GoodRhythm
Privacy
Operator: GoodRhythm. Notice dated October 6, 2026.
Early-access requests
The public early-access list is separate from app accounts. We store your email, language, request time and chosen email preferences in a separate encrypted private store. No health information is needed and joining does not create an account or send email. Email ownership and future marketing permission still require verification before commercial messages. Keep the private removal link to delete your request and preferences, or contact support from the address you used. Requests remain until you remove them or the waitlist closes. A non-identifying storage marker can remain to make removal safe; provider backups and security logs may have separate retention. We use short-lived signed form tokens, a honeypot and connection rate limits to limit abuse; these are not proof of identity. We do not install advertising trackers on the marketing site.
Optional reminders and device summaries
Enabling push registers a device endpoint and public subscription keys so the browser push provider can deliver reminders. You can pause reminders, change channels or remove the device registration. Delivery is not guaranteed. Android widgets show generic information by default; optional coarse summaries stay on the device and are not a native copy of your credentials or diary. This release has no advertising SDK or sale of personal data.
Circle rules, blocking and safety reports
Before publishing to a private Circle, you must accept its community rules, including automated safety screening of only your selected shared text through OpenAI. Unsafe submissions are blocked; uncertain submissions remain unpublished with up to 1,800 characters in the restricted human-review queue. Submission and safety records remain until account deletion. Private photos, diary records and entire Circle history are not sent for screening. You can report a shared post, comment or member and block a member. A content report includes only the reason and up to 300 characters of the reported shared text; a member report includes the reason and referenced member, not their private diary. Authorized safety reviewers can remove reported shared content or restrict Circle participation. Reports remain until account deletion; deleting the reported member removes the linked text and identity, while minimal report status may remain. Independent copies already saved by other members are not recalled.
Optional AI-response reports
If you report an AI response, only your chosen text excerpt and reason go to authorized GoodRhythm safety/support reviewers. Photos, full history and saved memories are not attached or shared with your Circle. Your export includes your selected report text; account deletion removes that text from the application. Reporting does not change reminders.
Information you choose to save
Your account email, sign-in information, preferences and consent choices protect and personalize your account. You can save commitments, workouts, tasks, meals, recipes, reflections and progress. Meal photos, nutrition numbers, body measurements including weight, and coaching memory are optional. Hosting/authentication services also process connection and security information such as IP addresses.
Your choices; private by default
Use GoodRhythm alone, for habits only, or with cloud AI off. Your diary and coaching memory stay private by default. Only selected text and structured details you preview and confirm are shared to a private invite-only Circle. Meal photos always remain private; Circle membership never grants access to the photo or source diary. Written updates share only your text when you choose Share this update for the displayed Circle. Members can see selected posts, comments and reactions; sharing never publishes your entire diary. Copies, downloads and screenshots others already made cannot be recalled.
AI and service providers
Cloudflare hosts/protects GoodRhythm and sanitizes uploaded images. Supabase provides authentication, database and private file storage. Cloudflare Turnstile checks sign-in/signup security using browser and connection signals. Cloudflare also processes these signals as a controller to improve bot detection; see https://www.cloudflare.com/turnstile-privacy-policy/. Resend processes your email address to deliver account security mail and, only when you opt in, general accountability reminders. Authentication mail does not contain your meals, workouts or Coach content. With your cloud-AI consent, OpenAI receives your request and bounded relevant app context; photo analysis sends only the sanitized selected image. The model proposes foods or plan changes for your review and confirmation. These are estimates, not verified health or nutrition measurements. Providers may process data in different regions and keep service/security records under their policies. We do not claim zero retention or end-to-end encryption.
Retention, export and deletion
You can inspect, edit and delete coaching memory separately. Profile → Privacy & account offers export and account deletion without payment. Deletion revokes access immediately; private files and remaining account resources are cleaned up through the deletion workflow. Limited cost/security records and deletion safeguards may remain to prevent replay or restoration of deleted accounts. Deletion safeguards are kept until every retained recovery backup that could restore the account has expired; there is no automatic deletion deadline for the minimal financial/security records. These can include identifiers linked to your account; they are not necessarily anonymous. Provider backups/logs may have their own retention; no unverified cleanup deadline is promised. An exported file is under your control.
Security and essential cookies
GoodRhythm uses encrypted connections, authenticated ownership checks and private storage. Authorized infrastructure administrators can access server-processed information needed to operate and protect the service. Essential authentication cookies support a short session or your optional Stay signed in choice, up to seven days. Logout, revocation, deletion and account suspension remain authoritative. Private diary/images are excluded from the app offline cache. No advertising trackers are installed. Server-side logout needs a connection.
Questions and requests
Contact support@getgoodrhythm.com. Do not send passwords or sensitive records.