Information we handle
When you sign in with Google, EncoGoals receives and stores your name, email address, and profile image (which you can update in your profile). EncoGoals creates an account identifier and stores the workspace information you add or generate, including goals and categories, habits, cumulative progress, task lists and items, ad-hoc tasks, plans, progress/activity logs, focus sessions, streak and analytics data, notifications, preferences, and Virtual Diary content such as its title, pages, drawings, stickers and uploaded diary images.
If you enable browser push notifications, EncoGoals stores the push-service endpoint and keys, your browser user-agent, and the time zone provided by your browser so it can deliver notifications to your device. If you connect X, EncoGoals stores your X account ID, handle, display name and profile-image URL, granted scopes, token expiry, and encrypted access and refresh tokens. For billing, EncoGoals stores plan and subscription status, billing period, provider customer/subscription/payment identifiers, and related billing or reconciliation records; it does not store full card numbers or card security codes.
EncoGoals and its hosting/security providers may generate operational, error, and security records needed to run and protect the service. The hosting provider may process connection information such as IP address, browser, or device details in access or security logs. Vercel Web Analytics processes website usage information for aggregate traffic measurement.
How we use information
We use account information to sign you in, keep your workspace private, and communicate in the app. Your productivity records power your plans, history, charts, progress summaries, and focus features. Subscription records determine feature access and support billing.
Service providers and connected accounts
Google provides authentication. Dodo Payments, the payment provider currently used by EncoGoals, processes checkout and subscription payments; sensitive card credentials are handled by the provider rather than stored directly by EncoGoals. EncoGoals retains limited payment and subscription metadata as described above.
If you connect X, EncoGoals uses the account details and encrypted OAuth tokens you authorize to identify the connected account, refresh authorization where permitted, and create or publish posts according to your sharing settings. You can disable automated sharing and disconnect X in settings. Disconnecting clears the tokens held by EncoGoals and stops future EncoGoals publishing; it does not remove posts already published to X. You can also revoke access through X.
Vercel provides hosting and Web Analytics. These and other providers process information under their own terms and privacy notices and may retain information as required to deliver their services, protect against abuse, or meet legal obligations.
Cookies and browser storage
Authentication uses session technologies to keep you signed in. The browser stores an in-progress focus timer locally, temporary sharing-settings drafts in session storage, and isolated demo data in session storage. Demo reminder preferences may use local storage. Clearing browser storage can remove unsaved local state.
Retention and deletion
We keep account and productivity data while your account is active and as needed to provide the features you use. You can delete individual records in the app; this may affect related totals and history. Account deletion through the in-app function cancels or verifies the subscription as required, then removes the account and user-owned workspace, connected-account, notification, and subscription records from EncoGoals’ active application database. A minimal deletion tombstone and billing/security audit records may be retained to prevent account recreation, reconcile transactions, handle disputes, prevent fraud, or meet legal obligations.
If you download an EncoGoals workspace backup, the file is saved by your browser to your device. The backup feature does not keep a separate recovery copy on our servers. The file is signed to detect changes, but is not encrypted or password-protected; keep it somewhere private. A valid backup can restore included workspace records only to the same EncoGoals account. Virtual Diary content is not included in this backup and cannot be recovered from it. Restoring a workspace backup leaves an existing diary unchanged.
Payment providers, X, hosting providers, and other third parties may retain information under their own policies and legal obligations. Infrastructure backups and security logs may retain information for limited periods; deletion from those systems is not necessarily immediate. Account deletion does not delete content already published on X or records that a provider must retain.
Security
We use reasonable technical and organisational measures designed to protect user information, including user-scoped access controls and encryption of connected-account tokens. No internet-based system can guarantee absolute security. Please report suspected account or security problems to support@encogoals.com.
Your choices and rights
You can edit or delete many records in the app, disconnect X, and change sharing choices. For access, correction, deletion, or other privacy requests, email support@encogoals.com. Additional rights may apply under applicable law.
Age eligibility
EncoGoals is intended for people aged 18 or older, or the age of legal majority where they live if higher. We do not offer child accounts or a parental-consent system. You must also meet the age and eligibility requirements of Google, X, the payment provider, and applicable law to use those services.
Changes and contact
We may update this policy. For material changes, we will provide reasonable notice where required by law or reasonably practicable; minor corrections and urgent security or legal changes may take effect sooner. Continued use does not waive rights that cannot be waived under applicable law. The dates above show when this policy was updated and became effective. EncoGoals is an independent software product operated from India by Mohit (@encodedfeat), not a registered company named EncoGoals. For privacy questions or requests, email support@encogoals.com.