Privacy without mystery.

Information you choose to provide

• Your first name or chosen name and the focus you want help exploring.
• Discovery choices, written reflections, suggested directions, commitment plans, daily moves, recovery adjustments, and check-ins.
• Mirror invitations and responses submitted by people you invite.
• Your email address and basic profile details supplied by the sign-in provider you choose, such as your name or profile image.
• If you start a paid web membership, Stripe customer, subscription, price, renewal, cancellation, and payment-status identifiers. Goals does not receive or store your full card number.
• An email address if you voluntarily join the founding membership list.

Information created when the service runs

Goals records limited product events—such as starting a journey or completing discovery—to understand whether the product is useful. Private reflection text is not copied into analytics events. Short-lived, hashed network identifiers are used to prevent automated abuse. Those rate-limit records are removed after 48 hours, and product events are removed after 90 days.

How we use information

We use information to operate your journey, generate deterministic direction suggestions, show your evidence history, deliver Mirror responses, maintain security, answer support requests, and improve product reliability. Goals does not claim to diagnose you or determine your one true purpose.

Where information is processed

Vercel hosts the public web experience and Supabase provides authentication, the application API, and the database. Stripe hosts web checkout and billing management and processes payment and billing information under its own privacy terms. If you use social sign-in, Apple, Google, Meta, or X processes the sign-in under its own privacy terms and shares the basic account details needed to authenticate you. Apple distributes the iOS app and may process TestFlight or App Store diagnostics under its own terms. These providers process information to supply their infrastructure, identity, payment, and distribution services.

Accounts, access keys, and sharing

Your signed-in account protects your journey across sessions and devices. A random access key is used only to claim a journey created before accounts were introduced; Goals stores only a one-way SHA-256 hash of that key in production. Mirror links reveal only your chosen name and current direction. They expire after 30 days and accept no more than 20 responses.

The Content Studio renders branded images on your device from the card you select. Goals does not automatically publish, upload, or send those images to a social network. Journal-derived cards are marked private; their text leaves Goals only when you deliberately use your device's share sheet or save the image and publish it yourself.

Retention, export, and deletion

Your account and journey remain available until they are deleted. From the dashboard, choose “Download my data” for a JSON copy or “Delete journey” to permanently remove the journey and its related discovery, direction, commitment, Return, Recovery, check-in, and Mirror data. For account deletion, use TestFlight beta feedback or the contact route below.

Children and wellbeing

Goals is intended for people aged 13 and older. It is a reflection and planning tool, not medical or mental health care. If you may harm yourself or someone else, contact local emergency services or a qualified crisis service rather than relying on this app.

Questions or requests

Use the in-app export and deletion controls whenever possible. For another privacy question, use TestFlight's beta-feedback route or contact the developer through the verified public developer profile. We may update this policy as the product changes and will post a new effective date here.