Privacy Policy

MultiMuse Media Inc. ("Excelza," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what we collect, how we use it, and your rights — in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), and where applicable the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

1.1 Information You Provide

• Account information: your email address and password. Passwords are stored only as a salted hash — we never see or store your actual password.
• Profile information: display name, username, and optionally a bio and profile photo
• Your plans: the goals you describe, and the projects, stages, tasks, notes, and calendar entries created from them
• Photos: images you attach to a progress post
• Posts and replies: progress updates you choose to share, and replies you write
• Communications: bug reports and messages you send us

1.2 Information Collected Automatically

• App and device information: app version and platform, attached automatically to bug reports you submit
• Log data: access times and error logs generated by our hosting providers, including IP address
• Product usage: which features you use and when — for example that a project was created, a task was completed, or a roadmap was generated

What usage analytics never include: the words you write. Your goals, project names, notes, and anything you type stay out of analytics entirely. Usage events carry counts and categories only (for example "a project was created, skill level: beginner"), tied to your account's internal ID — never your name or email address.

We do not use advertising identifiers, and we do not track you across other apps or websites.

2. Artificial Intelligence

This section matters, so we are stating it plainly.

When you ask Excelza to build a roadmap, break down a task, or reshape a plan, the text you wrote is sent to Anthropic, our AI provider, which processes it and returns the generated result. That text can include the goal you described and related details you have entered.

• Anthropic processes this text to produce your result and to comply with their legal obligations.
• Under our agreement with Anthropic, your text is not used to train their models.
• We send only what is needed to generate the response. We do not send your email address or password.
• If you would rather a detail never leave your device, do not type it into a field that feeds an AI feature.

If our AI provider changes, we will update this policy and notify you of the change.

3. How We Use Your Information

We use what we collect to:

• Create and manage your account
• Store and display your plans, tasks, notes, and progress
• Generate AI roadmaps, task breakdowns, and reshaped plans at your request
• Deliver posts to the people you have shared them with
• Send transactional email (password resets and, where enabled, email confirmation)
• Respond to your bug reports and support requests
• Detect and prevent fraud, abuse, and violations of our Terms
• Comply with legal obligations

We do not use your personal information for advertising, and we do not sell it.

4. How We Share Your Information

4.1 What Other Users Can See

Excelza is private by default. Your projects, tasks, and notes are visible only to you unless you choose to share them. When you do:

• Invited viewers you add to a project can see that project's progress
• Posts you publish may appear in the community feed, along with your display name and profile photo, and may be reacted to and replied to by others

You can set your profile to private, and you can delete a post at any time.

4.2 Service Providers

We share information with providers who help us operate Excelza:

• Supabase — database, authentication, and file storage
• Anthropic — AI generation (see Section 2)
• Vercel — hosting for excelza.app
• Resend — sending transactional email
• Apple — app distribution through the App Store and, if you purchase a subscription there, payment processing
• Google — app distribution through Google Play and, if you purchase a subscription there, payment processing
• RevenueCat — subscription management: validating store purchases and keeping your subscription status in sync across devices (receives your account ID and purchase receipts, never your payment details)
• PostHog — product analytics: which features are used, so we can tell what's working (receives usage events and your account's internal ID; never your goals, notes, name, or email)

These providers are contractually required to protect your data and use it only as we direct.

4.3 Legal Requirements

We may disclose information if required by law, court order, or government authority, or where we believe it is necessary to protect the rights, property, or safety of Excelza, our users, or the public.

4.4 Business Transfers

If MultiMuse Media Inc. is involved in a merger, acquisition, or asset sale, your information may transfer as part of it. We will notify you before your data becomes subject to a different privacy policy.

4.5 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information.

5. Data Retention

We keep your personal information while your account is active. When you delete your account, your profile, projects, stages, tasks, notes, posts, replies, and uploaded photos are deleted. We may retain limited records where required by law or to resolve disputes.

6. Data Security

We protect your information with encryption in transit (HTTPS/TLS), hashed passwords, and row-level database access controls that restrict each account to its own data. No system is perfectly secure, and we cannot guarantee absolute security. We will notify affected users of any material data breach as required by law.

7. Your Rights

Depending on where you live, you may have the right to:

• Access a copy of the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information — you can do this yourself in Settings at any time
• Withdraw consent where processing is based on consent
• Portability — receive your data in a portable format (where GDPR applies)
• Object to certain processing

To exercise these rights, contact hello@excelza.app. We respond within 30 days.

8. Children's Privacy

Excelza is intended for people aged 13 and older. We do not knowingly collect personal information from anyone under 13. If we learn that we have, we will delete it promptly. If you believe a child under 13 has created an account, contact hello@excelza.app.

9. International Data Transfers

We are based in Canada, and our providers operate in Canada and the United States. Using Excelza means your information may be transferred to, stored, and processed in those countries. Where required, we apply appropriate safeguards for cross-border transfers.

10. Changes to This Policy

We may update this policy. We will notify you of material changes by email or a notice in the App. Continued use after changes take effect means you accept the revised policy.

11. Contact Us

Privacy questions, requests, or complaints: hello@excelza.app.