Goyo Privacy Policy

Applies to the on-device iOS app version 0.2.0. Effective October 4, 2026.

Operator and contact

Luane Studio · luanestudio25@gmail.com. You do not need to send health records or exports to obtain support. If you email support, your address and message are processed by the email provider to respond. Support messages are deleted within 90 days after the inquiry is closed, unless a legal retention obligation requires a specific longer period. Contact the same address to request access, correction or deletion. We do not hold your app records and cannot retrieve or erase them remotely. Support uses Google Gmail; Google’s privacy policy applies and email may be processed outside your region.

Information on your device

Goyo stores check-in answers, notes, events, questionnaire responses and entry timestamps locally. With your permission, it reads Apple Health sleep, steps and resting heart rate for daily summaries and sleep rhythm views. It does not write to Apple Health. Approximate location is used temporarily for day/night and seasonal backgrounds; coordinates are not saved or uploaded. Preferences and local notification schedules stay on your device.

Collection and sharing

The distribution app does not send your records to an operator server. It has no account registration, advertising, tracking, analytics SDK, external AI interpretation or automatic cloud sync. Calculations run on-device. Widgets receive a local display summary through shared device Keychain access.

You may explicitly export a plain JSON or CSV copy using the system share sheet. Exports are not separately password-encrypted. You choose the recipient or storage provider, whose policies apply. Files may contain health information. External help pages and optional original-source links open another service under its own policies.

Permissions and visibility

Health, location and notification permissions are optional. Disabling automatic Health import stops future imports; previously imported copies require separate deletion. Notifications and widgets may show information on the Lock Screen. Morning forecast previews are optional.

Protection, retention and deletion

The vault uses AES-GCM encryption, iOS file protection and a device-only Keychain key. Device authentication is requested on app opening or returning from another app. The vault and restore safety copy are excluded from system backups. The app does not provide iCloud sync or automatic cloud backup.

Entries remain until you remove them. Individual entries can be deleted in the record list. A pre-restore encrypted safety copy and immutable forecast evaluations may retain prior information. To remove all local app files, delete the app in iOS Settings; offloading is different and retains data. Deleting the app does not delete copies you exported elsewhere. Loss of the device or app deletion may make recovery impossible. Temporary exports are removed on the next export or app launch.

Encryption does not protect an unlocked screen or a compromised operating system. Keep your device passcode secure.

This website

Cloudflare Pages hosts these public pages. Cloudflare may process connection information such as IP address, request time and browser information for delivery and security. We have not added advertising, visitor analytics scripts or input forms. This site does not receive app health records. See Cloudflare’s policy and Google’s policy for provider processing.

Service scope and changes

Goyo supports personal recording and reflection, not diagnosis, treatment, medication advice, crisis prediction or emergency response. Mood weather is a metaphor for self-reported experience. Material data-processing changes will be reflected in this policy and the app, with consent obtained where required. Historical personal-server test policies do not describe this distribution app.