Myltimylti

Legal · Effective April 22, 2026

Privacy Policy

This policy describes what information Mylti collects, how we use it, and the choices you have.

1. Information we collect

Account information. When you sign up, we collect your email address and name. If you sign in with Google, we receive your email, name, and profile photo from Google.

Profile and onboarding data. Information you provide during onboarding (financial goals, income sources, preferences) and profile updates.

Financial data you enter. Revenue entries, goals, transactions, custom fields, and any notes or images you attach. This is user-provided data that belongs to you.

Connected platform data. When you connect YouTube, we store OAuth tokens (encrypted) and channel metadata. We use the YouTube Data API and YouTube Analytics API to fetch video upload information and revenue metrics for your connected channel only.

AI coaching conversations. Messages you send to Coach Mylti and the responses it generates are stored so you can review your chat history.

Operational logs. Basic request logs used for security, debugging, and abuse prevention.

2. How we use your information

  • To operate the application: show you your financial data, sync connected platforms, and track your goals.
  • To provide AI coaching: your profile context (recent revenue, top platforms, active goals) and conversation content are sent to Anthropic's Claude API to generate replies.
  • To keep your account secure and investigate abuse.
  • To communicate important service notices.

We do not sell your personal information. We do not share your data with advertisers. We do not use your financial data or conversations to train AI models.

3. Google user data and Limited Use

Mylti's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We access YouTube channel and analytics data only for channels you explicitly connect.
  • We use that data solely to display revenue and performance information inside your Mylti account.
  • We do not transfer this data to third parties except as necessary to provide user-facing features, comply with applicable law, or as part of a merger, acquisition, or asset sale (with notice to you).
  • We do not use Google user data for advertising.
  • We do not permit humans to read Google user data unless you give explicit consent, it is necessary for a security investigation or to comply with law, or the data has been aggregated and de-identified.

4. Third-party services we rely on

  • Supabase — database, authentication, and file storage.
  • Anthropic — powers the AI coaching feature. Messages are processed under Anthropic's commercial terms; Anthropic does not use Mylti customer data to train models.
  • Google / YouTube — OAuth sign-in and YouTube APIs for revenue syncing.
  • Railway — application hosting.

5. Security

OAuth tokens are encrypted at rest using pgcrypto. Database access is restricted by row-level security policies, so each user can only read and modify their own data. All traffic to Mylti is served over HTTPS.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at noah.mott1@gmail.com.

6. Data retention and deletion

You can delete your account from the profile page at any time. Deletion removes your revenue entries, goals, profile, platform connections, and associated records. Some audit log entries may persist in anonymized form for security and compliance record-keeping.

You can also revoke Mylti's access to your Google account at myaccount.google.com/permissions.

7. Your rights

Depending on where you live (including under the GDPR and the CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email noah.mott1@gmail.com.

8. Children

Mylti is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app or via email. The "Effective" date at the top of this page indicates the latest revision.

10. Contact

Questions, requests, or concerns: noah.mott1@gmail.com.