Back to Home

GoodScrolling Privacy Policy

Last Updated: February 2, 2026 Effective Date: February 3, 2026


1. Introduction

Welcome to GoodScrolling ("we," "our," "us"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information.

This Privacy Policy explains:

  • What information we collect and why
  • How we use your information
  • Who we share your information with
  • Your rights and choices regarding your information
  • How we protect your information

By using GoodScrolling, you agree to the collection and use of information in accordance with this Privacy Policy.


2. Information We Collect

2.1 Information You Provide Directly

Account Information:

  • Name (first and last)
  • Email address
  • Password (encrypted)
  • Phone number (optional, for SMS notifications)
  • Payment information (processed and stored by Stripe, not by us)

Settings & Preferences:

  • Daily screen time limits
  • Penalty/pledge amounts
  • Selected charitable organization
  • App categories you choose to block
  • Notification preferences
  • Accountability Buddy contact information

Communications:

  • Support inquiries and correspondence
  • Feedback and survey responses
  • Messages sent through the platform

2.2 Information Collected Automatically

Usage Data:

  • Screen time data collected via Apple Screen Time API
  • App usage patterns (which apps you use, when, for how long)
  • Pledge events (when you exceed limits and unlock apps)
  • Feature usage within GoodScrolling
  • Session duration and frequency

Device Information:

  • Device type, model, and operating system version
  • Unique device identifiers (iOS Advertising Identifier - IDFA)
  • IP address and approximate location (city/state level)
  • Browser type and language preferences
  • Time zone settings

Tracking Technologies:

We use cookies, pixels, and similar tracking technologies, including:

  • First-Party Cookies: For authentication, preferences, and essential functionality
  • Analytics Cookies: Google Analytics, Mixpanel, Amplitude for usage analysis
  • Marketing Pixels: Facebook Pixel, Google Ads, TikTok Pixel, LinkedIn Insight Tag
  • Attribution Tracking: AppsFlyer, Branch, or similar for app install attribution
  • Session Recording: Hotjar, FullStory, or similar for user experience analysis
  • A/B Testing: Optimizely, VWO, or similar for feature testing

Financial Transaction Data:

  • Pledge amounts and timing
  • Payment processing status
  • Charitable donation records
  • Receipt and tax documentation

2.3 Information from Third Parties

Apple Screen Time API:

  • App usage data (categories, not specific app names unless you grant permission)
  • Screen time statistics
  • Device activity patterns

Payment Processors (Stripe):

  • Payment success/failure notifications
  • Last 4 digits of payment methods
  • Billing address information
  • Fraud detection signals

Charitable Disbursement Partner (Change):

  • Charity selection validation
  • Disbursement confirmation
  • Tax receipt generation data

Analytics & Attribution Partners:

  • Ad campaign performance data
  • Install source attribution
  • Demographic insights (age range, general interests)

3. How We Use Your Information

3.1 To Provide Our Service

  • Create and manage your account
  • Process your pledges and charitable donations
  • Enforce screen time blocks via Apple Screen Time API
  • Send emergency unlock codes to Accountability Buddies
  • Generate receipts and tax documentation
  • Provide customer support

3.2 To Improve Our Service

  • Analyze usage patterns to improve features
  • Conduct A/B testing of new functionality
  • Identify and fix technical issues
  • Develop new features based on user behavior
  • Optimize user interface and experience

3.3 For Marketing & Communication

  • Send service updates and notifications
  • Provide weekly/monthly progress reports
  • Share tips for maximizing your screen time reduction
  • Send promotional emails about new features (you can opt out)
  • Retarget ads to users who visited but didn't sign up

3.4 For Legal & Compliance Purposes

  • Comply with legal obligations
  • Enforce our Terms of Service
  • Prevent fraud and abuse
  • Protect our rights and property
  • Respond to legal requests from authorities

3.5 With Your Consent

We may use information for other purposes with your explicit consent, such as:

  • Participating in research studies
  • Beta testing new features
  • Appearing in case studies or testimonials

4. How We Share Your Information

4.1 Service Providers

We share information with third-party service providers who help us operate:

Essential Service Providers:

  • Stripe: Payment processing (PCI-DSS compliant, they store payment info)
  • Change: Charitable disbursement and tax receipt generation
  • Twilio or similar: SMS delivery for emergency unlock codes
  • Amazon Web Services (AWS) or similar: Cloud hosting and database services
  • Auth0 or similar: Authentication and account security

Analytics & Tracking:

  • Google Analytics: Usage statistics and user behavior
  • Mixpanel/Amplitude: Product analytics and feature adoption
  • Hotjar/FullStory: Session recording and heatmaps
  • Segment: Data pipeline and integration management

Marketing & Advertising:

  • Facebook/Meta: Facebook Pixel for retargeting and lookalike audiences
  • Google Ads: Conversion tracking and remarketing
  • TikTok: Ad performance and attribution
  • LinkedIn: B2B targeting and conversion tracking
  • AppsFlyer/Branch: Mobile attribution and deep linking

4.2 Accountability Buddies

With your explicit permission, we share limited information with your designated Accountability Buddy:

  • Emergency unlock requests (when you initiate them)
  • Weekly summary reports (if you enable this feature)
  • Progress milestones (if you enable this feature)

4.3 Charitable Organizations

We share the following with your selected charity (via Change):

  • Your name (unless you choose to donate anonymously)
  • Donation amount
  • Donation date
  • Optional dedication or message

4.4 Business Transfers

If GoodScrolling is involved in a merger, acquisition, or sale of assets, your information may be transferred. You will be notified via email and/or prominent notice on our website of any change in ownership or use of your personal information.

4.5 Legal Requirements

We may disclose your information if required to do so by law or in response to:

  • Subpoenas or court orders
  • Legal processes or government requests
  • Protection of our rights, property, or safety
  • Prevention of fraud or illegal activity

4.6 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you, such as:

  • Industry research reports ("Users save an average of 1.5 hours daily")
  • Marketing materials ("100K+ users have pledged $5M to charities")
  • Investor updates (growth metrics, engagement statistics)

5. Tracking Technologies & Advertising

5.1 Cookies & Similar Technologies

Essential Cookies (Cannot be Disabled):

  • Authentication tokens
  • Session management
  • Security features
  • Essential preferences

Analytics Cookies:

  • Google Analytics: _ga, _gid, _gat
  • Mixpanel: mp_*, mixpanel
  • Amplitude: amplitude_id, amplitude_session

Advertising Cookies:

  • Facebook Pixel: _fbp, _fbc
  • Google Ads: *gcl**, DSID, IDE
  • TikTok Pixel: _ttp
  • LinkedIn Insight: li_sugr, UserMatchHistory

5.2 Your Choices

Browser Settings:

  • Most browsers allow you to refuse cookies or alert you when cookies are being sent
  • Note: Blocking essential cookies will prevent you from using GoodScrolling

Opt-Out Tools:

Mobile Advertising:

  • iOS: Settings \> Privacy \> Tracking \> Ask App Not to Track
  • iOS: Settings \> Privacy \> Advertising \> Limit Ad Tracking (older iOS versions)

5.3 Do Not Track

Our service does not currently respond to "Do Not Track" browser signals, as there is no industry standard for how to interpret them.

5.4 Targeted Advertising

We use your information to show you targeted ads on third-party platforms:

  • Retargeting: Show ads to people who visited our website but didn't sign up
  • Lookalike Audiences: Find new users similar to our existing users
  • Interest-Based Ads: Target users interested in productivity, wellness, or charitable giving
  • Conversion Tracking: Measure which ads lead to sign-ups

6. Data Retention

Active Account Data:

  • We retain your information for as long as your account is active
  • Includes all usage data, pledges, and settings

After Account Deletion:

  • Account information: Deleted within 30 days
  • Transaction records: Retained for 7 years (tax/legal compliance)
  • Aggregated analytics: Retained indefinitely (de-identified)
  • Backup systems: May retain data for up to 90 days

Legal Holds:

  • Information subject to legal holds or investigations is retained until resolved

7. Data Security

7.1 Security Measures

We implement industry-standard security measures including:

  • Encryption: SSL/TLS encryption for data in transit
  • Database Encryption: AES-256 encryption for data at rest
  • Access Controls: Role-based access, multi-factor authentication for staff
  • Regular Audits: Periodic security assessments and penetration testing
  • PCI Compliance: Payment data handled by PCI-DSS compliant processors

7.2 Your Responsibilities

  • Keep your password secure and confidential
  • Log out of your account on shared devices
  • Notify us immediately of unauthorized access

7.3 No Guarantee

While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.


8. Your Rights & Choices

8.1 Access & Portability

You can:

  • Access your personal information through your account dashboard
  • Request a copy of your data in machine-readable format
  • Export your screen time data, pledge history, and settings

8.2 Correction & Update

You can:

  • Update your account information at any time
  • Correct inaccurate information through account settings
  • Contact stephan+support@goodscrolling.com for assistance

8.3 Deletion

You can request account deletion:

  • Through account settings ("Delete Account" option)
  • By emailing stephan+support@goodscrolling.com
  • Note: Some information may be retained for legal/compliance purposes (see Section 6)

8.4 Marketing Opt-Out

You can opt out of marketing communications:

  • Click "Unsubscribe" in any marketing email
  • Update preferences in account settings
  • Note: You'll still receive transactional emails (receipts, security alerts)

8.5 Cookie Management

You can manage cookies through:

  • Browser settings (block or delete cookies)
  • Opt-out tools listed in Section 5.2
  • Our cookie consent manager (when you first visit our website)

8.6 State-Specific Rights

California Residents (CCPA/CPRA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or shared (we do not "sell" data)
  • Right to delete personal information
  • Right to correct inaccurate information
  • Right to opt out of targeted advertising
  • Right to non-discrimination for exercising your rights

Virginia, Colorado, Connecticut, Utah Residents:

  • Similar rights to California residents under respective state laws

To exercise these rights, contact stepan+privacy@goodscrolling.com.


9. Children's Privacy

GoodScrolling is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately at stephan+privacy@goodscrolling.com and we will delete it.


10. International Data Transfers

10.1 Primary Operations

GoodScrolling operates primarily in the United States. Your information is processed and stored on servers in the United States.

10.2 Canadian Users

If you are accessing GoodScrolling from Canada:

  • Your data may be transferred to and processed in the United States
  • U.S. privacy laws may differ from Canadian laws
  • Your data is subject to U.S. government access under applicable laws
  • We implement appropriate safeguards for cross-border transfers
  • You have rights under Canadian privacy laws (PIPEDA)

10.3 European Economic Area (EEA) / UK

We do not currently target or market to EEA/UK residents. If you access GoodScrolling from the EEA/UK, your data will be transferred to the United States, which may not provide the same level of protection as EEA/UK law.


11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date
  • Sending email notification (for significant changes)
  • Displaying an in-app notification

Your continued use of GoodScrolling after changes take effect constitutes acceptance of the updated Privacy Policy.


12. Contact Us

Privacy Questions: stephan+privacy@goodscrolling.com

General Support: stephan+support@goodscrolling.com

Mailing Address: Goodscrolling Scoop AI, LLC 131 Continental Dr Suite 305 Newark, DE, 19713 US United States

Data Protection Officer (if applicable): stephan@goodscrolling.com


13. Additional Disclosures

13.1 California Shine the Light

California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. Contact stephan+privacy@goodscrolling.com with "California Shine the Light" in the subject line.

13.2 Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of personal information. We do not sell personal information as defined under Nevada law. If you have questions, contact stephan+privacy@goodscrolling.com.

13.3 Canadian PIPEDA Compliance

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian users, including providing:

  • Clear consent mechanisms
  • Access to personal information
  • Accuracy and correction rights
  • Safeguards for personal information
  • Openness about privacy practices

END OF PRIVACY POLICY