Privacy policy
Good Report is built by an independent developer in Mesa, Arizona. This policy covers the goodreport.app website and the Good Report mobile app. It is written to be read, not to be survived.
The short version
We collect the least we can get away with, we do not sell anything to anyone, we do not run ads, and the most personal things you write are encrypted on your device before they ever reach us, so we cannot read them.
What the website collects
If you join the waitlist, we store the email address you give us, and the mission and timeframe if you choose to fill those in. We use them to email you once when the app is ready to try, and to understand which missions the early interest is coming from. That is all they are for.
The site is hosted on Cloudflare, which keeps standard request logs including IP addresses for security and abuse prevention. We do not run analytics or tracking scripts on the website.
What the app collects
- Your account. An email address, and the identifier your provider gives us if you sign in with Apple or Google. We never receive your password.
- What you put in. Your indicators and logs, people and notes, calendar blocks, planning sessions, study notes, and journal entries. This is your content. It exists so the app can show it back to you.
- Diagnostics. Crash reports and basic product analytics, so we can find what is broken and what nobody uses. This can be turned off in settings, and it is never tied to the content of what you write.
What we cannot read
Journal entries and weekly letters are encrypted on your device with a key derived from your passphrase before they are uploaded. We store the ciphertext. We do not have your passphrase and there is no way for us to recover it, which also means that if you lose it, those entries cannot be recovered by anyone, including us.
Who else is involved
We use a small number of services to run the app, and each one only sees what it needs: Supabase for the database, authentication, and file storage; Cloudflare for the website; Apple and Google for sign in, app distribution, and push notifications; and error and analytics tooling for diagnostics. None of them is permitted to use your information for their own purposes.
Contacts you import stay on your device unless you save them into the app. Calendar access is used to read the events you choose to show and to write back the blocks you plan. We do not upload your address book or your calendar wholesale.
Your companion
If you invite a companion, they see only what you switch on, and only for as long as you leave it on. Turning a share off, or revoking the companion entirely, stops their access immediately. They can never see your people, your notes, or anything you have not shared.
What you can do
- Export. Everything, in JSON, CSV, and PDF, generated on your device.
- Delete. One tap in settings deletes your account and everything attached to it, including files. This is not reversible.
- Ask. Email hello@goodreport.app with any question about your data and you will get a real answer from a person.
Children
Good Report is built for adults and is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will remove it.
Changes
If this policy changes in a way that matters, we will say so in the app and update the date at the top. We will not quietly broaden what we collect.
Contact
Good Report is an independent app. It is not affiliated with or endorsed by The Church of Jesus Christ of Latter-day Saints.