Privacy Policy
1. Introduction
This Privacy Policy applies to the theGoodspace mobile application (“Application”), created and operated by Shreyas Krishnamurthy (“Service Provider”) as a commercial service based in India. The Application is provided on an “AS IS” basis. This policy explains how information is collected, used, stored, and protected when you use the Application.
2. Health Data (Apple HealthKit)
The Application integrates with Apple HealthKit to access and analyze health-related data such as sleep, heart rate, heart rate variability (HRV), and activity levels to provide energy predictions and insights.
Prohibited Use
HealthKit data is never used for advertising, marketing, or data mining purposes and is never sold to third parties.
Purpose Limitation
Health data is processed transiently to generate insights and is not retained beyond what is required to provide ongoing features such as energy trends.
3. Information Collection and Use
We collect information necessary to operate and improve the Application, including:
- Name and email address (from Sign in with Apple or Google)
- Your tasks, lists, notes and the sleep you log
- Places you save, with their location
- Calendar events and reminders you choose to connect
- Device and operating system info
- Approximate location (derived from IP)
- Application usage diagnostics
- Advertising identifier, only if you allow tracking
Analytics and Crash Reports
The Application uses Google Firebase Analytics and Firebase Crashlytics to understand which features are used and to fix crashes. These record actions such as screens opened, tasks added or completed, and settings changed, as counts and choices, linked to your account ID. They never include what you write or say (task names, notes, Spills, emails) or any Apple Health data, are not used for advertising, and do not use your device's advertising identifier. You can turn this off at any time in Settings → About → Share usage and crash reports.
Places and Location
When you save a place, such as home or work, its location is stored with your account so a task can remind you when you arrive or leave. With your permission, the Application uses iOS region monitoring to notice arriving and leaving, even when it is closed. It never keeps a history of where you have been.
Calendar and Reminders
With your permission, the Application reads your calendars so it never plans a task during an event, and keeps Apple Reminders and your tasks in step: a reminder shows up as a task, and finishing or changing it in the Application updates it in Reminders.
Advertising Measurement (Meta)
The Application uses the Meta (Facebook) SDK to measure which of our Instagram and Facebook ads brought people to it. It tells Meta about installs and app opens, signing up, finishing setup, viewing Pro and starting a purchase; purchases, trials and renewals reach Meta through RevenueCat. Your device's advertising identifier is included only if you allow tracking when Apple's App Tracking Transparency prompt asks. What you write or say and your Apple Health data are never shared with Meta. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking, and turning off Share usage and crash reports stops these events.
4. Artificial Intelligence
The Application uses third-party AI services, including OpenAI and Google Gemini, to generate user-requested insights and task suggestions.
When you turn a Spill (spoken words), a photo, or an email you forward to your theGoodspace address into tasks, its content is sent to OpenAI, with the names of your lists and tags, to find the tasks in it. The Application asks your permission before the first time, and you can change it in Settings → About → Find tasks with AI. Your calendar and Apple Health data are never sent to AI services. On supported iPhones, a Spill is first read on the device by Apple Intelligence.
AI services process only user-provided content and application context. Google User Data obtained via OAuth is not sent to or used by AI providers and is never used to train global models.
5. Third-Party Services
The Application relies on the following trusted services:
6. Google User Data Policy
Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Data Sharing and Disclosure
Google User Data is shared only with Google Firebase for authentication and secure account management. Google User Data is never shared with advertisers, data brokers, or used for marketing, profiling, or personalization.
7. Data Protection Mechanisms
The following safeguards apply to all sensitive personal data, including Google User Data obtained via OAuth authentication:
- Encryption in Transit: HTTPS / TLS
- Encryption at Rest: AES-256
- Access Control: Restricted to authorized personnel
- Data Minimization: Only the minimum Google User Data required for authentication and essential functionality is accessed or stored.
8. Account and Data Deletion
You may permanently delete your account and associated data through the Application settings or by contacting support.
9. Contact and Grievance Officer
Email: support@brainsugar.studio
Grievance Officer: Shreyas Krishnamurthy