Privacy Policy — GoalCycles

1) Information We Collect

A. Account and profile data

• Email address
• Username
• Password (stored as a hashed value)
• Authentication provider (local or Google)
• Google account ID (if you sign in with Google)
• Profile picture (if you upload one)
• Sex/gender (optional)
• Time zone

B. Goal and task data

• Goals you create (title, description, category, duration, difficulty, milestones, availability)
• Cycles and tasks generated for your goals
• Task completion status and timestamps
• User feedback and notes about tasks or cycles

C. App usage and behavioral events

We record events to understand and improve performance, such as:

• Task completed / skipped
• Goal created / deleted / completed
• Cycle generated / regenerated

These events may include time-of-day and day-of-week signals and related goal/cycle/task IDs.

D. Notifications

• Push notification token (FCM token)
• In-app notifications you receive (task reminders, cycle updates, social notifications, etc.)

E. Social features (optional)

If you make a goal public, we may show:

• Your username, profile picture, level, and total XP
• Goal title, description, category, and cycle status

Other users can encourage your public goals.

F. Subscription data (if applicable)

• Plan type and status (trial/subscribed/test)
• Provider (e.g., Google Play)
• Provider subscription ID and dates

G. Email verification and security

• One-time verification codes (OTP) for account verification or password reset

2) How We Use Your Information

• Create and manage your account
• Generate and personalize goals, cycles, and tasks
• Improve task timing and performance insights
• Send push notifications and in-app notifications
• Support social features (public goals, encouragements)
• Secure accounts and prevent abuse
• Manage subscriptions and access limits

3) AI Processing

GoalCycles uses Google’s Generative AI (Gemini) to analyze goals and generate tasks, guidance, and dialogs. This may include:

• Your goal descriptions
• Task feedback
• Performance and scheduling context (e.g., availability, time zone, difficulty)

This data is sent to Google’s AI service solely to generate responses for your account.

4) Sharing of Information

We do not sell your personal data.

We may share information with trusted service providers to operate the app:

• Google Sign-In (if you choose Google authentication)
• Google Generative AI (Gemini) for AI-generated goals/tasks/assistance
• Firebase Cloud Messaging (FCM) to send push notifications
• Email provider to send verification and password reset emails
• Google Play for subscription management (if you subscribe)

We only share data necessary to provide these services.

5) Data Retention

We keep your data while your account is active. If you delete your account or request deletion, we will remove or anonymize your personal data, except where retention is required by law or for legitimate business purposes.

6) Security

We use industry-standard practices to protect your data:

• Passwords are stored using strong hashing (bcrypt)
• Data is transmitted over secure connections (HTTPS)
• Access is restricted to authorized systems only

7) Your Choices and Rights

You can:

• Update your profile and settings in the app
• Control whether your goals are public or private
• Request deletion of your account/data by contacting us

To request access, correction, or deletion, contact us at: hello@goalcycles.com

8) Children’s Privacy

GoalCycles is not intended for children under 13. We do not knowingly collect personal data from children under 13.

9) Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Effective date” and, if changes are significant, notify you in the app.