Legal.
Everything that governs your use of Mythox, in one place. Written plainly so you actually know what you are agreeing to.
Privacy Policy
What Mythox collects, why, how we protect it, and the choices and rights you have over your own data.
Security first, your data, your rules. Mythox is built security-first because of how much of your life and business it holds. You decide what is stored and what is not. With privacy on, your information does not touch our cloud. You can see exactly what we hold at any time, and you can delete it at any time. We will never sell your information to anyone. Ever.
01 Who we are
Mythox is operated by Reis Media LLC ("Reis Media", "we", "us", "our"), a Wyoming limited liability company. Our mailing address is 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA. Mythox is a web and desktop application that helps creators and entrepreneurs bring their finances, time, energy, goals and work together in one place.
This Privacy Policy applies to the Mythox application (web and desktop) where you sign in and where you may connect your bank through Plaid. If you have any question about it, email support@mythox.ai.
02 What we collect
We collect only what we need to run the features you use. Depending on what you connect, that can include:
| Category | Examples | Source |
|---|---|---|
| Account | Email address, name, password (stored only as a secure hash by our auth provider) | You, at sign-up |
| Financial | Bank/account details, balances, and transactions | Plaid, a CSV you import, or manual entry |
| Time & activity | Where your working time goes | Rize, or manual entry (optional) |
| Energy / wellness | Energy, recovery or mood signals | Whoop, or manual entry (optional) |
| Content you create | Goals, journal entries, systems, notes, product ideas, next actions | You, inside the app |
| Memory | Information you let Midas remember about you (goals, preferences, context, and past entries) so it can personalize results over time | You, inside the app |
| Billing | Subscription tier and payment status (card details are handled by Stripe, not stored by us) | Stripe |
| Usage | Basic technical/usage data needed to operate and secure the app | Automatically |
Connecting a data source is always optional and in your control. If you don't connect a bank, Rize, or Whoop, we don't receive that data.
Support conversations on this website, including the messages you send and the answers you receive, are recorded and stored so we can answer you and improve support.
03 Signup protection and your browser
When you create a Mythox account we save one random code inside your own browser and keep it for up to 90 days. It is not your name, your email, or anything about you. It exists only so we can see when the same browser opens many free trials, which is how free trial abuse is spotted.
That code never leaves your browser in a readable form. Before we store anything, it is scrambled with a secret key so it cannot be turned back into the code your browser holds.
It never blocks a signup on its own. Clearing your browser data, or signing up in a private window, simply removes the code, and you can create your account exactly as normal.
We also record a scrambled version of the internet address and email address used at signup, for the same reason and under the same rules.
04 Bank data & Plaid
To let you connect a bank account, we use Plaid Inc. ("Plaid"). When you choose to connect, Plaid securely collects your login with the bank on your behalf and gives us access to the account and transaction information needed to power your finance features. You enter your bank credentials into Plaid's secure interface, so Mythox never sees or stores your bank username or password. Bank connections through Plaid are available for banks in the United States only.
By connecting an account, you also agree to Plaid's handling of your information as described in the Plaid End User Privacy Policy. When you connect, we receive from Plaid an access token plus the account and transaction data you authorized; these are kept server-side and encrypted, isolated to your account. (Bank connection is live; it runs on the encrypted, per-user-isolated platform described in Section 8.)
05 Why we collect it
- To provide the service - show your finances, time, energy, goals and work, and the insights built on them.
- To power the AI guide - give you relevant suggestions based on your own data (see Section 7).
- To handle billing - manage your subscription tier through Stripe.
- To support you - answer questions and fix problems.
- To keep the app secure - protect against fraud, abuse and unauthorized access.
We do not sell your personal information, and we do not use your bank or financial data for advertising.
If you create and verify a Mythox account and accept our trial terms, we may send you up to four emails to help you finish setting up your account, and you can stop these reminders at any time using the stop link in any reminder or by contacting support@mythox.ai.
The short legal version, for readers in the EU, UK and similar places. We process your data (a) to deliver the service you signed up and paid for, which is a contract; (b) because you chose to connect an optional source, which is consent you can withdraw at any time; (c) to keep the service secure and prevent abuse, which is a legitimate interest; and (d) where the law requires it, such as tax and billing records, which is a legal obligation. Where a mandatory law gives you more than this page says, that law wins.
06 Consent & your choices
We collect, process and store your data with your consent, which you give by creating an account and by choosing to connect each data source:
- Connecting a bank requires you to actively authorize it through Plaid - an explicit, per-connection consent.
- Connecting Rize, Whoop, or importing a CSV is similarly your choice, each time.
- You can withdraw consent at any time by disconnecting a source, or by deleting your account, which removes the associated data (see Section 12).
07 AI features & your data
Mythox includes an in-app AI assistant (Midas) that guides you using your own data. When you use it, the relevant pieces of your data needed to answer you may be sent to the AI model provider you select (for example, providers behind GPT, Claude or Gemini) so it can generate a response.
- This only happens when you use the AI features.
- Providers process that data under their own terms to return your answer; we do not permit them to use it to advertise to you, and we do not sell it.
- On the highest tier you may use your own API key, in which case your AI usage runs directly under your own provider account.
Your memory
Midas keeps a per-user memory that stores what you give it (your goals, preferences, context, journal entries, and similar personal information) so it can give you personalized results over time. This memory is tied to your account and persists across sessions until you delete it. Your memory is private by default and stored securely under your account. You can delete it at any time from your settings (see Section 12).
The "Share my data with Midas" toggle
Your settings include a master "Share my data with Midas" toggle that controls whether Midas may use your memory and data to personalize its answers:
- When it is on, Midas may draw on your stored memory and data to personalize what it generates.
- When it is off, your data is kept private and Midas runs in a limited mode that does not use your personal memory.
- Per-entry and per-feature controls. On top of the master toggle, you can mark specific entries or features as private, so they stay private no matter how the master toggle is set.
You can change the toggle and your per-entry settings at any time, and changes take effect immediately.
Training and who can see your data
Reis Media does not train its own AI models on your content. Access to account data is limited to authorized personnel (currently the founder), and only for support you ask for, security, or abuse prevention.
08 How we store & protect it
Your data is stored in a managed PostgreSQL database (Supabase) hosted in the United States, with the following protections:
- Encryption in transit: all traffic uses HTTPS with TLS 1.2 or higher.
- Encryption at rest: data is encrypted at rest with AES-256.
- Per-user isolation: the database enforces Row-Level Security, so your account can only access your own data - no other user can read or change it.
- Least-privilege keys & server-side secrets: powerful keys and the Plaid secret are never exposed to the browser; secrets are kept in a secure store, never in our code.
- Security review before every release.
No system can be guaranteed 100% secure, but we apply these reasonable, layered measures and continue to strengthen them (see our Information Security Policy).
09 Who we share with (sub-processors)
We share data only with the trusted providers needed to run Mythox, and only the data each one needs. We do not sell personal data.
| Provider | What they do | What they handle |
|---|---|---|
| Supabase | Database, authentication & hosting | Your account & app data |
| Plaid | Secure bank connections | Bank login (on your behalf) & transaction data |
| Rize | Time tracking | Where your working time goes. Optional, and only if you connect it. |
| Whoop | Energy and recovery signals | Energy, recovery or mood figures from your Whoop. Optional, only if you connect it, and never used for advertising. |
| Google / YouTube | Your own channel data | Your own YouTube channel analytics and revenue figures. Optional, and only if you connect it. |
| Stripe | Subscription payments | Billing details & payment info |
| AI model providers: Anthropic, OpenAI, Google, DeepSeek, Moonshot AI | Generate AI responses | Only the content of the request you make, when you use an AI feature. You pick the model, and the model you pick is the company your request goes to. DeepSeek and Moonshot AI are based in China, so a request you send to one of their models is processed there. Every other model runs with a US or EU provider. If you would rather nothing of yours leaves the US, do not select those two. |
| Resend | Sends our emails | Your email address and the message we send you |
| Netlify | Serves the website and app | Standard web request information, including your IP address |
| Systeme.io | Mailing list | Your email address, if you give it to us on the public website |
| Google, Meta, TikTok, X, OpenAI (advertising) | Measure our advertising | Public-website page visits and signups only. Never anything from inside the app. Full detail and how to switch it off in the Cookie Policy. |
Adding a provider. If we add a new provider that handles your personal data, we update this table and the "Last updated" date at the top of this policy before it goes live.
We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer.
Business transfers. If Reis Media LLC is ever involved in a merger, acquisition, or sale of all or part of its assets, your information may be transferred as part of that deal. We will give you notice before your information becomes subject to a different privacy policy.
10 How long we keep it
We keep your data for as long as your account is active and you find it useful. When you disconnect a source or delete your account, we remove the associated data as described in our Data Retention & Deletion Policy. In short: keep what you use, delete what you ask us to.
11 Your rights
You have rights over your personal data, including the right to:
- Access the personal data we hold about you.
- Correct data that is wrong or out of date.
- Export a copy of your data.
- Delete your data (see Section 12).
- Withdraw consent and disconnect any source at any time.
Depending on where you live (for example under the GDPR or California's CCPA/CPRA), you may have additional rights, such as the right to object to or restrict certain processing and the right not to be discriminated against for exercising your rights. To exercise any of these, email support@mythox.ai and we will respond within the timeframe required by applicable law.
12 Deleting your data
You can ask us to delete your data at any time by emailing support@mythox.ai (or from inside the app, in Settings). When you do:
- We delete your account and personal data from our active database, normally within 30 days.
- We revoke any Plaid access tokens so your bank connection is severed.
- Copies remaining in routine encrypted backups are purged on the normal backup rotation cycle.
- We may keep the minimum records the law requires us to retain (for example, certain billing/tax records).
See the Account & Data Deletion page for the step-by-step request.
13 Children, changes & contact
Children
Mythox is intended for adults (18+) and is not directed to children. We do not knowingly collect data from anyone under 18. In particular, Mythox is not directed to children under 13, and in line with the U.S. Children's Online Privacy Protection Act (COPPA) we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.
International users
Mythox is operated from the United States, and your data is processed and stored there. If you access Mythox from outside the United States, you understand that your information will be transferred to, and processed in, the United States, where data-protection laws may differ from those in your country. We take reasonable steps to protect your data consistent with this policy.
Changes to this policy
We may update this policy as the product evolves. We'll change the "Last updated" date above and, for material changes, give you at least 14 days notice by email or in-app before the change takes effect. Continuing to use Mythox after that means you accept the updated policy.
Contact
Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA · support@mythox.ai
14 YouTube API Services
YouTube API Services. Mythox uses YouTube API Services. When you choose to connect your YouTube channel, you authorize Mythox to access your own YouTube data through Google/YouTube's OAuth login. Mythox uses this data solely to show you your own channel and video analytics and revenue, and to generate recommendations for you. Mythox also uses the YouTube Data API to search public videos to help you research product demand. Mythox does not scrape, resell, or build a competitor-analytics database of other people's channels.
By using these features you agree to be bound by the Google Privacy Policy: https://policies.google.com/privacy .
Data we store and how long. We store only the tokens and the summarized analytics/revenue figures needed to show you your dashboard, for as long as your channel stays connected. Stored YouTube data is refreshed or removed in line with the YouTube API Services Developer Policies.
Disconnecting and deleting your data. You can disconnect your YouTube channel from Mythox at any time in Settings > Connections, which deletes the stored tokens and the YouTube data we hold for you. You can also revoke Mythox's access directly through your Google account at https://myaccount.google.com/permissions . Revoking access there stops all further data access and we delete the associated stored data.
15 Wellness and health-related data
Some of the data you can connect or type in is about your body and mind: energy, recovery, or mood signals from Whoop, and anything similar you enter yourself. The law in some places (for example Washington State's My Health My Data Act) calls this consumer health data, and we treat it that way:
- We never sell it, and we never use it for advertising.
- It is used for one thing: showing you your own patterns and, if you switch it on, letting Midas personalize around them.
- Midas uses wellness data only if you turn that on in Settings. It is off by default.
- When it is on, the relevant parts go to the AI provider running the model you picked, exactly as described in Section 7.
- Disconnecting Whoop or deleting your account removes it, as described in Section 12.
Terms of Service
The rules that govern your use of Mythox. Written plainly so you actually know what you're agreeing to.
01 Acceptance
By creating an account or using Mythox in any way, you agree to these Terms of Service ("Terms"). If you don't agree, please don't use Mythox. These Terms form a binding agreement between you and Reis Media LLC ("Reis Media", "we", "us"), a Wyoming limited liability company with a mailing address at 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.
If you use Mythox on behalf of a business or organization, you represent that you have the authority to bind that entity to these Terms, and "you" refers to that entity.
02 What Mythox is
Mythox is a web and desktop application that helps creators, entrepreneurs, and online business owners bring their finances, time, energy, goals, and work together in one place - with an AI guide (Midas) built in.
03 Eligibility
You must be at least 18 years old to use Mythox. By using the service, you confirm that you meet this requirement. Mythox is not directed at children, and we do not knowingly collect data from anyone under 18.
You must also comply with all applicable laws in your jurisdiction when using Mythox.
04 Your account
When you create an account, you are responsible for:
- Keeping your login credentials confidential. Do not share your password with anyone.
- All activity that happens under your account, whether or not you authorized it.
- Notifying us promptly at support@mythox.ai if you believe your account has been compromised.
One account per person. You may not create or operate more than one account to get around plan limits, free trials, or a suspension. We may suspend or terminate accounts that do.
Two-factor authentication. We offer optional two-factor authentication (2FA) to help protect your account, and we strongly encourage you to turn it on.
We may suspend or terminate accounts that violate these Terms or that we reasonably believe pose a risk to the service or other users.
05 Acceptable use
You agree not to use Mythox to:
- Break any law or regulation, or facilitate illegal activity.
- Harass, abuse, or harm others.
- Attempt to reverse-engineer, decompile, or extract source code from Mythox.
- Resell, sublicense, or otherwise commercialize access to the service without our written permission.
- Scrape, crawl, or use automated means to extract data from Mythox beyond normal app use.
- Interfere with or disrupt the service, its servers, or networks connected to it.
- Upload or transmit malware, viruses, or any harmful code.
- Attempt to gain unauthorized access to another user's account or data.
We reserve the right to remove content or suspend access if we determine (in our reasonable judgment) that these rules have been violated.
06 Subscriptions & billing
Billing. Mythox is live. Every plan starts with a free trial that requires a card at signup. The trial ends at whichever of these three comes first: 3 days pass, you spend all your trial credits, or you export, download or publish a product. When it ends your card is charged for the plan you chose and your paid membership starts. No charge is made before that. Cancel before it ends and you are not charged. Paid plans are Pro ($34/mo), Scale ($100/mo), and MAX ($200/mo), with yearly billing available at a discount.
Pricing is published clearly on the Pricing page before you are charged. Specifically:
- Subscriptions are billed securely through Stripe. We never store your card number - Stripe handles all payment data.
- Subscriptions auto-renew at the end of each billing period unless you cancel.
- You can cancel anytime from your account settings. When you cancel, you keep access until the end of the period you already paid for.
- AI credits. AI features run on credits included with your plan. See AI credits below for how they work.
- Taxes may apply depending on where you are located.
Price changes. If we change the price of a plan, we will give you at least 30 days notice by email or in-app before the new price applies to you. Continuing to use Mythox after that notice period means you accept the new price.
See the Subscription, Billing & Refunds page for full details on payments, refunds, and failed-payment handling.
07 Your content
Content you create inside Mythox - your goals, journal entries, notes, product ideas, financial data you enter manually, and anything else you add - belongs to you.
By using Mythox, you grant Reis Media a limited, non-exclusive, royalty-free license to store, display, and process your content solely to operate and improve the service for you. We do not use your personal content for advertising, and we do not sell it.
You are responsible for the content you add. Don't upload content that violates others' rights or that you don't have permission to use.
08 AI features
Mythox includes an AI guide called Midas that generates responses based on your data and questions. A few important things to know:
- AI responses are generated and may be incomplete, inaccurate, or out of date. Always apply your own judgment.
- Nothing Midas says is financial advice, legal advice, tax advice, or professional advice of any kind. It is a tool to help you think, not a substitute for a qualified professional.
- You are solely responsible for any decisions you make based on AI output from Mythox.
- When you use AI features, relevant parts of your data are sent to the underlying AI model provider to generate a response. See our Privacy Policy (Section 7) for details.
09 Third-party services
Mythox integrates with third-party services to deliver its features. These providers operate under their own terms and policies, which you should review:
- Plaid - for secure bank connections (Plaid End User Privacy Policy)
- Stripe - for subscription billing (Stripe's terms and privacy policy)
- AI model providers - for generating Midas responses (their respective terms)
- Supabase - for database and authentication (Supabase's terms)
We are not responsible for the practices of these third parties. Your use of their services through Mythox is subject to their terms.
10 Disclaimers
Mythox is provided "as is" and "as available" without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement.
We do not warrant that the service will be uninterrupted, error-free, or completely secure. No oral or written information from Reis Media creates any warranty not stated in these Terms.
This is especially true because the product is actively being developed.
11 Limitation of liability
To the fullest extent permitted by applicable law, Reis Media LLC and its founders, employees, and agents will not be liable for any indirect, incidental, special, consequential, or punitive damages - including lost profits, lost data, or business interruption - arising from your use of (or inability to use) Mythox, even if we were advised of the possibility of such damages.
Our total liability to you for any claim arising from these Terms or your use of Mythox will not exceed the amount you paid us in the 12 months before the claim arose (or $100 if you paid nothing).
Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages. If you are in one of those places, the above exclusions and limitations apply to the maximum extent permitted by local law.
12 Indemnity
You agree to defend, indemnify, and hold harmless Reis Media LLC and its founders, officers, and agents from and against any claims, damages, losses, costs, and expenses (including reasonable legal fees) arising from: (a) your use of Mythox, (b) your violation of these Terms, or (c) content you submit to the service that infringes or violates any third-party rights or applicable law.
13 Termination
You can stop using Mythox and close your account at any time by contacting us at support@mythox.ai.
We may suspend or terminate your access to Mythox at any time, with or without notice, if we believe you have violated these Terms, if continuing to provide the service is no longer feasible, or for any other reason at our sole discretion. We will try to give reasonable notice where practical.
On termination, your right to use Mythox ends immediately. The license you granted us under Section 7 (Your content) ends too, except for copies in routine backups, which are handled per our retention policy. The sections that carry on after your account closes are listed in one place, in Section 20 (General terms), and that list is the only one.
14 Changes to the service and these Terms
We are actively building Mythox, which means the service will change. We may add, modify, or remove features at any time.
We may also update these Terms from time to time. When we do, we will update the "Last updated" date above. For material changes, we will take reasonable steps to notify you (such as an email or an in-app notice). Your continued use of Mythox after the effective date of any change means you accept the updated Terms.
15 Governing law
These Terms are governed by the laws of the State of Wyoming, USA, without regard to its conflict-of-law provisions. Reis Media LLC is a Wyoming limited liability company. Any dispute that cannot be resolved informally, and that is not sent to arbitration under Section 23, will be subject to the exclusive jurisdiction of the state and federal courts located in Laramie County, Wyoming, USA, and you consent to personal jurisdiction there.
If you are a consumer in the EU or UK, you may also have rights under the mandatory consumer protection laws of your country, and nothing in these Terms limits those rights.
16 The Builder
The Mythox Builder ("the Builder") is the AI-assisted tool inside Mythox that lets you describe, configure, and generate websites, landing pages, digital products, templates, and related assets ("Builder Outputs"). This section governs your use of the Builder and applies on top of the rest of these Terms.
What you own, and what stays ours
- Your inputs. You keep ownership of the original content you put into the Builder - your prompts, text, images, and materials.
- Your outputs are yours, permanently. You own the unique, you-specific parts of the Builder Outputs you generate on a paid plan. We assign those rights to you and that assignment does not expire. Cancelling does not take away ownership of anything you made.
- Ownership and hosting are two different things. Owning what you built is permanent. Us hosting it for you, and keeping it in your Mythox account, is part of what your subscription pays for. If your subscription ends, access to whatever is still sitting in your account ends with it. That includes products you built and never downloaded.
- So download what you want to keep. Export or download a product and you have your own copy, and you keep it forever whatever happens to your account. Leave it only in your Mythox account and it lives and dies with the subscription. This is the single most important sentence on this page: if it matters to you, download it.
- What stays ours. Builder Outputs may include Mythox platform templates, design systems, UI components, code scaffolding, and security patterns. These remain the property of Reis Media LLC and are licensed to you, not assigned. Owning a Builder Output does not give you a claim to the Mythox components built into it. Any third-party open-source code keeps its own licence.
Trial outputs
Builder Outputs created during a free trial are watermarked and for evaluation only. They are not licensed for commercial use until you are on a paid plan.
Acceptable use of the Builder
On top of the acceptable-use rules above, you may not use the Builder to generate: content that infringes anyone's intellectual property; fraudulent, deceptive, or misleading products or sites; defamation, harassment, hate speech, or incitement to violence; phishing pages, malware, or any malicious code; content that exploits or harms minors; or anything designed to get around a legal or regulatory requirement. We may refuse, remove, or disable Builder Outputs that break these rules, and suspend accounts that do.
Security scaffolding is assistance, not a guarantee
Builder Outputs may include Mythox-generated security scaffolding, authentication patterns, and IP-protection structures. This is provided to assist you, not as a guarantee of security or IP protection for your finished product. You are responsible for reviewing and testing every security component before you deploy, and you should have a qualified professional review any output that handles sensitive data, payments, or regulated information.
Generated code is provided as-is
Builder Outputs, including any generated code, are provided "as is" with no warranty of any kind. We do not warrant that they are error-free, secure, or ready for production without your own review and testing. You assume all risk for the use, deployment, or distribution of any Builder Output, and you are solely responsible for what you build and ship.
Liability for the Builder
To the fullest extent permitted by law, our total liability to you for any claim arising from the Builder or any Builder Output will not exceed the amount you paid Mythox in the 12 months before the claim arose (or $100 if you paid nothing). This is the same single cap set out in Section 11, and it is not a separate or additional cap.
Changes to these Builder terms
We may update these Builder terms from time to time. For material changes we will give you at least 30 days notice by email or in-app. Continuing to use the Builder after the change takes effect means you accept the updated terms.
17 AI credits
AI-powered features in Mythox run on credits. How credits work:
- Each paid plan includes a set amount of AI credits per billing cycle. The current amounts are shown on the Pricing page.
- Credits are tied to your billing cycle and do not roll over to the next cycle unless your plan page says otherwise.
- If you run out, additional credits may be available to purchase.
18 Intellectual property and feedback
Mythox platform IP. All intellectual property in the Mythox platform - the software, interfaces, brand, trademarks, design systems, and underlying technology - belongs to Reis Media LLC. These Terms give you a limited licence to use the service; they do not transfer any of those rights to you. Mythox is a trademark of Reis Media LLC.
Feedback. If you send us suggestions or feedback about Mythox, you grant Reis Media LLC a perpetual, royalty-free, worldwide licence to use that feedback for any purpose, with no obligation to you.
19 Copyright and DMCA
Reis Media LLC respects intellectual property rights and responds to valid notices under the U.S. Digital Millennium Copyright Act (DMCA). If you believe content on Mythox infringes your copyright, send a written notice with the information required by 17 U.S.C. 512(c)(3) to our designated agent:
- Designated DMCA agent: Philipe Reis, Reis Media LLC
- Email: support@mythox.ai
- DMCA registration number: DMCA-1074510
What your notice must include: the work you say was infringed; where the material appears on Mythox; your contact details; a statement that you believe in good faith the use is not authorized; a statement, under penalty of perjury, that you are the owner or authorized to act for them; and your signature.
Counter-notice. If your content was removed and you believe that was a mistake or a misidentification, you may send a counter-notice to the same agent with: what was removed and where it appeared; a statement under penalty of perjury that you believe in good faith it was removed by mistake; your name, address, phone number and email; your consent to the jurisdiction of the federal court for the district where you live (or, if you are outside the United States, the federal court covering Laramie County, Wyoming); and your signature. We forward valid counter-notices to the person who complained. Unless they tell us within 10 to 14 business days that they have gone to court, we may restore the material.
20 General terms
- Entire agreement. These Terms, together with the Privacy Policy and the other policies linked here, are the entire agreement between you and Reis Media LLC about Mythox.
- Severability. If any part of these Terms is found invalid or unenforceable, the rest stays in full force.
- No waiver. If we do not enforce a part of these Terms right away, that is not a waiver of our right to enforce it later.
- Assignment. You may not transfer your rights or obligations under these Terms without our written consent. We may assign ours, for example as part of a business transfer.
- Survival. These sections continue after your account ends, and this is the single list: Your content (Section 7), AI features (Section 8), the Builder (Section 16), Intellectual property and feedback (Section 18), Disclaimers (Section 10), Limitation of liability (Sections 11 and 24), Indemnity (Section 12), Governing law (Section 15), Binding arbitration (Section 23), and these General terms (Section 20).
21 Contact
Questions about these Terms? Email us at support@mythox.ai.
Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.
22 How these additions apply
Sections 22 through 36 below were added to strengthen and clarify these Terms. They apply in addition to, not in place of, everything above. Read together, nothing in them removes a right or protection given to you by an earlier section.
23 Binding arbitration, class action waiver & jury trial waiver
Please read this section carefully. It affects your legal rights, including your right to go to court.
Agreement to arbitrate. You and Reis Media LLC agree that any dispute, claim, or controversy arising out of or relating to these Terms, your use of Mythox, or the relationship between you and Reis Media LLC (a "Dispute") will be resolved through binding individual arbitration, and not in court, except as set out below. This agreement to arbitrate is governed by the Federal Arbitration Act.
Informal resolution first. Before filing an arbitration, you agree to first contact us at support@mythox.ai and attempt to resolve the Dispute informally for at least 30 days.
Arbitration process. If informal resolution fails, the Dispute will be resolved by a single arbitrator through binding arbitration administered by a recognized arbitration provider (such as the American Arbitration Association) under its consumer or commercial arbitration rules then in effect, applying Wyoming law. The arbitration will take place in Laramie County, Wyoming, or remotely by video or phone at your election. The arbitrator's decision is final and binding, subject only to limited judicial review under the Federal Arbitration Act.
Class action waiver. You and Reis Media LLC agree that any Dispute will be brought only in an individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding. The arbitrator may not consolidate more than one person's claims and may not otherwise preside over any form of a class or representative proceeding. If this class action waiver is found unenforceable as to a particular Dispute, that Dispute (and only that Dispute) will proceed in court rather than in arbitration, and the rest of this section remains in effect.
Jury trial waiver. To the extent any Dispute proceeds in court rather than arbitration for any reason, you and Reis Media LLC each irrevocably waive any right to a trial by jury.
Small claims exception. Either party may bring an individual claim in small claims court instead of arbitration if the claim qualifies.
Opt-out. You may opt out of this arbitration agreement by emailing support@mythox.ai with the subject line "Arbitration Opt-Out" within 30 days of first accepting these Terms, including your name and account email. If you opt out, Disputes will be resolved under Section 15 (Governing law) instead, including the exclusive jurisdiction of the Laramie County, Wyoming courts, but the class action waiver in this section still applies to the fullest extent permitted by law.
Severability of this section. If any part of this arbitration agreement is found unenforceable, the rest of it remains in force, except that if the class action waiver is found unenforceable in its entirety and cannot be severed, this entire arbitration section is null and Section 15 (Governing law) applies instead.
24 Reaffirmed limitation of liability
There is one liability cap in these Terms, and it is the one in Section 11. To the fullest extent permitted by applicable law, Reis Media LLC's total cumulative liability to you for all claims arising from or relating to these Terms, the Builder, or your use of Mythox will not exceed the amount you actually paid to Mythox in the 12 months before the claim arose, or $100 if you paid nothing. That single cap applies regardless of the legal theory of the claim (contract, tort, statute, or otherwise) and even if a remedy fails of its essential purpose. Section 11's exclusion of indirect, incidental, special, consequential, and punitive damages remains in full force and is not narrowed by this section.
25 Assumption of risk: AI, Midas & financial features
You expressly acknowledge and agree that:
- Midas and every other AI-generated output in Mythox is produced by probabilistic models and may be wrong, incomplete, outdated, or misleading, even when it sounds confident or authoritative.
- Reis Media LLC is not a bank, broker-dealer, investment adviser, accountant, bookkeeper, tax preparer, law firm, or fiduciary of any kind. Nothing generated by Mythox, including any bookkeeping summary, categorization, projection, insight, or recommendation, is financial, investment, accounting, tax, or legal advice, and none of it creates any advisory, fiduciary, or professional relationship between you and Reis Media LLC.
- Financial data displayed in Mythox (whether imported via Plaid, uploaded by CSV, or entered manually) is provided for informational and organizational purposes only. Balances, categorizations, and calculations may contain errors due to third-party data feeds, sync delays, categorization mistakes, or bugs. You are solely responsible for independently verifying any financial figure before relying on it for any decision, filing, or representation to a third party.
- You assume all risk arising from any action you take, or decision you make, in reliance on Midas or on any financial or bookkeeping data or feature in Mythox, including business, investment, tax, and legal decisions. You should consult a qualified, licensed professional before acting on anything Mythox shows or generates.
- This section applies in addition to, and does not narrow, the AI disclaimers in Section 8 or the general disclaimers in Section 10.
26 No proration, chargebacks & collection costs
- No proration. When you cancel, you keep access through the end of your paid period, but no partial-period or prorated refund is issued for the unused portion of any billing cycle, except where required by law.
- Chargebacks. If you see a charge for Mythox access you already received, please contact us first at support@mythox.ai so we can fix it fast. If a chargeback or bank reversal is filed for a charge that matches access you received, we may suspend or terminate the account while it is resolved. Nothing in these Terms limits your rights with your bank or card provider, including for unauthorized, duplicate, or incorrect charges, and nothing here makes a lawful dispute a breach of contract.
- Collection costs. If we refer unpaid amounts to collections or pursue legal action to recover them, you agree to pay our reasonable costs of collection, including reasonable attorneys' fees, to the extent permitted by law.
- Account forfeiture on abuse. Where an account is terminated for violating Section 5 (Acceptable use), Section 31 below, or engaging in fraud or chargeback abuse, any unused subscription time, AI credits, or balance is forfeited and no refund is owed.
27 No SLA & no uptime guarantee
This section restates and hardens the service note in Section 2. Mythox is offered with no service level agreement. We do not guarantee any specific uptime percentage, response time, or availability. Scheduled or unscheduled downtime, data migrations, feature removal, and breaking changes may occur without notice. No credit, refund, or compensation is owed for downtime or unavailability, except where required by law. This section governs over any implied uptime expectation elsewhere in these Terms or in any marketing material.
28 User data-loss disclaimer
While we maintain routine encrypted backups as described in our Data Retention & Deletion Policy, you are responsible for maintaining your own independent copies of any critical information you store in Mythox, including financial records, journal entries, goals, product content, and Builder Outputs. To the fullest extent permitted by law, Reis Media LLC is not liable for any loss, corruption, or unavailability of your data, however caused (including bugs, third-party provider failures, service interruptions, account termination, or your own actions), beyond our obligation to attempt routine backup recovery on a commercially reasonable, best-efforts basis.
29 Third-party data & AI provider disclaimer
Mythox depends on third-party providers, including Plaid for bank connectivity and one or more AI model providers for Midas. You acknowledge that:
- Bank and transaction data displayed in Mythox reflects what these third parties return to us, which may be delayed, incomplete, miscategorized, or temporarily unavailable due to circumstances outside our control (including a bank or provider outage, API change, or rate limit).
- AI-generated output reflects the underlying model provider's behavior at the time of generation and may change, degrade, or be unavailable if that provider changes or discontinues its service.
- Reis Media LLC is not responsible for, and disclaims all liability arising from, the acts, omissions, downtime, data errors, or policy changes of Plaid, Stripe, Supabase, any AI model provider, or any other third-party service integrated with Mythox, beyond our obligation to use commercially reasonable efforts to select and maintain reputable providers.
30 Community, leaderboard & public content
Mythox may include community features, a public or semi-public leaderboard, shared showcases, or similar areas where your activity, progress, username, or content may be visible to other users ("Community Areas").
- License to display. Anything you post, submit, or that is automatically generated and displayed in a Community Area (including your username, rank, streaks, achievements, and any text or media you choose to share) grants Reis Media LLC a non-exclusive, worldwide, royalty-free license to display, reproduce, and distribute it within Mythox and in Mythox marketing materials, for as long as it remains visible in the Community Area or your account is active, whichever is longer for reasonable archival purposes.
- Your responsibility. You are solely responsible for anything you choose to share in a Community Area. Do not share sensitive personal, financial, or confidential information there, because Community Areas are not private.
- Conduct. Section 5 (Acceptable use) applies fully to Community Areas. Additionally, you may not manipulate, game, or artificially inflate leaderboard rankings, streaks, or metrics through automation, multiple accounts, or fraudulent activity. We may reset, hide, remove, or disqualify any ranking or content, and suspend or terminate accounts, for violations of this section.
- No expectation of permanence. We may modify, reset, or discontinue Community Areas, including leaderboards, at any time without notice or liability.
31 Anti-abuse enforcement & account forfeiture
In addition to the acceptable-use rules in Section 5, if we reasonably determine, in our sole discretion, that your account is engaged in abuse of the service, including but not limited to circumventing usage or credit limits, sharing or reselling account access, automating interactions with Midas to extract training data or exceed fair use, exploiting a bug or vulnerability rather than reporting it, or creating multiple accounts to obtain trial or promotional benefits more than once, we may immediately suspend or terminate the account without notice and without refund, and any AI credits, subscription time, or balance associated with that account are forfeited.
We may also do less than that. Where closing or suspending the account is more than the situation needs, we may instead revoke any trial or promotional credits on the account, end the free trial before any charge is made, and require an active paid subscription before paid features can be used again. We tell you in the app and by email when we do this.
32 Force majeure
Reis Media LLC will not be liable for any delay or failure to perform any obligation under these Terms where the delay or failure results from any cause beyond our reasonable control, including but not limited to acts of God, natural disaster, war, terrorism, riot, labor dispute, internet or telecommunications failure, power outage, governmental action, pandemic, or failure or outage of a third-party provider (including Supabase, Plaid, Stripe, or any AI model provider).
33 Export control & sanctions compliance
You may not access or use Mythox if you are located in, or a national or resident of, any country subject to a comprehensive U.S. trade embargo, or if you are listed on any U.S. government restricted-party list (including the U.S. Treasury's Specially Designated Nationals list or the U.S. Commerce Department's Denied Persons or Entity List). By using Mythox, you represent that you are not subject to any such restriction. You agree to comply with all applicable U.S. and foreign export control and economic sanctions laws in your use of Mythox.
34 Additional Builder license restrictions
This section applies on top of Section 16 (The Builder). Your license to use the Builder does not permit you to: (a) sublicense, resell, or white-label the Builder itself as a standalone product or service separate from Mythox; (b) represent the Builder or its underlying AI as a tool you built or trained independently; or (c) use the Builder to build, train, or launch a product or service that directly competes with or substantially replicates the core functionality of Mythox or the Builder. We may terminate your access to the Builder, without affecting the rest of your Mythox account, if we reasonably determine you have violated this section.
35 DMCA repeat infringer policy
In addition to the process in Section 19, Reis Media LLC will, in appropriate circumstances and at our sole discretion, terminate the accounts of users who are determined to be repeat infringers of third-party intellectual property rights. A user may be treated as a repeat infringer if we receive two or more valid, unretracted DMCA takedown notices concerning content associated with that user's account within any 12-month period.
36 YouTube API Services
YouTube API Services. Mythox's YouTube features use YouTube API Services. By using them, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms) and the YouTube API Services Terms of Service (https://developers.google.com/youtube/terms/api-services-terms-of-service). You must comply with Google's and YouTube's terms when you connect your account. Mythox's access to YouTube API Services may be limited, suspended, or revoked by Google/YouTube at any time, and Mythox may lose the ability to provide these features if that happens. You can disconnect and delete your YouTube data as described in our Privacy Policy.
Subscription, Billing & Refunds
Everything you need to know about how Mythox billing works, including trial access, paid plans, cancellation, and refunds.
01 Trial access
Read the three end-triggers carefully, because two of them are not about time. The trial is meant for deciding, not for producing. If you spend all your trial credits inside the first hour, the trial is over and you are charged then. If you export, download or publish a product on your first day, the trial is over and you are charged then. That is deliberate: exporting, downloading or publishing is you taking the finished thing, and the plan starts at that point.
Auto-renewal. When the trial ends your paid plan begins and renews automatically, monthly or yearly depending on the plan you chose, at the price shown on the Pricing page, until you cancel. You can cancel at any time from Settings inside the app, in the plan and billing section. Cancelling stops the next renewal; it does not refund the period you are already in.
We show paid plans clearly on the Pricing page before any billing begins.
The trial is for deciding, not for working around paying. If we reasonably believe a trial is being abused, for example many accounts opened by the same person or false billing details, we may end the trial before any charge is made and remove any trial or promotional credits, and paid features then need an active paid subscription. We tell you in the app and by email if that happens. See Section 31 of the Terms.
02 Available plans
Current Mythox plans are Pro ($34/mo), Scale ($100/mo), and MAX ($200/mo). Every plan starts with the free trial described in Section 01 and requires a card at signup:
- Pricing is published clearly on the Pricing page before any billing begins.
- You will be notified in advance and given the chance to choose a plan or opt out.
- Early customers may receive special early-adopter pricing, with details shown before any charge.
The Pricing page is the source of truth for current prices.
03 How billing works
Here is how billing works:
- Secure payments via Stripe. All payment processing is handled by Stripe. We never see or store your card number, CVV, or full payment details - Stripe handles all of that under their own PCI-compliant systems.
- Auto-renewal. Subscriptions renew automatically at the end of each billing period (monthly or annual, depending on the plan you choose) unless you cancel beforehand.
- Billing date. You are billed on the date you start your paid plan, and then on the same date each period thereafter.
- Receipts. Stripe sends an email receipt after each successful charge.
04 Cancellation
- You can cancel your subscription at any time from your account settings inside Mythox.
- When you cancel, your subscription does not renew at the next billing date.
- You keep full access to Mythox until the end of the billing period you already paid for. Cancellation is not immediate loss of access.
- After the period ends, your account moves to the Trial plan (if available) or access ends, depending on the plan structure at that time.
05 Refunds
All fees are non-refundable except where required by law or expressly stated in a written offer from Mythox. Here is how that works in practice:
- If you were charged by mistake or due to a technical error on our end, we will refund you promptly - just email support@mythox.ai.
- Outside the cases above, fees are non-refundable. If something is not working for you, email us and we will do our best to make it right inside the service.
- No cooling-off or trial-period refund. Mythox does not offer a 14-day money-back period, a satisfaction guarantee, or any refund window. The free trial exists so you can decide before you pay. Where the law of your country gives you a mandatory statutory right that cannot be waived, that right still applies and nothing here removes it; but by starting the service immediately at signup you ask us to begin performance right away, which in most places ends any withdrawal right once the service has started.
To request a refund, email support@mythox.ai with your account email and a brief description of the issue.
06 Failed payments
If a payment fails (for example, because a card expired), here is what happens:
- Stripe will automatically retry the charge a few times over the following days.
- You will receive an email from Stripe notifying you of the failed payment and asking you to update your payment method.
- If payment cannot be collected after retries, your subscription may be paused or downgraded. We will notify you before access is affected.
- You can update your payment method at any time - see Section 7 below.
07 Updating your payment method
You can update your card or payment method at any time from your account settings inside Mythox. Changes take effect on your next billing cycle (or immediately if you are fixing a failed payment).
If you have trouble updating your payment method, email us at support@mythox.ai and we will help.
08 Taxes
Applicable taxes (such as VAT, GST, or sales tax) may be added to your subscription price depending on where you are located. If taxes apply to your account, they will be shown clearly before you complete any purchase. Stripe handles tax calculation and collection where required.
09 Contact
Billing questions, refund requests, or anything else: email support@mythox.ai.
Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.
Information Security Policy
How Mythox protects the data our users trust us with - written to match what we actually run, not aspirations.
Mythox is an American company. All your data is stored and kept in the United States, on locked-down infrastructure where the database itself fences your account off from every other account.
We protect your data with strong, specific security practices, including row-level security (each user's data is isolated at the database level), encrypted bank credentials via Plaid (your bank login goes to Plaid, never to Mythox), and server-side-only API key storage (no secrets ever in the browser). AI agents accessing Mythox through our CLI or MCP are bound by strict guardrails: they cannot delete data, cannot run SQL, have read-only access to financial summaries, and all secrets are automatically redacted from every response.
01 Purpose & scope
This policy describes the security controls Reis Media LLC ("Reis Media", "we") applies to Mythox - a web and desktop application that helps creators and entrepreneurs see their finances, time, energy, goals and work in one place. It covers the application, its database, the connections it makes to third-party services (including a user's bank, via Plaid), and the systems and accounts used to operate it.
02 Governance & responsibility
Philipe Reis (Founder) is the accountable owner for information security and the single point of contact for any security or privacy matter, reachable at support@mythox.ai.
- This policy is reviewed and, if needed, updated at least once a year and whenever there is a material change to the product, the data we handle, or the systems we use.
- Security is treated as a release requirement, not an afterthought: every release goes through a security review gate before it ships (Section 7).
- If contractors or employees are added in future, they will be granted the least access needed for their role and will be required to follow this policy.
03 Access control
Access to production systems and user data is restricted on a least-privilege basis - people and components get only the access they need, and nothing more.
Per-user data isolation (enforced by the database)
User data is stored in a PostgreSQL database (Supabase) with Row-Level Security (RLS) turned on. RLS means the database itself is configured to only let an account read or write its own rows, so one user's data is walled off from every other user at the data layer, not just in the app.
Application & API keys
- The app uses restricted, least-privilege API keys. The public (browser) key can only act through the per-user RLS rules above. The powerful service-role key is never placed in client code or sent to the browser.
- Server-side secrets (including the Plaid secret and any bank access tokens) are held only on the server and are never exposed to the browser.
Administrative access
- Administrative consoles (the database/hosting provider, the payment provider, the code repository) are accessible only to the founder.
- Logout clears in-browser data and cached state so a shared device never exposes the previous session.
04 Encryption
- In transit: all connections to Mythox and its database use HTTPS with TLS 1.2 or higher. Plain, unencrypted connections are not used.
- At rest: user data stored in the database and file storage is encrypted at rest using AES-256, provided by our managed database platform (Supabase).
- Bank data from Plaid (account and transaction information, and the access token that represents a user's connection) is handled server-side and stored encrypted at rest, alongside the same per-user isolation as the rest of the data. Bank connect is live and runs to this standard on the already-encrypted platform above.
05 Secrets handling
- API keys, tokens and other secrets live in environment variables and managed secret stores - never hard-coded in source files and never committed to the code repository.
- Secrets are never printed, logged, or echoed into application output or build logs.
- Keys are scoped to the minimum permissions required for their job (restricted keys).
- If a secret is suspected to be exposed, it is rotated (replaced) promptly and the exposure is investigated.
06 Vulnerability management
- Pre-deployment security review: every meaningful code change is reviewed for bugs, security issues, and broken behavior by an automated AI code-review gate before it is deployed. Findings are fixed and re-verified before release.
- Managed-platform patching: the underlying database, hosting and serverless platform (Supabase) is patched and maintained by the provider, so infrastructure-level fixes are applied without us managing servers directly.
- Dependencies are kept reasonably current and reduced to what is necessary.
07 Secure development
- Code is kept in version control (git) with a clear change history.
- Builds are additive - existing protections are not removed to release a feature.
- Changes are tested locally before any deploy, and pass the security-review gate described above.
- The data model was designed multi-user and access-controlled from the start, so security is structural rather than bolted on.
08 Agent & API access (locked scopes)
Mythox lets a user connect their own AI assistants (e.g. via a command-line tool or an MCP connector) to act on their data. This access runs through a frozen, least-privilege scope policy that is enforced in code and cannot be weakened at runtime:
- Read-only on financial data and credentials, and credential-like values are redacted before they are ever returned.
- Write only to a small allow-list (a user's next-actions, journal entries, and systems). It can never delete data, never change transactions, never run raw database commands, and never expose bank/connection tokens.
- The agent signs in as the user, so the same per-user isolation that protects the app protects the agent path too - it never uses an administrator key.
09 Incident response
If a security incident or data breach is suspected, we follow a defined process:
- Detect & contain - stop the issue spreading (e.g. rotate keys, disable an affected path).
- Assess - determine what data and which users were affected.
- Notify - inform affected users and relevant parties (including Plaid where bank-related data is involved, and regulators where the law requires) without undue delay.
- Remediate & document - fix the root cause, record what happened, and improve controls to prevent recurrence.
Report a suspected issue to support@mythox.ai.
10 Third-party providers (sub-processors)
We rely on a small set of established providers, chosen for their security posture, and share with them only what is needed to run the service:
- Supabase - database, authentication & hosting
- Plaid - secure bank connections
- Stripe - subscription payments
- AI model providers - only when a user uses the AI features
The current list and what each one handles is kept up to date in our Privacy Policy.
11 Current security controls
A summary of the security controls in place:
In place today
- Per-user Row-Level Security (data isolation enforced by the database).
- TLS 1.2+ in transit; AES-256 at rest.
- Restricted, least-privilege API keys; secrets in env / secret store, never in code.
- Frozen least-privilege agent scope policy with credential redaction.
- Automated security-review gate before every release.
- Two-factor authentication (2FA) available to all users, required to connect a bank, and protecting administrative consoles.
Data Retention & Deletion Policy
What we keep, how long we keep it, and exactly how you delete your data - reviewed periodically and designed to support our obligations under privacy law.
01 Principle
Keep what you use. Delete what you ask us to. Hold nothing longer than we need.
Reis Media LLC retains personal data only for as long as it is needed to provide Mythox to you, to meet a legal obligation, or to resolve disputes and enforce our agreements. When data is no longer needed for those purposes, it is deleted or anonymized.
You are always in control. You can see the data we hold about you, request a full export, and delete your account and all associated data at any time through Account & Data Deletion below. We do not retain data beyond what you have consented to, and we never sell your personal information.
02 What we keep & how long
| Data | Retention |
|---|---|
| Account data (email, name, settings) | While your account is active; deleted on account deletion. |
| Financial data (Plaid, CSV or manual transactions) | Until you disconnect the source or delete your account; Plaid tokens revoked on disconnect. |
| Time / energy data (Rize, Whoop, manual) | Until you disconnect the source or delete your account. |
| Content you create (goals, journals, systems, notes, products) | While your account is active; deleted on account deletion. |
| Billing records | Retained as required for tax/accounting law (typically up to 7 years), held by Stripe and in our records. |
| Encrypted backups | Short rolling window, then automatically overwritten (see Section 5). |
| Operational/usage logs | Kept briefly for security and troubleshooting, then rotated out. |
03 How you delete your data
You can delete your data at any time:
- By email - write to support@mythox.ai and ask us to delete your data. We verify the request comes from you, then carry it out. This is the current method, and it fully removes your data.
- In the app - disconnecting a connected source removes that data; a one-click "Delete account" control is available inside the app, in Settings.
See the Account & Data Deletion page for the step-by-step request process.
04 What happens when you delete
- Your account and personal data are removed from our active database, normally within 30 days of your request.
- Any Plaid access tokens are revoked, severing the bank connection so no further data is received.
- Per-user Row-Level Security means your data was already isolated to your account; deletion removes those rows entirely.
- We confirm to you when deletion is complete.
Disconnecting a source stops new data and revokes that connection. Deleting your account removes everything we hold about you, subject only to the legal records in Section 6.
05 Backups
We keep routine, encrypted backups of the database so data can be recovered after a failure. Backups are kept for a short rolling window and then automatically overwritten. When you delete your data, any copy still present in a backup is purged on the normal backup rotation - it is not restored into the live system except as part of a genuine disaster recovery, after which the deletion is re-applied.
06 Legal & tax retention
We may retain the minimum information the law requires us to keep even after you delete your account - for example, certain billing, tax and accounting records, or records needed to comply with a legal obligation, resolve a dispute, or prevent fraud. We keep only what is required, for only as long as required, and then delete it.
07 Periodic review
This policy and our retention periods are reviewed at least once a year (and when the law or our product materially changes) to confirm we are not holding data longer than necessary and that our practices are reviewed against our obligations under applicable privacy laws such as the GDPR and California's CCPA/CPRA. The Founder is responsible for this review.
08 Contact
Questions or deletion requests: support@mythox.ai
Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.
Account & Data Deletion
Want to delete your Mythox account and all your data? Here is exactly how to do it - no hoops, no dark patterns.
01 How to request deletion
You can delete your account yourself in the app, in Settings. If you would rather do it by email, here is what to do:
- Send an email from the email address linked to your Mythox account to support@mythox.ai.
- Use the subject line: "Delete my account"
- You don't need to explain anything further. We will verify the request comes from you and then carry it out.
02 What gets deleted
When we process your deletion request, here is what we remove:
- Your account (email, name, password hash, settings).
- All personal data associated with your account in our active database.
- All content you created inside Mythox (goals, journal entries, notes, product ideas, systems, and any other app content).
- Any financial data you connected or entered (Plaid transactions, CSV imports, manual entries).
- Your Plaid access tokens are revoked, which severs your bank connections permanently so we can no longer receive data from those accounts.
We will confirm by email when deletion is complete.
03 Timeline
We aim to process deletion requests within 30 days of receiving a verified request. In most cases it happens much faster.
Copies of your data that exist in routine encrypted backups are purged on the normal backup rotation cycle after deletion - they are not restored into the live system.
04 What may be legally retained
There is a small category of records we may be legally required to keep even after you delete your account:
- Billing and tax records - for example, records of transactions processed through Stripe, which may need to be retained for accounting and tax purposes (typically up to 7 years under applicable law).
- Any records required by law to resolve a dispute, comply with a legal obligation, or prevent fraud.
We keep only the minimum required, only for as long as required, and then delete it. See our Data Retention Policy for full details.
05 Disconnect vs. delete
These are two different things:
- Disconnecting a source (like a bank account or Rize) stops new data from syncing and revokes the connection for that source only. Your account and other data remain intact.
- Deleting your account removes everything - your account, all personal data, all content, and all connected-source data - subject only to the legally required records above.
If you just want to stop syncing a particular data source, you can disconnect it from within the app without deleting your whole account.
06 Delete your account in the app
You do not have to email us. Open Settings inside the Mythox app and use the "Delete account" option. It runs the same full deletion described above, cancels any active subscription, and removes your account. The email method still works if you prefer it, and we will respond and process it promptly.
Access Control Summary
Who and what can reach production systems and sensitive data in Mythox, and the controls that keep that access least-privilege.
01 The access model
Access to production assets and sensitive data in Mythox follows the principle of least privilege: every person and every component is granted only the minimum access required, and access to financial data is constrained at the data layer itself.
02 Controls in place
| Control | How it works | Status |
|---|---|---|
| Per-user Row-Level Security | The PostgreSQL database (Supabase) only lets an account read/write its own rows - enforced by the database, not just the app. One user cannot access another's data. | In place |
| Restricted / least-privilege API keys | The browser uses a public key bound to the per-user rules; the powerful service-role key is never sent to the client. | In place |
| Server-side secrets | Application secrets live server-side in a secret store, never exposed to the browser or stored in code. The Plaid secret and bank access tokens are held to the same standard (bank-connect is live). | In place |
| Secrets in environment / secret store | Keys and tokens are held in environment variables / a managed secret store; never committed to the repo, never printed or logged. | In place |
| Agent scope guard | A frozen, tamper-resistant policy: read-only on money/credentials (with redaction), write to a tiny allow-list only, never delete, never raw SQL, never expose tokens. Verified by automated tests. | In place |
| Single-admin console access | Database/hosting, payments and code repository consoles are accessible only to the founder. | In place |
| Session hygiene | Logout clears in-browser data and cached state so a shared device never exposes a prior session. | In place |
| Two-factor authentication (2FA) | 2FA (authenticator app / TOTP) available to all users, required to connect a bank, and protecting administrative consoles. | In place |
03 Access to sensitive data, by component
- Browser app: only the signed-in user's own data, via the per-user RLS rules. No service-role key.
- Server functions: hold the Plaid secret and exchange tokens server-side, with bank tokens never returned to the client (bank-connect is live).
- Agent / API access: signs in as the user, runs under the same RLS, and is further constrained by the frozen scope guard (read-only on financial data and credentials, redacted).
- Administrators (founder): console access for operations, governed by this policy and the Information Security Policy.
04 Contact
Security questions: support@mythox.ai
Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.
Accessibility Statement
Mythox is built to be usable by everyone, including people who use screen readers, keyboard-only navigation, magnification, or other assistive technology.
We treat accessibility as a requirement, not a badge. This page tells you the standard we work to, exactly what is supported, and how to reach a real person if something blocks you. If you find something that does not work, we treat it as a defect and fix it, the same as any other bug.
01 Our commitment
Reis Media LLC is committed to making the Mythox website (mythox.ai), the Mythox application (app.mythox.ai), the Mythox desktop app and the Mythox mobile app usable by as many people as possible, regardless of disability, device, or assistive technology.
We treat an accessibility barrier the same way we treat any other defect: it gets reported, prioritized and fixed.
02 The standard we work to
We are working toward Web Content Accessibility Guidelines (WCAG) 2.1, Level AA, published by the World Wide Web Consortium. WCAG 2.1 AA is the standard most commonly referenced in connection with Title III of the Americans with Disabilities Act (ADA), Section 508 of the US Rehabilitation Act, and the European Accessibility Act.
Current status: substantially conformant. Mythox has been worked through against the standard, screen by screen, and the defects found were fixed rather than disclosed. The only things not covered are named in Section 04 below, and they are parts we do not build. We do not claim a formal certification, because we do not hold one.
03 What works
Every item below has been checked on the real product, not assumed. It covers the website, the web app, the Mac app and the iPhone app.
If you use a screen reader
- Every control has a name. Every button, link, text box, dropdown, slider, checkbox and switch is announced with what it actually is and does. That includes icon-only buttons, which say "Delete", not "multiplication sign".
- Messages are spoken. Success messages, error messages and validation problems are announced the moment they appear. When a form field is wrong, the field itself is marked as wrong and points at the message explaining why.
- Numbers that change are announced. Your credit balance, your progress count and the notification badge are read out when they update.
- Charts have descriptions. Every chart is named and described, so a chart is never a silent blank.
- Headings step down properly on every page and every screen, with exactly one main heading each, so you can jump through a long page by heading instead of reading it all.
- Landmarks are marked on every page and screen: header, navigation, main content, footer. The navigation says which screen you are currently on.
- Images. Images that carry meaning have text alternatives. Purely decorative graphics are hidden from the screen reader so they do not add noise.
If you use a keyboard, or cannot use a mouse
- Everything is reachable and operable by keyboard. There are no mouse-only controls and no keyboard traps.
- You can always see where you are. Every control shows a clear outline when you tab to it. Text field edges are visible against their background.
- "Skip to content" is the first thing on every page and every screen, so you never have to tab through the whole menu to reach the page.
- Pop-up windows keep your place. When a dialog opens, the keyboard stays inside it instead of wandering into the page behind. Escape closes it, and closing returns you to exactly where you were.
- Menus and dropdowns work with the arrow keys, plus Home and End, and announce whether they are open or closed and which item is selected.
- Expandable panels say whether they are open or shut.
On the iPhone app
- VoiceOver stays inside sheets and dialogs instead of drifting into the screen underneath.
- Every text field, button, tab, switch and section heading is named and announced with its role, so you can navigate by heading and know what is tappable.
- Text grows with your settings. Larger Text is respected throughout; nothing is locked to a fixed size.
- Tap targets are large enough. Small controls have an enlarged touch area, so a small tick or checkbox is still easy to hit.
Everywhere
- Reduce Motion is respected. Turn it on in your device settings and animations, sliding reveals, smooth scrolling and looping progress bars all stop.
- Zoom works. Nothing blocks pinch-zoom or browser zoom. You can magnify to 200% and beyond.
- No autoplaying sound. There is no audio or video anywhere in Mythox, so nothing ever talks over your screen reader.
- The website still works without scripts. If a script fails to load, the content is still there and readable.
- Light and dark both work, and so does every colour theme. You are never forced into one.
04 Where we are not finished
We will keep this section here permanently and keep it accurate, because a page that claims perfection is worth nothing to the person who runs into a wall.
- Parts of Mythox we do not build. The payment screens are provided by Stripe and the bank connection screens are provided by Plaid. We chose providers that do their own accessibility work, but we do not control those screens. If one of them blocks you, email us and we will complete that step with you another way.
- Things you build with Mythox. If you use the Builder to make a site or product, its accessibility is yours to manage. We do not check or certify what the Builder produces, and you should test it before you publish it.
If you find anything else, tell us and it goes on this list until it is fixed.
05 How we test
- Manual keyboard-only walkthroughs of the site and the application.
- Automated checks against the WCAG 2.1 AA success criteria.
- Colour contrast measured on the actual colour values used in each theme, in both light and dark mode.
- Testing with VoiceOver on macOS and iOS.
- A full pass over every screen of the web app and every screen of the iPhone app, control by control, most recently in August 2026.
We do not currently hold a third-party accessibility certification, and we do not claim one.
06 If something blocks you, tell us
What we commit to:
- We aim to reply within 5 business days.
- We tell you whether we can fix it, and by when.
- Where a fix will take time, we offer you another way to complete the task in the meantime, including doing it for you on request.
- You are never charged for help with an accessibility problem.
If you are not satisfied with our response, you may escalate by writing to Reis Media LLC at the postal address below, marked "Accessibility".
07 Scope and limits of this statement
This statement covers mythox.ai, app.mythox.ai, the Mythox desktop app and the Mythox mobile app. It does not cover third-party websites we link to, or content generated by users of the Builder. If you build a site or product with Mythox, the accessibility of what you publish is yours to manage. We do not warrant that anything the Builder produces is accessible, and you should check it against the same standard before you publish it.
This statement describes our commitments and our current status. It is not a warranty that every part of Mythox is free of accessibility defects, and nothing in it creates a right of action that does not otherwise exist under applicable law.
08 Contact
Accessibility questions and reports: support@mythox.ai, subject line "Accessibility".
Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.
Disclaimer
Mythox is a tool. It is not a bank, an accountant, a lawyer, a tax adviser or an investment adviser, and nothing it shows you is professional advice.
Read this if you use Mythox for anything to do with money. Mythox can connect to your bank, summarise your income and spending, project figures forward, and let an AI assistant talk you through them. All of that is information to help you think. None of it is advice you can rely on, and none of it replaces a qualified professional.
01 No professional advice
Nothing produced by Mythox, by the Midas assistant, by any AI model available inside Mythox, or by any Reis Media LLC page, email, video or document is:
- financial advice or investment advice,
- tax advice or tax preparation,
- accounting, audit or bookkeeping certification,
- legal advice,
- medical, psychological or health advice,
- or professional advice of any other kind.
It is general information and software output. Before you act on anything you see in Mythox, and especially before you file anything with a tax authority, sign anything, borrow, invest, or make a decision that costs money, check it with a qualified professional who knows your situation.
02 What Reis Media LLC is not
Reis Media LLC is a software company. It is not:
- a bank, credit union, or other depository institution,
- a money transmitter or payment processor (payments are handled by Stripe),
- a registered investment adviser, broker, or dealer,
- a certified public accountant or accountancy firm,
- a law firm,
- a credit repair organisation or credit counselling service,
- or a fiduciary of any kind to you.
No relationship of trust, agency or fiduciary duty is created by your use of Mythox. We do not hold, move or have custody of your money. Bank connections are read-only and are provided by Plaid.
03 AI output can be wrong
Mythox uses large language models from several providers. These models are useful and they are also, at times, confidently wrong. They can invent facts, misread a number, misunderstand a rule, and produce different answers to the same question.
- Check anything that matters. Treat AI output as a first draft to be verified, never as a final answer.
- We do not guarantee accuracy, completeness or fitness for any purpose of anything an AI feature produces.
- Model behaviour changes. Providers update and retire models. Output you got last month may not be reproducible today.
- You are responsible for what you do with it. If you publish, send, file or act on AI output, that is your decision and your responsibility.
04 Money figures, bookkeeping and tax
Figures shown in Mythox, including balances, categories, profit, projections, tax estimates and bookkeeping summaries, are estimates generated from data supplied by you and by third parties. They are not certified accounts and they are not a tax return.
- Bank data comes through Plaid and reflects what your institution reports. It can be delayed, incomplete, duplicated or miscategorised.
- Categorisation, including any automatic categorisation, is a guess that you should review.
- Tax figures are rough indications only. Tax rules differ by country, state and situation and change over time.
- Any projection or forecast is a model of the future, not a prediction of it.
You remain responsible for your own books, your own filings and your own compliance. Reconcile against your bank and your accountant before relying on anything.
05 No guaranteed results
Mythox is a tool for building and running a business. Whether a business makes money depends on the market, the offer, the effort, the timing, the skill and a great deal of luck, none of which is under our control.
- We make no promise of any income, revenue, profit, growth, audience, ranking or business outcome.
- Any example, case study, screenshot, number or story shown anywhere by Reis Media LLC is an illustration of what has happened for someone, not a typical result and not a promise of your result.
- The typical purchaser of any product should expect to get little or no result unless they do the work.
- Past performance, ours or anyone else's, does not indicate future results.
06 Things the Builder makes
The Builder generates software, sites and content from your instructions. We do not review, approve or certify what it produces.
- Generated code, copy and design may contain errors, security weaknesses, accessibility defects, or material that resembles someone else's work.
- Any security scaffolding the Builder adds is assistance, not a guarantee, and is not a substitute for a security review.
- Before you publish anything the Builder made, you are responsible for checking it: that it works, that it is lawful where you publish it, that it does not infringe anyone's rights, that it handles other people's data lawfully, and that it is accessible.
07 Third-party information and links
Mythox displays information from third parties, including banks, Plaid, Stripe, AI model providers, and any service you connect. We do not control that information and do not warrant it. Links to outside websites are provided for convenience only and are not an endorsement. What happens on someone else's site is governed by their terms, not ours.
08 How this fits with the rest of the legal terms
This Disclaimer is part of, and is read together with, the Terms of Service. Where the Terms of Service set out limitations of liability, assumption of risk, or disclaimers of warranty, those provisions apply to everything described on this page. Nothing here limits any right you have that cannot be limited under the law that applies to you.
09 Contact
Questions: support@mythox.ai.
Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.
Community Guidelines
The rules for the Mythox Community and the public leaderboard. Short, and meant plainly.
Everything is posted in the open. There is no private messaging in the Community, so assume every member can read what you write.
01 The spirit of it
The Community is a place to share wins, ask real questions, and help each other grow. Be useful, be honest, and treat other members the way you would want to be treated.
02 What is not allowed
Do not post, link to, or promote:
- Harassment or hate. Attacks, threats, bullying, or content that demeans people based on who they are.
- Illegal or harmful content. Anything unlawful, dangerous, or that encourages harm.
- Sexual or graphic content, or anything involving minors.
- Spam and scams. Repetitive self-promotion, get-rich-quick pitches, pyramid or affiliate spam, fake offers, or phishing.
- Impersonation or deception. Pretending to be someone else, or misrepresenting who you are.
- Private information. Other people's personal or confidential information without permission.
- Infringement. Content that breaks someone else's copyright, trademark, or other rights.
- Cheating the competition. Attempts to fake or manipulate scores, rankings, badges, or trophies.
03 Moderation
To keep the space healthy, Mythox may remove posts or replies, hide content, pin helpful content, or restrict, suspend, or terminate accounts that break these guidelines or our Terms of Service. We try to be fair and proportionate, and serious or repeated violations can lead to removal from the Community.
Mythox does not review posts before they appear. Members are responsible for what they post.
04 Reporting something
If you see something that breaks these guidelines, email support@mythox.ai with a link or a description. We review reports and decide what action to take at our discretion.
05 Copyright and takedown
Copyright complaints about Community content follow the same process as the rest of Mythox. The full notice, counter-notice and repeat-infringer process, including the designated agent, is in the Terms of Service.
06 Your privacy in the Community
What other members and the public can see, and the per-metric privacy controls that let you keep individual numbers private, are explained in our Privacy Policy. You choose which numbers to share.
07 Contact
Questions or reports: support@mythox.ai.
Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.