TrioGoals Privacy Policy

To provide the Service:

• Create your account, sign you in, and verify your email address
• Send partner invitations and, after a partner accepts, goal completion emails
• Apply your plan's limits and keep your plan the same on every device you sign in to
• Schedule reminders and motivational quotes on your device
• Read and reply to your feedback and support requests

To keep the Service safe and working:

• Prevent spam and abuse. For example, an account can send up to 20 goal completion emails per hour, invitation, verification, and feedback emails have lower hourly limits, and a partner must accept an invitation before receiving any goal emails.
• Find and fix crashes and errors

To communicate with you:

• Service emails, such as email verification and replies to your feedback
• Important notices about the Service or changes to this policy
• The app does not send marketing emails. Our website newsletter is separate and you must sign up for it (see Section 14).

We don't use your information for advertising or profiling, and we don't use it to train AI.

• Contract: to provide your account, send the partner emails you ask us to send, and apply your plan
• Consent: for notifications (which you control through your device's permission), for partners receiving goal emails (given when they accept your invitation), and for the website newsletter. You can withdraw consent at any time.
• Legitimate interests: for security, preventing abuse, crash reporting, and fixing problems
• Legal obligations: to comply with tax, accounting, and other legal requirements

When you add a partner, you give us their name and email address. Please add only people who have agreed to it.

• Invitation: the partner receives an email from TrioGoals with your name, a link to accept (valid for 24 hours), and a link to opt out
• Goal completion emails: only after a partner accepts, they receive an email each time you complete a goal. It shows your name, the goal's title and description, and the completion date. Replies go to your account email address, so partners can see it.
• Opting out: every email includes a link to stop emails from you. If a partner opts out, they get no more goal emails from you unless they opt back in, and you can't invite them again for 180 days. If an email address bounces or marks our email as spam, we stop sending any TrioGoals email to that address.
• If you are a partner: we use your name and email address only to send the emails described here. To remove your information, use the opt-out link, ask the person who added you to remove you, or email us at support@triogoals.com.

With your accountability partners: as described in Section 4.

With service providers that process data for us:

• Google Firebase (Google LLC): sign-in (Firebase Authentication, including Google Sign-In), our database (Cloud Firestore), our server functions, and crash reporting (Crashlytics). If we turn it on, Firebase App Check also confirms that requests come from the genuine app. The app also contains Firebase Cloud Messaging, which on Android may register your device with Google's push service using a random identifier; we don't receive or use that registration.
• Twilio SendGrid: sends our emails and tells us about bounces and opt-outs
• RevenueCat: manages subscriptions. It identifies you by your random account ID, not your name or email.
• Apple and Google: Sign in with Apple, Google Sign-In, app distribution, in-app purchases, and billing
• AWeber: our website newsletter sign-ups only (see Section 14)
• Our website host: serves triogoals.com, including pages that some email links open

For legal and safety reasons:

• To comply with the law, such as court orders, subpoenas, or regulators' requests
• To prevent fraud and respond to security incidents
• To enforce our Terms and investigate abuse

Business transfers: if Mathiko LLC or TrioGoals is involved in a merger, acquisition, or sale of assets, your information may pass to the new owner, who must continue to protect it as this policy describes. We will tell you before your information becomes subject to a different privacy policy.

Plans:

• Free, Premium Monthly, and Premium Yearly
• Premium gives you unlimited active goals, more accountability partners (10 on Monthly and 15 on Yearly, compared with 3 on Free), and more partner emails (200 or 500 per 30 days, compared with 20 on Free)

Payment processing:

• You buy subscriptions through the Apple App Store or Google Play, which handle your payment details. We never receive your card number.
• RevenueCat tells our servers your plan and its status, so your plan applies on every device you sign in to
• Purchases on the web or a desktop computer are not currently available. If we offer them, RevenueCat's web checkout will handle them, with Stripe processing the payment, and Stripe will receive your payment details directly.

Notifications are optional. If you allow them, the app schedules goal reminders and motivational quotes with your device's own notification system. Their content is not sent to our servers or to anyone else. We do not send push notifications from our servers.

On iPhone and iPad, goal reminders are marked Time Sensitive so they can come through during Focus and Notification Summary. You can turn this off in iOS Settings. Turning notifications off doesn't affect the rest of the app.

Account and server data:

• We keep your account, partners, email counts, and subscription status while your account exists. When you remove a partner, we delete that partner's record right away.
• When you delete your account (Profile → Delete Account), we immediately delete your account and its server records, including the invitation, unsubscribe, and opt-out records linked to it. Our providers may keep leftover copies in their backups for a limited time before they are overwritten.

Data on your device:

• Your goals and other on-device data stay until you delete them, delete your account (we clear them from the device you delete it on), or uninstall the app
• Signing out leaves your goals on the device, linked to your account, so they're there when you sign back in. Other accounts signed in on the same device can't see them.
• If you used TrioGoals on other devices, uninstall the app there to remove those copies

Other retention periods:

• Partner invitation links and email verification links: expire after 24 hours
• Unsubscribe links: valid for up to 180 days, and each new email keeps its link working for at least another 30 days
• Opt-out records: kept as long as needed to honor them. Records that an address bounced or reported spam are kept so we never email that address again.
• Abuse-prevention counters tied to an IP address: deleted automatically, usually within a few hours
• Server logs: about 30 days
• Crash reports: 90 days (Firebase Crashlytics)
• Feedback and support emails: up to 3 years
• SendGrid keeps email delivery records for a limited time. Apple, Google, and RevenueCat keep purchase records under their own policies and as tax law requires.

Important: No method of transmission or storage is 100% secure, and we can't guarantee absolute security. If a security breach affects your personal information, we will notify you as the law requires.

Everyone:

• Access and copy: your goals are visible in the app. To get a copy of the information on our servers, email us.
• Correct: change your name in Profile, and edit goals and partners in the app. Email us to correct anything else.
• Delete: delete your account in Profile → Delete Account, or email us
• Control: turn reminders and quotes on or off for each goal and in Quote Settings, and manage notification permission in your device settings

To protect your account, we may ask you to confirm your request from the email address on your account. We don't treat you differently for using your privacy rights.

California residents (CCPA/CPRA):

• You have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We don't sell or share personal information.
• In the past 12 months we collected these categories: identifiers (name, email address, account ID, IP address); commercial information (your subscription plan and status); internet or other electronic activity (crash reports and server logs); and sensitive personal information (your account login), which we use only to sign you in
• We collected them from you, your device, people who add you as a partner, and Apple, Google, and RevenueCat. We disclose them for business purposes only to the service providers listed in Section 5.
• You may use an authorized agent. We may ask the agent for proof of authorization and ask you to confirm your identity. We respond within 45 days.

Other US states: residents of states with privacy laws (including Colorado, Connecticut, Virginia, Texas, Oregon, and others) have similar rights to access, correct, delete, and get a copy of their personal data, and to opt out of targeted advertising, sale, and profiling. We don't do any of those. If we deny your request, you can appeal by replying to our decision or emailing support@triogoals.com with "Privacy appeal" in the subject line. We will respond within the time your state's law requires and tell you how to contact your state attorney general if you're not satisfied.

EU/EEA and UK residents (GDPR): you have the right to access, correct, erase, restrict, and port your personal data, to object to our processing, and to withdraw consent. You can also complain to your local data protection authority.

Browser signals: neither the app nor triogoals.com sells or shares personal information or tracks you across websites. We treat a Global Privacy Control signal as a valid request to opt out.

• TrioGoals is not for children under 13 (under 16 in the EU/EEA/UK), and they may not create an account
• Users aged 13 to 17 should use TrioGoals only with a parent's or guardian's permission
• We don't knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly. Parents can contact us at support@triogoals.com.

Mathiko LLC is based in the United States, and our servers are in the United States (Google Cloud). If you use TrioGoals from another country, your information is transferred to and processed in the United States. For information from the EU/EEA, UK, or Switzerland, we rely on our providers' data processing terms, which include the European Commission's Standard Contractual Clauses (and the UK addendum) or the EU-U.S. Data Privacy Framework where the provider is certified.

We do not use your personal data to train AI or machine learning models. Your goals never reach our servers. The information we do hold is used only to run the Service. We don't make automated decisions about you that have legal or similarly significant effects.

The app chooses motivational quotes with a fixed rotation (not machine learning) so quotes don't repeat. This is not profiling under the GDPR or the EU AI Act.

• triogoals.com does not use analytics, advertising cookies, or tracking tools
• Newsletter: if you sign up with the form on our website, AWeber collects your email address (and your name, if you enter it) so we can send you our newsletter. AWeber may use its own cookies for the form, under its own privacy policy. Every newsletter includes an unsubscribe link, and we keep your details until you unsubscribe.
• Our website host records standard request details, such as IP address and browser type, for security and to keep the site running
• Mathiko's other websites (mathiko.com and learn.mathiko.com) have their own privacy policy at mathiko.com/privacy.html. That policy does not apply to TrioGoals.

For users in the European Union:

• Point of contact: support@triogoals.com (in English) for all DSA questions, including about content moderation decisions
• Reporting illegal content: TrioGoals has no public content. The only content that reaches other people is partner emails. If you receive a partner email you believe is illegal or abusive, report it to support@triogoals.com. We will review it promptly and may suspend accounts that misuse partner emails.
• No recommendation systems or ads: we don't rank or promote user content, and we don't show advertising. You control the order of your goals.

We may update this policy as the app changes or as the law requires. When we do, we'll post the new version here with a new "Last updated" date. For material changes, we'll email you at the address on your account at least 30 days before they take effect for existing accounts, unless the change is required by law or only gives you more privacy.

If you don't agree with a change, you can delete your account before it takes effect.