Privacy Policy

Goaltree ("we", "us", or "our") operates the Goaltree web app and mobile applications. This policy explains what data we collect, how we use it, and your rights regarding that data.

1. Information we collect

Account information

When you sign up we collect your email address. We use magic-link authentication — we never store a password.

Goal and task data

We store the goals, milestones, targets, and tasks you create, along with completion timestamps and progress data. This data is associated with your account and used to power the app experience.

Usage data

We collect standard server logs (IP address, browser type, pages visited, timestamps) to operate, secure, and improve the service. This data is not sold or used for advertising.

Device information

On mobile apps we collect device identifiers and OS version for crash reporting and performance monitoring.

Payments

Subscription payments are processed by Stripe and Apple / Google (for in-app purchases). We do not store full card numbers. We receive a billing token and subscription status from these providers.

2. How we use your information

• To provide, personalise, and improve the Goaltree service
• To generate AI-structured goal breakdowns and daily task surfaces using your goal content
• To send transactional emails (magic links, subscription receipts)
• To detect and prevent abuse or security incidents
• To analyse aggregate, anonymised usage trends

We do not sell your personal data. We do not use your goal content for advertising targeting.

3. AI processing

When you create or replan a goal, the goal title and category are sent to an AI provider (Anthropic) to generate a structured breakdown. We do not use your goal content to train AI models. Anthropic's data usage is governed by their privacy policy.

4. Sharing with third parties

We share data only with the following categories of service providers, and only to the extent necessary to operate the service:

• Convex — database and real-time backend
• Anthropic — AI goal structuring
• Stripe — payment processing
• Expo / Apple / Google — mobile app distribution and push notifications
• Vercel — web hosting

We do not share your data with advertisers, data brokers, or analytics platforms that build user profiles.

5. Goal sharing

When you share a goal via its public URL, the goal's title, milestones, targets, and tasks are visible to anyone who opens the link. Shared goals are read-only by default; you can explicitly grant editing access. You can revoke sharing at any time by deleting the goal.

6. Data retention

Your data is retained for as long as your account is active. If you delete your account, all associated goals and personal data are permanently deleted within 30 days. Anonymised, aggregated statistics may be retained indefinitely.

7. Security

All data is transmitted over HTTPS. Data at rest is encrypted by our infrastructure providers. We use magic-link authentication to eliminate password-related attack surfaces. Access to production systems is restricted to authorised personnel.

8. Children

Goaltree is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Your rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, email privacy@goaltree.ai. We will respond within 30 days.

10. Cookies

We use a single first-party cookie (goaltree_session) as a non-sensitive UI hint to detect whether you are signed in on the marketing site. No third-party tracking cookies are set.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice. Continued use of the service after changes take effect constitutes your acceptance of the revised policy.

12. Contact

Questions about this policy? Email us at privacy@goaltree.ai.