Privacy Policy

1. Who We Are

GOALS by Splurjj ("GOALS," "we," "our," or "us") is a goal-tracking platform operated by Splurjj. Our website is located at goalsapp.store and the GOALS mobile application is available on iOS and Android.

GOALS is part of the broader Splurjj ecosystem, which also includes splurjj.com (the editorial and content platform). This Privacy Policy applies specifically to goalsapp.store and the GOALS mobile app. For information about splurjj.com's own privacy practices, please refer to that site's policy.

By using GOALS, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account Information

• Email address (required for account creation)
• Display name or username
• Password (stored as a hashed value — we never store plaintext passwords)
• Account role (standard user, developer, creator)
• Profile photo (optional, user-uploaded)

Goal & Activity Data

• Goals you create: titles, categories, deadlines, priorities, descriptions
• Milestones, sub-tasks, and completion status
• Daily check-ins, progress logs, and reflection entries
• Mood check-in data associated with goals
• Streak data and completion history
• Mimic Goals you have adopted from Splurjj content creators

Usage & Analytics Data

• Pages visited and features used within the app
• Session duration and frequency of app use
• Device type, operating system, and browser version
• IP address (used for security and fraud prevention; not sold or shared for advertising)
• Crash reports and error logs (anonymized)

Store & Purchase Data

• Items added to your cart
• Purchase history for the GOALS Store
• Payment processing is handled by Square — we do not store full card numbers on our servers
• Shipping address for physical goods orders

Developer API Data

• API key identifiers (not the raw key values after creation)
• Webhook endpoint URLs you register
• API request logs (endpoint, timestamp, response code; no request body contents stored beyond 30 days)

Information You Do Not Have to Provide

All goal content, reflections, and mood data are private by default. You choose whether to share anything on the community feed. No personal goal data is required to be public.

3. How We Use Your Information

• Deliver the service — Store and sync your goals, milestones, and progress across devices
• Account management — Authenticate your identity, manage your session, and handle password resets
• AI-powered insights — Analyze your goal history and check-in patterns to surface personalized nudges and progress reports (processed on our servers; not shared with third-party AI services without your consent)
• Mimic Goals — When you mimic a goal from a Splurjj creator, we create a copy of that goal template in your account and attribute it to the original creator
• Store orders — Fulfill physical goods purchases, process payments through Square, and send shipping confirmations
• Communications — Send account-related emails (password reset, security alerts). We do not send marketing emails without your opt-in
• Security & fraud prevention — Detect and prevent abuse, unauthorized access, and fraudulent transactions
• Product improvement — Aggregate, anonymized analytics to understand how features are used and improve the platform
• Legal compliance — Comply with applicable laws and respond to valid legal requests

4. Sharing & Disclosure

We do not sell your personal data. Period.

Service Providers

We share data with trusted third-party processors who help us operate GOALS:

• Square — Payment processing for the GOALS Store. Subject to Square's own privacy policy.
• Cloud hosting provider — AWS S3 and associated infrastructure for file storage and website delivery.
• Email delivery — Transactional email service for account emails (e.g., password reset).
• Error tracking — Anonymized crash and error reports.

The Splurjj Ecosystem

When you use the Mimic Goals feature, limited data flows between goalsapp.store and splurjj.com:

• Your GOALS account ID is shared with splurjj.com to attribute the mimic action to your account
• The goal template content from the Splurjj article is copied into your GOALS account
• Your identity (name, email) is NOT shared with splurjj.com unless you have a linked Splurjj account

Legal Requirements

We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of GOALS, our users, or the public.

Business Transfer

In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify affected users.

5. Data Storage & Security

Your data is stored on servers located in the United States (AWS). We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Bcrypt hashing for all stored passwords
• JWT-based session tokens with expiration
• Rate limiting on all authentication endpoints
• Admin and staff access logging

No method of transmission over the internet is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security.

Data Retention

• Account data: retained for the lifetime of your account
• Deleted goals: purged from our databases within 30 days of deletion
• API request logs: retained for 30 days
• After account deletion: all personal data removed within 60 days, except where required for legal or financial record-keeping (e.g., purchase records retained for 7 years per tax law)

6. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request that we correct inaccurate data
• Deletion — Request deletion of your account and associated personal data ("right to be forgotten")
• Portability — Request an export of your goal data in a standard format (JSON)
• Opt-out of marketing — Unsubscribe from any marketing communications at any time
• Privacy controls — All goal content is private by default; you control what is visible on the community feed from your Profile settings

To exercise any of these rights, contact us at privacy@goalsapp.store.

7. Cookies & Tracking

We use a minimal set of cookies and local storage to operate the service:

• Session token — Required to keep you signed in. Expires after inactivity.
• Preferences — Stores your theme choice and display preferences locally.
• Cart state — Stores your shopping cart contents locally in your browser (localStorage).

We do not use third-party advertising cookies, tracking pixels, or behavioral profiling tools. We do not sell data to data brokers.

8. Children's Privacy

GOALS is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will delete that information promptly. If you believe we have such data, contact us at privacy@goalsapp.store.

9. The Splurjj Ecosystem

GOALS by Splurjj is part of the Splurjj platform. Here is how data flows within the ecosystem:

splurjj.com ↔ goalsapp.store

• When you click the MIMIC button on a splurjj.com article, you are redirected to goalsapp.store to complete the mimic action
• The article's goal template data (title, milestones, category, creator ID) is passed to GOALS via a secure API call
• If you are already signed in to GOALS, the template is copied to your account immediately
• If you are not signed in, you will be prompted to sign in or create an account before the mimic is saved
• Your GOALS activity is not automatically shared back to splurjj.com unless you explicitly share a goal to the community feed

Each Splurjj product maintains its own user sessions. A splurjj.com account and a GOALS account are currently separate unless you link them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to all registered users
• Display an in-app notice for 14 days after the change

Continued use of GOALS after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, data requests, or concerns: