Privacy

CONTROLLER_NAME_HERE runs GoalTwin as a small personal project. Contact: CONTACT_EMAIL_HERE.

• Your account: email address, password (stored hashed by the sign-in provider), or your Google identity if you sign in with Google.
• Onboarding answers and profile: name, age or date of birth, country, work style, interests, time zone, and optionally occupation, location and a short bio.
• What the assistant remembers: short notes taken from your chats, with a category, and a mathematical fingerprint (embedding) used to find relevant notes.
• Goals and tasks, including progress, deadlines and priorities.
• Calendar: your weekly busy days and their label, the date of the last morning reminder, and a private token for your phone-calendar subscription link.
• Review data: the weekly review is built from your goals and tasks; it is not stored separately.
• Conversations and messages with the assistant.
• Push notification devices: the technical address your browser gives for notifications, if you switch reminders on.
• Preferences you set in the app.
• Video scripts and rendered videos, plus a render log (time, status, file size, length). Video files are kept in a private storage area of the app's own backend.

• Contract (Art. 6(1)(b) GDPR): to provide the assistant you asked for — chat, memory, goals, tasks, calendar.
• Consent (Art. 6(1)(a)): things you switch on yourself, such as push reminders, the phone-calendar feed and Google sign-in. You can switch them off at any time.
• Legitimate interest (Art. 6(1)(f)): keeping the service working, error logs, and stopping abuse (for example usage limits).

• Lovable (Lovable Cloud, built on Supabase): hosts the database, file storage and sign-in. Sees everything stored above.
• Hosting provider (Lovable, running on Cloudflare): serves the app; sees technical request data such as IP address.
• Lovable AI Gateway, forwarding to Google (Gemini) for chat and voice, and OpenAI for embeddings: receives your chat message, recent conversation history and the relevant stored context (profile, active goals and tasks, matching memories) to write a reply; memory notes are sent to create embeddings.
• Creatomate: renders videos; receives the video script, voice-over audio and layout. Only used by the owner account.
• Google sign-in (if you use it): Google learns that your Google account signed in to GoalTwin.
• Your browser's push service (e.g. Google, Apple, Mozilla) delivers reminders if you switch them on; it sees the encrypted notification.

Several of these companies are based outside the EU (in particular in the USA). They are used on their standard data protection terms.

The database, file storage and sign-in run in the EU (AWS region eu-west-1, Ireland). The app is served from Cloudflare's worldwide network, so a request may be handled at a location near you, inside or outside the EU.

TODO: Confirm whether each provider's standard terms include EU standard contractual clauses or the EU–US Data Privacy Framework.

Data is kept while your account exists. Deleting something in the app (a memory, goal, task, conversation or video) deletes it.

Deleting the account (Settings → Delete my account) deletes everything linked to it, including stored video files.

Creatomate deletes rendered files after 30 days; a copy is kept in the app's own private storage until you delete the video.

• See, change and delete your memories, goals, tasks, conversations and videos in the app.
• Switch memory off in Settings.
• Delete your account yourself in Settings → Delete my account.
• Ask for a copy of your data or a correction by writing to CONTACT_EMAIL_HERE.
• Complain to the Austrian data protection authority (Datenschutzbehörde): dsb.gv.at.

The site sets no analytics and no advertising cookies. It sets only what it needs to work:

• the sign-in session, once you are signed in (plus your unfinished onboarding answers in your browser until you create an account);
• __dpl, which keeps a visit on one published version of the app so pages do not break mid-visit;
• __cf_bm, Cloudflare's bot protection, which lasts about 30 minutes.

Because these are strictly necessary, there is no cookie banner.

GoalTwin is for people aged 14 and over. For anyone under 18, the assistant keeps topics like investing, loans and starting a company general.

The assistant only suggests. Nothing is stored as a goal or task until you accept it. No decision with legal or similarly significant effect is made automatically.

Videos made in GoalTwin are generated by software, including the voice. If you publish one, mark it as AI-generated — since August 2026 the EU AI Act requires synthetic media to be recognisable as such.