Privacy Policy

1. Categories of personal information we collect

We collect the following categories of personal information. The examples show what each category includes; they are not a complete list of every field.

• Account information. Information that identifies you and your account: your email address, the name you give us, the random identifier we assign your account (your "account identifier"), and, if you sign in with Google, the name, email address and account identifier Google provides. We do not collect or store passwords.
• Your content. Information you choose to enter into the Service, such as your goals and the reasons for them, the routines and actions you plan, the activity you record, notes about your circumstances, the messages you send to the AI assistant, and updates you write for a person you invite. Your content can include information about your health and about other people, depending on what you choose to write.
• Information we generate from your content. Information we generate from your content to provide the Service, such as AI-generated classifications and suggestions, records of your progress over time, and records that crisis support resources were shown to you (described in section 4).
• Settings and preferences. Your time zone, display and notification choices, and similar settings.
• Subscription information. Your plan, its price and status, its billing period, and a customer identifier from our payment provider. Our payment provider collects your payment card or other payment details directly; we do not receive or store full payment card numbers.
• Information about people you invite. If you choose to send updates to another person through the Service, their name and email address and whether they agreed to receive the updates.
• Communications. Messages you send us, such as support requests, and records of the emails we send you and whether they were delivered.
• Device and log information. Information sent automatically by your browser or device when you use the Service: IP address, the approximate location (city or region) derived from it, browser and device type, operating system, screen size, the pages and resources requested, timestamps, and technical details of errors.
• Usage information. Information about how you use the Service, such as the pages you view and the features you use, the site or advertisement that referred you, and page performance measurements. Section 6 explains how we collect it.
• Agreement records. Which versions of our Terms of Service and this Privacy Policy you accepted, when, and by which sign-in method, and the renewal terms you agreed to when you subscribed.

We collect this information from you, from your browser or device, from the service providers described in section 5 (for example, our payment provider tells us your subscription status, and Google provides your account information if you sign in with Google), and from advertising platforms, which may add an identifier for an ad click to the link you follow to our website.

2. How we use personal information

We use personal information to:

• Provide the Service: create and maintain your account, store your content and keep it up to date across your devices, generate information from it, and provide the features you use, including the AI assistant.
• Support your safety: screen what you write for signs of crisis and show you support resources, as described in section 4.
• Manage your trial and subscription, and send the messages the Service requires, such as sign-in links, subscription and renewal notices, account notices, and notice of changes to our terms or this policy.
• Respond to you when you contact us.
• Understand and improve the Service, using usage information and device and log information, in the ways section 6 describes.
• Measure our advertising on other websites, unless you opt out, as section 7 describes.
• Protect the Service and others: maintain security, prevent fraud and abuse, enforce our Terms of Service, and protect the rights, safety and property of our users, the public and Goalaxi.
• Comply with law, and respond to lawful requests from public authorities.

We do not sell personal information for money. We do not use or disclose your content, or the information we generate from it, for advertising. We do not use personal information to train artificial intelligence models, including large language models, and we do not allow our service providers to do so.

We do not send marketing email. If that changes, we will send it only to people who agree to receive it, and every message will include a way to stop.

We will not use personal information we have already collected for a purpose materially different from those described here without first notifying you and obtaining your consent.

3. Artificial intelligence

The Service uses AI models run by third-party AI model providers. When a feature needs an AI model, our server sends the provider the content and context that request needs, such as the parts of your content relevant to a message you sent, and nothing more. We do not send AI model providers your name, email address or other account information, and your browser does not connect to them directly.

We use only AI model providers whose terms prohibit them from training models on the information we send and from using it except to provide their service to us, which can include detecting abuse and complying with law. Some providers keep request information for a limited period under their terms for those purposes.

Changes to your chart that the AI proposes, such as new goals, habits or links, wait for you to accept them. When you log activity with Say It and the Service is confident what you meant, it logs it straight away and shows an undo. The AI's guesses about your chart, such as a habit's effort, are marked as guesses until you choose a value. We do not use AI or other automated processing to make decisions about you that produce legal or similarly significant effects.

Goalaxi is operated by one person. We do not read your content except when you ask us to (for example, to help with a problem you report), when necessary to fix a problem with the Service that affects your account, to investigate a security incident or a serious violation of our Terms of Service, or to comply with law, and then only as much as needed.

4. Safety screening

Automated checks screen text you write in the Service, including messages to the AI assistant and what you enter with Say It, for signs that you may be in crisis or at risk of self-harm, and review your recent conversations with the assistant for persistent low mood. When a check finds a possible signal, the Service shows you crisis support resources, such as the 988 Suicide and Crisis Lifeline. Our Terms of Service describe this protocol.

When resources are shown, we record that they were shown, how serious the signal appeared (crisis or severe) and the time. That record does not include the text you wrote. We use these records to operate the safety checks, and we use only counts that identify no one to improve the checks and to produce the aggregate reports some state laws require. We do not contact emergency services or anyone else about you. These records stay in our own database, which our hosting providers store for us, and we do not disclose them to anyone else except as required by law. They are deleted when you delete your account.

5. How we disclose personal information

Service providers

We disclose personal information to service providers that process it on our behalf, under contracts or terms that restrict them to providing their services to us:

• Hosting and infrastructure providers (Hetzner and Cloudflare), which host our servers, database and encrypted backups and deliver the Service. They process every category of personal information we hold.
• AI model providers, which run the AI models used by the Service. They receive the parts of your content and the information we generate from it that each request needs, as section 3 describes.
• Email providers (SMTP2GO, which delivers the emails we send, and Cloudflare, which receives the emails you send us and passes them to our own mailbox). They receive the addresses and content of those emails.
• Analytics (PostHog), which receives usage information, device and log information, and your account identifier, as section 6 describes (PostHog's privacy policy).
• Error monitoring, which receives technical details of errors, device and log information and the account identifier when an error occurs, but not your content.

Payment and sign-in providers

Our payment provider and, if you choose to sign in with Google, Google receive the information below and use it under their own privacy policies, including to prevent fraud and, for Link, to act as the seller of your subscription:

• Payment processing (Stripe and its affiliate "Sold through Link, LLC" ("Link"), which sells subscriptions to Goalaxi as the merchant of record). They receive account information and subscription information, and collect payment details from you directly (Stripe's privacy policy).
• Sign-in (Google), if you choose to sign in with Google (Google's privacy policy).

Advertising platforms

When we advertise on other websites, we may disclose usage information and device and log information about visits to our website, and the fact that a visitor created an account, to the advertising platforms that showed our ads, as section 7 describes. You can opt out.

At your direction

We disclose information to people or services when you direct us to, such as updates you choose to send to a person you invite.

Legal reasons

We may disclose personal information when we believe in good faith that the law requires it, such as in response to a subpoena or court order; to protect the rights, property or safety of Goalaxi, our users or the public; or to investigate fraud or security problems. Where the law allows, we will notify you before disclosing your information in response to a legal demand.

Change of operator

If Goalaxi is transferred to a company formed to operate it, or to a successor through a sale, merger or other transfer, personal information will be transferred with it and remain subject to this policy. We will email you at least 30 days before such a transfer, and you can delete your account before it happens.

6. Cookies, similar technologies and analytics

The web app (app.goalaxi.com)

The web app sets only cookies that are strictly necessary to provide the Service: one that keeps you signed in, and one that lasts ten minutes while you sign in with Google, so the sign-in can only finish in the browser that started it. It also stores display preferences in your browser's local storage. The web app's analytics sets no cookies and stores nothing in your browser. It records the features you use, page performance, and device and log information, linked to your account identifier. It never includes what you write in the Service or information that could reveal your health.

The website (goalaxi.com)

The website uses PostHog analytics, which sets cookies to recognize a returning browser and records the pages viewed, the links and buttons clicked, the referring site or advertising campaign, and page performance. Unless you have turned these cookies off, when you create an account from the website, your visits to the website from that browser, before and after, are linked to your account.

When we advertise on other websites, the website may also load advertising platforms' conversion tags: code that tells the platform when someone who saw an advertisement visits or creates an account. Section 7 describes them.

These cookies and tags are on unless you turn them off. You can change your choice at any time with Cookie settings, which is also linked at the bottom of every page of the website. Your choice applies to the browser you make it in. With them off, the website still records page views and clicks without cookies, using an identifier that changes every day, so it cannot recognize your browser on a later day. No conversion tags load.

Do Not Track and Global Privacy Control

There is no common standard for responding to browser Do Not Track signals, so the Service does not respond to them. We do honor Global Privacy Control: when your browser sends it, the website treats you as having turned off its optional cookies and conversion tags, and as having opted out of any sale, sharing or targeted advertising.

Third-party tracking over time and across sites

PostHog collects usage information about your visits to the website on our behalf. When conversion tags run on the website, advertising platforms can collect information about your visit and combine it with information about your activity on other websites and services over time. No third party collects information about your activity in the web app over time and across other websites.

7. Advertising and opting out

Goalaxi shows no advertisements. We may advertise Goalaxi on other websites and apps, such as those of Meta and Google. To measure those advertisements, the website may load the advertising platforms' conversion tags, and our server may tell an advertising platform that a visitor who clicked its advertisement created an account. We identify the visit to the platform only by the advertisement click's identifier and the browser details sent with the visit, and we never send it your email address, hashed or otherwise. Advertising platforms may use this information to show you advertisements elsewhere.

Under some state laws, this may be a "sale" or "sharing" of personal information, or "targeted advertising." You can opt out at any time by:

• turning off optional cookies with Cookie settings on the website, which also stops our server from reporting your account's creation to an advertising platform;
• using a browser or extension that sends Global Privacy Control (globalprivacycontrol.org); or
• emailing support@goalaxi.com, including to opt out of any sale of personal information under Nevada law.

Advertising platforms' own settings, such as Google's ad settings and Meta's ad preferences, control how they use information they hold about you.

We never disclose your content, the information we generate from it, or your activity in the web app to advertising platforms.

8. Health information

We do not ask for health information, but your content and the information we generate from it can reveal it. Some state laws treat this as sensitive personal information or consumer health data, and we treat all of your content that way. Our Consumer Health Data Privacy Policy is our consumer health data privacy policy under Washington's My Health My Data Act. Under Nevada law, our consumer health data privacy policy is that policy together with this section. This section also describes how we handle sensitive data under Connecticut law.

• Collection and use. We collect and use consumer health data only as necessary to provide the Service you request, including its safety screening; to send it where you direct; to keep the Service secure and prevent fraud and abuse; and to comply with law. We will ask for your consent before collecting or using it for any other purpose.
• Consent. When you create an account, you consent to our processing health information your content may contain, and health information we infer from it, such as the records of safety screening described in section 4, as this policy describes. You can withdraw that consent at any time by deleting the content or your account. Deleting removes it from our database at once, and the encrypted backups that still hold it, which we use only to restore the Service after a failure, expire within 30 days.
• How it is processed. It is stored in our database and encrypted backups, displayed to you, and processed by our service providers, including AI model providers, only to provide the Service.
• Disclosure. We disclose it only to people you direct us to send it to, and to service providers that process it for us under contract: hosting and infrastructure providers, AI model providers, and email providers. We do not sell it, and we do not disclose it to advertising platforms or analytics providers.
• Tracking. No third party collects consumer health data about you over time and across other websites or services through the Service.
• Your rights. You can review, change, export and delete it as section 11 describes. We complete requests to delete it within 30 days of verifying them.
• Changes. We notify you of material changes to how we handle consumer health data as section 14 describes, and the effective date at the top of this page and of our Consumer Health Data Privacy Policy shows when each current version took effect.

9. How long we keep personal information

• Account information, your content, information we generate from it, information about people you invite, settings and subscription information: for as long as your account exists, including while it is read-only after a trial or plan ends, so you can read and export it. Information about a person you invite is deleted when they stop receiving updates or you remove them. You can delete individual items, conversations with the AI assistant, or your whole account at any time. If an account has been read-only and no one has signed in to it for two years, we may delete it, after emailing its address at least 30 days before.
• After you delete your account: except for the records listed below, your information is deleted from our database immediately and from our encrypted backups within 30 days, when the last backup containing it expires. We also delete your customer record at our payment provider, and we instruct our analytics provider to delete your analytics profile and the usage information linked to it. Our service providers may keep limited copies, such as email delivery logs, for the periods in their own terms. We keep your account identifier on a list of deleted accounts, so that restoring a backup cannot bring your account back.
• Server logs and error reports: for no longer than 90 days, unless we need them longer to investigate a specific security incident.
• Usage information and the device information sent with it: if it's linked to your account, it's deleted when you delete your account, as described above. If it's about website visits not linked to an account, it's kept under a random identifier, with the IP address it came from, for no longer than 2 years.
• Agreement records: for 3 years after your account is deleted, linked only to your account identifier, so we can show what was agreed if a dispute arises.
• Communications: for as long as needed to resolve your request, and no longer than 3 years.
• Payment records: our payment provider, as the seller of your subscription, keeps transaction records for as long as tax and financial laws require.

We may keep information longer where the law requires it, or to resolve a dispute or enforce our terms, and only for as long as that need lasts.

10. Security

We protect personal information with safeguards appropriate to its sensitivity, including encryption in transit, encryption of our database and backups at rest, access controls that confine each request to the signed-in account's own data, and administrative access limited to the person who operates Goalaxi. No system is perfectly secure, and we cannot guarantee that information will never be accessed without authorization. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

11. Your rights and choices

Wherever you live in the United States, you can:

• Access and export your information. You can download your content at any time from Settings, including while your account is read-only, and you can ask us for a copy of the personal information we hold about you and the third parties we have disclosed it to.
• Review and correct your information, by editing it in the Service or by asking us.
• Delete your information, by deleting items or your account in the Service, or by asking us. Deleting your account ends any active plan immediately: nothing more is charged, and the rest of the period isn't refunded, so cancel the plan first if you want to keep it to the end of the period.
• Opt out of targeted advertising and of any sale or sharing of personal information, as section 7 describes.
• Withdraw consent you have given us, at any time: turn off optional cookies with Cookie settings, remove a person you send updates to, delete your content or account, or email support@goalaxi.com.

To make a request, email support@goalaxi.com from the email address on your account, so we can verify that the request is yours. If you write from another address, we may ask you to confirm the request from your account's email address. If you don't have an account, such as a person who receives updates from a Goalaxi user, email support@goalaxi.com from your own address and we will verify the request in a way suited to the information involved. An authorized agent may make a request on your behalf with your signed permission, and we may ask you to confirm it directly. We do not charge for requests.

We respond within 45 days of receiving a request. If we need more time, we will tell you why within that period, and respond within a further 45 days. We complete requests to delete consumer health data within 30 days of verifying them.

If we decline a request, in whole or in part, we will explain why. You can appeal by replying to our decision. We will respond to your appeal in writing within 45 days and explain the reasons for our decision. If we deny your appeal, you may contact your state's attorney general.

We will not discriminate against you, such as by charging a different price or providing a different quality of service, for exercising your rights.

12. Children

The Service is only for people 18 or older and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we will delete the account and its information. To tell us about such an account, email support@goalaxi.com.

13. Where we process information

The Service is offered only in the United States. We store your account and content on servers in the United States. Some of our service providers may process personal information in other countries, under their own safeguards and our agreements with them.

14. Changes to this policy

The effective date at the top of this page shows when the current version of this policy took effect. We will notify you of any material change by email and in the Service at least 30 days before it takes effect, unless a shorter period is needed to comply with law or to protect the security of the Service, in which case we will notify you as soon as we can. If a change would allow us to use or disclose personal information we have already collected in a materially different way, we will apply it to that information only with your consent. Earlier versions of this policy are available on request.

15. Contact

Questions, requests and complaints about privacy go to support@goalaxi.com. Goalaxi is operated by Bear Flinn, Georgia, United States.