Privacy Policy

Make The Most Of Today (“MTMOT”, “we”, “us”) is operated by Carla Taylor in Victoria, Australia. This policy explains what personal information we collect, why, who handles it for us, where it goes, and what you can do about it. It applies to mtmot.com, our apps and our subscriptions. If you live in the United States, our Consumer Health Data Privacy Policy also applies to you.

What we collect

• Account and purchase details: your name, email address, what you bought and when. Card details go straight to our payment provider; we never see or store them.
• What you write in our apps: reflections, journal entries, goals, workbook answers, game results and your conversations with CJ, our AI companion.
• Health information, in Rebuilding only: your daily check-ins (mood, energy, focus, sleep, pain and work capacity), your return-to-work readiness assessments, and anything you choose to tell CJ there. This is health information under the Privacy Act 1988, which treats it as sensitive information. We collect it only with your consent, which Rebuilding asks for before you start.
• Messages you send us: contact forms, emails and replies to CJ’s check-in emails.

What we never collect: your medical record. Rebuilding does not ask for medications, side effects, appointments or notes for your doctor. Those belong in your companion Notion template, which lives in your own Notion workspace. MTMOT cannot see it and never collects it.

How we use it

• To provide the product you signed up for, including CJ’s replies, summaries and reflections.
• To manage your membership, access and payments.
• To send you emails you asked for. Marketing email is opt-in, and you can unsubscribe at any time.
• To keep the services secure and working.

We never sell your personal information. We never use it for advertising. We do not use it to train AI models, and our AI providers do not use it to train theirs.

CJ, AI and automated summaries

CJ is an AI companion, not a person. When you talk with CJ or ask for a summary, the entries CJ needs are sent to an AI provider, which writes the reply and returns it. In Rebuilding, CJ also turns your readiness answers into a readiness score and a written summary. These are generated automatically from what you recorded; they are for you to use as you choose, and MTMOT makes no decision about you from them. You can read how CJ responds if you are distressed in How CJ keeps you safe.

Who handles your information for us

These providers act only on our instructions, under data processing terms that bind them to protect your information and use it only to provide our services.

• Supabase stores our app data, including Rebuilding’s health information, in Sydney, Australia.
• Anthropic (Claude) and Google (Gemini) generate CJ’s replies and summaries. They may process your entries outside Australia, including in the United States.
• OpenAI creates search indexes of some CJ conversations outside Rebuilding, so CJ can remember context. It processes that text in the United States.
• Postmark sends and receives CJ’s check-in emails, and Railway hosts the automation that handles your replies. Both operate in the United States.
• Stripe and Payhip process payments.
• Kit sends the newsletters you subscribe to.
• Cloudflare and Vercel host and protect our websites and apps.

Sending information overseas

Some of the providers above are based in, or process information in, the United States and other countries. Before we use any overseas provider, we take reasonable steps to make sure it handles your information to the standard of the Australian Privacy Principles, including binding data processing terms. For Rebuilding’s health information, we also ask for your consent to share the entries CJ needs with the AI providers named above, before any of it is sent.

Keeping it safe, and how long we keep it

Your app data is encrypted in transit and at rest, and our database rules let only you read your own records. We keep your information while your account exists. If you ask us to delete it, we delete it within 30 days, and we ask our providers to do the same. If we ever have a data breach likely to cause serious harm, we will tell you and the relevant regulators as the law requires.

Your rights

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong;
• delete your information;
• withdraw your consent to Rebuilding collecting or sharing your health information.

Email [email protected] and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Age

Our services are for people aged 18 and over. We do not knowingly collect information from children.

Changes

If we change how we handle health information, we will ask for your consent again before the change applies to you. We update the effective date above whenever this policy changes.

Contact

Questions about this policy go to [email protected]. This policy is governed by the laws of Victoria, Australia.