Privacy Policy

Last updated: July 18, 2026

1. What GoalFlow Stores, and Where

All of the following is stored only in a local database on your device:

• Goals, actions, and their configuration (titles, targets, reminder times, colors/icons)
• Daily progress history and streak counters
• App settings and home-screen widget configuration
• A local event log of in-app usage events — see "Analytics" below

None of this is transmitted to GoalFlow, its developer, or any third party, except as described in "Google Drive Backup" below.

2. Google Drive Backup (Optional, User-Initiated)

If you connect a Google account in Settings, GoalFlow can back up a copy of the data listed above to a hidden App Folder in your own Google Drive (the drive.appdata OAuth scope) — the same folder space many apps use for their own backups, which does not show up in your regular Drive file list and which only GoalFlow can read or write. This is your Drive storage, under your Google account, subject to your own Google account's terms and quota.

• Backups are optional. If you never connect a Google account, no data ever leaves your device.
• You may enable client-side AES-256-GCM encryption for backups (Settings → Encrypted backups). The encryption passphrase is never stored anywhere — not on device, not in the backup, not with GoalFlow's developer — which also means it cannot be recovered if lost.
• You can disconnect your Google account at any time from Settings, which revokes GoalFlow's access token. Previously uploaded backups remain in your Drive App Folder until you delete them (from within GoalFlow via "Restore" browsing, or by revoking GoalFlow's Drive access entirely from your Google Account settings, which also removes the App Folder's contents).
• GoalFlow keeps at most the 10 most recent backups and deletes older ones automatically.

3. Analytics

GoalFlow logs a small number of in-app usage events (e.g. "goal created," "action completed") to a local-only event log for future in-app statistics. As of this version, no analytics vendor or network endpoint is wired up — this table is never read by anything except the app itself, and its contents are included in your own Drive backups like everything else, i.e. still never leave your device except to your own Drive.

4. Crash Reporting

GoalFlow does not currently include any crash reporting or error monitoring service. If one is added in a future version, it will be opt-in and off by default.

5. Notifications

Reminder notifications are scheduled and handled entirely on-device via the OS notification system. No reminder content or interaction is sent anywhere.

6. Permissions

GoalFlow requests only the permissions needed for its stated features: posting local notifications (reminders), device authentication (Face ID / fingerprint / PIN) if you enable the optional app lock, and — only if you connect Google Drive backup — network access to reach Google's servers under your own authorization. GoalFlow does not request location, contacts, camera, microphone, or any permission unrelated to the features above.

7. Data Deletion

Uninstalling GoalFlow deletes all local data. If you connected Google Drive backup, deleting the backups themselves is a separate step — uninstalling the app does not delete your Drive backups, since they belong to your Drive account, not the app.

8. Changes to This Policy

If GoalFlow's data practices change — for example, a future analytics vendor or crash reporter is added — this document and the in-app Settings screen will be updated before that change ships, consistent with the opt-in-by-default posture described above.

9. Contact Us

GoalFlow is built by FaithBridge Studios. If you have any questions about this Privacy Policy, please contact:
goalflow@faithbridge.cc