Privacy policy
Last updated 8 November 2026
Draft: this page is being reviewed before GoodLoop launches and may change. Questions? Email hello@mygoodloop.app.
Who we are
GoodLoop is run by GoodLoop (“we”, “us”). We are the data controller for the personal data described here. Contact us at hello@mygoodloop.app.
What we collect and why
| Data | Why | Legal basis (UK GDPR) |
|---|---|---|
| Account: email address, the sign-in provider you use (Apple, Google or email), and your name if the provider shares it | To create your account and sign you in | Contract |
| Profile: display name, username, bio, avatar, chosen goals and interests, confirmation that you are 18 or over | To run your profile and personalise suggestions | Contract |
| What you post: posts, photos, videos, comments, reactions, saved posts, kindness notes | To show them to the people you choose | Contract |
| Progress: challenge answers, wins, XP, levels, streaks and achievements | To run journeys, streaks and your highlight reel | Contract |
| Mood check-ins and their notes | To show you your own mood history and, only if you switch it on, to suggest content | Your explicit consent, which you can withdraw at any time in Settings |
| Settings: notification choices, quiet hours, time zone, privacy choices | To respect your preferences | Contract |
| Device push token | To send the notifications you turned on | Consent (you allow notifications) |
| Subscription status: whether GoodLoop Plus is active, the product, renewal and expiry dates. We never see your card details. | To give Plus members their benefits | Contract |
| Safety: reports you make or that are made about you, moderation decisions, blocks | To keep the community safe and enforce our guidelines | Legitimate interests |
| Usage events (for example “challenge completed”), linked to a one-way scrambled ID, not your name | To understand which features help and fix problems | Legitimate interests |
| Waitlist: your email address and the date you joined | To email you once when GoodLoop launches | Consent |
We don’t use advertising trackers, we don’t sell or rent personal data, and we never use mood data for advertising or offers.
Who can see what
- Only you: mood check-ins, challenge answers, private wins and achievements you’ve kept private.
- Other members: your public profile (display name, @username, avatar, bio, level, when you joined and whether you show the Plus badge) and anything you post publicly. Signed-in members can find your profile by searching your display name or @username. People you block, or who block you, can’t find or see each other. Kindness notes sent anonymously don’t show your name to the recipient.
- Our moderators: reported content, account details needed to handle a report, and the sender of anonymous kindness notes (to prevent abuse). Moderators cannot see mood check-ins, challenge answers or private wins.
Who we share data with
We use these service providers to run GoodLoop. They process data only on our instructions.
- Supabase: database, file storage and sign-in. Your data is stored in the EU (Ireland).
- Apple: Sign in with Apple, in-app purchases and push notification delivery.
- Google: Sign in with Google, if you choose it.
- RevenueCat: manages GoodLoop Plus subscription status.
- Expo: routes push notifications to Apple’s push service.
- Our website host: serves this website and processes launch-list sign-ups.
Some providers may process data outside the UK and EU. Where they do, we rely on adequacy decisions or the UK International Data Transfer Addendum and standard contractual clauses.
We may disclose data if the law requires it, or to protect someone from serious harm.
How long we keep it
- Your account data: until you delete your account. Deletion removes your profile, posts, comments, wins, mood check-ins, progress and push tokens straight away.
- Moderation records about content that broke our rules: up to 12 months after the decision, so we can handle appeals and repeat abuse.
- Usage events: up to 24 months, linked only to a scrambled ID.
- Waitlist: deleted within 30 days of sending the launch email, and never kept for more than 12 months.
- In-app notification history: 12 months.
- Backups held by our database provider roll off within their standard retention window.
Your rights
You can:
- download a copy of your data (Settings, then Export my data);
- correct your profile at any time;
- delete your account (Settings, then Delete my account, or see how to delete your account);
- withdraw consent, for example by turning off mood-based suggestions or notifications;
- object to or ask us to restrict processing, and ask for data portability.
Email hello@mygoodloop.app for anything else. We’ll reply within one month. If you’re unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk.
Age
GoodLoop is for adults aged 18 and over. If we learn that an account belongs to someone under 18, we’ll close it and delete its data.
Security
Data is encrypted in transit and at rest. Access inside the database is restricted row by row, so each account can only read what it’s allowed to. Staff access is limited to what moderation needs and every staff action is logged.
This website
This website sets no cookies and uses no analytics or advertising trackers. If you join the waitlist, we store your email address as described above.
Changes
If we change this policy in a way that matters, we’ll tell you in the app before it takes effect.