Privacy Policy

1. Who we are

Meowdy is run by David PM, LLC, a Texas limited liability company ("we", "us"). This policy covers meowdy.works, its subdomains, the Meowdy iOS app, and the emails we send.

When an organisation puts information about its own people into Meowdy, that organisation decides what is collected and why, and we handle it on its behalf under our Data Processing Agreement. If you are one of those people, the organisation that added you is the first place to ask about your information; we will help it answer.

2. What we collect

• Account details: your name, email, phone if you give it, language, and time zone.
• What you put into Meowdy: your Hows (flows of work), measures, the tiers people agree, results, reviews, project cards, plans, tasks, notes, files you upload, and your conversations with the assistant.
• People an organisation adds: name, email or phone, title, who they report to, their team, and the measures, results, reviews and plans that belong to them.
• Bookings and payments: the details you give when you book a session, and payment records from Stripe. Stripe holds card numbers; we never see them.
• Usage and devices: pages and features you use, sign-in times, your IP address in server logs, your browser or app version, and a notification token if you turn notifications on in the iOS app.
• Messages you send us through the contact form or email.

3. How we use it

• To run Meowdy: store your work, show it to the people you allow, and keep it working.
• To send the emails and notifications you asked for, such as personal links, reminders at the frequency a person chose, and the weekly note.
• To take payment and keep the records tax law requires.
• To answer you when you write to us.
• To keep Meowdy secure and stop abuse.
• To see which features help, from counts of how they are used, so we can fix the ones that don't.

We do not sell personal information. We do not share it for advertising, and we run no advertising trackers.

4. AI in Meowdy

Meowdy uses Claude, from Anthropic, to hold conversations, draft and edit Hows, read documents you upload, and write summaries. It uses Jev, from TypeSafe, for short judgments on English text, such as which question to ask next. We send each provider only what the feature needs. Both process it under business terms that do not allow training their models on it.

What the AI produces is a proposal. Nothing changes until a person accepts it. Meowdy makes no automated decisions about people: tiers, results and reviews are agreed and recorded by people.

5. Who can see it

• Inside your organisation: what each person sees depends on their role and on the visibility settings your owners and admins choose. A person's measures, results and reviews are never shown to peers or to the people above them unless those settings allow it.
• Share links: a How you share by link can be read by anyone who has the link, until you turn it off.
• Meowdy staff: we see that your account exists, your plan and your usage. We open what is inside it only when you grant access for a session, and every such access is logged and shown to you.

6. Companies that process data for us

We use these providers, each only for the job listed. All process data in the United States.

• Cloudflare: hosting, delivery and file storage.
• Supabase: the database and sign-in.
• Anthropic: Claude, for conversation, drafting and summaries.
• TypeSafe: Jev, for short judgments on English text.
• Postmark: email delivery.
• Stripe: payments.
• Apple: the iOS app and its notifications, if you use them.

The Data Processing Agreement keeps this list current and says how we tell customers about changes.

7. Cookies

Meowdy uses only the cookies it needs to work: one that keeps you signed in, and small ones that remember your language and your light or dark choice. We use no advertising cookies and no third-party analytics cookies.

8. How long we keep it

• Your account and everything in it: for as long as the account exists. When an owner deletes the account, its data is removed from our active systems at once and from backups within 30 days.
• People an organisation archives: their history stays with that organisation until the organisation deletes it.
• Bookings and payment records: as long as tax and accounting law requires, generally seven years.
• Server, email and security logs: up to one year.

9. Your choices and rights

From your settings you can export everything in your account, correct it, or delete the account. You can also email us and we will do it for you.

Depending on where you live, including Texas, California and the European Union, you may have the right to know what we hold about you, to get a copy, to correct it, to delete it, and to object to or limit some uses. We do not sell personal information, so there is nothing to opt out of there. We answer requests within 45 days. If we say no, you can appeal by replying to our answer, and you can contact your state attorney general or data protection authority.

If an organisation added you to Meowdy, we will pass your request to it and help it respond.

10. Security

Every table in our database has access rules so one organisation cannot read another's, links are stored only as hashes, and staff access to customer content needs the customer's grant. The Security page has the details.

11. Children

Meowdy is for work. It is not meant for anyone under 16, and we do not knowingly collect information from them.

12. Where data is processed

Meowdy runs in the United States. If you use it from another country, your information is transferred to and processed in the United States.

13. Changes

When we change this policy, we post the new version here with its date. If a change matters, we email account owners at least 30 days before it takes effect.