Privacy notice

Updated 11 November 2026

Make Progress is a personal goal tracker built by Matt Spear. This notice describes the hosted app. Contact matt@mattspear.co with questions or requests about your data.

What is stored and why

Your name, email, password hash, sessions, and timezone support your account and sign-in. Goals, tasks, progress updates, notes, and activity history provide the tracking features you use. Session records may include your IP address and browser information for account security. Your plaintext password is not stored.

Where your information goes

Vercel hosts the app, and Neon stores account and goal data in a PostgreSQL database in Singapore. Better Auth runs within the app. Resend sends verification and password-reset emails through its Japan sending region. These emails contain your address and a temporary account link, not your goals or notes. Email open and click tracking are disabled.

Hosting and email providers also process technical information needed to operate and secure their services. Their infrastructure and support may process information in other countries. Matt may make private local database backups for recovery.

There is no advertising, product analytics, billing, public goal sharing, or sale of your information in this version. Reference links are external sites with their own policies; the app does not fetch their contents.

Cookies

Essential authentication cookies keep you signed in. You can sign out to end the current session. A password reset revokes existing sessions.

Your content and deletion

You can edit your account name and timezone, correct updates, and delete goals. Deleting a goal removes its tasks, updates, and activity from the app database. Removing a task preserves its name and identifier for the remaining goal history. Deleting activity tidies the timeline without undoing work; deleting an update also removes its related activity.

Account and goal data is kept while needed to provide your account, until you delete it or request account deletion. Deletion from the app does not immediately remove provider recovery copies or older manual backups. Manual backups have no automatic expiry and are removed separately when no longer needed for recovery. A deletion request includes reviewing retained copies; contact Matt for the current recovery and deletion arrangements.

Requests and changes

Contact Matt to request an account deletion or a copy of your data. Depending on applicable law, you may also have rights to correction, restriction, objection, and complaints to your local data-protection authority. Account data is used to provide the service you request; security records help protect accounts and prevent abuse. This notice will be updated when the app's processing arrangements change.