Privacy Policy

Effective October 28, 2026

1. Introduction

This Privacy Policy applies to the theGoodspace mobile application (“Application”), created and operated by Shreyas Krishnamurthy (“Service Provider”) as a commercial service based in India. The Application is provided on an “AS IS” basis. This policy explains how information is collected, used, stored, and protected when you use the Application.

2. Health Data (Apple HealthKit)

The Application integrates with Apple HealthKit to access and analyze health-related data such as sleep, heart rate, heart rate variability (HRV), and activity levels to provide energy predictions and insights.

Prohibited Use

HealthKit data is never used for advertising, marketing, or data mining purposes and is never sold to third parties.

Purpose Limitation

Health data is processed transiently to generate insights and is not retained beyond what is required to provide ongoing features such as energy trends.

3. Information Collection and Use

We collect information necessary to operate and improve the Application, including:

  • Name and email address (from Sign in with Apple or Google)
  • Your tasks, lists, notes and the sleep you log
  • Places you save, with their location
  • Calendar events and reminders you choose to connect
  • Links and notes you save, and emails you forward
  • A notification token for each device you sign in on
  • Device and operating system info
  • Approximate location (derived from IP)
  • Application usage diagnostics
  • Advertising identifier, only if you allow tracking

Analytics and Crash Reports

The Application uses Google Firebase Analytics and Firebase Crashlytics to understand which features are used and to fix crashes. These record actions such as screens opened, tasks added or completed, and settings changed, as counts and choices, linked to your account ID. They never include what you write or say (task names, notes, Spills, emails) or any Apple Health data, are not used for advertising, and do not use your device's advertising identifier. You can turn this off at any time in Settings → About → Share usage and crash reports.

Places and Location

When you save a place, such as home or work, its location is stored with your account so a task can remind you when you arrive or leave. With your permission, the Application uses iOS region monitoring to notice arriving and leaving, even when it is closed. It never keeps a history of where you have been.

Calendar and Reminders

With your permission, the Application reads your calendars so it never plans a task during an event, and keeps Apple Reminders and your tasks in step: a reminder shows up as a task, and finishing or changing it in the Application updates it in Reminders.

Saved Links and Notes

When you save a link, a video or a note (from the Application or the iOS share sheet), it is stored with your account, with the points read from it, the topic it is filed under and the kinds of task it helps with, so the Application can show it before a task it fits. The Application also looks for patterns in your own days, such as when your energy is usually best; this happens on your device, and only the patterns are saved, never the Apple Health readings they came from. You can delete anything saved at any time.

Email to Tasks

With Pro, you can turn on your own theGoodspace address and forward emails to it. A forwarded email is received through Cloudflare Email Routing and read to find the tasks in it (see Artificial Intelligence). The email itself is not stored: only its subject, its sender, when it arrived and the tasks found, until the Application adds those tasks, and the last email's subject, shown in Settings. You can get a new address or turn it off at any time in Settings → Email to tasks.

Notifications

Reminders for your tasks are scheduled on your device. When a forwarded email adds tasks, or cannot, we tell each device you are signed in on through the Apple Push Notification service. For this we keep each device's notification token with your account, with its language and time zone; the notification carries the email's subject and the names of the tasks it added. A device's token is removed when you sign out of it or delete your account, and you can turn these notifications off in Settings → Email to tasks → Notify me.

Connected Assistants

You can connect an AI assistant, such as ChatGPT or Claude, to your account. Once you approve it in the Application, the assistant can read your energy, your tasks and what you have saved, and add a task or save a link when you ask it to; what it reads is then handled under that assistant's own privacy policy. Apple Health data is never given to an assistant. You can see and disconnect connected assistants at any time in Settings → Connected assistants.

Advertising Measurement (Meta)

The Application uses the Meta (Facebook) SDK to measure which of our Instagram and Facebook ads brought people to it. It tells Meta about installs and app opens, signing up, finishing setup, viewing Pro and starting a purchase; purchases, trials and renewals reach Meta through RevenueCat. Your device's advertising identifier is included only if you allow tracking when Apple's App Tracking Transparency prompt asks. What you write or say and your Apple Health data are never shared with Meta. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking, and turning off Share usage and crash reports stops these events.

4. Artificial Intelligence

The Application uses third-party AI services, including OpenAI and Google Gemini, to generate user-requested insights and task suggestions.

When you turn a Spill (spoken words), a photo, or an email you forward to your theGoodspace address into tasks, its content is sent to OpenAI, with the names of your lists and tags, to find the tasks in it. The Application asks your permission before the first time, and you can change it in Settings → About → Find tasks with AI. Your calendar and Apple Health data are never sent to AI services. On supported iPhones, a Spill is first read on the device by Apple Intelligence.

When you save a link or a note, its words (a page's text, a caption, your note) are sent to OpenAI, and a YouTube video's link to Google Gemini, to pull out a few points and file it under a topic. Only what you chose to save is sent.

AI services process only user-provided content and application context. Google User Data obtained via OAuth is not sent to or used by AI providers and is never used to train global models.

5. Third-Party Services

The Application relies on the following trusted services:

Google Firebase, RevenueCat, Meta (Facebook SDK), OpenAI, Google Gemini, Cloudflare, Apple Push Notification service.

6. Google User Data Policy

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing and Disclosure

Google User Data is shared only with Google Firebase for authentication and secure account management. Google User Data is never shared with advertisers, data brokers, or used for marketing, profiling, or personalization.

7. Data Protection Mechanisms

The following safeguards apply to all sensitive personal data, including Google User Data obtained via OAuth authentication:

  • Encryption in Transit: HTTPS / TLS
  • Encryption at Rest: AES-256
  • Access Control: Restricted to authorized personnel
  • Data Minimization: Only the minimum Google User Data required for authentication and essential functionality is accessed or stored.

8. Account and Data Deletion

You may permanently delete your account and associated data through the Application settings or by contacting support.

9. Contact and Grievance Officer

Email: support@brainsugar.studio

Grievance Officer: Shreyas Krishnamurthy