Privacy Policy

Momentum Scorecard (shown as Nova Scorecard on NOVA builds) · Last updated 27 September 2026

Momentum Scorecard is a team effort scoreboard. Your company (your “team”) uses it to track the activities its people commit to each week. This policy explains what the app stores, who can see it, and how to get rid of it.

The short version. We store what you log and who you are on your team. Your managers see your activity, and by default so do your teammates — that is the point of a shared scoreboard. Your scorecard is worked out from what you log; nobody types in a score. We do not sell your personal information, and we do not use your data to train AI models.

What we collect

Account — the email address or Apple/Google identifier you sign in with, and the display name you choose.
Team membership — which team you belong to, your role, and your weekly targets.
Activity you log — counts against each metric (including Extra Credit), the notes you write, and when the activity happened.
Attachments you add — photos and voice memos attached to an entry, and the text transcript of a voice memo.
To-dos and reactions — the to-dos you save (for example from Capture) and the emoji reactions you leave on entries.
Push tokens — so the app can deliver notifications to devices whose users have allowed them, such as target-hit alerts to managers, reactions to your entries, and weekly reminders.

We do not collect your contacts, your location, your calendar, or anything from other apps.

Who can see it

Inside your team, your team's managers decide how widely activity is shared. By default, everyone on a team can see teammates' activity: the counts they log, their notes, photos, voice memos and transcripts, the team feed, reactions and to-dos. Managers and owners always see everyone's activity on their team. The app is being built to let managers limit reps to their own activity; until that option is offered in the app, every team uses the default.

Everyone on the team sees the member list (names and roles).
Managers and owners only see the weekly Review and the weekly coaching summary for the team, whether that summary was written by rule-based code or, with consent, by Cloud AI. Reps do not see it.
Other customer teams cannot see your data.

Cornerstone and its service providers process data to operate, support, and secure the service. Cloud AI processing happens only as described below, after you enable it.

How scores are worked out

Your scorecard is calculated by the app on your phone from the entries logged for you, your targets, and your team's week settings. Our servers also calculate weekly roll-ups from the same entries with the same scoring rules; those feed reminders, manager notifications and the weekly summary. There is no way to type in a score: it changes only when entries change. You can edit or delete your own entries (the count, date, note and attachments), and your team's managers and owners can edit or delete entries on their team. Scores are always calculated by our own code, never by an AI model.

Cloud AI is optional, and off until you turn it on

The app can use a cloud AI service for two things: Capture (turning a sentence such as “called eight agents and had one meeting” into proposed entries and to-dos) and the AI-written weekly team summary. Nothing is sent to a cloud AI service unless you, personally, have chosen Enable Cloud AI after reading the in-app disclosure. The choice is yours alone: your manager or team cannot make it for you, it is not part of signing in, and it starts off for everyone, including people who used earlier versions of the app.

Provider. Requests go to Claude, an AI service from Anthropic. If that ever changes, the app asks you again before anything is sent to a different provider.
Capture, after you enable Cloud AI. We send the words you typed or dictated in Capture and your team's metric names and descriptions. We do not send your name, your team's name, photos, recordings, or other entries. You review and confirm every proposal before it is saved.
Weekly team summary. We send numbers only, and only for team members who enabled Cloud AI: points, grades, targets hit and missed by metric, streaks and week-over-week change. We do not send member names, free-text notes, transcripts or attachments. People are labelled with placeholders, and their names are put back on our server after the text comes back. When only part of a team has enabled Cloud AI, the summary says so. If nobody has, no request is made.
Without Cloud AI. Capture uses on-device understanding (Apple Intelligence where the device supports it, otherwise a built-in keyword parser), and the weekly summary is written by rule-based code. Searching and asking about your activity (the Ask screen on iPad) runs on your device too. Manual logging, the full named scorecard and scoring work the same either way. Scores are always calculated by our own code, never by an AI model.
Turning it off. Settings → Cloud AI → Turn Off Cloud AI takes effect immediately. From then on your Capture text is not sent, and your activity, including past weeks, is left out of any new AI summary. Summaries already written are not rewritten.
Enforced on our servers. Your choice is stored with your account, with the date and the version of the disclosure you saw, and our servers check it before every request, including the scheduled Sunday summary. An older version of the app cannot bypass it.
What the provider does with it. Anthropic processes each request to return a result. Anthropic's commercial terms say it does not train its models on content sent through its API. How long Anthropic keeps request data is governed by those terms and its privacy documentation, not by us. We do not use your data to train AI models.

We keep your Cloud AI choice and a dated history of your changes to it until you delete your account, when they are deleted with it.

Optional live voice coach

The separate Talk with Nova feature uses OpenAI's GPT-Live service. Before first use, you choose Agree & start conversation after seeing its disclosure. The app remembers this choice on this device for your account, team and disclosure version. You can forget it in Settings. Each conversation still requires you to tap Talk with Nova or Resume; opening the screen never starts your microphone. This permission is separate from the Cloud AI setting above. While connected, your microphone audio and conversation are sent to OpenAI with your team's activity categories. When you ask about progress, the app also sends your own current score, activity totals and unfinished to-dos. It does not send your teammates' entries or their notes.

Nova is an AI-generated voice. You can interrupt it, mute the microphone or end the conversation, or say “Goodbye Nova” or “End conversation” to hang up. Leaving the screen or backgrounding the app closes the connection. An optional idle timeout also closes quiet sessions. The conversation and unsaved draft can stay in memory while the coach screen is open; resuming sends limited conversation context back to OpenAI. We do not save live audio or conversation transcripts in our app or request a stored session recording from OpenAI. Confirmed entries and to-dos are saved using the normal activity workflow, including the team's sharing settings. OpenAI's API data retention policies still apply. We keep temporary session identifiers and consent timestamps to manage connections, and counters to limit usage. Private manager reporting includes per-user connected duration, estimated voice costs, and content-free device-reported audio activity, action counts and model token counts. It does not include recordings or transcript text. Monthly usage records expire 90 days after the reporting month ends, extended if needed to finish closing an outstanding connection. Account deletion removes your user-linked usage records; anonymous team cost totals remain until their retention period ends. Minimal connection-cleanup identifiers are kept until a remote session is confirmed closed.

For ordinary voice notes, speech is normally transcribed on your device. When on-device transcription is unavailable, the speech-recognition fallback can send audio to Apple for transcription. Voice memos you attach to entries are stored with the team and visible to the same people as the entry.

Optional mortgage market updates

You can show or hide market updates in Settings. Our backend fetches and caches public government news feeds and Freddie Mac mortgage survey data; it sends no team activity or conversation to those sources. Opening an article or a web search uses your browser and the destination's privacy practices. A web search sends only the search words you enter, not your Nova activity records or transcripts.

Reporting a problem or idea

Settings → Report a problem or idea lets you dictate or type a short report, review the exact transcript, and send it. The stored report includes only the app name and version, the report text you reviewed, and any optional diagnostics you chose to turn on (iOS version, phone model, or the app section you were on) — never your account, name, email, team, entries, Nova conversations, photos or audio. The voice recording is used only on your device to produce the transcript and is deleted right after, whether you send, cancel or dismiss the sheet. If you have turned on Cloud AI (see above), your report may be organized into a short title and summary by that same provider; if not, we keep the raw text as you wrote it. Reports are kept for one year and then deleted.

Where it lives

Team records are stored in Google Firestore in the US multi-region and attachments in Google Cloud Storage in US-East1. We also use Firebase Authentication, Cloud Messaging, and App Check. Authentication, notification, speech, and AI providers process data under their respective service terms; these storage locations do not describe every provider’s processing location. Access is controlled by server-side security rules: a member cannot read another team's data, weekly roll-ups and summaries can only be written by our servers, and only managers and owners can read the weekly summary.

Deleting your account

Settings → Delete my account (open Settings from the gear on Home) removes your account and your ability to sign in. Your team keeps anonymous score totals; your photos, recordings, transcripts and other identifying personal content are deleted.

As soon as you confirm, you are removed from every team you belong to, your user profile (display name, notification tokens and the list of teams you belong to) is deleted, and this phone's copy of your team data, cached photos and recordings, and scheduled reminders is cleared and you are signed out. Our servers then finish the rest, usually within minutes:

Deleted: the photos and voice recordings attached to your entries, their transcripts and captions, and the notes on your entries; your to-dos; reactions you gave, and reactions others gave to your entries; stored weekly team summaries for weeks you were in or that mention your name (they are written again without you if a manager reopens that week); your Cloud AI choice and its dated history; your usage and rate-limit counters; and finally your sign-in account.
Kept, anonymously: on each team, your membership is replaced by an inactive row named “Former member” that keeps only your role and targets, under a new random identifier that is different on every team. Your entries are kept as numbers only — which activity, how many, and on which day (not the time) — under that identifier, so each past week still adds up to the same totals, points and grade. Your name, title, contact details, colour and account identifier are removed from it. Invite links you created keep working.
Unchanged: entries you logged for a teammate belong to them and stay as they are, with “logged by” now pointing at the anonymous row.

Before it runs, anything still syncing has to finish, and if you are the only owner of a team that still has other active members you must make someone else an owner first. If you signed in with Apple, you confirm with Apple and the app also tries to revoke the app's Sign in with Apple link. If that step does not complete, the app tells you; you can remove the link yourself in iOS Settings → your name → Sign in with Apple → the app → Stop Using Apple ID.

What deletion does not remove. The anonymous totals described above. Text your teammates wrote themselves — for example a note on their own entry that mentions you — is theirs and is not changed; ask them, your team's owner or a manager to edit it, or contact us. Our servers keep a record that an account was deleted and when (no name, team or content) so that nothing still in flight can recreate it. Teammates' apps drop your deleted content when they next sync; a photo or recording a teammate's app had already downloaded stops being shown, but the cached file stays in that app's private storage until that person signs out or removes the app.

Children

Momentum Scorecard is a workplace tool and is not directed at children under 13. We do not knowingly collect information from them.

Changes

If this policy changes in a way that affects what we collect or who can see it, the date at the top changes and we will provide notice through the app or another appropriate channel.

Contact

Questions, or a deletion request we have not covered: wayne@cornerstone118holdings.com.