Gozali Privacy Policy

Last updated: November 5, 2026

Gozali is an app where a small group of friends (a "pack") raises a shared pet by doing a habit every day and proving it with a photo. This policy explains what we collect, why, who can see it, and how to delete it. Questions: hello@gozali.app.

What we collect

• Account: when you sign in with Apple or Google we receive an account identifier, your email address and, if the provider shares it, your name. If you choose Hide My Email, Apple gives us a private relay address instead of your real one.
• Profile: the display name you choose, a profile photo if you add one, your time zone and language (so days, reminders and quiet hours match your clock), your evening reminder time and which notifications you want.
• What you do in packs: the packs you create or join, your photos, their captions and time, focus session lengths, rest days, jokers and pauses you take, reactions, nudges, name suggestions and changes to the pet's outfit.
• Safety: reports you send and people you block. A block also reaches the developer, as a report on the person you blocked.
• Devices: a push notification token for each phone you sign in on, and a token that lets your widgets read your packs' state (we keep only a scrambled form of it). For each phone you are signed in on, the sign-in service also keeps your network address and a short line that can name the app and the phone's system (the user agent). They are deleted when you sign out on that phone while connected, or when you delete your account.
• Errors: when something goes wrong in the app, a technical report so we can fix it: the error and its stack trace (the place in the app's code where it happened), the screen, the app version, whether it's an iPhone or Android phone, whether the error closed the app, and your account id. Reports are deleted after 30 days.
• Sign-in problems: when a sign-in doesn't finish, even if you closed it yourself and have no account yet, a report with the sign-in method, the error, how long it took, the app version and your phone's system and its version. These reports are deleted after 30 days too. We also keep a scrambled form of your network address, apart from the report, to limit how many reports one address can send. It is used for an hour and deleted within about a day.

We do not collect your location or contacts, we don't use advertising or tracking identifiers, and we don't sell or rent your data.

Who can see what

• Your photos, captions and reactions are visible only to the members of that pack, unless something is reported. Photos are stored privately, and the app shows them through links that expire within an hour; anyone in the pack can keep what they were shown.
• Someone who joins a pack can see what the pack kept from before they joined: the photos not yet deleted, the captions and reactions, the weekly recaps and each day's results.
• Anyone signed in to Gozali who has a pack's invite code can see, before joining, the pack's name, its habit, its pet and the names of its members.
• When someone reports a photo or a caption, or a member for their name or profile photo, or blocks a member, the developer gets an email to review it. It holds the names and account ids of both people, the caption, and a link to the photo that works for 7 days. The email stays in the developer's mailbox after the link stops working.
• The 🤨 reaction is shown only as a number, without names.
• Pack members see who fed, rested, used a joker, was paused or missed on each day, because that is how the pack works together. Notifications never say who missed.
• Widgets on your home screen and lock screen show the pet and numbers, and the large one each pack's name, never photos or members' names.
• A weekly recap you share as a story contains the pet, the pack's numbers and only your own photos.
• You don't see the photos, profile photo and reactions of people you block, and they can't nudge you. A 🤨 of theirs still counts in the 🤨 number, which names nobody. If you share a pack with them, they can still see what you post there; you can leave the pack at any time.
• Everyone who is now in a pack you are in, or were in before, can read your profile: the name and profile photo the app shows them, and also your time zone, language, reminder time, which notifications you turned on, and when you made your account and accepted the terms, which the app doesn't show. It stays readable to them after you leave the pack, are removed from it or block them, and to people who join that pack later, for as long as your account and the pack exist.

How long we keep it

• Photos are deleted automatically 30 days after they were posted. A photo that appears in a weekly recap collage is kept 8 weeks after that week, so the recap can still show it, and then deleted too. A photo someone reported is kept for as long as the link to it in the developer's email about the report works, so the developer sees the photo that was reported, and then deleted too.
• Records of sent notifications are deleted after 30 days, and a widget token that hasn't been used for 90 days is deleted.
• Everything else stays while your account exists.
• Backups: once a day the database is copied to the developer's own computer, outside the European Union. A copy holds accounts (email address and name) and everything else above except the photo files and what the sign-in service keeps for each phone. The 14 newest copies are kept, so a copy normally lasts about 14 days.
• Deleting your account (Settings → Delete account) deletes your account, your profile and profile photo, your photos (including those in recaps), your feeds, reactions, passes, tokens and reports right away. Your packs continue without you. A pack that no one has been in for 30 days is deleted, with its photos and recaps.
• What stays after you delete your account: your data stays in the backups until those copies are replaced, about 14 days later, and if a backup ever has to be restored, accounts we can tell were deleted since it was made are deleted again. Your packs' past day results and weekly recaps keep your account id, without your name or email. Records of notifications sent to others can hold your name or account id until their 30 days are up. The sign-in service's security log can keep your email address, your name if your sign-in provider shared it, and your sign-in times. Report emails stay in the developer's mailbox.

Services we use

• Supabase stores the data and runs the server (database, file storage, sign-in).
• Expo delivers push notifications, through Apple's and Google's push services, and the app's updates: each time the app starts, it asks Expo whether a newer version is out. That request carries your network address, a random id the app keeps for that installation, the app version and the phone's system and, after an error stopped the app while it was starting, that error. Expo uses it to send updates and to show the developer how many installations run each update and how often it fails.
• Apple and Google provide sign-in.
• Resend delivers report emails to the developer, with what was reported.
• Cloudflare hosts the gozali.app website and forwards email sent to hello@gozali.app.

Supabase, Expo with Apple's and Google's push services, Resend and Cloudflare process data only to provide these services to Gozali, and each is bound to give your data the same or equal protection as this policy does. Apple and Google sign you in under their own privacy policies, which you accepted with your Apple or Google account.

Your rights

You can see and change your profile in the app, and delete your account from Settings ("How long we keep it" says what that removes and what stays for a while). If you no longer have the app, write to hello@gozali.app from the email address you signed in with, or, if you signed in with Apple and chose Hide My Email, give the address Apple made for Gozali (on an iPhone or iPad: Settings → your name → Sign in with Apple → Gozali). We write to that address to confirm the request is yours, and within 30 days of your answer we delete the account and everything the app's deletion removes. You can also ask us there for a copy of your data or to correct it, confirmed the same way, and we will answer within 30 days. If you live in the European Union or the UK, you may also complain to your data protection authority. The data is stored in the European Union (Ireland), apart from the backups and report emails, which the developer keeps outside it.

Age

Gozali is for people aged 13 and over. You confirm your age when you set up your profile. If you believe a younger child is using the app, write to hello@gozali.app and we will delete the account.

Security

Access to data is enforced in the database, so a member can only ever read the packs they belong to, apart from what a pack's invite code shows before joining. Connections are encrypted, and tokens for widgets are stored only in scrambled form.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect.

Contact

hello@gozali.app