GoalGem

Our Privacy Policy

GoalGem Privacy Policy

Effective Date: November 23, 2025

Last Updated: November 23, 2025

1. Introduction

GoalGem (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the GoalGem mobile application (“App”).

GoalGem is a gamified productivity and goal-tracking tool that helps you achieve your goals through an immersive fantasy-themed experience. Privacy and user control are core design principles of the App.

2. Information We Collect

2.1 Information You Provide

When using GoalGem, you may provide the following information:

Account Information:

• Email address (if you sign in with Apple or Google)

• Name (if provided through Apple or Google Sign-In)

• Anonymous User ID (if using guest mode)

User-Generated Content:

• Goals and personal objectives

• Tasks and to-do items

• Daily reflections and journal entries

• Check-in responses and emotional states

• Focus session notes

• GemSpirit AI conversations

App Preferences and Settings:

• Theme and display preferences

• Notification settings

• Audio and music preferences

• Widget configuration

• Premium subscription status

2.2 Automatically Collected Information

Usage Data:

• Focus session duration and statistics

• Task completion rates

• XP (experience points) and level progression

• Gem collection and energy system data (HP/MP)

• App interaction patterns

• Feature usage frequency

Device Information:

• iOS version

• Device type and model

• App version

• Timezone and language settings

2.3 Information We Do NOT Collect

GoalGem does NOT collect:

• Health or medical data

• Precise location data

• Contact list or calendar data

• Photos or media from your device

• Behavioral analytics for advertising purposes

• Biometric data

3. How We Use Your Information

Your information is used to provide, maintain, and improve the App experience.

3.1 Core Functionality

• Goal & Task Management: Store and sync your goals, tasks, and progress

• Gamification System: Track XP, levels, gems, and energy (HP/MP)

• Focus Sessions: Record and display focus time statistics

• Personalization: Customize your experience based on preferences

• Reminders: Send optional local notifications for tasks and check-ins

3.2 AI-Powered Features (GemSpirit)

• Conversational Guidance: Provide personalized coaching and motivation

• Reflections: Generate thoughtful prompts for daily reflection

• Task Suggestions: Offer intelligent recommendations

Important: When you use GemSpirit, your inputs are sent to Google’s Gemini API (via our secure Firebase proxy) for AI processing. See Section 7 for details.

3.3 Premium Features & Subscriptions

• Subscription Management: Process and validate premium subscriptions via RevenueCat

• Feature Access: Unlock premium features (unlimited AI chats, Flow Zone, etc.)

• Usage Tracking: Monitor free-tier usage limits (e.g., 3 AI conversations/month)

3.4 App Improvement

• Debug and fix technical issues

• Optimize performance and user experience

• Develop new features

We do NOT use your data for:

• Third-party advertising

• Selling to data brokers

• Cross-app tracking

• Marketing campaigns (without consent)

4. Data Storage and Security

4.1 Local Storage (Core Data)

What’s Stored Locally:

• All goals, tasks, and personal content

• XP, levels, gems, and energy data

• Focus session history

• User preferences and settings

• GemSpirit conversation history

Security Measures:

• Data protected by iOS system-level encryption

• Secured by device passcode/Face ID/Touch ID

• Stored in the app sandbox (inaccessible to other apps)

4.2 Cloud Services

Firebase Authentication (Cloud):

• User ID and authentication tokens

• Email address (if applicable)

• Stored securely on Google’s Firebase infrastructure

• Protected by industry-standard encryption

RevenueCat (Cloud):

• Subscription status and purchase history

• Anonymous user identifier

• No payment card details (handled by Apple)

4.3 Data Security Practices

We implement industry-standard security measures:

• ✅ HTTPS/TLS encryption for all network traffic

• ✅ No hardcoded secrets in client code

• ✅ Secure authentication via Firebase

• ✅ Regular security updates

• ✅ Minimal data collection principle

Note: While we use best practices, no system is 100% secure. We cannot guarantee absolute security but will notify you of any breaches as required by law.

5. Data Sharing and Third-Party Services

5.1 Third-Party Services We Use

Firebase (Google):

• Purpose: User authentication and AI proxy

• Data Shared: User ID, email (if provided), authentication tokens

• Privacy Policy: firebase.google.com/support/privacy

Google Gemini AI:

• Purpose: Power GemSpirit conversational AI

• Data Shared: Your chat inputs, task context, reflection responses

• Privacy Policy: policies.google.com/privacy

• Important: Google may use your inputs to improve AI models. See Section 7.

RevenueCat:

• Purpose: Subscription and payment processing

• Data Shared: Anonymous user ID, subscription status, purchase events

• Privacy Policy: revenuecat.com/privacy

Apple In-App Purchase:

• Purpose: Process subscription payments

• Data Shared: Managed entirely by Apple (we don’t see payment details)

• Privacy Policy: apple.com/legal/privacy

5.2 No Data Selling

We do NOT:

• ❌ Sell your personal data to third parties

• ❌ Share data with advertisers

• ❌ Use tracking SDKs for advertising

• ❌ Share data for marketing purposes

5.3 Legal Disclosures

We may disclose information if required by law:

• Valid court orders or subpoenas

• Lawful government requests

• Protection of legal rights or safety

• Investigation of violations of our Terms of Service

6. Export and Backup Features

6.1 User-Initiated Data Export

You can export or share certain data within the App:

• Statistics Export: View and share focus session stats

• Local Backup: Data may be backed up via iCloud (if enabled in iOS settings)

• Widget Data: Limited data shared with the GemFocus home screen widget

You control what you share and with whom.

6.2 iCloud Backup (Optional)

If you enable iCloud backup in your device settings:

• App data may be backed up to your personal iCloud account

• Protected by your Apple ID and iCloud encryption

• Managed entirely by Apple (outside our control)

7. AI Features and Google Gemini

7.1 How GemSpirit AI Works

When you interact with GemSpirit (our AI guide):

1. Your input is sent from your device to our secure Firebase Cloud Function

2. The Firebase function forwards it to Google’s Gemini API

3. Gemini processes your request and generates a response

4. The response is returned to your device

Your inputs may include:

• Chat messages

• Task descriptions

• Reflection responses

• Emotional check-in data

7.2 Google’s Data Usage

According to Google Cloud’s Generative AI Data Usage Policy:

• Google may use your inputs to improve AI models

• Data may be reviewed by human reviewers for quality purposes

• Retention policies vary by service tier

Important: We use Google’s commercial API, which provides stronger privacy protections than free consumer services.

7.3 Your Choices Regarding AI

You can:

• ✅ Opt out of AI features entirely (disable in Settings)

• ✅ Delete individual conversations

• ✅ Use GoalGem without ever using GemSpirit

• ✅ Review conversation history in the app

Free Tier Limits:

• 3 AI conversations per month (unless Premium)

• Helps protect your privacy by limiting data sharing

8. Your Rights and Choices

You have control over your data.

8.1 Access and Management

• View: Access your data within the App at any time

• Edit: Modify goals, tasks, reflections, and settings

• Delete: Remove individual items or clear entire conversation history

8.2 Account Management

• Guest Mode: Use the app anonymously without an account

• Sign In: Optional sign-in for cloud sync (coming soon)

• Delete Account: Contact us to permanently delete your account and associated data

8.3 Notifications and Permissions

• Notifications: Control via iOS Settings → GoalGem → Notifications

• Widget: Enable/disable via iOS home screen settings

• AI Features: Toggle GemSpirit on/off in App Settings

8.4 Data Deletion

To delete your data:

1. Local Data: Settings → Reset All Data (irreversible)

2. Cloud Data: Email us at support@goalgem.app with “Delete My Account”

3. Uninstall App: Removes all local data from your device

Retention after deletion:

• Firebase authentication: Up to 180 days (per Google policy)

• RevenueCat records: Retained for financial compliance (anonymized)

• AI conversation logs: Retained by Google per their policy

9. Subscription and Payment Data

9.1 RevenueCat Integration

We use RevenueCat to manage subscriptions:

• Monthly Premium: $4.99/month

• Yearly Premium: $34.99/year

Data Processed:

• Anonymous user identifier

• Subscription status (active/expired/cancelled)

• Purchase timestamps

• Product IDs

Payment Processing:

• Handled entirely by Apple via In-App Purchase

• We never see or store your credit card information

• Managed through your Apple ID payment method

9.2 Premium Features

Premium subscribers get:

• ✅ Unlimited AI conversations

• ✅ Unlimited Focus Mode sessions

• ✅ Flow Zone features

• ✅ All gem types unlocked

• ✅ Advanced analytics

Free Tier:

• 3 AI conversations/month

• 3 Focus Mode sessions/month

• 1 weekly reflection/week

• 2 gem types (Focus, Strength)

10. Children’s Privacy

GoalGem is designed for users aged 13 and older.

• We do not knowingly collect data from children under 13

• If we discover data from a child under 13, we will delete it promptly

• Parents/guardians can contact us at support@goalgem.app with concerns

COPPA Compliance:

• No targeted advertising to children

• No collection of persistent identifiers for behavioral advertising

• Parental consent would be required for users under 13 (we do not support accounts for children under 13)

11. International Users

11.1 Data Processing Locations

Your data may be processed in:

• United States: Google Firebase and Gemini AI servers

• Your Device: Local Core Data storage in your country

11.2 GDPR Rights (EU Users)

If you’re in the European Union, you have additional rights:

• Right to Access: Request a copy of your data

• Right to Rectification: Correct inaccurate data

• Right to Erasure: Request deletion (“right to be forgotten”)

• Right to Portability: Export data in a machine-readable format

• Right to Object: Object to certain processing activities

• Right to Restrict: Limit how we use your data

To exercise these rights: Email support@goalgem.app with “GDPR Request”.

11.3 Data Transfers

We comply with applicable laws for international data transfers:

• Google complies with the EU–US Data Privacy Framework

• RevenueCat complies with GDPR requirements

• Standard contractual clauses are in place where required

12. Data Retention

12.1 How Long We Keep Data

Active Users:

• Data retained while your account is active

• Local data persists until you delete it or uninstall the app

Inactive Users:

• Firebase accounts: Retained unless you request deletion

• RevenueCat records: Retained for tax/legal compliance (typically 7 years)

After Account Deletion:

• Firebase authentication: Up to 180 days

• AI conversation data: Per Google’s retention policy

• Backup copies: Up to 90 days

12.2 Legal Retention

Some data must be retained for legal reasons:

• Financial records: Up to 7 years (tax compliance)

• Abuse reports: Until resolved

• Legal disputes: Until litigation ends

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When changes occur:

Notification Methods:

• In-app notification on next launch

• Email (if you’ve provided one)

• Updated “Last Updated” date above

Significant Changes May Include:

• New data collection practices

• Changes to third-party services

• Material changes to your rights

Your Consent:

• Continued use after changes means you accept the updated policy

• If you disagree, please stop using the app and contact us to delete your data

Change History:

• November 23, 2025: Initial version

14. No Analytics or Tracking SDKs

What We DON’T Use:

GoalGem does NOT use:

• ❌ Google Analytics

• ❌ Facebook SDK

• ❌ Mixpanel or Amplitude

• ❌ Advertising SDKs (AdMob, Facebook Ads, etc.)

• ❌ Cross-app tracking

• ❌ Behavioral profiling tools

Verification:

• Firebase Analytics: DISABLED in GoogleService-Info.plist

• Ad services: DISABLED

• Only essential services (authentication, AI, subscriptions) are used

15. California Privacy Rights (CCPA)

If you’re a California resident, you have additional rights:

15.1 Right to Know

Request what personal information we’ve collected about you in the past 12 months:

• Categories of data

• Sources of data

• Business purpose for collection

• Third parties we share data with

15.2 Right to Delete

Request deletion of your personal information (subject to legal exceptions).

15.3 Right to Opt-Out

• We don’t sell personal information, so no opt-out is needed

• You can still opt out of AI features (see Section 7.3)

15.4 Non-Discrimination

We won’t discriminate against you for exercising your CCPA rights:

• ✅ Same service quality

• ✅ Same pricing

• ✅ No denial of features

To exercise rights: Email support@goalgem.app with “CCPA Request”.

16. Cookies and Tracking Technologies

16.1 What We Use

Local Storage Only:

• Core Data (SQLite) for app data

• UserDefaults for preferences

• Keychain for authentication tokens

No Cookies:

• We don’t use web cookies

• No tracking pixels

• No third-party tracking scripts

16.2 Firebase Authentication Tokens

Firebase uses authentication tokens to maintain your session:

• Stored securely in the iOS Keychain

• Not shared with other apps

• Automatically expire after inactivity

17. Beta Testing and TestFlight

If you’re using GoalGem via TestFlight:

Additional Data Collection by Apple:

• Crash reports and diagnostics

• Device and OS information

• Usage patterns

Managed by Apple:

• Subject to Apple’s Privacy Policy

• We receive anonymized crash reports only

• No personal identifying information is shared with developers

18. Open Source and Transparency

18.1 Code Transparency

While GoalGem is not fully open-source, we:

• ✅ Document our privacy practices clearly

• ✅ List all third-party services

• ✅ Minimize data collection

• ✅ Aim to undergo regular security reviews

18.2 Questions and Concerns

If you have questions about:

• What data we collect

• How we use it

• Your privacy rights

Please contact us – we’re committed to transparency.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data:

Email: support@goalgem.app

Subject Line: Privacy Inquiry

Response Time: Within 7 business days

For Specific Requests:

• Data deletion: “Delete My Account”

• GDPR requests: “GDPR Request”

• CCPA requests: “CCPA Request”

• Security concerns: “Security Issue”

20. Disclaimer and Limitations

20.1 Educational Tool

GoalGem is a productivity and motivational tool:

• ❌ Not a substitute for professional advice (medical, financial, legal, etc.)

• ❌ AI suggestions are for motivational and informational purposes only

• ❌ No guarantees of goal achievement outcomes

20.2 AI Limitations

GemSpirit AI responses:

• Are generated by Google’s Gemini model

• May contain inaccuracies or biases

• Should not be relied upon for critical decisions

• Should be used with your own judgment

20.3 Data Security Disclaimer

While we implement strong security measures:

• No system is 100% secure

• Use strong device passwords

• Enable device encryption

• Regular backups are recommended

21. Acceptance of This Policy

By using GoalGem, you acknowledge that:

✅ You have read this Privacy Policy

✅ You understand how we collect and use data

✅ You consent to our practices as described

✅ You are 13 years of age or older

If you do NOT agree, please discontinue use and contact us to delete any data.

22. Governing Law

This Privacy Policy is governed by:

• United States federal law

• California state law (our primary jurisdiction)

• GDPR (for EU users)

• CCPA (for California residents)

Dispute Resolution:

• Good faith negotiation first

• Mediation if necessary

• Arbitration (if agreed)

• Litigation as a last resort

Appendix: Quick Reference

Data Collection Summary

Data Type

Collected?

Purpose

Storage

Email

Optional

Authentication

Firebase Cloud

Goals/Tasks

Yes

Core functionality

Local + Cloud (coming soon)

AI Chats

Yes

GemSpirit features

Local + Google Cloud

Focus Stats

Yes

Time tracking

Local

Payment Info

No

Handled by Apple

Apple servers

Location

No

Not collected

N/A

Analytics

No

Not collected

N/A

Third-Party Services

Service

Purpose

Data Shared

Firebase Auth

Sign-in

User ID, email

Google Gemini

AI features

Chat inputs

RevenueCat

Subscriptions

Anonymous ID, purchase status

Apple IAP

Payments

Handled fully by Apple

Your Privacy Controls

✅ Disable AI features in Settings

✅ Use guest mode (anonymous)

✅ Delete conversations anytime

✅ Reset all data in Settings

✅ Uninstall to remove local data

✅ Email us to delete cloud data

End of Privacy Policy

This policy is written in plain language to support transparency. If any terms are unclear, please contact us for clarification.

GoalGem Team

Last Updated: November 23, 2025