Privacy Policy

1. Information We Collect

We may collect the following types of information depending on how you use GoalExecution:

• Account Information: name, email address, profile information, authentication identifiers and tokens managed through our authentication provider, Terms acceptance metadata, and account settings.
• Goal and Membership Information: goal titles, descriptions, types, dates, locations (including place or address text you enter or select), target amounts, participants, roles, offline participant names and optional email addresses or phone numbers you choose to add, invitations, progress, and related goal settings.
• Messages and Other User Content: messages, tasks, task descriptions, polls and poll options, rules, calendar items, Planning Hub notes, links, files, images, receipts, vendor details, attachments and related metadata, and other content you add to a goal.
• Financial & Transaction Data: contributions, expenses, payment instructions (for example Venmo or Cash App handles you choose to share), budget categories, budget estimates, target amounts, planned amounts, recorded payments, and other financial planning information you enter. GoalExecution does not directly collect or store your full payment card information; card payments for App purchases are processed by Apple or Google, as applicable.
• Calendar Feed Information: calendar feed status, feed links or tokens, goal calendar items included in a feed, and related technical metadata.
• AI-Assisted Feature Data: goal context used to generate suggestions (such as titles, dates, budget categories, target amounts, member counts, and related planning details), generated suggestions, cached recommendations, usage counts, timestamps, and model or prompt version metadata used to operate AI features.
• Safety and Moderation Data: reports you submit about members, messages, AI-generated suggestions, or other content or activity in a shared goal, including reason keys, optional details you provide, bounded content snapshots where applicable, and related moderation status metadata. We do not expose report records to other clients.
• Purchase and Entitlement Information: product identifiers, transaction identifiers, subscription or Goal Pass status, renewal and expiration metadata, refund-related metadata, store notification data, and information needed to verify purchases and unlock paid features. On Android, purchases are processed through Google Play Billing. On iOS, purchases are processed through the Apple App Store.
• Device, Diagnostics, Usage, and Acquisition Data: When you use the App, Analytics, diagnostics, app-performance data, and certain device or app identifiers may be collected automatically. This may include device information, app activity, feature usage and analytics events, diagnostics, crash reports (including Firebase Crashlytics), performance data, push-notification tokens (Firebase Cloud Messaging), Firebase Installation IDs, Analytics identifiers (including app-instance and installation identifiers), Crashlytics identifiers, installation-source or acquisition metadata (for example Install Referrer and related Measurement / AdServices attribution signals used for product and acquisition Analytics), IP address, approximate geolocation derived through Analytics, IP address–based inference, or other provider processing (which is distinct from precise GPS coordinates), Places SDK request and device metadata, Places interaction information, Places SDK crash metrics, and Google Maps Platform-specific identifiers. GoalExecution does not collect the Android Advertising ID and does not use Advertising ID for ads. There is no in-app Analytics opt-out; collection of this category occurs while these services are enabled for the App. GoalExecution’s Android implementation does not use device GPS coordinates for Places autocomplete.
• Places and Location Autocomplete Data: When you use location autocomplete, Google Maps Platform and the Places SDK may process the text you enter, selected place information, IP address, request and device metadata, interaction information, crash metrics, and Google Maps Platform-specific identifiers to return place suggestions and operate, secure, and improve the service. GoalExecution does not use your device’s GPS coordinates for this autocomplete feature. Applicable Places information is handled according to Google’s policies (including deletion or anonymization practices described by Google), which differ from Play’s narrow definition of ephemeral processing. See Google’s Privacy Policy.
• Invitation and Attribution Data: invitation links and related deep-link / attribution metadata processed through Airbridge when invite links are created or opened. The Android App does not include the Airbridge SDK. Airbridge processing currently occurs through GoalExecution’s server-side invite-link creation flow and provider-hosted invite links. Separately, Firebase Analytics Measurement may process installation-source or acquisition metadata for product and acquisition Analytics as described above.
• Optional Information: offline participant names and optional email addresses or phone numbers you choose to enter, files, images, receipts, notes, links, or other information you choose to upload, enter, or share. GoalExecution does not access your device Contacts database.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, operate, and improve the App and Site.
• Create, manage, organize, and share goals with participants you invite.
• Facilitate group planning, financial tracking, budgets, tasks, polls, messages, calendar items, notes, files, reminders, and exports.
• Provide location autocomplete suggestions through Google Maps Platform / Places and store place or address text you select or enter for goals and calendar items.
• Generate AI-assisted suggestions (including budget suggestions and, where available, task suggestions) and cache recommendations where appropriate.
• Enforce free and paid feature limits.
• Process, verify, restore, and manage purchases, subscriptions, Goal Pass, GoalExecution Plus entitlements, renewals, expirations, refunds, and related account status through Apple and/or Google, as applicable.
• Provide calendar feeds, notifications, reminders, invitations, and shared goal summaries.
• Receive and review safety reports and take action we deem appropriate to enforce our Terms, protect users or GoalExecution, comply with law, or address abuse, safety, or security concerns.
• Diagnose bugs, improve performance, prevent abuse, protect security, and maintain integrity of the App and Site.
• Measure product usage, retention, and acquisition / installation Analytics (without using the Android Advertising ID for ads).
• Send updates, notifications, support messages, and administrative messages related to your account, goals, purchases, or app activity.
• Comply with legal, regulatory, tax, accounting, security, and store obligations.

3. How We Share Information

We do not sell your personal information.

We may share information in the following ways:

• With Goal Participants: Information added to a shared goal may be visible to other participants in that goal, depending on their role and access. This may include goal details, budgets, tasks, polls, notes, files, calendar items, payment instructions, messages, rules, exports, and other shared planning content.
• With Service Providers and Platform Partners: We may share information with service providers and platform partners who help us operate the App and Site. Verified providers used by GoalExecution include Google Firebase services (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Analytics, Crashlytics, and Cloud Messaging), Google Maps Platform / Places (for location autocomplete), OpenAI (for AI-assisted suggestions), Airbridge (for server-side invite-link creation and provider-hosted invite links), and Apple or Google for purchase processing and verification. These providers and platform partners process information to provide their services; roles may differ by platform (for example, Apple and Google may act as merchants of record for store transactions). That processing is not a sale of personal information. Google’s Privacy Policy is available.
• With Apple App Store and Google Play: Purchases and subscriptions are processed by Apple or Google, as applicable. We may receive and process purchase-related information from those stores to verify transactions, manage entitlements, process refunds, and prevent fraud or abuse. GoalExecution does not collect Google Play card information; card payments are handled by the applicable store.
• With Third-Party Calendar Apps: If you create or share a Calendar Feed link, third-party calendar apps or anyone with the link may be able to access calendar information included in that feed.
• For Legal, Compliance, and Safety Purposes: We may disclose information if required by law, legal process, regulation, or government request, or if we believe disclosure is necessary to protect the rights, safety, security, or property of GoalExecution, our users, or others, including in connection with reports and moderation.
• With Your Consent: We may share information when you direct us to do so or explicitly agree, such as when you invite others, share an export, create a calendar feed, upload content, or participate in group activity.

4. AI Processing

When you invoke an AI-assisted feature, GoalExecution sends relevant goal planning context to OpenAI only for that request so OpenAI can process the information and return the requested AI output. You should avoid entering sensitive personal information into AI-assisted features unless you are comfortable with that information being processed to provide the service.

OpenAI’s standard API controls do not use API data to train models unless the API customer opts in. API inputs, outputs, and related metadata may be retained temporarily for abuse monitoring according to OpenAI’s applicable data controls. GoalExecution separately stores generated suggestions or caches where described in this Policy so that you and eligible goal participants can view, reuse, apply, or regenerate them later.

5. Purchases, Subscriptions, and Entitlements

Purchases made on Apple platforms are processed by Apple through the App Store. Purchases made on Google Play / Android are processed by Google through Google Play Billing. We do not receive or store your full payment card information.

We may receive purchase-related information from Apple and/or Google, including product identifiers, transaction identifiers, subscription or entitlement status, expiration and renewal metadata, refund-related metadata, and store server notifications. We use this information to verify purchases, unlock paid features, maintain entitlement status, restore purchases where applicable, prevent fraud or abuse, enforce usage limits, and provide customer support.

Deleting your GoalExecution account does not automatically cancel an Apple App Store or Google Play subscription. Manage billing in the store where you subscribed.

6. Reports and Moderation Data

If you submit a report, we store the report and related metadata needed for moderation (such as reporter user ID derived from authentication, goal ID, report type, reason, optional details, optional target user ID when known, bounded snapshots where applicable, timestamps, and status). Reporter and reported-user identifiers are retained with the report through the report-retention period described below and are purged when the report itself is purged. Reports are not readable or writable by ordinary clients after submission. Access for moderation is through administrative tooling (for example Firebase Console or Admin SDK).

Open reports are retained until resolved. Resolved reports are generally retained for approximately 24 months after resolution and are currently purged through a manual administrative process. Reports may be retained longer when reasonably necessary for safety, security, fraud prevention, dispute resolution, legal obligations, or legal holds.

7. Calendar Feed Links

If you create a calendar feed, the feed link may allow anyone with the link to view certain goal calendar information. Treat feed links like shared secrets. Third-party calendar apps may store or cache subscribed information according to their own policies.

When a personal or solo goal is deleted with your account, associated calendar feed records, indexes, and tokens are deleted so public or read paths stop resolving. Calendar feeds belonging to multi-member group goals that are transferred to a successor remain functional; former-owner references on the feed may be removed or updated where applicable.

8. Files, Images, and Attachments

If you upload files, images, receipts, screenshots, or other attachments, we may store the content and related metadata (such as file name, type, size, upload date, creator, and associated goal or note) in Firebase Storage and related databases. Goal participants with appropriate access may view attachments added to a shared goal. Do not upload sensitive documents or content you do not have permission to share.

9. Notifications

If you enable notifications, we may use Firebase Cloud Messaging and related device tokens to send push notifications, reminders, alerts, and updates. You can manage notification settings in the App or your device settings.

10. Data Retention

We retain information as long as necessary to provide the service, maintain your account, support shared goals, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, maintain security, and improve the App and Site.

Some information may remain available to other goal participants after you edit, delete, leave, or lose access to a goal, depending on the nature of the content. We may retain backups, logs, transaction records, entitlement records, report/moderation records, and security records for a reasonable period, including longer retention when needed for legal hold, safety, fraud prevention, or security.

Previously collected aggregated, deidentified, diagnostic, or Analytics information may remain according to applicable provider-retention practices after account deletion. Where GoalExecution assigns account-linked Firebase Analytics user IDs or GoalExecution-defined user properties, we clear those account-linked identifiers or properties after account deletion. We do not reset the Firebase Analytics app-instance identifier, and cleared account-linked Analytics identity is not kept attached to an active GoalExecution account.

11. Your Rights and Account Deletion

Depending on your location, you may have rights to access, update, correct, delete, export, restrict, or object to certain processing of your personal information, and to withdraw consent where processing is based on consent.

To exercise your rights, contact us at contact@goalexecution.ai. You may delete your GoalExecution account in the App (Settings → Delete Account) or request deletion at goalexecution.ai/delete-account. We may need to verify your identity before responding. Verified deletion requests are generally completed within 30 days, subject to identity verification, legitimate retention, and applicable-law exceptions.

When you delete your account:

Some information may not be deleted immediately if we need to retain it for legal, security, accounting, fraud prevention, dispute resolution, shared-goal operations, or safety/moderation purposes.

• Your account profile and personal goals are deleted.
• Solo group goals (group goals with no other app members) are deleted.
• Multi-member group goals require ownership transfer to a successor before deletion can complete.
• Content in shared goals may remain for other participants.
• Display names are replaced with “Former member” where implemented.
• Internal identifiers may remain on shared records for continuity and integrity.
• Safety reports, purchase records, deletion audit records, and security or legal records may be retained where described in this Policy.
• Where GoalExecution assigns account-linked Firebase Analytics user IDs or GoalExecution-defined user properties, we clear those account-linked identifiers or properties after account deletion. We do not reset the Firebase Analytics app-instance identifier, and previously collected aggregated, deidentified, diagnostic, or Analytics information may remain under provider retention practices.
• Store subscriptions are not automatically canceled by deleting a GoalExecution account.

12. Security

We implement reasonable safeguards to protect your information, but no method of transmission, storage, or processing is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for controlling what information you add to shared goals, calendar feeds, exports, notes, files, and messages.

13. Children’s Privacy

GoalExecution is intended for users who are at least 18 years old or the age of majority in their jurisdiction. We do not knowingly collect personal information from children.

14. International Users

If you access GoalExecution from outside the United States, your information may be processed in the United States or other locations where we or our service providers and platform partners operate. By using the App or Site, you understand that your information may be transferred to and processed in those locations.

15. Changes to This Policy

We may update this policy. Updates will be posted with a new “Effective Date.” Your continued use of the App or Site after an updated Privacy Policy is posted means you acknowledge the updated policy.

16. Contact Us

If you have questions, email us at contact@goalexecution.ai.