Privacy Notice

The short version: Good Decades collects only what it needs to provide the website, app, newsletter, and features you choose to use. We do not sell or rent personal information. We do not use health information to target products or advertising, and we keep health and commerce systems separated.

This notice applies to gooddecades.com, the Good Decades web app, and related services that link to it. The separate Consumer Health Data Policy explains our practices for health information in more detail.

Who is responsible

Good Decades is responsible for the personal information described here. For privacy questions or requests, email [email protected]. We will add any legally required business-registration and postal details to this notice before commercial launch.

Information we collect

What we collect depends on how you use Good Decades:

• Website use: pages requested, referral information, approximate region, device and browser information, IP address, timestamps, and security logs.
• Newsletter: email address, language, list or edition selected, subscription status, and delivery events such as sends, bounces, and unsubscribes.
• Account: email address, authentication records, name, language, timezone, country or region, unit preference, and account settings. Passwords are handled by our authentication provider; we do not see your password.
• App activity: goals, habits, saved content, plans, workouts, notification settings, feature interactions, and support or privacy requests.
• Health information you choose to enter: check-ins, sleep, activity, body measurements, nutrition, symptoms, conditions, supplements, sex-related or reproductive-health information, and notes. Not every category is available in every version of the service.
• Connected services: if you choose to connect a device or outside service, we receive only the categories shown on the connection screen and covered by the permission you grant.
• Commerce: product and offer views, outbound affiliate clicks, saved products, and transaction information if Good Decades later sells something directly. Merchants process purchases made on their own sites under their own notices.

We may derive summaries, trends, recommendations, or a focus area from the information you provide. We tell you when a feature does this. Good Decades does not make solely automated decisions that produce legal or similarly significant effects.

Information that stays on your device

The public website’s Check-In works without an account. Its answers and result are stored in your browser under gd-checkin and are not sent to Good Decades. They remain until you clear site data or use the delete control on the result page. Calculator inputs are processed in the browser unless a feature clearly offers and you choose a server-side save.

Cookies and similar technology

The account app uses essential cookies to keep you signed in, protect forms, and maintain security. The public Check-In uses browser storage as described above. These technologies are necessary for the feature you request.

Good Decades does not currently set advertising cookies or use session replay. If we introduce nonessential analytics or advertising technology, we will list it here and provide consent controls before activating it where required. Your browser may also receive cookies after you follow a link to an independent merchant; that merchant controls its own site.

Why we use information

We use personal information to provide and secure the service; create and authenticate accounts; save the records and settings you request; calculate results and provide personalized education; send requested newsletters, reminders, and account messages; answer support and rights requests; prevent abuse; understand reliability and feature use; comply with law; and establish or defend legal claims.

Where a law requires a legal basis, we rely on performance of our agreement, your consent, our legitimate interests in operating and securing the service, and compliance with legal obligations, as appropriate. We request explicit or separate consent where required for sensitive health information, connected data, research use, or marketing.

Health and commerce stay separate

Health records are not used to choose advertisements, affiliate products, or merchant offers. Commerce events do not become health records. We do not build advertising audiences from symptoms, conditions, reproductive-health data, measurements, or the health content associated with your account.

We may use a health preference to provide the app feature you requested—for example, using an accommodation to substitute an exercise. That is health personalization, not commerce personalization.

When information is disclosed

We disclose information only as needed to:

• Service providers that perform authentication, database hosting, infrastructure, email delivery, security, support, or other operations for us. Supabase provides authentication and data infrastructure for the app.
• A merchant or outside service you choose, when you follow a link, connect an account, or direct us to send information.
• Professional advisers and authorities when reasonably necessary to meet legal obligations, protect people or the service, or establish legal claims.
• A successor organization in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and the promises in this notice.

Our providers may process information in countries other than your own. Where required, we use contractual or other lawful transfer safeguards. We do not permit providers to use health information for their own advertising.

Sale, sharing, and advertising

Good Decades does not sell personal information. We do not share personal information for cross-context behavioral or targeted advertising, and we do not use health information for advertising. Because we do not currently engage in these practices, there is no sale or targeted-advertising opt-out needed. If that changes, we will update this notice and provide the required controls before the change takes effect.

Retention

We keep information only for as long as needed for the purpose described:

• local Check-In data remains on your device until you delete it;
• newsletter information remains while you are subscribed, with a limited suppression record afterward so we can honor the unsubscribe;
• account and app records remain while the account is active and during the 14-day account-deletion grace period;
• privacy requests, consent records, fraud-prevention records, and legally required transaction records may be retained longer to document compliance or meet legal obligations; and
• encrypted backups and disaster-recovery copies expire on their normal rotation and are not restored for ordinary product use after deletion.

Security

We use access controls, encryption in transit, limited administrative access, logging, and other organizational and technical safeguards appropriate to the sensitivity of the information. No online service can guarantee absolute security. Email [email protected] if you believe you found a security issue; do not include health information in the first message.

Your choices and rights

Depending on where you live, you may have rights to know, access, correct, export, delete, restrict, or object to processing; withdraw consent; opt out of certain sharing; and appeal a refusal. We do not discriminate against anyone for using a privacy right.

Signed-in users can request an export or start account deletion from the app’s Privacy screen. Anyone may use our Privacy Choices page or email [email protected]. We may ask for information reasonably needed to verify the request. You do not have to create a new account to make a request.

You can unsubscribe through any newsletter email and manage app reminders and product updates separately. Revoking a connected-service permission stops future collection; it does not automatically delete information already imported, which you can request separately.

Children

Good Decades is designed for adults and is not directed to children under 13. The account service is for people 18 or older. If you believe a child provided personal information, contact us so we can investigate and delete it.

Changes to this notice

We show the last-updated date at the top. If a change materially affects how we use health information or another sensitive category, we will provide additional notice and obtain consent when required before applying the new use.

Contact

Email [email protected] for questions, complaints, or requests. You may also have the right to complain to the privacy or data-protection authority where you live.