Privacy Policy
Effective date: July 26, 2026
Last updated: July 26, 2026
DamnGoal is a goal, habit, task, and AI companion for iOS and Android. DyvenTech LLP (“DamnGoal,” “we,” “us,” or “our”) operates the DamnGoal mobile application, website at https://damngoal.app, API, and related services (together, the “Service”).
This Privacy Policy explains what information we collect, why we use it, who receives it, how long we keep it, and the choices available to you.
1. Who controls your information
Data controller: DyvenTech LLP
Privacy contact: appsupport@dyven.tech
Service: DamnGoal
You may contact us at appsupport@dyven.tech about the processing of your personal data.
2. Information we collect
2.1 Account and profile information
We collect:
- Your email address
- Your username
- Your sign-in method, such as email, Google, or Apple
- Stable identifiers supplied by Google or Apple when you use third-party sign-in
- Your time zone, onboarding status, theme, haptics, and other app preferences
- Authentication records, one-time passcode records, access tokens, and refresh-token records
We use this information to create, secure, and maintain your account, display your username in Witness, and personalize the Service.
2.2 Goals, planning, and journal information
We collect information you create in the Service, including:
- Goal titles, descriptions, reasons, tags, and adjustments
- Habits, tasks, schedules, target times, and lighter alternatives
- Completions, partial completions, skipped actions, and focus sessions
- Energy check-ins, rest days, reflections, and goal health-check responses
- Progress history, insights, and monthly recaps
This content may reveal sensitive details about your health, beliefs, relationships, finances, work, or other parts of your life. You choose what to enter. Avoid including information that you do not want processed as part of the Service.
2.3 AI Companion information
When you use Companion chat or another AI-assisted feature, we process:
- Messages and instructions you send
- The response generated for you
- Context needed for your request, such as active goals, habits, tasks, completions, and energy level
- Conversation history associated with your account
We use this information only to provide, secure, and improve the requested AI feature as described in Section 6.
2.4 Witness and sharing information
Witness is optional. When you use it, we process:
- Your username
- Goals or summaries you choose to publish
- Reactions you send or receive
- Sharing status and moderation information
Goals and journal content are private by default. Other users see content only when you choose to publish it.
2.5 Subscription and purchase information
We process:
- Subscription tier and status
- Purchase and renewal history
- Trial, expiration, cancellation, and entitlement information
- Store and Adapty profile identifiers
- Internal account ID used to connect your subscription to your DamnGoal account
Apple or Google processes your payment credentials. We do not receive your complete payment-card number.
2.6 Notification information
If you enable notifications, we process:
- Notification preferences, quiet hours, and reminder settings
- Firebase Cloud Messaging registration and account-linked topic information
- Notification delivery and open events
- Internal notification identifiers
You can change notification settings in the app or your device settings.
2.7 Analytics, attribution, device, and technical information
Depending on your settings, consent, device, and region, we may collect:
- App version, operating system, platform, device type, and device model
- Device locale, country, language, and time zone
- IP address and network information
- Internal user ID and analytics installation or device ID
- Advertising ID, Identifier for Vendor, Android advertising ID, and tracking-permission status
- App-install source, campaign, referrer, and attribution data
- Screen views, feature interactions, subscription events, and fixed milestone events
- Error, warning, diagnostic, and security logs
- Sync timestamps, cursors, and device identifiers
Our product analytics events exclude the text of your goals, journal entries, and Companion messages. We use categories, counts, fixed event names, and internal identifiers. We configure our analytics tools to avoid recording text-entry fields.
2.8 Website and waitlist information
When you visit our website or join the waitlist, we may collect:
- Your email address
- The date and source of your signup
- IP address, browser type, device information, requested pages, and server logs
- Anti-abuse and bot-detection information processed by Cloudflare Turnstile
- Email delivery, bounce, unsubscribe, and engagement information
We use waitlist information to send the launch or product communications you requested. You can unsubscribe through the link in an email or by contacting us.
2.9 Support communications
We collect the messages and attachments you send to support, along with contact and account information needed to answer your request.
2.10 Local information on your device
The app keeps a local copy of your data for offline use. It stores authentication tokens in secure device storage. Signing out clears account-specific local data from that device. Deleting your account clears the account-specific local data and onboarding state from that device.
3. Where information comes from
We receive information:
- Directly from you
- From your device and your use of the Service
- From Google or Apple when you use their sign-in services
- From Apple App Store, Google Play, and Adapty for subscriptions
- From advertising and attribution partners when you install the app through a campaign
- From other users when they react to content you publish
4. Why we process information and our legal bases
For users in the EEA and other places that require a legal basis, we rely on the following:
| Purpose | Information | Legal basis |
|---|---|---|
| Create accounts, authenticate users, sync data, and provide goals, habits, tasks, insights, and history | Account, profile, planning, journal, device, and sync information | Performance of our contract with you |
| Provide Companion and other AI features when requested | Your prompt, relevant context, output, and conversation history | Performance of our contract; explicit consent where your content contains special-category data and consent is required |
| Publish content through Witness | Username, selected goal content, and reactions | Your consent and your instruction to publish |
| Manage subscriptions and entitlements | Account ID, device/profile identifiers, purchase history, and subscription status | Performance of our contract; compliance with tax, accounting, and consumer-protection law |
| Send optional push notifications | Notification preferences, device registration, and engagement | Your consent and your request for the feature |
| Send waitlist or promotional email | Email address and email engagement information | Your consent |
| Measure product use through optional analytics | Device, account, and usage information | Consent where required; otherwise our legitimate interest in understanding and improving the Service |
| Attribute installs and measure campaigns | Device, advertising, account, campaign, and milestone information | Consent where required; otherwise our legitimate interest in measuring our marketing |
| Prevent abuse and protect the Service | Authentication, device, network, technical, and security logs | Our legitimate interests in security, fraud prevention, and service integrity; compliance with law |
| Respond to support and privacy requests | Contact, account, and communication information | Performance of our contract, compliance with law, and our legitimate interest in supporting users |
| Establish or defend legal claims and meet legal obligations | Relevant account, transaction, security, and communication records | Compliance with law and our legitimate interests in protecting our legal rights |
Our legitimate interests include securing the Service, preventing fraud, diagnosing failures, understanding product performance, and improving features. We balance those interests against your privacy rights and use less identifying information where practical.
You may withdraw consent at any time. Withdrawal does not affect processing completed before withdrawal.
5. Analytics and attribution choices
We use PostHog for product analytics and logs. After sign-in, PostHog may receive your internal DamnGoal user ID, email address, app version, device information, and product-usage events. Before sign-in, it may use an installation identifier.
We use Tenjin for install attribution and campaign measurement. Tenjin may receive IP address, device information, advertising or vendor identifiers, app and operating-system information, campaign or referrer information, selected fixed milestone events, and our internal user ID.
Where law requires consent, we ask before enabling optional analytics or attribution. On iOS, we also use Apple’s App Tracking Transparency prompt before accessing the advertising identifier. Denying Apple tracking permission prevents access to the advertising identifier but may not stop privacy-preserving or non-advertising measurement that applicable law permits.
You can change analytics and attribution choices in the app’s privacy settings. You may also contact appsupport@dyven.tech.
6. AI Companion
When you ask Companion for help, our backend sends your request and the context needed to answer it to Google Cloud Vertex AI, using Gemini in the United States, currently in the us-central1 region.
Google Cloud does not use our customer data to train or fine-tune its AI models without our permission or instruction. Google may temporarily process or log prompts for security and abuse monitoring as described in its service terms. We disable request and response logging in our application configuration.
DamnGoal stores Companion messages and responses in your account so you can view conversation history and sync it across devices. We do not use your goal or Companion content to train a general-purpose model.
Companion provides suggestions, not professional advice. It does not make decisions that produce legal or similarly significant effects about you.
7. How we disclose information
We disclose information only as described below.
7.1 Service providers
| Provider | Purpose | Information involved |
|---|---|---|
| Cloudflare | API, website, edge security, and bot protection | IP address, request and device information, API traffic |
| CockroachDB / PostgreSQL-compatible database provider | Production data storage | Account and Service content |
| Google Cloud Vertex AI | AI inference | Companion request, relevant context, and generated response |
| Google Firebase Cloud Messaging | Push-notification delivery | Device registration, topic, notification payload, and engagement information |
| Brevo | Transactional and consented email | Email address, message, delivery, and engagement information |
| PostHog | Product analytics and warning/error logs | Account ID, email, device, usage, and diagnostic information |
| Adapty | Subscription, entitlement, and paywall management | Account ID, device/profile identifiers, subscription status, and purchase history |
| Tenjin | Install attribution and campaign measurement | Account ID, IP address, device and advertising identifiers, app information, campaign data, and fixed events |
| Google Sign-In | Email address and Google account identifier | |
| Apple | Sign in with Apple and app distribution | Email or relay address, Apple account identifier, subscription and transaction information |
| Google Play | App distribution and subscriptions | Account, subscription, and transaction information governed by Google’s policies |
These providers may process information only to provide contracted services to us, subject to applicable agreements and legal safeguards.
7.2 Other users
Other signed-in users may see your username, public goal summary, and reactions when you enable Witness and publish a goal. Making a goal private removes it from public display.
7.3 Legal, safety, and business transfers
We may disclose information when law requires it, to protect people or the Service, to investigate abuse, or to establish or defend legal claims.
If DamnGoal is involved in a merger, financing, acquisition, reorganization, or sale of assets, information may transfer as part of that transaction. We will give notice where law requires it.
8. Sale, targeted advertising, and profiling
We do not sell personal information for money.
We use Tenjin and configured advertising partners to attribute app installs and measure campaign performance. Some US privacy laws may define certain advertising-related transfers as “sharing,” “targeted advertising,” or a “sale” even when no money changes hands. Where those laws apply, you may opt out through the app’s privacy settings or by emailing appsupport@dyven.tech.
We do not use personal information to make decisions that produce legal or similarly significant effects about you. We do not offer financial incentives in exchange for personal information.
9. International transfers
DyvenTech LLP is established in India. Our providers process information in India, the United States, the European Union, and other countries.
When we transfer EEA personal data to a country that the European Commission has not recognized as providing adequate protection, we use an approved transfer mechanism, such as the European Commission’s Standard Contractual Clauses, and supplementary safeguards where appropriate. We use the UK International Data Transfer Addendum or another approved mechanism for restricted transfers from the United Kingdom.
You may contact us for more information about the safeguards that apply to your information.
10. How long we keep information
We keep information only as long as needed for the purposes described in this policy.
| Category | Standard retention |
|---|---|
| Account, profile, goals, habits, tasks, journal, insights, and Companion history | While your account remains active; deleted when you delete the relevant content or account, subject to backup rotation as described below |
| Public Witness content | Until you make it private, delete it, or delete your account; cached copies may take a short time to disappear |
| Subscription and transaction records | For the subscription lifecycle and any longer period required by tax, accounting, consumer-protection, or fraud-prevention law |
| PostHog analytics | Up to 30 days |
| Tenjin attribution records | Up to 6 months |
| Notification delivery and engagement logs | Up to 90 days |
| Authentication and security logs | Up to 30 days, unless needed to investigate abuse or defend a legal claim |
| Waitlist information | Until you unsubscribe or 12 months after the relevant launch communication, whichever comes first |
| Support communications | Up to 24 months after the request closes, unless a longer period is needed for a dispute or legal obligation |
| Deleted production data in backups | Removed as backups rotate |
When retention ends, we delete information or irreversibly anonymize it. Anonymous aggregate statistics that cannot identify you may be retained.
11. Account and data deletion
You can delete your account from Profile → Account → Delete account. We send a confirmation code to your registered email before completing the request.
You can also request deletion by emailing appsupport@dyven.tech from the address associated with your account.
For step-by-step instructions and a full breakdown of what is deleted and what we keep, see Delete your account.
Account deletion:
- Removes your account and authentication identities
- Deletes or irreversibly anonymizes your goals, habits, tasks, journal data, Companion history, and associated Service content
- Removes public Witness content
- Revokes active sessions
- Sends deletion instructions to relevant service providers
Limited records may remain when law requires retention or when needed for security, fraud prevention, disputes, or legal claims. We state the category and retention reason when responding to your request. Backup copies expire within the period stated in Section 10.
Deleting DamnGoal does not automatically cancel an Apple App Store or Google Play subscription. You must cancel the subscription through your store account.
12. Your privacy rights
Your rights depend on where you live. Subject to applicable exceptions, you may:
- Ask for access to personal information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete information
- Receive a portable copy of information you provided
- Restrict or object to certain processing
- Withdraw consent
- Opt out of targeted advertising, sale, sharing, or certain profiling where applicable
- Appeal our refusal of a privacy request where applicable
- Receive equal service and pricing after exercising your rights
Send requests to appsupport@dyven.tech. We may verify your identity before acting. You may use an authorized agent where law permits it. We will respond within the period required by applicable law.
EEA rights
If you are in the EEA, you may object to processing based on legitimate interests and lodge a complaint with your local data-protection authority. A list of EEA authorities is available through the European Data Protection Board.
United Kingdom rights
If you are in the United Kingdom, you may complain to the Information Commissioner’s Office.
United States state privacy rights
Residents of US states with comprehensive privacy laws may have additional rights when the relevant law applies to us.
For the preceding 12 months, the categories we may have collected are identifiers; customer records; commercial and subscription information; internet or electronic activity; geolocation inferred from IP address; device information; user content; inferences; and sensitive information voluntarily included in goals, journal entries, or Companion messages. We collect these categories from the sources listed in Section 3 for the purposes listed in Section 4 and disclose them to the recipients listed in Section 7.
California residents may also request the categories of sources, business purposes, and recipients associated with their information. We do not discriminate against anyone for exercising a privacy right.
To appeal a decision, reply to our decision email with the subject “Privacy appeal.”
13. Marketing and communications
We send one-time passcodes, security notices, receipts, and other messages needed to provide the Service.
We send waitlist, launch, or promotional email only when you request it or otherwise consent. You can unsubscribe through the email or contact us. Unsubscribing from promotional email does not stop necessary account and security messages.
14. Security
We use safeguards appropriate to the nature of the information we process, including:
- HTTPS/TLS encryption in transit
- Restricted production access
- Secure device storage for authentication tokens
- Hashed one-time passcodes and server-side refresh tokens
- Short-lived access tokens and revocable sessions
- Monitoring, logging, and incident-response procedures
No service can guarantee perfect security. Protect your email account and device, and contact us if you suspect unauthorized access.
15. Children
DamnGoal is not directed to children under 13 in the United States, under 16 in the EEA, or under the higher minimum age required by local law. We do not knowingly collect personal information from a child who cannot lawfully consent unless a parent or guardian provides any consent required by law.
If you believe a child provided information without valid permission, email appsupport@dyven.tech. We will investigate and delete the information where required.
16. Changes to this policy
We may update this policy as the Service, our providers, or the law changes. We will post the revised policy at https://damngoal.app/privacy/ and change the “Last updated” date.
We will provide additional notice through the app or by email before a material change takes effect when law requires it. If a change requires consent, we will ask for consent.
17. Contact and complaints
For questions, requests, or complaints:
DyvenTech LLP — DamnGoal
appsupport@dyven.tech
We will acknowledge privacy complaints and respond within the period required by applicable law. EEA users may also complain to their local supervisory authority.