I Say So — Privacy Policy

Hello Good Day LLC ("we", "us", "our") operates the I Say So mobile application (the "App"). This Privacy Policy explains what information we collect, why we collect it, who we share it with, and your rights.

We built I Say So to be a safe, private space for affirmation practice, journaling, and self-reflection. The contents of your journal, your voice recordings, and your personal intentions are sensitive — we treat them that way.

At a glance

• We do not sell your data. Ever.
• We do not run ads. No third-party ad networks, no data brokers.
• We do not track you across other apps or websites. No cross-app tracking, no advertising identifiers. The App does generate one random identifier stored on your device so we can count daily active installations; it is not the IDFA/IDFV, is not linked to your account, and is deleted with the App (see §1.2).
• Your journal, your voice recordings, and your photo collections are yours. You can export or delete them at any time.
• We use four main vendors to run the App: Supabase (database + authentication), OpenAI (AI-generated content features), Apple (app distribution, in-app purchases, Sign in with Apple), and Proceeds — our own developer dashboard, which receives sale notifications and a daily count of active installations.

1. Information We Collect

1.1 Information you create or provide

When you use the App, you may create:

• Account information — email address, optional display name, avatar image (if you upload one), password (stored as a salted hash by Supabase; we never see your plain-text password)
• Authentication data — if you use Sign in with Apple, we receive an anonymized Apple user ID and (on first sign-in, if you allow it) your name; we do not receive your Apple ID password
• Journal entries — gratitude entries, scripting, shadow work, mental diet logs, freeform notes, and any other text you write in the App
• Custom affirmations — any affirmations you create, edit, or save
• Voice recordings — audio you record within the App is stored on your device. Before a recording is saved, the App may automatically process it on-device — trimming silence from the start and end, and evening out volume — to improve playback quality. This processing happens entirely on your device and does not transmit your voice anywhere. If you explicitly turn on "Back Up My Recordings," the App also stores the audio and its basic metadata (title, duration, creation date, order, and any linked affirmation) in your private, access-controlled Supabase cloud space so it can be restored after reinstalling or moving to a new device. Cloud backup is not available for anonymous sessions because those accounts cannot be recovered. You can turn backup off at any time; existing private backups are retained until you delete the recording or your account.
• Exporting or sharing a recording or card — you can export a voice recording, or share a designed affirmation card together with your voice as an image, audio file, or short video. These files are generated on your device and handed to Apple's built-in share sheet, which sends them only to the destination you choose (e.g. Messages, AirDrop, another app). We do not see, store, or process what you share this way.
• Goals and intentions — titles, descriptions, categories, status
• Synchronicities ("signs") — descriptions you log
• Self-concept assessments — scores on reflective questions
• Belief ladders — progressive affirmation chains you create
• Practice session history — which guided techniques you completed, how long, optional notes
• Daily check-ins — mood scores, practices completed
• Preferences — chosen theme, framework preference (Law of Attraction / Law of Assumption / Both), audience preferences, reminder times, starting technique, notification settings, card style choices
• Feedback — anything you submit via the in-app Feedback form
• Photos (vision boards & card backgrounds) — photos you add from your photo library. These are always stored on your device. By default, they are also backed up to your private, access-controlled cloud storage (hosted by our processor, Supabase) so they survive reinstalling the app or moving to a new device. Only you can access your backed-up photos — they are isolated to your account and never shared, never made public, and never used for advertising or model training. You can turn this backup off at any time in Profile → "Back Up My Photos," in which case your photos stay on your device only and nothing is uploaded.
• Apple Watch companion app — if you use the I Say So Apple Watch app, it reads a small set of data (your affirmation pool, streak, moon phase, and recent mood) from a private storage container that Apple shares only between the App and its Watch companion on your own devices; this never leaves your devices. If you dictate a gratitude entry on your Watch, it is queued locally and, the next time your phone is nearby, saved through the same journal-entry process described above.

1.2 Information collected automatically

When you use the App:

• Device and usage data — app version, build number, iOS version, device model, locale, error events (e.g. failed Supabase writes), and basic performance metrics (e.g. whether the app's main thread stalled for more than 1.5 seconds). This telemetry is sent to our own Supabase backend (the client_errors and client_performance_events tables) and is not shared with any third-party analytics or crash-reporting service (no Sentry, Crashlytics, Firebase Analytics, etc.).
• App-open count and a random install identifier (iOS only) — the App generates a random identifier the first time it runs and stores it on your device. Once per day, when you open the App, it sends that identifier together with your app version, iOS version, and the App's bundle identifier to Proceeds, our own developer dashboard (see §3.1), so we can see how many installations are active on a given day.
  • This identifier is not the Apple advertising identifier (IDFA), not the vendor identifier (IDFV), and is not connected to your account, email address, or any content you create.
  • It is deleted when you delete the App, and a fresh one is generated if you reinstall.
  • It is sent at most once per calendar day per installation — opening and closing the App repeatedly does not produce additional reports. There is no behavioural event stream; we do not record which screens you visit or which features you use.
  • It is not used to track you across other apps or websites, and is never shared with advertisers or data brokers.
• Purchase events (iOS only) — when you buy, renew, or receive a refund for a subscription or lifetime purchase, the App forwards Apple's own cryptographically signed transaction record to Proceeds so we receive a real-time sale notification. This contains purchase information only. It does not include your name, email address, account identifier, or any content you create.
• A daily subscription-status snapshot — if the app offers a subscription, once a day PulseKit also reports whether a subscription is currently active and which plan, keyed to the same random install identifier and never linked to your identity, so we can count active subscribers in aggregate. If the app has no subscription, nothing is sent here.
• Cookies / local storage — we use device-local storage (AsyncStorage) to cache your settings, draft journal entries, and card style choices for offline use. No third-party cookies.
• IP address — logged temporarily by our authentication provider (Supabase) during sign-in for security purposes
• Streak and activity data — which days you completed a practice, for streak tracking

We do not collect:

• Precise or approximate geolocation
• Contacts
• Health, fitness, or biometric data
• Browsing history outside the App
• Advertising identifiers (IDFA)
• Microphone audio is only captured during active recording sessions you initiate. It is transmitted to Supabase only if you explicitly opt into "Back Up My Recordings."
• Camera images (the App does not use the camera)
• Photo library contents unless you pick one for your vision board (and even then, only that photo, stored locally)

1.3 Information from Apple

Apple sends us limited data when you purchase a subscription or lifetime access:

• A cryptographically signed transaction receipt (JWS)
• The Apple transaction ID and original transaction ID
• Product ID purchased
• Price and currency at time of purchase
• Storefront country (e.g. "USA")
• Apple account token — an anonymous UUID we send to Apple when you initiate a purchase; Apple returns it so we can link the purchase to your in-app account without learning your Apple ID

Apple does not share your Apple ID, email address (unless you chose "Share My Email" with Sign in with Apple), or billing details with us.

1.4 Information the App sends to third-party AI services

When you use AI-powered features (personalized affirmations, journal coach, pattern recognition, affirmation rewrite, belief ladder, self-concept exercises), the App sends relevant context to OpenAI (model: GPT-4o-mini) to generate a response. What gets sent depends on the feature:

• Personalized affirmations — your active goals, recent mood averages, optional journal themes, framework preference
• Journal coach — the content of the journal entry you just wrote
• Pattern recognition — recent journal entries (capped at a few hundred characters each)
• Belief ladder / self-concept / rewrite — the specific text or scores you submitted

We include the minimum context needed and do not send your email address or account identifier to OpenAI. OpenAI processes the request, returns the response, and (per their API data policy) does not use API inputs to train models and retains data for at most 30 days for abuse monitoring before deletion.

2. How We Use Information

• To operate the App — authenticate you, sync your data across devices, render your journal, show your streak, display affirmations
• To provide AI-generated content features — when you explicitly use them
• To process purchases — verify receipts, track entitlements, honor subscriptions
• To send you notifications you've opted into — local reminders at the times you set (these do not go through Apple's push notification servers and do not leave your device)
• To respond to feedback — if you write to us via the in-app form or by email
• To improve the App — diagnose bugs, measure performance, understand feature usage in aggregate
• To comply with legal obligations — tax reporting, legal requests from law enforcement subject to due process
• To enforce our terms — prevent fraud, abuse, or violation of the App's usage policies

We do not use your information to: serve ads to you, build advertising audiences, sell or rent to data brokers, train machine learning models on your personal content, or track you across other apps or websites.

3. Who We Share Information With

3.1 Sub-processors

3.2 Parties we do NOT share with

• Advertisers, ad networks, or programmatic ad exchanges
• Data brokers or aggregators
• Social media platforms (we do not embed third-party SDKs from Meta, TikTok, Snap, etc.)
• Third-party analytics platforms (no Firebase Analytics, Google Analytics, Mixpanel, Segment, Amplitude, etc.). The only usage data that leaves the App is the daily install-count ping described in §1.2, which goes to Proceeds — a dashboard we own and operate ourselves, not a third-party analytics vendor.

3.3 Legal disclosures

We may disclose information if we believe in good faith that disclosure is required to comply with a lawful subpoena, court order, or government request; to protect the rights, property, or safety of users or the public; or to investigate or prevent fraud, security issues, or violations of our terms. We will push back on overbroad requests and aim to notify affected users where legally permissible.

3.4 Business transfers

If Hello Good Day LLC is ever acquired, merged with another company, or sells its assets, your information may be transferred to the new owner. We will notify you and give you a chance to delete your account before the transfer completes.

4. Your Rights and Choices

• Access and export — in the App, go to Profile → Export Data to download all your data as a JSON file
• Correction — edit any profile field, affirmation, or journal entry directly in the App
• Deletion — delete individual entries in the App, or delete your entire account from Profile → Delete Account. When you delete your account, we delete all your data from our active systems within 30 days and from backups within 90 days
• Notification opt-out — turn off reminders in Profile → Notifications, or at the iOS system level
• Recording backup choice — turn cloud backup on or off in Profile → "Back Up My Recordings." Turning it off stops new uploads; deleting an individual recording removes its private cloud copy.
• Premium cancellation — cancel through the App Store: Settings → [Your Name] → Subscriptions → I Say So

4.1 Users in the EEA, UK, or Switzerland (GDPR)

You have additional rights: access, rectification, erasure, restriction; right to data portability (machine-readable JSON format); right to object to processing based on legitimate interests; and right to lodge a complaint with your local data protection authority.

Our lawful bases for processing are: Contract — to provide the App and the services you requested; Consent — for optional features like AI-generated content and notifications; Legitimate interests — to secure the App, prevent fraud, diagnose bugs.

4.2 California residents (CCPA / CPRA)

You have the right to know what personal information we collect and how we use it; to delete your personal information; to correct inaccurate personal information; and to opt out of sale or sharing. We do not sell or share your personal information for advertising, so there is nothing to opt out of. We do not discriminate against you for exercising these rights.

4.3 How to make a request

Email us at hi@hellogoodday.com with your account email, what you'd like us to do, and enough detail to verify your identity. We respond within 30 days (45 days for complex requests under GDPR).

5. Data Retention

• Active account data — retained as long as your account is active
• Deleted account data — removed from active systems within 30 days, from encrypted backups within 90 days
• Purchase records — retained for 7 years for tax and compliance purposes (IRS requirement), even after account deletion, in an anonymized form that cannot be linked back to you
• Support correspondence and feedback — retained for 2 years
• Server logs — retained for 30 days
• Performance telemetry — retained for 90 days

6. Security

• All data is transmitted over TLS 1.2 or higher
• Supabase encrypts data at rest using AES-256
• Passwords are salted and hashed using bcrypt; we never see your plain-text password
• In-app purchase receipts are cryptographically verified against Apple's signing certificate chain
• Premium status columns in our database are write-protected: only server-role edge functions can modify them, preventing a compromised client from faking premium access
• We use role-based access controls on our admin panel, limiting internal access to the minimum necessary

No system is 100% secure. If a data breach occurs that materially affects you, we will notify you within 72 hours of confirmation, as required by GDPR and most US state laws.

7. Children's Privacy

The App is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please email hi@hellogoodday.com and we will delete it.

If we learn that a user is between 13 and 17 and resides in a jurisdiction requiring parental consent, we will honor applicable consent requirements.

8. International Data Transfers

We are based in the United States. Supabase and OpenAI are also based in the United States. If you use the App from outside the United States, your data is transferred to and processed in the United States.

For users in the European Economic Area, United Kingdom, or Switzerland, we rely on:

• Supabase's Standard Contractual Clauses for EU-to-US data transfers, plus their own supplementary measures (encryption at rest, encryption in transit, access controls)
• Apple's existing EU-US Data Privacy Framework certification for data they process on our behalf
• OpenAI's Standard Contractual Clauses

9. Third-Party Links

The App may contain links to third-party websites (our support page, our marketing page, etc.). This Privacy Policy does not cover those websites. Please review their privacy policies separately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date, notify you via email or an in-app banner at least 30 days before the changes take effect where practicable, and for EU/UK users, obtain fresh consent if the change expands the scope of consent-based processing. Continuing to use the App after the effective date means you accept the changes.

11. Contact

Hello Good Day LLC
Hello Good Day LLC is organized under the laws of the State of Florida, United States. For postal correspondence please email us at the address below and we will respond with the appropriate physical mailing destination.
Email: hi@hellogoodday.com

For privacy-related requests (access, correction, deletion, portability, or any GDPR/CCPA right), please email the address above with "Privacy Request" in the subject line.