load or respond — to identify and fix reliability problems. These reports are not intended to include the personal content you enter into MR CEO.

App configuration. The app fetches a small set of settings from Firebase Remote Config, such as the minimum supported app version. This involves the same technical information as above.

5. Notifications

Reminders, morning reminder, and Night Review notifications you set up are scheduled on your device. If you enable notifications while signed in, your device also registers a push token with Firebase Cloud Messaging, and we may use it to deliver notifications from MR CEO — including, where enabled, occasional app-engagement notifications if you have been away for a while. To decide whether such a notification is appropriate, we record when you last opened the app while signed in.

You can turn notifications off at any time in Settings or in your device’s system settings. Your push token is removed when you sign out or delete your account.

6. Subscriptions and payments

MR CEO offers an optional Pro subscription. Billing is handled by Apple’s App Store or Google Play — MR CEO never receives your payment card details. We use RevenueCat to manage subscription state. RevenueCat receives purchase and subscription information from Apple or Google together with an app user identifier. When you are signed in, we associate that identifier with your MR CEO account so your subscription status can be recognized correctly, including on another device.

7. How we protect your information

• Signed-in account data and synced content are stored using Supabase (PostgreSQL) and our other service providers listed in section 8. User-data tables are protected with access controls, including PostgreSQL row-level security, designed to prevent one user from accessing another user’s private records.
• Data in transit between your device and our systems is encrypted with HTTPS/TLS.
• On your device, MR CEO’s local database and sign-in session are kept in storage that is private to the app. Some identity-related values are stored in the operating system’s secure storage (Android Keystore-backed storage, iOS Keychain).
• The app opts out of Android’s automatic cloud backup and device-to-device transfer, so a guest’s local content does not leave the device by that route.
• We do not sell your personal information, and we do not share it with third parties for advertising.
• No system can be guaranteed completely secure. These are the measures in place, and we review them as the app evolves.

8. Third-party services

These are the services that process information on our behalf. Each applies its own privacy policy to the information it processes.

9. Permissions

MR CEO asks for the notifications permission so it can show the reminders, morning reminder, and Night Review notifications you choose. On supported Android versions, MR CEO may also request permission to schedule exact alarms so time-sensitive reminders can be delivered at the time you choose. The app does not request access to your camera, microphone, location, contacts, or photo library.

10. Data retention

We keep your account information and any synced personal content while your MR CEO account remains active. When you delete your account, we delete the associated personal content from our active systems, subject to limited retention required for security, legal obligations, transaction records, backups, or the requirements of our service providers.

Analytics, diagnostic, and transaction information may be retained according to the retention settings and policies of the services listed in section 8.

11. Your choices and privacy rights

• Use the app without an account. Your content stays on your device (see section 1).
• Delete your account at any time: Settings → Account → Delete account, entirely within the app. This is account deletion, not a temporary deactivation: it deletes your MR CEO account and the synced personal content attached to it from our active systems. Some limited records may be retained as described in section 10. See Delete your account for the full steps.
• Turn off notifications at any time in Settings or your device’s system settings.
• Request a copy of your data, or ask a question, by emailing support@mrceo.app.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and in some cases to receive a portable copy of it. To make a privacy request, contact support@mrceo.app. We will verify that the request comes from the account holder before acting on it.

12. Children

MR CEO is not directed at children and is not intended for use by anyone under 13 (or the minimum age required by your country’s law). We do not knowingly collect data from children.

13. Changes to this policy

If this policy changes in a way that meaningfully affects what we collect or how we use it, we will update the “Last updated” date above and, for significant changes, notify users in-app.

14. Contact

Questions about this policy or your data: support@mrceo.app.