Privacy Policy
Last updated: May 21, 2026
Prefer the short version? Read Privacy in plain English. This page is the full, formal policy.
1. Who we are
Goose is operated by GooseApp LLC, a Maryland limited liability company ("GooseApp," "we," "us," or "our"). We are the controller of the personal information described here. This policy covers the Goose mobile apps and the website at gooseapp.ai (the "Service"). You can reach us at hello@gooseapp.ai.
2. The short of it
Goose is built to know as little about you as possible while still being useful. We use first names only, we never keep the raw messages you share (we read them, take short notes, and delete them within 24 hours), we don't sell your data, and we don't use your content to train AI models. You can delete everything in one tap.
3. Information we collect
- Account information. Your email address (for sign-in), the fact that you confirmed you are 18 or older, and sign-in identifiers if you use Apple or Google sign-in.
- Relationship context you give us. What you tell Goose during onboarding and over time — first names, how long you've been together, relationship type, goals, and preferences. First names only.
- Your conversations with Goose. The messages you send Goose and its replies.
- Content you choose to share for analysis. Forwarded conversations, screenshots, or typed updates you send Goose to read. This raw content is processed transiently and deleted on a short schedule (within 24 hours) — see "Read-and-discard" below.
- The dossier. Short, de-identified notes Goose keeps so it can be useful over time. These are first-name-only and contain no long verbatim quotes from your messages.
- Calendar data (only if you connect it). If you connect Apple Calendar or Google Calendar, we read event details to surface relevant dates and reminders. We use read-only access by default.
- Payment information. Handled by our payment processor, Stripe. Stripe collects your card details directly; we receive only customer/subscription identifiers and status — never your full card number.
- Device and technical data. Device push tokens (so we can send notifications), app version, and limited diagnostic information.
- Website analytics. On gooseapp.ai we use privacy-friendly, aggregate analytics. We do not use cross-site advertising trackers.
4. What we deliberately do NOT collect
By design, Goose's data model rejects sensitive identifiers. We do not collect last names, home or work addresses, phone numbers contained in messages, precise location, financial-account numbers, government IDs, health information, sexual content, or the names of children, friends, or in-laws. We also do not collect content about your partner that your partner has not opted in to share.
5. How we use your information
- to provide and personalize the Service — generate Goose's responses, keep useful notes, and send reminders;
- to process your subscription and payments (through Stripe);
- for safety — Goose screens messages for signs of crisis (such as self-harm or domestic violence) so it can step back and surface appropriate hotlines;
- to operate, secure, debug, and improve the Service;
- to communicate with you about your account; and
- to comply with the law and enforce our Terms.
We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use your content to train AI models.
6. Read-and-discard
When you share a conversation, screenshot, or update for Goose to analyze, the raw text is run through a privacy scrubber, used to generate Goose's response and short notes, and then deleted within 24 hours. We keep only the short, de-identified notes — not the raw messages. This is the core of how Goose works: it remembers the substance, not the transcript.
7. AI processing
Goose's intelligence is powered by Anthropic, PBC. To generate responses, classify messages for safety, and read shared screenshots, the relevant (scrubbed) content is sent to Anthropic's API under a zero-data-retention agreement: Anthropic does not retain that content after processing your request and does not use it to train its models.
8. How we share information (service providers)
We share personal information only with service providers that process it on our behalf under contract, and only as needed to run the Service:
- Anthropic, PBC — AI processing (under zero data retention), as described above.
- Supabase — database, authentication, and file-storage hosting (United States).
- Stripe — payment processing. Stripe handles your card data directly.
- Sentry — error monitoring and diagnostics, configured to strip message content before it is sent.
- Vercel — hosting for gooseapp.ai and aggregate website analytics.
- Resend — sending transactional email (such as sign-in links and account notices).
- Expo — delivering push notifications (routed through Apple Push Notification service and Google Firebase Cloud Messaging).
- Apple and Google — app distribution (App Store, Google Play) and, if you connect a calendar, your calendar provider.
We may also disclose information if required by law, to protect the safety or rights of you or others, or in connection with a merger, acquisition, or sale of assets (in which case we will continue to protect your information consistent with this policy).
9. Data retention
- Raw content you share for analysis is deleted within 24 hours.
- Account data, your conversations with Goose, and your dossier are kept while your account is active.
- When you delete your account (one tap in Settings), your data is hard-deleted within 30 days, including from backups.
- We may retain limited records (such as payment and tax records) for as long as the law requires.
10. Security
We use technical and organizational measures designed to protect your information, including encryption in transit, US-based hosting, access controls, and a data model that minimizes what we hold in the first place. No method of transmission or storage is 100% secure, so we can't guarantee absolute security.
11. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to withdraw consent, and to opt out of certain processing. You can edit much of your information and delete your account directly in Settings, or email us at hello@gooseapp.ai to make a request. We will not discriminate against you for exercising these rights, and we will verify requests before acting on them.
12. California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information and we do not share it for cross-context behavioral advertising. In the past 12 months we have collected the categories described in "Information we collect" (identifiers such as email; your relationship context; commercial information such as subscription status; and internet/device activity), sourced from you and your device, and used them for the purposes in "How we use your information." You may use an authorized agent to make a request. To exercise any right, contact hello@gooseapp.ai.
13. European and UK privacy rights (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, GooseApp LLC is the controller of your personal information. Our legal bases for processing are: performance of our contract with you (providing the Service), our legitimate interests (operating, securing, and improving the Service, and keeping users safe), your consent (for example, connecting your calendar — which you can withdraw), and compliance with legal obligations. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data protection authority. To exercise your rights, contact hello@gooseapp.ai.
14. International data transfers
We operate in the United States and our service providers are primarily US-based, so your information will be processed in the United States. Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
15. Children
Goose is for adults. The Service is intended only for people 18 and older, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has used Goose, contact us at hello@gooseapp.ai and we will delete the information.
16. Changes to this policy
We may update this policy. If we make material changes, we will update the "Last updated" date and take reasonable steps to notify you. We will review this policy at least every 12 months.
17. Contact us
Questions or requests about your privacy? Email hello@gooseapp.ai. Goose is operated by GooseApp LLC, a Maryland limited liability company. See also our Terms of Service.