← Back to Home

GoodScrolling Privacy Policy

Last Updated: August 21, 2026 Effective Date: August 21, 2026

1. Introduction

Welcome to GoodScrolling ("we," "our," "us"), operated by XDO LLC ("GoodScrolling / XDO LLC"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information.

This Privacy Policy explains:

  • What information we collect and why
  • How we use your information
  • Who we share your information with
  • Your rights and choices regarding your information
  • How we protect your information

GoodScrolling operates exclusively in the United States under U.S. federal and state laws. By using GoodScrolling, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

  • Name (first and last)
  • Email address
  • Password (encrypted)
  • Phone number (optional, for SMS notifications and emergency codes)
  • Payment information (processed and encrypted directly by Stripe; we do not store raw card numbers)

Settings & Preferences:

  • Daily screen time limits
  • Penalty/pledge amounts
  • Selected charitable organization
  • App categories you choose to block
  • Notification preferences
  • Accountability Buddy contact information

Communications:

  • Support inquiries and correspondence
  • Feedback and survey responses

2.2 Information Collected Automatically

Aggregate Telemetry & Usage Data:

  • Aggregate screen time duration and unlock count events for user-selected blocked app categories
  • System pledge events (when daily screen time limits are exceeded)
  • Essential app navigation and feature usage within GoodScrolling
  • Privacy Isolation Guarantee: We only receive aggregate minute counts for app categories you choose to block via Apple Screen Time API or Android UsageStats/Accessibility. We never view, collect, or record your specific app names, browsing history, private messages, or photos.

Device Information:

  • Device type, model, and operating system version
  • IP address and approximate city/state location
  • Time zone settings

Essential Cookies & Analytics:

We use minimal cookies and tracking technologies strictly required to operate the service:

  • First-Party Essential Cookies: Authentication tokens and session management
  • Product Analytics: Google Analytics or PostHog for aggregate usage metrics

2.3 Financial Transaction Data

  • Pledge amounts and weekly settlement history
  • Payment status (success or retry)
  • Charitable donation records
  • Tax deductible receipts via Our Change Foundation

2.4 Information from Third Parties

Payment Processors (Stripe):

  • Payment success/failure notifications
  • Last 4 digits of payment method
  • Billing zip code for fraud prevention

Charitable Disbursement Partner (Change / Our Change Foundation):

  • Charity selection validation
  • Disbursement confirmation
  • 501(c)(3) tax receipt generation data

3. How We Use Your Information

3.1 To Provide Our Service

  • Create and manage your account
  • Process your pledges and charitable donations
  • Enforce screen time limits via device APIs
  • Send emergency unlock codes to designated Accountability Buddies
  • Generate 501(c)(3) receipts and tax documentation
  • Provide customer support

3.2 To Improve Our Service

  • Analyze aggregate usage patterns to fix bugs and improve performance
  • Optimize user interface and onboarding experience

3.3 For Essential Communications

  • Send Saturday pre-settlement usage recaps and Sunday settlement receipts
  • Send security alerts and password reset links
  • Provide customer support updates

3.4 For Legal & Compliance Purposes

  • Comply with applicable U.S. federal and state legal obligations
  • Enforce our Terms of Service
  • Prevent financial fraud and abuse

4. How We Share Your Information

We do not sell, rent, or monetize your personal information or phone usage data. We only share information with trusted third-party service providers essential to running GoodScrolling:

4.1 Essential Service Providers

  • Stripe: Encrypted payment processing (PCI-DSS Level 1 compliant)
  • Change / Our Change Foundation: 501(c)(3) charitable disbursement and tax receipt generation
  • Twilio: SMS delivery for Emergency Access Codes to your Accountability Buddy
  • SendGrid: Transactional email delivery (receipts, usage recaps, password resets)
  • Supabase: Encrypted database hosting and authentication infrastructure
  • Google Analytics / PostHog: Aggregate website traffic and product usage analysis

4.2 Accountability Buddies

With your explicit direction, we share limited information with your designated Accountability Buddy:

  • Emergency unlock code SMS requests initiated by you

4.3 Charitable Organizations

We share the following with your selected charity (via Our Change Foundation):

  • Your name (unless you choose to donate anonymously)
  • Donation amount and settlement date

4.4 Business Transfers

If GoodScrolling / XDO LLC is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. You will be notified via email of any change in ownership.

4.5 Legal Disclosures

We may disclose your information if required to do so by U.S. law, court orders, or subpoenas.

5. Data Retention

Active Accounts:

  • We retain account information while your account remains active.

Account Deletion:

  • Account information: Permanently deleted within 30 days of account deletion request (`/delete-account`).
  • Financial transaction records: Retained for 7 years as required by IRS tax compliance laws.

6. Data Security

We implement industry-standard security safeguards:

  • In Transit: SSL/TLS 256-bit encryption for all network communications.
  • At Rest: AES-256 encrypted database storage.
  • Payments: PCI-DSS Level 1 compliant processing managed exclusively by Stripe.

7. Your Rights & Choices

  • Access & Export: View and export your full pledge and donation history anytime in Settings.
  • Correction: Update account details via your dashboard profile settings.
  • Account Deletion: Permanently delete your account and associated data by visiting `/delete-account` or contacting `stephan+support@goodscrolling.com`.
  • State-Specific Privacy Rights (California CCPA/CPRA, Virginia, Colorado, etc.): We honor rights to request access, correction, or deletion of personal data. GoodScrolling does not "sell" or "share" personal data for cross-context behavioral advertising.

To exercise any privacy rights, contact `stephan+privacy@goodscrolling.com`.

8. Children's Privacy

GoodScrolling is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has registered, please contact `stephan+privacy@goodscrolling.com` and we will promptly remove the account.

9. Geographic Availability

GoodScrolling currently operates exclusively in the United States. If you are accessing the service from outside the United States (including Canada), please note that your data is processed in the U.S. under U.S. privacy laws. We are preparing for international expansion (including Canada)—if you represent a international charity disbursement provider, please contact `stephan@goodscrolling.com`.

10. Contact Us

Privacy Officer & Inquiries: `stephan+privacy@goodscrolling.com` General Support: `stephan+support@goodscrolling.com`

Mailing Address: GoodScrolling / XDO LLC 30 N Gould St, Ste N Sheridan, WY 82801 United States

END OF PRIVACY POLICY