Information we collect
Account information
When you create a GoodOff account, we collect:
- Your name and email address
- Password (encrypted using industry-standard hashing)
- Profile information you choose to provide (avatar, bio)
- Date of birth (for age verification — forums are 18+ only)
- Payment information (processed securely through Stripe — we never store full card details)
Study content
We store the learning content you create or upload:
- Libraries (uploaded documents, notes, study materials)
- Flashcard decks and individual cards
- Quiz results and performance data
- Voice recordings (for voice notes feature)
- Podcast audio generated from your content
- Forum posts and comments (18+ users only)
Usage & analytics data
We automatically collect certain information to improve your experience:
- Study patterns: time spent, cards reviewed, accuracy rates
- Session data: session duration, features used, navigation patterns
- Device information: device type, operating system, app version
- IP address and general location (country/region level)
- Spaced repetition algorithm data: ease factors, intervals, review history
- Challenge progress and gamification data (XP, streaks, badges)
How we use your information
We use your information to:
- Provide and operate our spaced repetition learning service
- Personalize your learning experience with AI-generated content
- Process payments and manage your subscription
- Calculate and optimize spaced repetition intervals for better retention
- Generate analytics and insights about your learning progress
- Send important updates about your account and service changes
- Respond to your support requests within 48 hours
- Improve our algorithms and develop new features
- Comply with legal obligations and prevent fraud
- Moderate forum content for community safety (18+ section)
AI processing & content generation
GoodOff uses AI to enhance your learning experience:
- Flashcard generation: uploaded documents are processed by AI (Google Gemini) to automatically generate flashcards and quizzes
- AI chat tutor: conversations with the AI tutor are processed to provide personalized explanations
- Voice tutor: audio is transcribed and processed to enable voice-based learning
- Podcast generation: content is processed by text-to-speech (ElevenLabs) to create audio summaries
- Content categorization: AI analyzes content to suggest topics and categories
Important: your uploaded study materials are used only for generating your personal flashcards and are not used to train AI models. Content sent to AI providers is processed according to their respective privacy policies.
Data protection & security
We implement industry-standard security measures to protect your data:
- TLS/SSL encryption for all data in transit
- Encryption at rest for sensitive data in our databases
- Secure password hashing (bcrypt) — we never store plain-text passwords
- JWT-based authentication with secure token handling
- Row-Level Security (RLS) in our database to isolate user data
- Regular security audits and vulnerability assessments
- Secure cloud infrastructure (Supabase, DigitalOcean) with redundant backups
- Limited employee access to personal information on a need-to-know basis
- GDPR and CCPA compliant data handling practices
Data retention
- Account data: retained while your account is active, plus 30 days after deletion request
- Study content: retained until you delete it or close your account
- Analytics data: anonymized and retained for up to 2 years for product improvement
- Payment records: retained for 7 years for legal/tax compliance
- Forum posts: retained until you delete them or request removal
- Support conversations: retained for 1 year after resolution
Your rights
You have the right to:
- Access: request a copy of all personal data we hold about you
- Correction: update or correct inaccurate information
- Deletion: request deletion of your account and associated data
- Export: export your flashcards, decks, and learning data (JSON, CSV, Anki formats)
- Opt-out: disable analytics tracking in your account settings
- Marketing: unsubscribe from promotional emails at any time
- Restriction: request we limit processing of your data in certain circumstances
- Portability: receive your data in a machine-readable format
To exercise any of these rights, contact us at the email addresses below. We will respond within 30 days.
Age requirements
- Minimum age: you must be at least 13 years old to create an account
- Forums: the community forums are restricted to users 18 years and older
- Parental consent: users under 16 in certain jurisdictions may require parental consent
- Age verification: we collect date of birth during signup to enforce age restrictions
If we learn we have collected personal information from a child under 13, we will delete that information promptly.
Third-party services
We work with trusted partners to provide our service:
- Stripe: payment processing and subscription management
- RevenueCat: in-app purchase management for mobile apps
- Supabase: database, authentication, and file storage
- Google Gemini: AI-powered flashcard and quiz generation
- LlamaParse: document parsing and text extraction (90+ file formats)
- ElevenLabs: text-to-speech for podcast generation
- Deepgram: speech-to-text for voice features
- DigitalOcean: cloud hosting infrastructure
- Expo: push notification delivery for mobile apps
Each partner operates under their own privacy policy. We only share the minimum data necessary for each service to function.
Cookies & local storage
- Authentication: keeping you logged in securely
- Preferences: remembering your settings
- Offline access: storing study data locally for offline use
- Analytics: understanding how you use our service (can be disabled)
You can manage cookie preferences in your browser settings. Disabling cookies may affect some functionality.
Account deletion
- Go to Settings → Account → Delete Account in the app
- Or email us at the addresses below
- Deletion is processed within 30 days
- Some data may be retained for legal compliance (see Data Retention)
- Anonymized analytics data may be retained for product improvement
Contact us
If you have questions about this privacy policy or your data:
- Email: [email protected] or [email protected]
- Privacy-specific inquiries: [email protected]
- Address: GoodOff Inc., Privacy Team
We aim to respond to all privacy inquiries within 48 hours, and fulfill data requests within 30 days.
Changes to this policy
We may update this privacy policy from time to time. When we make significant changes:
- We will notify you via email and/or in-app notification
- The "Last updated" date at the top will be revised
- For material changes, we will provide 30 days notice before they take effect
- Continued use of GoodOff after changes constitutes acceptance