Privacy Policy

Last updated: August 3, 2026

This Privacy Policy explains how Kameron Meeker ("Goal Grower," "we," "us," or "our") collects, uses, and shares information when you use the Goal Grower mobile application and this website (together, the "Service"). Goal Grower is operated by Kameron Meeker, an individual developer based in Idaho, United States.

We built Goal Grower to be calm and trustworthy. We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.

1. Information we collect

Information you provide

  • Account information: your email address, and a display name and username you choose. If you sign in with Google or Apple, we receive basic account identifiers from that provider (such as your name and email). We never receive or store your password for those providers.
  • Goal and garden content: the goals and habits you create, completion history, streaks, check-ins, plants, garden customizations, and the in-app coins and progress associated with your account.
  • Social content: friend or follow connections, shared gardens you join, and encouragements ("cheers") and activity you send to or receive from other users.
  • Support and feedback: messages you send us by email, and posts you submit to our feedback board (hosted by UserJot).
  • Beta waitlist: your email address and any optional responses if you sign up for the beta.

Information collected automatically

  • Device and app information: device model, operating system version, app version, language, time zone, and general (non-precise) region.
  • Usage and analytics data: in-app events and feature usage, collected through Google Firebase Analytics, to understand how the app is used and improve it.
  • Diagnostics: crash and error information to help us fix problems.
  • Push notification token: a device token used to deliver notifications if you enable them.
  • Purchase information: your subscription status and transaction identifiers for in-app purchases, provided to us through Apple and RevenueCat. We do not receive your full payment card details — Apple processes payments.

We do not collect precise location, contacts, photos, or health data, and we do not use advertising identifiers (IDFA).

2. How we use your information

  • Provide, operate, and maintain the Service and your account
  • Save and sync your goals, garden, and progress across your devices
  • Power social features — showing your profile, garden, and activity to the people you connect with
  • Process in-app purchases and manage your Goal Grower PRO subscription (through Apple and RevenueCat)
  • Send notifications and, if you opt in, product and beta communications
  • Analyze usage and diagnostics to fix bugs and improve features
  • Keep the Service safe, prevent abuse, and enforce our Terms
  • Comply with legal obligations

3. How information is shared

We share information only in the following ways:

  • With other users: your username, display name, garden, and activity are visible to users you connect with (for example, friends, followers, and members of a shared garden). Please only share what you're comfortable with others seeing.
  • With service providers who process data on our behalf under their own privacy terms:
    • Google (Firebase): authentication, cloud database and hosting (Cloud Firestore), and analytics
    • Google Sign-In and Apple (Sign in with Apple): optional sign-in methods
    • Apple: App Store, TestFlight, and in-app purchase processing
    • RevenueCat: subscription and in-app purchase management
    • Expo: delivery of push notifications
    • UserJot: our feedback board
  • For legal reasons or safety: if required by law, or to protect the rights, safety, and security of our users, the public, or the Service.
  • Business transfer: if the Service is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information and we do not share it for advertising or cross-context behavioral tracking.

4. Legal bases for processing (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under these legal bases:

  • Performance of a contract — to provide the Service and your account
  • Legitimate interests — to secure, maintain, analyze, and improve the Service, where not overridden by your rights
  • Consent — for optional communications and, where required, notifications; you may withdraw consent at any time
  • Legal obligation — to comply with applicable law

5. Data retention

We keep your account and content for as long as your account is active. When you delete your account, we delete or de-identify your associated personal data within a reasonable period, except where we must retain certain information to comply with legal, tax, or security obligations. Backups are purged on a rolling schedule. Beta waitlist emails are kept until you unsubscribe or ask us to remove them.

6. Your choices and rights

Deleting your account. You can delete your account and associated data from the app's Settings screen. You may also request deletion at any time by emailing kameron@expymed.com.

Notifications. You can turn notifications on or off in the app or your device settings.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, email us at kameron@expymed.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

EEA / UK residents also have the right to lodge a complaint with your local data protection authority.

California and other U.S. state residents: we collect the categories of information described in Section 1 for the purposes in Section 2. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) or similar state laws. You may request to know, access, correct, or delete your personal information, and to appeal a decision, by contacting us at kameron@expymed.com.

7. International data transfers

We are based in the United States, and our providers may process and store information in the United States and other countries. Where required, we rely on appropriate safeguards (such as the Standard Contractual Clauses) for transfers of personal data out of the EEA or UK.

8. Security

We use reasonable technical and organizational measures — including encrypted connections and access controls through our providers — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children's privacy

Goal Grower is not directed to children under 13, and you must be at least 13 years old (or the higher minimum age required in your country — for example, 16 in some parts of the EEA/UK) to create an account. We do not knowingly collect personal information from children under these ages. If you believe a child has provided us personal information, contact us at kameron@expymed.com and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice in the app.

11. Contact us

Questions or requests about this Privacy Policy? Contact Kameron Meeker at kameron@expymed.com.