Your journal.
Your choices.

About this policy

NaminalStack LLC operates Good Days. This policy explains how we handle personal information through the Good Days app, our website at findgooddays.com, and support communications. It covers information you provide, information your device sends when you use our services, and information received from sign-in, purchase, and other service providers described below. Features and providers may vary by platform, release, and the options you enable. You can keep a journal without creating a cloud account.

Your journal

Good Days stores your ratings, tags, phrases, notes, saved thoughts, saved copies, and settings on your device. Draft notes and thought drafts are kept locally while you edit. Saved thoughts include your words and a reference to the period and recorded details you chose to reflect on. The browser preview stores its own separate history in that browser. Clearing app or browser data can remove local history.

Ratings, notes, tags, and other entries may reveal sensitive information about your mood, health, or personal life. You decide what to record. The app uses your saved entries to display your history and calculate the reflections and patterns available in your version. Current journal insights are calculated on your device; they are not medical diagnoses or decisions about your eligibility for services.

Optional cloud recovery

When you connect Apple in Backup and recovery, Good Days sends your saved dates, ratings, tags, phrase snapshots, notes, timestamps, and any saved locations to Supabase to back up your history. Releases with saved thoughts also back up those thoughts and their source references. Apple verifies your sign-in, and Supabase maintains an account identifier and authentication records. Cloud recovery is off until you choose it. Draft notes and thought drafts, your reusable phrase library, settings, and saved copies stay on your device. Backup reconciles saved entries while the app is open and online; conflicting day versions need your review. Conflicting saved thoughts are preserved as separate, labeled recovered copies.

Apple shares the email address you choose, which may be a private relay address, with Supabase for authentication. Good Days does not request your name. The service retains an encrypted Apple authorization credential so it can disconnect Apple when you delete your cloud account.

Location

Location is optional. If you enable it and grant permission, Good Days requests a location when you record today. Coordinates are rounded before saving, and the precise reading is discarded. To show a city or area label, the app also passes rounded coordinates to your device’s location service. That service may process the lookup online under its own privacy practices, even when cloud recovery is off. Good Days does not track your location in the background. You can remove a saved location from its day and turn off future location capture in Settings.

Dictation

The microphone starts only when you choose to dictate. Good Days requests on-device speech recognition when it is supported. A fallback speech service may process audio online; the app tells you before you use that service. Good Days does not retain an audio recording. The resulting text is an editable note and follows your journal’s storage and backup settings.

Reminders and widgets

Reminders are scheduled on your device. The iPhone widget receives dates and ratings, not your notes, tags, or locations. Anyone who can see your Home Screen may see the widget’s ratings.

App analytics and diagnostics

Configured releases currently use PostHog to understand onboarding, feature use, repeat check-ins, and experiment results. Events include a random installation identifier and associated usage profile, action outcomes, timestamps, and app version. They exclude journal notes, saved-thought text, ratings, phrase wording, tags, and saved locations. You can turn usage analytics off in Settings → Privacy and data.

Configured releases also use Sentry for crash reports and failure diagnostics, including technical device, operating-system, app-version, and error information. Crash diagnostics are separate from the usage analytics setting. These providers receive network connection information, including IP addresses.

In the current configuration, we do not enable session recordings or advertising SDKs, or send journal content to an external AI service. Dictation is described separately above.

Purchases and subscriptions

Where purchases are available, we use RevenueCat and the applicable app store to provide optional tips and, in releases where enabled, paid features or subscriptions. When you open purchase features or the app checks purchase status, RevenueCat receives a separate purchase identifier, product and transaction records, purchase or subscription status, and technical device and connection information to process purchases, restore access, and manage subscriptions. In subscription-enabled releases, opening Settings can trigger these checks even if you do not start a purchase. The current integration does not send your journal entries or cloud account identity to RevenueCat.

The app store handles payment details; we do not receive your full payment-card details. A tip does not enable cloud backup or extra features. Deleting a Good Days cloud account does not cancel a store subscription; manage subscriptions through the app store.

App delivery and updates

Configured releases use Expo services to check for and deliver compatible app updates. These requests include technical connection information and update metadata, such as the operating system, app and runtime version, and update or installation tokens. Update delivery does not require your journal content. App stores may separately process download, purchase, and diagnostic information under their own settings and privacy policies.

Support communications

If you contact us, we receive your contact details, message, and any attachments or technical information you choose to provide. We use them to answer questions, investigate problems, and handle privacy requests. Do not send passwords or sign-in codes. Please leave out journal entries and locations unless they are needed to explain your request. Providers that deliver or store support communications may process that information for us.

Email updates and marketing

If you subscribe to email updates or otherwise request marketing communications, we may use your email address, communication preferences, and subscription records to send product news and offers through an email delivery provider. We obtain consent where required. If email engagement measurement is enabled, the provider may process delivery, open, and link-click information, including through tracking technologies where permitted and with any required consent.

You can unsubscribe through the message or contact support@findgooddays.com. Unsubscribing does not stop essential account, purchase, security, or requested support messages. We may retain a limited suppression record to respect your choice. We do not add you to a marketing list merely because you enable cloud recovery or contact support.

How we use information

We use information for the purposes described in this policy: delivering the features you request, authenticating and recovering accounts, processing purchases, responding to support and privacy requests, sending requested communications, understanding and improving product performance, securing our services and preventing misuse, and meeting legal obligations. We may use aggregate statistics that do not identify individuals to understand service performance. We do not currently sell personal information or share it for cross-context behavioral advertising, and we do not use journal content for targeted advertising.

Service providers and other disclosures

We use providers for hosting, storage, authentication, analytics, diagnostics, software delivery, purchases, support, and communications. Current providers include Supabase for cloud recovery, Apple for sign-in and iPhone purchases, PostHog for analytics, Sentry for diagnostics, RevenueCat for purchase management, Expo for updates, and Vercel for website hosting. Providers receive the information needed for their role; using a provider does not give it access to every category of information described here. We may add or replace providers for these purposes, subject to applicable privacy requirements.

We may also disclose relevant information to professional advisers, to comply with law or valid legal process, to protect rights and safety or investigate fraud, or in connection with a merger, financing, acquisition, or transfer of the business, subject to applicable protections. We may share information at your direction or with your consent. App stores, sign-in services, and destinations you choose may also handle information independently under their own policies.

Security

We use safeguards appropriate to the information and service, including encrypted network connections, protected device credential storage for sign-in credentials, and access rules that restrict access to cloud journal records. Cloud history is not end-to-end encrypted: authorized service operators can access stored data to operate the service. No storage or transmission system is completely secure. Your device security and any device or operating-system backups also affect copies stored outside our cloud recovery service.

Exports and sharing

You choose when to export data and whether to include notes or locations. Saved thoughts have a separate export action and are not included in a day export. Files shared outside Good Days are controlled by you and the service or person you share them with. Good Days cannot remove those copies.

Retention

Local journal data remains on your device until you remove it; draft notes and Saved copies have the separate behavior described in this policy. We retain cloud history while your cloud account remains open, subject to your edits and deletion requests.

We retain support correspondence, analytics, diagnostics, authentication, and purchase-related records for as long as reasonably needed for the purpose for which they were collected, including resolving issues, measuring product performance, preventing abuse, and satisfying legal, accounting, or dispute obligations. Retention depends on the record type, service configuration, account status, and applicable requirements.

Deletion from active systems may precede expiration from restricted backups and security logs. App stores and other independent providers manage their own records under their policies. Turning off analytics stops future optional collection; it does not itself delete previously collected records.

Your choices and deletion

You can edit or clear days in the calendar and edit or remove saved thoughts in Insights. Clearing a source day removes it from a thought’s evidence; your own saved words remain until you remove the thought. Removed thoughts retain an identity and version marker in cloud backup without their content. Separately labeled recovered copies can be removed individually. With backup enabled, those changes are sent to your cloud history while the app is open and a connection is available. Cleared cloud days retain a date and version marker without their journal content, so an old device cannot silently bring them back. Preceding entries replaced by recovery and alternate conflict versions may remain in Saved copies on the device.

Disconnecting this device stops its automatic backup and signs it out while keeping existing cloud history and other devices connected. In Settings → Privacy and data → Backup and recovery → Manage backup account, choose Delete cloud account to remove that history, delete the account, and revoke its Apple connection; this requires a connection and an authenticated account. If an older account has no stored Apple authorization credential, the app deletes its cloud data and explains how to remove the Apple connection manually.

Local days remain until you clear them or remove the app’s data. Saved copies remain until you remove the app’s data; clearing a day does not remove its previously preserved copies. Service backups and security records may remain for the provider’s configured retention period; they are not available through the app after account deletion.

Privacy rights and requests

Depending on where you live and which laws apply, you may have rights to access or obtain a copy of personal information, correct or delete it, restrict or object to processing, withdraw consent, or opt out of sale, targeted advertising, or certain profiling. You may also have rights concerning sensitive or consumer health data, to use an authorized agent, to appeal a denied request, and to complain to a privacy regulator.

Email legal@findgooddays.com to exercise applicable rights or appeal a decision. We may need proportionate information to verify your identity and authority; do not send passwords, sign-in codes, or journal content to verify a request. We respond within applicable legal deadlines and explain any legally permitted limitation. We will not discriminate against you for exercising applicable rights.

Withdrawing consent does not affect earlier lawful processing. Some features require the information needed to provide them. We cannot retrieve or remotely erase information that exists only on your device or copies you have shared elsewhere.

International processing and legal bases

Our services use providers in the United States and may involve processing in other countries whose privacy laws differ from those where you live. Where applicable law requires protection for international transfers, we must use an appropriate lawful transfer mechanism, such as an adequacy decision or approved contractual safeguards. You can contact us about the safeguards applicable to your information.

Where European or UK data-protection law applies, our legal bases depend on the purpose: providing requested account and purchase services, legitimate interests in operating, securing, and improving our services where those interests do not override your rights, complying with legal obligations, and consent where required. Processing sensitive information may require an additional legal condition, including explicit consent where applicable; this policy does not itself supply that consent.

Children

Good Days is not directed to children under 13, and we do not knowingly collect their personal information through our online services. If you believe a child has provided information to us, email legal@findgooddays.com so we can investigate and delete it as required. Higher age or parental-consent requirements may apply to particular features or in some locations.

This website

This marketing site does not offer journal entry or sign-in. Its sample journal is fictional and your sample-day selections are not saved. Vercel, our hosting provider, processes technical connection information, such as IP addresses and request information, to deliver and secure the site.

With your permission, website analytics use PostHog to measure page visits and duration, campaign sources, referring websites, browser and device categories, and clicks to explore the product or open the App Store. Random browser and session identifiers are stored in browser storage to measure visits. PostHog also receives network connection information, including your IP address; IP-based location enrichment is disabled in our configuration. We remove unrelated URL parameters and referrer paths, and do not enable session recording or automatic click capture. Choosing “No thanks” keeps optional analytics off. You can withdraw permission using “Website analytics” in the page footer; this stops collection and clears analytics storage. Website visits are not linked to your app identity, and an App Store click does not tell us whether you installed the app.

Browser storage also remembers your analytics choice until you change it or clear that storage. Clearing storage may cause the site to ask again. Cookie controls and browser storage settings can affect these features. We do not currently change the site’s behavior in response to the legacy Do Not Track browser signal; use the analytics choice above. We do not currently sell personal information or share it for cross-context behavioral advertising, including when a Global Privacy Control signal is present.

Questions and changes

We may update this policy as our services, providers, or legal obligations change and will revise the date above. For material changes, we will provide additional notice as required, such as a notice in the app or on our website. If a new use of information requires consent, we will request it before that use. Updating this policy does not by itself authorize a new use of previously collected information. Last updated September 26, 2026.

For privacy requests, email legal@findgooddays.com. For product help, email support@findgooddays.com or visit Help & support.