Privacy Policy

1. Who we are

GoalCannon ("we", "us", or "our") operates the GoalCannon website and app. For questions about this policy, your personal data, or a request to delete your account data, email goalcannon@gmail.com.

2. The information we collect

You can use the breathing and activity tools without an account. Guest interests, optional profile answers, and breathing preferences are stored in this browser. If browser storage is unavailable, changes may only last for the current visit. Clearing site data removes stored guest preferences. When you create an account or sign in through the app, guest preferences are copied to your account only if it does not already have its own preferences. Guest use still involves website hosting and the analytics described below.

We collect information needed to create and operate your account, including:

• your email address and account authentication details;
• the onboarding choices you provide, such as your age range, screen-time and social-media habits, goals, preferred activities, and free-time preferences;
• your Urge Surf session preferences and feedback or reviews you choose to submit;
• usage and interaction information, such as pages viewed, buttons or links used, feature events, visit and session identifiers, timestamps, referring pages, and time spent using parts of the app;
• analytics identifiers linked to your account, including your GoalCannon user ID and, in the current configuration, your email address; and
• limited technical, diagnostic, and security information, such as browser and device information, screen and viewport size, operating system, approximate location derived by a provider where enabled, error details, IP address where processed, and security signals.

We do not intentionally include passwords or the text of a submitted review in our named analytics events. Please do not submit information you would not want us to store. GoalCannon is not a medical or emergency service.

3. How we use your information

We use your information to create and secure your account, personalise features and activity suggestions, save your preferences, respond to requests, operate and improve GoalCannon, understand which features are useful, measure engagement and return rates, diagnose errors, and prevent fraud or abuse.

Where applicable, we process information to provide the service you request, comply with legal obligations, pursue our legitimate interests in operating a secure and useful service, or on the basis of your consent where consent is required. We do not sell your personal information, use it for third-party advertising, or make decisions with legal or similarly significant effects based on analytics data.

4. Service providers and sharing

We use carefully selected providers to run GoalCannon. Depending on how you use the service, these include:

• Supabase for account authentication and database hosting;
• Vercel for website hosting and delivery;
• Resend for account-related emails, such as confirmation emails;
• Cloudflare Turnstile to help protect sign-up and sign-in forms from bots; and
• PostHog Cloud EU for product analytics and browser error reporting. Our PostHog project uses the European Union hosting region.

These providers process information only as needed to provide their services to us. Some may process data outside the UK; where this occurs, we rely on appropriate safeguards provided by the relevant provider.

5. Product analytics and storage technologies

GoalCannon uses PostHog to understand how people use the app. PostHog may use cookies and browser storage to distinguish devices and sessions, remember an analytics identifier, and recognise returning users. For signed-in users, analytics events may be associated with the GoalCannon account identifier so that activity across visits can be measured.

Analytics can include automatically collected page views, page exits, clicks and form interactions, as well as named events such as completing onboarding, refreshing an activity recommendation, saving Urge Surf options, submitting a rating, or updating account settings. Browser errors may also be reported to help us diagnose faults.

We currently do not use PostHog session replay, and our named review event includes the rating but not the written review. You can use your browser or device settings and compatible content-blocking tools to restrict or delete cookies and browser storage, although those controls may also affect other site functionality.

6. Data retention and deletion

We keep account, app, and account-linked analytics data for no longer than reasonably necessary to operate and improve the service, understand usage, resolve issues, meet legal obligations, or protect against misuse. We periodically review the information we hold and remove or anonymise it when it is no longer needed.

You can request account deletion by emailing us. We will review and action valid requests, including account-linked information held by our processors where applicable, subject to any information we are required to retain by law and any data that has already been irreversibly aggregated or anonymised.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. Where processing is based on consent, you may withdraw that consent at any time without affecting processing that took place before withdrawal. To make a request, contact us at the address above. You may also have the right to complain to your local data-protection authority.

8. Children

GoalCannon is not directed to children under 13. If you are under 13, do not use GoalCannon or submit personal information without a parent or guardian's involvement. If you believe a child has provided personal information without appropriate permission, contact us so we can review the request.

9. Changes to this policy

We may update this policy as GoalCannon develops or legal requirements change. We will post the updated version here and change the “Last updated” date. If a change materially affects how we use personal information, we will provide additional notice where required.