Golander Privacy Policy
Effective Date: January 6, 2026
Last Updated: October 13, 2026
Golander ("we," "us," or "our") is a training and habit-tracking app designed to help you follow a training plan and build the routines that support it. We take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using Golander, you agree to the practices described in this policy. If you don't agree, please don't use our app.
1. Data We Collect
We collect only the information necessary to provide and improve Golander. Here's what we gather:
Information You Provide
| Data Type | Purpose | Required? |
|---|---|---|
| Name | Personalize your experience and display in-app | Yes |
| Email address | Account creation, login, and important notifications | Yes |
| Password | Account security (stored as a secure hash, never in plain text) | Yes |
| Profile photo | Personalize your profile | No |
| Habit logs | Track your progress and calculate streaks | Yes (to use core features) |
| Notes | Personal reflections you add to goals | No |
| Workout and training data | Your training plan, the workouts you record or log, their results (time, distance, pace, splits, sets, effort ratings) and benchmark scores, used to track progress and adapt your plan | Yes (to use training features) |
| Body metrics | Weight, height, birth year and gender, if you enter them, used to tailor training load, pace guidance and fitness scoring | No |
| Photos and posts | Images and captions you choose to attach when you share a workout | No |
Location Data
Golander collects your precise location only while you are recording a workout that uses GPS, such as an outdoor run or walk. If you grant background location access, recording continues while your screen is off or the app is in the background, and stops when the workout ends. We do not collect your location at any other time.
- What we use it for: measuring distance, pace and splits, and drawing the route of that workout
- What is stored: the route is saved with the workout on our servers so you can see it later
- Who can see it: only you, unless you choose to share that workout in a post. You can hide the map on a post you share
- Your choice: location access is requested when you first start a GPS workout. You can decline it or turn it off at any time in your device settings and still log workouts without a route
Information from Shared Features
If you choose to invite friends or share progress:
- Names and emails of people you invite (used only to send invitations)
- Shared goal progress (visible only to people you explicitly invite)
Information Collected Automatically
| Data Type | Purpose |
|---|---|
| Device type and OS version | Ensure app compatibility |
| App version | Debugging and support |
| General usage patterns | Understand which features are helpful |
| Crash reports | Fix bugs and improve stability |
We do NOT collect: your location outside a workout you are recording, contacts (beyond invitations you initiate), health data from other apps, or browsing history.
2. How We Use Your Data
We use your information to:
- Provide the service — Store your habits, track completions, calculate streaks
- Personalize your experience — Greet you by name, remember your preferences
- Send essential communications — Password resets, security alerts, major policy changes
- Improve the app — Analyze aggregate usage patterns to make Golander better
- Provide support — Help you when something goes wrong
What We Don't Do
- We don't sell your data. Ever. To anyone.
- We don't use your data for advertising. No ad networks, no behavioral targeting.
- We don't share your habit data with employers, insurers, or data brokers.
- We don't train AI models on your personal data.
3. Sharing and Visibility
Your Data Is Private by Default
When you create a habit or goal, only you can see it. Period.
Opt-In Sharing Only
You can choose to share specific goals with friends or family by inviting them. When you do:
- They see only the goals you explicitly share
- They can see your completion status for those goals
- They cannot see your private goals, notes, or other account details
- You can revoke access at any time
Third-Party Services We Use
| Service | Purpose | Data Shared |
|---|---|---|
| Railway | Hosting for our servers and database | All account, training and habit data |
| Supabase | Profile photo storage | Profile photos |
| Cloudflare R2 | Storage for images you upload | Images you attach to posts |
| Sentry | Server error reporting | Technical error details; emails, passwords and login tokens are removed before sending |
| Resend | Sending account emails | Email address and the email content (for example a password reset link) |
| Expo and Firebase Cloud Messaging | Push notifications, if you turn them on | Device tokens and the notification text |
| Apple and Google | Sign-in, if you choose to sign in with them | A sign-in token that confirms your identity |
When We May Disclose Data
We may share your information only if:
- You ask us to (e.g., exporting your data)
- Required by law (valid subpoena, court order, or legal process)
- Necessary to protect safety (imminent harm to you or others)
- Part of a business transfer (merger or acquisition — you'd be notified first)
4. Your Rights & Choices
You have control over your data. Here's what you can do:
| Right | How to Exercise It |
|---|---|
| Access your data | View your profile, habits, and history in the app |
| Export your data | Request a copy via Settings → Privacy → Export My Data |
| Delete your data | Request deletion via Settings → Privacy → Delete My Account |
| Correct your data | Edit your profile and habits directly in the app |
| Withdraw consent | Disable optional features or delete your account |
California Residents (CCPA/CPRA)
If you're a California resident, you have additional rights:
- Right to Know: Request details about data we've collected in the past 12 months
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out of Sale: We don't sell your data, so this doesn't apply
- Right to Non-Discrimination: We won't treat you differently for exercising your rights
- Right to Correct: Request correction of inaccurate personal information
To exercise these rights, email us at privacy@golander.app or use the in-app privacy settings. We'll respond within 45 days.
Analytics
Golander does not currently send usage data to any third-party analytics or advertising service. The usage information described above comes from our own servers.
The app has a usage analytics setting, and it is yours to control:
- Open Golander and go to Settings
- Scroll to Privacy
- Toggle off Usage Analytics
If we add an analytics service in the future, we will update this policy first and that setting will apply to it.
5. Data Security
We protect your data using industry-standard practices:
- Encryption in transit: All data sent between your device and our servers uses TLS 1.3
- Encryption at rest: Your data is encrypted on our servers
- Password hashing: We never store your password in plain text (we use bcrypt)
- Access controls: Only authorized team members can access user data
- Regular security reviews: We periodically audit our systems for vulnerabilities
Your Role: Keep your password secure. Don't share your account credentials. If you think your account has been compromised, contact us immediately at security@golander.app.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Active account data | As long as your account exists |
| Deleted account data | Removed within 30 days of deletion request |
| Analytics data | Anonymized and aggregated; kept indefinitely |
| Backup copies | Deleted within 90 days of account deletion |
7. Children's Privacy
Golander is not intended for users under 16 years of age.
We do not knowingly collect personal information from children under 16. If we learn that we've collected personal information from a child under 16 without parental consent, we will delete that information promptly.
8. Data Storage Location
Your data is stored on servers located in the United States. If you're accessing Golander from outside the U.S., your information will be transferred to and processed in the U.S.
9. Policy Updates
We may update this Privacy Policy from time to time. When we do:
- Minor changes: We'll update the "Last Updated" date at the top
- Material changes: We'll notify you via email or in-app notification before changes take effect
10. Contact Us
Questions about this Privacy Policy? We're here to help.
Golander
Newark, NJ, United States
Email: privacy@golander.app
For security issues: security@golander.app
Response time: Within 5 business days
Summary (TL;DR)
- We collect only what we need to run Golander
- Your habits are private by default
- We never sell your data
- You can view, export, or delete your data anytime
- We record your location only during a GPS workout you start
- No usage data goes to third-party analytics or advertising services
- You can turn usage analytics off in Settings → Privacy
- We use strong encryption and security practices
- You must be 16+ to use Golander
- Questions? Email privacy@golander.app