Privacy Policy

Effective date: November 3, 2026

This Privacy Policy explains how Goosed ("Goosed," "we," "us," or "our") collects, uses, shares, retains, and deletes information when you use the Goosed website, web application, iPhone application, and related services.

Information we collect

Account and contact information

We collect information used to create, secure, and support your account, such as your name if provided, email address, authentication provider, internal account identifiers, and account verification or security status. Authentication credentials are handled by our authentication provider. We do not receive your password from a third-party sign-in provider.

Profile and preference information

You may provide profile and preference information such as birthdate, sex, height, preferred measurement system, logging and exercise preferences, and quick-access settings. Some profile fields may be health-related or sensitive under applicable law. Some profile fields are marked optional in the app.

Fitness, health, and monitoring information

Goosed stores the information that you choose to log, which may include:

• Workout dates, sessions, exercises, sets, repetitions, load, and rest
• RPE, reps in reserve, heart rate, pace, distance, duration, power, cadence, and other training measures
• Body weight, sleep, soreness, stress, fatigue, injuries, symptoms, recovery information, and notes
• Exercise preferences, custom exercises, and training history
• Metrics, personal-record events, and saved views derived from your records

Do not use Goosed to store information that you do not want processed as described in this Policy.

Chats, notes, and other content

We collect content that you submit through Goosed, including:

• Text prompts and messages
• Assistant responses
• Workout and monitoring notes
• Clarifications and corrections
• Feedback or support messages
• Audio that you submit for transcription
• Photos that you submit for workout-text extraction

Audio may be transmitted to a service provider for transcription. Unless a feature expressly says otherwise, Goosed does not intentionally keep the original audio file after the transcription request is completed. The resulting transcript may be stored as part of your Goosed log.

When you use conversational logging, Goosed sends your message and relevant workout context to OpenAI so it can interpret your log, edit, or question. When you use voice input, Goosed sends the recording to OpenAI for transcription. When you use photo input, Goosed sends the selected photo to Google's Gemini service to extract workout text. Goosed asks for your permission before the first transfer for each of these purposes. If you do not give permission, the content is not sent to that provider.

Local calendar dates

Goosed records your device's time zone in your account preferences so that workouts and check-ins are logged on the correct local day, including entries sent from a connected app. This preference is deleted with your account.

Connected apps and MCP logging

If you connect ChatGPT or Claude to Goosed, that app sends the fitness message you submit and any date, time zone, or conversation-date context to Goosed. Messages can include workouts, body weight, sleep, soreness, injuries, and other monitoring information. Goosed uses the same OpenAI processing and model-data consent as its own conversational logging, including relevant saved workout context needed to interpret the message. Goosed stores the resulting records in your account through Convex and returns save summaries, clarification requests, or errors to the connected app. The connected app can also read what's logged in your account, including workouts, body weight, sleep, soreness, injuries, and other monitoring information. That app handles your conversation and returned results under its own privacy policy.

Clerk authenticates the connection. Goosed retains account and app identifiers, permission and revocation records, credential fingerprints, save receipts, and processing usage for access control, retry protection, and credit accounting. Token responses are encrypted for brief exchange recovery; credentials are not included in diagnostic logs. Temporary exchange state expires automatically. Connection history and revocation records may remain until account deletion to prevent old permissions from becoming active again. Saved fitness content and account usage records follow the retention and deletion rules below.

Goosed keeps a short security log of connected-app activity, such as an app being connected, renewing its access, being refused, or being disconnected. These records do not include your fitness messages or sign-in credentials. They are deleted automatically after 30 days, or sooner if you delete your account.

Connecting requires existing Build access. When ChatGPT or Claude logs a workout or check-in for you, Goosed's AI reads the message and saves it. That uses your normal logging credits, the same as logging in Goosed, even if the message needs clarification or cannot be saved. When ChatGPT or Claude looks up what you've logged, Goosed sends your saved entries and that app reads them with its own AI, so no Goosed credits are used. In Settings, Connected apps lets you revoke an app's access to Goosed. Revocation preserves your workouts and your ordinary Goosed sign-in. Deleting your Goosed account removes its account-owned connection and fitness records. To remove a conversation from ChatGPT or Claude, use that app's controls.

Usage and diagnostic information

We collect information needed to operate, secure, measure, and improve the service, such as:

• Feature and request type
• Model and processing provider
• Token or product-usage amounts and estimated processing cost
• Audio duration and response time
• Success, failure, and error information
• Dates and timestamps
• A limited preview of submitted text in account-scoped model-usage records
• IP address, device, browser, operating-system, and server-log information that our hosting, authentication, database, security, or payment providers process

Subscription and transaction information

For paid plans, we may receive:

• Plan and entitlement
• Billing provider
• Subscription status, renewal, cancellation, refund, and expiration information
• Transaction identifiers
• Limited billing contact or tax information supplied by the payment provider

Our App Store, web payment, and subscription-management providers process payment-card and payment-account information. If payment information is entered in a provider's checkout interface and Goosed does not receive it, Goosed does not store the full payment details.

Local device information

Goosed may store limited preferences, authentication state, and navigation state in local browser or device storage. Account-scoped fitness, monitoring, and chat records are stored by online service providers rather than in an offline local app-data store or pending-change queue. An internet connection is required to load and save those records. Removing the app or clearing local storage may remove local settings or authentication state, but it does not delete server records or cancel a subscription.

How we use information

We use information to:

• Create, authenticate, secure, and support accounts
• Process text, audio, workouts, monitoring entries, edits, and queries
• Store, synchronize, display, edit, query, and export user records
• Apply profile, unit, and logging preferences
• Provide history, metrics, and personal-record calculations
• Process purchases and maintain subscription entitlements
• Prevent duplicate subscriptions, fraud, abuse, and unauthorized access
• Diagnose errors, respond to support requests, and maintain reliability
• Measure product usage and control language-model costs
• Test and improve parsing accuracy, prompts, workflows, and product features
• Meet legal, tax, accounting, dispute, and compliance obligations

Use of chats to improve Goosed

Goosed stores chats so that you can review your own Goosed log and so that we can operate and troubleshoot the service.

While an account is active, we may review a limited subset of messages, assistant responses, parser results, and corrections to investigate failures and improve Goosed's accuracy. Access is limited to authorized personnel with a legitimate operational need.

When a failure is useful for testing, we may create a separate synthetic example that does not contain the customer's original message, response, identity, or record values. Retention and account deletion are described below.

When we disclose information

Service providers

We use Clerk for account authentication, Convex for application-data storage and server functions, OpenAI for conversational processing and audio transcription, Google Gemini for photo text extraction, RevenueCat for subscription management, Stripe for web payment processing, and Apple for App Store distribution, payments, and subscription administration. We provide only the information reasonably needed for the service each provider performs and require providers to protect personal information consistently with this Policy.

Legal, safety, and business reasons

We may disclose information when reasonably necessary to:

• Comply with law, regulation, legal process, or a valid government request
• Protect the rights, safety, and security of users, Goosed, or others
• Investigate fraud, abuse, security incidents, or violations of our Terms
• Complete a financing, acquisition, reorganization, sale, or transfer of the service, subject to appropriate confidentiality and notice obligations

At your direction

We may disclose information when you request or authorize it, such as when you export data, connect an approved integration, or ask us to send information to another service.

Advertising, sale, and tracking

Goosed does not:

• Sell personal information
• Use health or fitness information for targeted advertising
• Share personal information with advertising networks for cross-app or cross-site tracking

If these practices change, we will update this Policy and any required App Store privacy disclosures before the change takes effect.

Retention and deletion

We retain account and app data for as long as your account exists. This includes your workouts, monitoring entries, chats, assistant responses, preferences, metrics, and the account-scoped model-usage records described above, which contain a limited preview of the text you submitted. These records have no separate expiry schedule. They are kept while the account is active because they are needed to provide the service, apply usage limits, answer support requests, diagnose errors, prevent abuse, and account for processing costs. They are deleted when the account is deleted.

Account access ends immediately when a deletion request is accepted, and deletion is permanent. There is no waiting period and no way to undo it. We will not restore a deleted account or its contents. Removal from live systems usually finishes within 10 minutes, but it may take longer during a provider outage. The app tells you that cleanup is underway, but no completion email is sent.

After account-linked data is removed from live Goosed systems, Goosed deliberately retains two identity-free operational records, a time-limited security denial record, and, when applicable, one temporary Apple subscription-period credit record:

• A record that a deletion happened, containing a random identifier, the dates it was requested and completed, and whether it succeeded. It contains no email address, no partial or scrambled email address, no account identifier, and nothing that could be traced back to you.
• Aggregate processing totals such as request counts, token totals, and estimated costs, grouped by time period and model. These contain no account identifier and none of your content.
• A security record containing a one-way hash of the deleted account identifier and an expiry time. It prevents previously issued credentials and requests already in progress from recreating the deleted account's data. It contains no email, credentials, or fitness content. This is pseudonymous information, separate from the identity-free deletion audit. It remains valid for 10 years plus one hour after deletion completes, covering the maximum supported credential lifetime and requests in progress, and is then removed by automatic cleanup.
• For a current or recently ended Apple Build subscription period, a temporary counter containing the Apple subscription's original transaction identifier, the exact paid-period start and end, and the Build credits granted and consumed. It contains no Clerk account identifier, email address, workout, chat, prompt, or usage category. It prevents account deletion and recreation from issuing the same paid period's credits twice. Goosed deletes it automatically no later than 30 days after that paid period ends.

Residual copies can remain temporarily in service-provider backup and security systems. Convex backups can contain deleted rows for up to 14 days and are restored only into an isolated recovery environment, not used to reopen a deleted account. Depending on the provider and its configured data controls, language-model and transcription providers may temporarily retain submitted content in abuse-monitoring or security logs. Hosting and authentication security logs can remain for their provider-defined retention periods. These residuals are not active Goosed account records, are not used to rebuild your account, and expire under the providers' retention schedules.

We do not keep de-identified or pseudonymized copies of your workouts, chats, or other account content. Replacing an email address with an identifier or a scrambled value is not treated as deletion. We also do not keep transaction or tax records of our own.

Our payment providers keep their own records independently of us. When your account is deleted, we delete your customer record with our web payment provider, but that provider separately retains transaction information to meet its own legal obligations, and we cannot remove it. Apple likewise keeps App Store purchase records that we do not control and cannot see.

Deleting your Goosed account does not cancel a subscription managed by Apple, and Apple may continue billing you. Review and cancel any active Apple subscription separately if you do not want it to renew. A web subscription is cancelled automatically when your account is deleted and cannot renew afterward. Account deletion does not issue a refund.

If you later sign up again with the same email address, you receive a new, empty account. None of your previous workouts, chats, preferences, or metrics return. If Apple automatically synchronizes a still-active subscription, paid access can return without restoring account data. A recovered Build subscription receives only the credits remaining in that same paid period; a genuinely new paid period receives its normal new allowance.

Your choices and rights

Depending on where you live, you may have rights to:

• Access personal information
• Correct inaccurate information
• Export information
• Delete your account and associated information
• Object to or restrict certain processing
• Withdraw consent where processing relies on consent
• Appeal a denied privacy request or complain to a data-protection authority

Goosed account settings provide exports for account information, logging history, and Goosed log transcripts.

You can delete your account at Settings > Account > Delete account. Other privacy requests may be sent to support@goosed.io. We may need to verify your identity before completing a request.

Security

Production connections between the app, website, and our service providers are encrypted in transit using HTTPS/TLS. We also use authenticated access, account-level data isolation, provider access controls, and operational monitoring.

No storage or transmission system is completely secure. You are responsible for protecting access to your email, device, and sign-in methods.

International processing

Goosed and its service providers may process information in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we use appropriate legal mechanisms for international transfers.

Minimum age

You must be at least 13 years old to create or use a Goosed account. Providing a birthdate in your profile is optional. If Goosed learns that an account holder is under 13, we will close the account and delete the associated personal information unless we are legally required to retain it. Questions may be sent to support@goosed.io.

Changes to this policy

We may update this Policy as Goosed changes. We will post the updated version and revise the effective date. If a change materially affects how we use personal information, we will provide additional notice or request consent where required.

Contact

Goosed is operated by Jeremy Gentles, a sole proprietor doing business as Goosed.

Email: support@goosed.io

Country: United States