Privacy Policy

1. Introduction

GoalSplitter ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at goalsplitter.com and app.goalsplitter.com (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and, if you choose to provide it, your name. If you sign up via a third-party provider (e.g., Google), we receive your name and email from that provider.

2.2 User Content

We store the content you create within the Service, including: life categories and time allocations, projects, tasks, and habits, scheduled items on your weekly planner, preferences and settings (work hours, time zones, onboarding choices), and any notes or descriptions you add to tasks or projects.

2.3 AI Interaction Data

When you use AI features (task generation, schedule insights, chat assistant), relevant context from your account - such as category names, project titles, task descriptions, and schedule data - is sent to our AI provider (Anthropic, via their Claude API) to generate responses. This data is transmitted securely and is not used by Anthropic to train their AI models.

2.4 Usage Data

We collect anonymized usage analytics through Plausible Analytics, a privacy-friendly analytics service that does not use cookies and does not collect personal data. This includes page views, referral sources, browser type, and country-level location.

2.5 Technical Data

Our infrastructure providers (Supabase, Vercel) may collect standard server logs including IP addresses, request timestamps, and browser user agents for security and operational purposes.

3. How We Use Your Information

We use the information we collect to: provide, maintain, and improve the Service; generate AI-powered task suggestions, schedule insights, and chat responses; send you service-related communications (account verification, security alerts, product updates); analyze aggregate usage patterns to improve the product (using anonymized data only); and respond to your support requests.

4. Data Processing and Storage

4.1 Supabase (Database and Authentication)

Your account data and user content are stored in Supabase, which provides PostgreSQL databases with row-level security. Supabase acts as our data processor and stores data in secure, SOC 2 compliant data centers.

4.2 Anthropic (AI Processing)

When you use AI features, relevant context is sent to Anthropic's Claude API for processing. Anthropic processes this data solely to generate responses for you. Under Anthropic's commercial API terms, your data is not used to train their models.

4.3 Vercel (Hosting and Edge Functions)

Our application is hosted on Vercel. API requests may be processed by Vercel Edge Functions. Vercel acts as a data processor for transit and processing purposes.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We share data only with the service providers listed above (Supabase, Anthropic, Vercel), as necessary to provide the Service, and when required by law (e.g., in response to a valid legal request).

6. Data Security

We implement industry-standard security measures including: encrypted data transmission (TLS/HTTPS), row-level security in our database (each user can only access their own data), secure authentication via Supabase Auth, API route authentication with JWT validation, and regular security reviews of our codebase.

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

7.1 Access and Export

You can access all your data through the Service at any time. We are working on a data export feature that will allow you to download all your data in a standard format.

7.2 Deletion

You can delete your account and all associated data at any time by contacting us at privacy@goalsplitter.com. Upon receiving a deletion request, we will delete all your personal data within 30 days, except where retention is required by law.

7.3 Correction

You can update your account information and all user content directly within the Service.

7.4 GDPR Rights (EU/EEA Residents)

If you are located in the EU or EEA, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, data portability, restriction of processing, and the right to object to processing. To exercise these rights, contact us at privacy@goalsplitter.com.

7.5 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

8. Cookies

GoalSplitter uses Plausible Analytics, which is a cookieless analytics service. We do not set tracking cookies. Session cookies may be used for authentication purposes only and are strictly necessary for the Service to function.

9. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

10. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all your personal data within 30 days. Anonymized, aggregate usage data may be retained indefinitely for analytics purposes.

11. International Data Transfers

Your data may be processed in countries other than your country of residence. Our service providers (Supabase, Anthropic, Vercel) operate data centers in the United States and other locations. By using the Service, you consent to the transfer of your data to these locations.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@goalsplitter.com