Privacy Policy

Goals for iOS

Effective 18 Aug 2026 · Čeština

In short

Goals has no server. Your goals, milestones, check-ins, notes, custom categories, and units stay on your phone and are never sent anywhere — not to me, not to anyone else.

One thing does leave the device: anonymous usage statistics, from which nobody can tell who you are or what you've written in the app. You can turn it off in Settings.

Who's responsible for the app

The app is developed by Martin Hrbek as a private individual. Under GDPR, he is the data controller for the processing described below. Contact: goals.app.support@gmail.com.

What stays only on your phone

The app stores this locally and never sends it anywhere:

Data lives in the app's own storage and in the shared container the home-screen widgets read from. If you register by email, your password isn't stored in readable form — only as a cryptographic hash in the system Keychain.

The app has no cloud sync. Delete it, and your data goes with it.

Signing in

You can sign in with Apple, with Google, or with an email and password. Signing in is only an identity inside the app — it doesn't synchronize anything and doesn't create any account with me, because there's no server to create one on.

With Sign in with Apple and Google, your phone communicates directly with Apple or Google; the app keeps only your name and email from their response, and stores it locally. That exchange is covered by those companies' own privacy policies.

Anonymous usage statistics

To see what's working for people in the app and where they get stuck, Goals sends anonymous usage data. It's processed by TelemetryDeck, with servers in the European Union.

What's sent

DataExample
Event name"goal created," "progress logged," "paywall opened," "purchase completed"
Event parametersgoal tracking mode, priority, whether it has a deadline, which Pro plan was bought, which screen opened the paywall
Random install identifiergenerated at random on first launch — used to tell repeat visits apart, not derived from your account or your phone
Technical runtime detailssession identifier, system and app version

What's never sent

Nothing you've written: goal titles, notes, custom categories and units, feedback text, your name, or your email. No advertising identifier is sent either. The app doesn't use any advertising network, and data is never sold or handed off for marketing.

The list of data that can be sent is a closed enumeration in the app's own code — the compiler enforces it, not just good intentions.

How to turn it off

In the app: Settings → Privacy → Share Anonymous Statistics. Once off, no signal leaves — not from the app, not from the widgets.

Statistics are on by default after install. The legal basis is legitimate interest in improving the app (GDPR Art. 6(1)(f)); the data is anonymous and isn't used for profiling or for tracking across other apps or websites.

Crash reports

If you have diagnostics sharing turned on for developers (iOS Settings → Privacy & Security → Analytics & Improvements), I receive anonymized crash reports from Apple. Apple collects these, not me, and they're governed by Apple's own rules. You can turn it off at any time in system settings.

Purchases

Pro is bought through the App Store. Apple handles the entire payment — the app never has access to your card number or payment details. It only knows whether you're entitled to Pro or not.

Feedback by email

When you send feedback from the app, your mail client opens with a draft already prepared — you have to send it yourself, and you see the entire content beforehand. The device model, system version, and app version are filled in automatically so the issue can be traced. You're the only one who adds attachments.

The message then lands in my own inbox and is used solely to handle what you reported.

Reminders and widgets

Reminders are entirely local — your phone schedules them, and no notification comes from a server. Widgets read data from the same app's shared container; they don't send anything anywhere, except for the same anonymous statistics described above (and only when it's turned on).

Children

The app isn't directed at children under 13 and knowingly collects no data from them.

Your rights

Because the vast majority of your data lives only on your phone, you're already fully in control of it: delete it directly in the app, or by uninstalling.

For the anonymous statistics, I can't tie the data to a specific person — it contains nothing that could identify you — so it can't be looked up or deleted individually on request. You can stop it being sent at any time with the switch in Settings. Under GDPR you have the right to access, rectification, erasure, restriction of processing, and objection; you can exercise these at the contact address above. You also have the right to lodge a complaint with your local data protection authority.

Changes

If how data is processed changes, I'll update this page and move the effective date at the top. Significant changes will also be mentioned in the App Store update notes.