Privacy Policy

1. Information We Collect

• Account details: first name, last name, email, phone (optional).
• Usage data: tasks you create, completed timer sessions, gold earned, buildings purchased, and city layout.
• Device notification ID: Firebase Cloud Messaging token for timer and completion notifications.

2. How We Use Your Information

• To create your account and let you sign in.
• To sync your progress across devices.
• To send notifications when a timer ends or a reminder is due.
• To keep your account secure (email verification, password reset).

3. Sharing

We do not sell your personal data to third parties. We only share data with:

• Firebase (Google) — notification infrastructure.
• Our email provider — for verification and password-reset codes.

4. Storage & Security

• Passwords are stored hashed with bcrypt; never in plain text.
• Data is transmitted over encrypted (HTTPS) connections.
• Access is limited to authorized personnel only.

5. Cookies & Tracking

The app does not use browser cookies. There is no third-party analytics tracking.

6. Your Rights

• You may request access to your data and ask for it to be deleted.
• You can wipe all history via "Reset Progress" in the app.
• You can permanently delete your account via "Delete Account".

7. Children

GoalTown is not intended for users under the age of 13. If we become aware that a user is under 13, we will close the account.

8. Changes

We will notify you in-app whenever this policy is updated.

9. Contact

For any questions: help@goaltown.app