Privacy Policy

Last updated: July 24, 2026

Who we are

GoalBuilders ("we", "us") is a goal-commitment app that lets you set challenges with friends, submit evidence, and have completion evaluated. For any privacy question, contact zhangyuhang6660@gmail.com.

Data we collect

  • Account data: email address, display name, avatar, bio, time zone, and sign-in identifiers (Google sign-in or email).
  • Content you create: goals and their rules, evidence (photos, videos, links, notes, files), posts, comments, chat and direct messages, and challenge records.
  • Push notification tokens, if you enable notifications.
  • Basic technical data required to operate the service (such as request logs kept by our hosting providers).

How we use your data

  • To provide the service: challenges, rooms, community, messaging.
  • AI evaluation: evidence you submit for a goal is processed by Google's Gemini API solely to evaluate that goal against your own written criteria. It is not used to train models.
  • To send the notifications you opt into (deadlines, comments, verdicts).
  • We do not sell your data or use it for advertising.

Where your data lives

Data is stored with Supabase (hosted in the EU, Frankfurt region) and served through Vercel. Media files live in access-controlled storage; links to them are signed and expire.

What others can see

Private challenges are visible only to their members. If a challenge is shared publicly for recruiting, its name, description, goals, evidence and verdicts are visible to signed-in users. Your public profile shows your name, avatar, bio, profile background and aggregate stats — never your goal details from private rooms.

Retention and deletion

You can delete your account in Settings → Delete account. This permanently removes your name, avatar, bio, sign-in and push subscriptions, and deletes files you uploaded for your profile. Records inside shared challenges (evidence, comments, results) are retained in anonymized form, because they are also part of other members' challenge history. Deletion cannot be undone.

Your rights

Under the GDPR you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. Most of this is available directly in the app; for anything else, email zhangyuhang6660@gmail.com.

Changes

We will update this page when our practices change; material changes are announced in the app.