Privacy Policy

Goals keeps what you track private. No ads, no tracking, no selling of data. This page says what is stored, where and why.

Who is responsible

Brandriver GmbH, managed by Renzo Moysefuchs. Contact: renzo.moysefuchs@icloud.com. Full details in the Impressum.

What we store

• Your account: email address, a scrambled (hashed) password, your name if you add one, and when the account was created.
• What you enter in the app: habits, check-ins, timers, goals, milestones, rewards, Rings, stakes and settings. It is kept on your device and synced to our server so it is on all your devices.
• Connections: the API keys you paste for tools like Recruitly, HubSpot or Stripe, stored encrypted, and the numbers read with them (money this year, wins, open items, items added today). We only read; we never write to your tools.
• Friends: your name and a daily summary (ring percentage, streak, closed days, Rings this week) that only your friends see, plus nudges and Ring bets.
• Feedback, bug reports and links to posts you send us.
• Subscriptions: the App Store transaction ID, product and expiry date. Payment details stay with Apple; we never see them.
• Sign-in protection: email addresses and IP addresses of sign-in and sign-up attempts, kept for at most a day.

Apple Health

In the iPhone app you can let Goals read workouts, sleep and mindful minutes from Apple Health. This is read on your iPhone and only turned into check-ins (for example: Strength done, Lights Out at 22:48). The Health data itself is not sent to our server, not shared with anyone and never used for advertising.

Notifications

Reminders and the timer on the Lock Screen are created on your iPhone. No push service is used.

Why (legal basis)

We process your data to provide the app you signed up for (Art. 6 (1) (b) GDPR), to keep it secure against misuse (Art. 6 (1) (f) GDPR) and, for Health data, with your consent in iOS (Art. 9 (2) (a) GDPR), which you can withdraw in the Health app at any time.

Who processes it for us

• Vercel Inc.: hosting of the app and server, in Frankfurt, Germany.
• Neon Inc.: the database, in Frankfurt, Germany.
• Apple Inc. (USA/Ireland): App Store payments, Sign in with Apple and the emails we send (iCloud Mail).

Your data is stored and processed in the EU (Frankfurt). Vercel, Neon and Apple are US companies; any access from the USA is covered by the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

How long

As long as you have an account. Delete Account in Settings removes your data, connections, friends, bets and reports from our server at once; backups expire within 30 days.

Your rights

You can ask for a copy of your data, its correction or deletion, restrict or object to processing and take your data with you. Write to renzo.moysefuchs@icloud.com. You can also complain to a data protection authority.

Children

Goals is not meant for children under 16.