Privacy Policy

Effective date: 25 October 2026.

This Privacy Policy describes how Goodmorrow ("we", "our", "the app") collects, uses, and shares information when you use the Goodmorrow mobile application.

Information we collect

1. Authentication. We collect a stable identifier from your sign-in provider:

• If you sign in with Apple: an Apple-issued user ID and (the first time) the email address you choose to share. You can use Apple's "Hide My Email" feature; we will never see your real email if you do.
• If you connect a smart-ring service: a stable user ID and email from the smart-ring account you authorize.

2. Sleep, activity, and readiness data from your smart ring. With your authorization, we read the following from your smart-ring service's API for the last ~60 days each time you run an analysis:

• Sleep sessions (duration, stages, heart rate, HRV during sleep)
• Daily sleep, activity, and readiness scores and contributors

We do not request workout, session, or other auxiliary scopes.

3. Sleep and related data from Apple Health (optional). If you tell Goodmorrow you wear an Apple Watch or another tracker that saves to Apple Health, and you allow it on iOS's Health screen, we read these from Apple Health for the last ~60 days, and what's new each time you open the app:

• Sleep: time asleep, sleep stages, time awake, and time in bed when your device records it
• Heart rate, resting heart rate and heart rate variability
• Wrist temperature during sleep
• Steps, active energy, exercise minutes, workouts and time in daylight
• Caffeine and alcoholic drinks, if you log them in Apple Health
• Mindful minutes

With each sleep record we keep which app or device recorded it, so we read only the device you picked. The records go to our servers, where they make up your nights and your analysis. We never write to Apple Health, never use Apple Health data for advertising or marketing, never sell it or give it to data brokers, and never store it in iCloud; the app keeps only a small marker on your phone of what it has already sent. You can stop it at any time in Apple Health's sharing settings or in iOS Settings under Privacy & Security, Health. Switching to your ring in Goodmorrow, or deleting your account, deletes the Apple Health data we hold.

4. Habit check-ins. The dates and notes you record when checking off a habit.

5. Phone time from Screen Time (optional). If you opt into Screen Time on iOS, Goodmorrow uses Apple's Family Controls and DeviceActivity APIs to read how many minutes you used the apps or categories you selected: across each day, from 9pm to midnight, and from midnight to 4am.

What stays on your phone: - The list of apps and categories you picked. - The minute-level usage details for those apps. - Anything outside the daily total.

What we send to our servers: - The date. - The total minutes of usage for that date (rounded to 15-minute increments, capped at 12 hours). - The total minutes from 9pm to midnight, and from midnight to 4am after it (rounded to 5-minute increments).

We do not transmit, share, or persist off-device the per-app or per-category breakdown, any times of day beyond those two evening totals, or any data that could identify which apps you use. The data we receive is also never used for advertising, advertising measurement, or shared with data brokers, in line with Apple's Family Controls Framework rules.

You can revoke this at any time in iOS Settings → Screen Time → Apps with Screen Time Access → Goodmorrow, or under Phone time in the Goodmorrow Settings tab.

6. Morning voice notes (optional). If you use the morning journal, your phone turns what you say into text using Apple's speech recognition. Where your iPhone supports on-device recognition for your language, the audio never leaves the phone; otherwise Apple processes it under Apple's own privacy terms. We never receive or store audio.

What we send to our servers: - The text of your note and the day it describes. - The tags you kept after reviewing them (for example "late meal" or "no alcohol").

We keep the note text so you can read it back and so tags can be re-read if you edit the note. You can delete a note from the Habits tab, which removes its tags too.

7. How you use the app. To see whether Goodmorrow is working for people, we record what happens in the app and when: for example that you opened it, saved a morning note, sent a message or checked off a habit. With these we keep your app version which sleep source you have connected, and whether notifications are on. They're keyed to your account's random ID, not your name or email, and never include what you write or say, your tags or your sleep data.

8. The website. On goodmorrow.app we count page views: which page was opened, which site sent you there (for example a search engine) and any campaign tag in the link. We set no cookies and record nothing that identifies you, and the sleep quiz's answers never leave your browser.

9. Your conversation with Goodmorrow. The messages you type or tap in the conversation, your answers to Goodmorrow's questions (for example what's bringing you here and your usual get-up time), and Goodmorrow's replies. We keep them so your coaching can carry on from one day to the next, and they're deleted with your account.

How we use your information

• To run statistical analyses on your sleep data and surface patterns.
• To pick personalised CBT-I sleep habits for you to try.
• To diagnose technical problems, see how the app is used, and improve the service.

Sharing with third parties

• Smart-ring service you connect: we read from your authorized account on your behalf. We do not write to it.
• Anthropic (our AI provider): Goodmorrow's coaching is written by an AI model through Anthropic's API. To write your sleep read, choose and plan your habits, and reply to you, we send it summaries of your sleep from your ring or Apple Health (the statistics from your recent nights and what your device can and can't see), your answers to Goodmorrow's questions, your messages, your morning notes and their tags, and your habit progress. We never send your name, email address, Apple ID or the names of your devices. You agree to this when you sign in, as the first screen says. Anthropic may use this data only to provide its service to us, is not permitted to train its models on it, and is bound by its commercial terms and data processing terms to protect it at least as carefully as this policy describes.
• Apple: we use Apple's Sign in with Apple service to authenticate you, and read from Apple Health on your phone if you allow it.
• Fly.io: our backend infrastructure provider. They host the database containing your data.
• PostHog: our product analytics provider. It receives the usage records described above (what happened in the app and when), never your notes, messages, tags or sleep data.

We do not sell your personal information. We do not share it with advertisers.

Data retention

Your data is stored as long as your account is active. You can delete your account from Settings → Delete account, which removes all of your data (analyses, habits, tokens, Apple Health records) within 24 hours. Usage records stay with PostHog under your account's random ID, which no longer links to anything once the account is gone.

Your rights

You can:

• See your data via the in-app screens (Insights, Habit, Settings).
• Delete your entire account from Settings.
• Email us at support@goodmorrow.app for questions or data requests.

If you are in the EU/UK or California, you have additional rights under GDPR and CCPA respectively (access, portability, deletion, etc.). Email us to exercise them.

Children

Goodmorrow is not directed to children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children.

Security

We use HTTPS for all network traffic. Session tokens are stored in iOS Keychain via expo-secure-store. We never transmit your data unencrypted.

Changes to this policy

We will post material changes to this URL. Continued use of the app after a change constitutes acceptance.

Contact

Email: support@goodmorrow.app