Privacy policy
Goose Coach · effective 15 October 2026
- Goose stores your training and health data only so the app can work for you: showing it, and keeping your iPhone, Mac and browser in sync.
- We don't sell it, rent it, use it for advertising, or share it with data brokers. There are no ads, no tracking, no analytics tools and no third-party SDKs in Goose.
- Diagnostics are opt-in. They are off unless you switch them on, and they never include your name, email or health data.
- You can download everything we hold about you, or delete it all, at any time.
- It's stored in the EU, with Hetzner in Germany.
Who we are
Goose (“Goose Coach” on the App Store) is made and run by Alexander Carnes, who is the data controller for the Goose service. For anything about your data, email privacy@goosecoach.app.
What we store, and why
Only what you give Goose or connect to it, and only to run the app for you:
| What | Details |
|---|---|
| Your account | Email address and name. Your password is stored only as a one-way hash (argon2id), so we can't read it. |
| Profile details you choose to add | Birthdate, sex, height, weight, units, planned lifespan (for Life in Weeks) and lift maxes. All optional. |
| Health and fitness data | Sleep (score, stages, times), training readiness, HRV, resting heart rate, body battery, stress, steps, calories, intensity minutes, VO2max, SpO2, respiration and training load. It comes from Garmin files or exports you upload, from your Garmin account if you connect it, or from Apple Health on iPhone if you allow it. |
| Workouts and activities | What you log or import: type, time, duration, distance, heart rate, rounds, notes and the watch's device name. Goose doesn't store GPS routes. Activity summaries received from a connected Garmin account can include the start location. |
| Energy planner | Tasks, notes and any places you type in. |
| Subscription | Whether you subscribe, plus the Stripe or Apple reference for it. We never see or store card numbers. |
Uploaded Garmin files and export zips are read in memory and then discarded; only the resulting records are kept. Raw data received from Garmin's servers is kept for at most 30 days, in case it needs re-processing.
Legal basis (GDPR): we process your account data to provide the service you signed up for (Art. 6(1)(b)). We process health data because you explicitly choose to add or connect it (Art. 9(2)(a)). You can withdraw that consent at any time by deleting the data or your account.
What we don't do
- No advertising, no selling or sharing your data for marketing, and no tracking across apps or websites.
- No analytics or crash-reporting SDKs in the app or the website.
- No cookies. The website uses your browser's local storage only to keep you signed in and to remember your chosen style.
- No marketing emails. Goose doesn't send email at all.
- Your data isn't used to train AI models.
- Apple Health data is used only inside Goose, as Apple requires, and never for advertising.
We don't look at your data. The only exceptions are when keeping the service running requires it (for example, fixing an error that affects your account) or when you ask us for help.
Optional diagnostics (opt-in)
To improve Goose we'd like to know when it crashes and roughly how it's used, but only if you agree. On iPhone, iPad and Mac this goes through Apple's own setting, which is off unless you turn it on: Settings → Privacy & Security → Analytics & Improvements → Share with App Developers.
If you turn it on, Apple shares with us:
- crash reports (which part of the app failed, the app version);
- your device type and operating system version (for example “iPhone 16, iOS 26”);
- anonymous app activity, such as how often the app is opened, how long sessions last, and app installs and deletions.
Apple strips personal details before sharing. We can't link this to your Goose account, and it never contains your name, email, health or workout data. Switch it off at any time in the same place. The Goose website collects no diagnostics.
Separately, our server records technical errors (for example, a failed import) so we can fix them. It doesn't record which pages you visit or your IP address, and these error logs are deleted after 14 days. To slow down password guessing, the sign-in page keeps a short-lived count of attempts per IP address in memory; it is never saved.
Where your data is stored
On a server rented from Hetzner Online GmbH in Falkenstein, Germany, under a data processing agreement as GDPR requires. All traffic between your devices and Goose is encrypted (HTTPS). Backups are taken nightly and kept for 14 days. On your devices, Goose keeps a copy of your data inside the app so it works offline, and sign-in tokens go in the system keychain.
Who else is involved
- Hetzner (Germany) hosts the server and backups.
- Stripe handles payment if you subscribe on the website. Stripe receives your email and payment details directly and acts under its own privacy policy. Stripe may process data in the United States under the EU–US Data Privacy Framework and standard contractual clauses.
- Apple handles App Store purchases and Apple Health (on your device). Purchases follow Apple's privacy policy.
- Garmin, only if you connect your Garmin account: Goose receives your data from Garmin. If you disconnect or delete your account, we ask Garmin to stop sending it. Garmin keeps its own copy under its own policy.
We don't share your data with anyone else, unless the law requires it.
How long we keep it
- Your data is kept while you have an account.
- Deleted workouts and tasks disappear immediately and are permanently removed after 30 days. (The 30 days let your other devices learn about the deletion.)
- Raw Garmin data is deleted after 30 days, and server error logs after 14 days.
- When you delete your account, everything is deleted from the live database straight away, including the raw Garmin data. Copies drop out of the backups within 14 days. A web subscription is cancelled at the same time. An App Store subscription is managed by Apple, so cancel it in your Apple account's Subscriptions settings.
Your rights
Wherever you live, you can:
- Get a copy of your data: on the website, Profile → Your data → Download my data gives you everything in one JSON file. You can also email us.
- Correct it: edit your profile and records in the app.
- Delete it: Profile → Delete account in the app or on the website.
- Withdraw consent: disconnect Garmin or Apple Health, delete data, or turn diagnostics off.
- Object, or ask us to restrict processing: email us.
- Complain to your local data protection authority. We'd appreciate the chance to fix it first.
We answer requests within one month.
Children
Goose is not meant for anyone under 16, and we don't knowingly hold data from children under 16. If you think a child has signed up, email us and we'll delete the account.
Changes
If this policy changes, we'll update the date above. If a change affects what we collect or why, we'll tell you in the app first.