Privacy Policy

Gamified Goal Tracker · Last updated: July 18, 2026

Gamified Goal Tracker ("the app," "we," "us") is a personal goal and habit tracker available on the web and on iOS. This policy explains what data we collect, how it is used and stored, and the choices you have. By creating an account you agree to this policy.

What we collect

• Your email address, used to create and sign in to your account and to send verification and password-reset emails.
• The data you enter in the app: your tasks, daily check-offs and scores, to-dos, reward settings, check-ins, collected items, and your tracking dates. This is the content of your account.

We do not collect your name, location, contacts, photos, or advertising identifiers. We do not use third-party advertising or analytics trackers. Your password is handled by our authentication provider (Google Firebase); it is stored in a hashed form and is never visible to us.

How your data is stored and protected

• Your data is stored using Google Firebase (Firebase Authentication and Cloud Firestore), running on Google Cloud infrastructure.
• It is encrypted in transit (HTTPS) and encrypted at rest by Google Cloud.
• Access is restricted so that no other user can read your data.
• Please note: the app is not end-to-end encrypted. This means the app's developer has administrative access to the database and could technically access account data. We access it only when necessary to operate, support, or debug the service.

Biometric unlock (Face ID / fingerprint)

If you enable the optional app lock, authentication is performed entirely by your device's operating system. We never receive, see, or store your Face ID or fingerprint data. This lock controls opening the app on your device only.

How we use your data

We use your data solely to provide the app: to authenticate you, to save and sync your goals across your devices, and to send account emails (verification and password reset). We do not sell your data, share it with advertisers, or use it for any purpose other than running the service.

Third-party services

We rely on Google Firebase for authentication, database, and hosting. Your data is subject to Google's handling as our infrastructure provider. See the Firebase Privacy and Security and the Google Privacy Policy.

Deleting your account and data

You can permanently delete your account and all associated data at any time from inside the app: open the Tasks tab and choose Delete account. This removes your account and its data document. Deletion is immediate and cannot be undone, so export a backup first if you may want your data later.

Data retention

We keep your data for as long as your account exists. When you delete your account, its data is deleted. Account emails are handled by Firebase Authentication and removed when the account is deleted.

Children

The app is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy or your data? Contact us at dingyi.kang@utdallas.edu.