top of page

Goal O'Clock Privacy Policy

Updated 11 October 2026

Goal O'Clock ("the App") is made by Abhinav Panse, publishing as Profitonium Apps ("we", "us"). This policy explains what the App does with your information. The short version: your alarm, your voice and your recordings stay on your phone. Two things use our server: writing your script, and the optional account for the story library. The App also sends our server simple usage events per install, for example which setup screens are reached, paywall views and purchases, and each finished reading, without your answers, your name or your words.

1. The short version

  • The alarm, speech recognition, your recordings and your plan lines all stay on your phone. Your reading history stays there too, except that the App tells our server each time a reading is finished, and our server keeps the date and time of each one (section 9).

  • To write your goal statement and each morning's script, the App sends your onboarding answers to our server, which passes them to an AI text model. We do not keep them.

  • The story library and the daily affirmation cards are downloaded from our server. You do not need an account to play them.

  • Signing in with Apple is optional. It creates an account that stores your name if you share it, your email address or Apple's private relay address, your favorites, and any personal stories you generate.

  • The App uses RevenueCat to count trials and subscriptions (section 5) and Meta's software to measure which of our Facebook and Instagram ads bring people to the App (section 6). You can turn ad measurement off inside the App. We never sell your data, and we never share your goals, your voice, your recordings or your reading history with anyone for advertising.

2. What stays on your phone

To work, the App saves the following in its private storage on your iPhone:

  • Your onboarding answers: the kind of goal, the amount or description, the date, what you give in return, your reason, your obstacle, your one-line plan, where you are with your goal today, the people you add (their relationship to you and any first name you type), your picture of the morning it comes true, and your answers to the quick questions (what is holding you back and the habits you pick).

  • Your goal statement and each day's script, whether the App wrote them or you typed your own.

  • Your alarm time and days, the option settings, and your reading history and streak.

  • Your daily "Today I will…" plan lines.

  • A goal photo, if you choose one, downscaled and kept in the App's own storage so its widget can show it.

  • Recordings of your completed readings, if you leave "Keep my readings" on (see section 3).

  • The date and time you saved your goal and alarm during setup. If you add the optional signature, the drawing itself is never saved.

  • A local copy of your subscription status so the App does not need to ask Apple every time.

  • A copy of the library and affirmation cards you have opened, so they play offline.

This information is deleted when you delete the App, and you can wipe it at any time with the Reset option inside the App. If you use iCloud device backup, Apple may include the App's storage in that backup under Apple's terms.

3. Microphone and speech recognition

The App listens to you only while the reading screen or the onboarding demo is open, so it can tell which words of your script you have said.

  • By default recognition runs on your device using Apple's Speech framework.

  • If you switch on the "Online" option, audio is sent to Apple's servers for recognition. Apple's privacy policy governs that processing. We never receive your audio or the transcripts.

  • The App can also save a recording of each completed reading so you can listen back to yourself. This is on by default, keeps only the last seven days, and the files stay on your phone. Turn off "Keep my readings" in the App to stop recording and delete the existing files.

  • You can withdraw microphone or speech permission in the iOS Settings app. The alarm will still ring, but you will not be able to finish it by reading.

4. Alarms and notifications

Alarms are scheduled with Apple's AlarmKit, and the optional evening reminder and trial-end reminder are local notifications. All of them run entirely on your device. No notification content is sent to us.

5. Purchases

Subscriptions are sold through Apple's App Store and processed by Apple. We never see your payment details. The App checks your subscription status through Apple's on-device transaction records. To count trials, subscriptions, renewals and refunds, the App sends each App Store purchase (the plan, price, currency, dates and Apple's transaction identifiers) to RevenueCat, Inc. under a random customer identifier that RevenueCat creates for this App. It is not your name, email or Apple account. Like any internet service, RevenueCat also sees basic technical details of each request, such as the App version, iOS version, device model and IP address, and RevenueCat's software sends with each request the identifier Apple gives this App on your iPhone (the vendor identifier, not the advertising identifier). Apple also tells RevenueCat about later renewals, cancellations and refunds. If you finished setting up the App, or saved a goal, in a version before 1.0.6, this starts only after you agree inside the App. After a few completed readings the App may show Apple's standard rating prompt; that prompt is handled by Apple.

6. Measuring our ads

We advertise the App on Facebook and Instagram. To learn which ads bring people to the App, the App includes software from Meta Platforms, Inc. (Meta Platforms Ireland Ltd if you are in the EU or EEA).

When the App (version 1.0.6 or later) is first opened after installing, it tells Apple's own ad-attribution system (SKAdNetwork) that it has been installed. The App sends nothing for this. If you installed the App from one of Meta's ads, Apple may then tell Meta, without identifying you and after a delay, that an install came from that ad.

How ad measurement starts:

  • If your iPhone's region or your App Store country is the United Kingdom, a country in the EU or EEA, or Switzerland, and you set up the App in version 1.0.6 or later, ad measurement is off. The App does not ask, and Meta's software does not start unless you turn ad measurement on yourself under Settings ▸ Privacy ▸ Ad measurement. If you do, your iPhone then asks whether the App may track you.

  • Everywhere else, if you set up the App in version 1.0.6 or later (including an earlier install that stopped before saving a goal), the App explains it once during setup, and your iPhone then asks whether the App may track you. Meta's software starts after you answer, whatever you answer. If your iPhone does not allow apps to ask about tracking, the App skips its explanation and Meta's software starts without your advertising identifier.

  • If you finished setting up the App, or saved a goal, in a version before 1.0.6, the App asks you once, inside the App, whether Meta may measure our ads, and Meta's software sends nothing unless you agree. If you agree, your iPhone then asks whether the App may track you, unless it does not allow apps to ask.

While ad measurement is on:

  • Meta's software in the App sends Meta an identifier Meta creates for this App, the fact that the App was installed and opened, the App version and basic device information (model, iOS version, language, time zone, screen size, carrier and the IP address of the request). If Meta's software itself crashes or fails, it may also send Meta crash and error reports about it.

  • If you allowed tracking, Meta also receives your device's advertising identifier, and RevenueCat sends Meta your trial starts, subscriptions and renewals with their price, linked to the identifier Meta's software created for this App. Meta and other companies may then combine this with information from other apps and websites to measure and target ads.

  • If you asked the App not to track, or your iPhone does not allow apps to ask, your advertising identifier stays hidden, RevenueCat sends Meta nothing, and Meta receives only the install and open events above, which it uses in aggregated ad reports.

We never send Meta your goals, scripts, answers, voice, recordings, reading history, name or email address.

You can turn ad measurement off at any time in the App under Settings ▸ Privacy ▸ Ad measurement (RevenueCat stops sending to Meta at once; Meta's software stops the next time the App starts from closed, for example after you swipe it away in the app switcher). You can change whether the App may track you in iPhone Settings ▸ Privacy & Security ▸ Tracking. You can also control how Meta uses information about you in Meta's own settings (Ad preferences, and Your activity off Meta technologies). Meta and RevenueCat process this data under their own privacy policies, which may involve transfer to the United States.

7. Writing your script

Your goal statement, and each morning's script, are written by an artificial-intelligence text model from your answers. When the App asks for a script it sends our server the answers that make up your goal: the kind of goal, the amount or description, the date, what you give in return, your reason, your obstacle, today's action, where you are with your goal today, the people you add (their relationship to you and any first name you type), your picture of the morning it comes true, and your answers to the quick questions (what is holding you back and the habits you pick). It also sends the previous script so the new one does not repeat it, and your first name if you gave one. Our server forwards them to the model provider and returns the text. These are sent each time a script is written. We never contact the people you add.

  • Our server runs on Cloudflare. It does not store your answers or the script. It only counts how many scripts each phone and each account requests per day, so the service cannot be abused.

  • The text model is reached through OpenRouter, which routes the request to a model provider, currently Google (Gemini) with Anthropic (Claude) as a fallback. They receive the text needed to write the script and process it under their own privacy policies. We send no other information about you.

  • Scripts are written ahead of time, when you open the App and once overnight through iOS background refresh, never while the alarm is ringing. If the server cannot be reached, the App reads your saved statement instead.

8. The library, affirmation cards and your optional account

The story library and the daily affirmation deck are our own content, served from our server and cached on your phone. Requests carry no account information unless you are signed in, plus a random per-install identifier that is used to cap how often one phone can ask for generated content and for the per-install counts in section 9.

If you choose Sign in with Apple, we create an account and store on our server:

  • Your Apple user identifier, your name if you chose to share it, and your email address, which may be the private relay address Apple creates for you.

  • The stories and affirmations you mark as favorites.

  • Personal stories you generate: the script written from your goal answers (section 7) and its narration. The narration is produced by ElevenLabs from that script. ElevenLabs receives the story text and processes it under its own privacy policy. Personal stories are available only to your account.

This data lives in Cloudflare's database and file storage and is kept until you delete your account, which you can do inside the App (You tab, "Delete account") or by emailing us. Deleting the account removes your account record, your favorites and your personal stories, including the audio files. Signing out without deleting keeps them for when you sign in again.

9. Technical logs and abuse prevention

Like any internet service, our server sees the IP address of each request and keeps short-lived technical logs through Cloudflare to run and secure the service. The App also sends a random identifier created when it is installed. It is not derived from your device and is used to count requests per phone, so that script writing and story generation stay within daily limits, and to count the per-install events below. Usage counters are kept per day, so that the daily and monthly limits can be checked. Separately from those counters, the App reports, per install, which setup screens are reached, how the first practice reading went (finished, skipped, or microphone or speech recognition not allowed), paywall views, skips, restores and purchases, use of the screens for changing or cancelling a plan and asking for a refund, when the share screen for a morning card is opened, when a card is shared and to which app or option, and each finished reading (including practice readings), to improve the setup and for our pricing experiments. Each report is kept as its own record with its date and time, with the random install identifier, and with your account identifier if you are signed in. Neither the usage counters nor these records are deleted on a fixed schedule; deleting your account removes your account identifier from them. These records never include your answers, your name or your words. None of this is sent to Meta or used for advertising or profiling.

10. Third parties

  • Apple: alarms, notifications, speech recognition (on your device by default, on Apple's servers if you switch on Online), Sign in with Apple, App Store payments and the rating prompt.

  • Cloudflare: hosts our server, database and media storage.

  • OpenRouter, and through it Google and Anthropic: write your goal statement, your daily scripts and personal-story scripts from the text we send.

  • ElevenLabs: narrates the library stories and personal stories from their text.

  • RevenueCat, Inc. (United States): records App Store purchases for our subscription reports and, if you allowed tracking, forwards purchase events to Meta.

  • Meta Platforms, Inc. and Meta Platforms Ireland Ltd: ad measurement while it is on in the App (section 6).

Each acts under its own privacy policy and must protect the data at least as well as we do. We share only what each needs for its task, and never your voice, your recordings or your payment details. The only part of your reading history that leaves your phone, the finished-reading records in section 9, is stored by Cloudflare and shared with no one else.

11. Children

The App is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, email us and we will delete it.

12. Your rights

Under laws such as the GDPR, the UK GDPR, the CCPA and India's Digital Personal Data Protection Act you may have rights to access, correct, delete or export personal data. Everything on your phone is yours to delete with the App. Deleting your account, inside the App or on request by email, deletes what section 8 lists and removes your account identifier from the records in section 9; those records and the usage counters then stay with the random install identifier only. We answer every request within 30 days. You can turn ad measurement off at any time, as described in section 6.

13. Changes to this policy

When we change what the App does with your data we update this policy first, change the date at the top and, for anything that sends new data from your phone, ask you inside the App.

14. Contact

Profitonium Apps hello@profitoniumapps.com

bottom of page