PRIVACY POLICY
This Privacy Policy explains how NTG (ImGood, we, us, or our) collects, uses, discloses, stores, and deletes personal information when you use the ImGood mobile application and related services (the Service).
ImGood helps you record purchases you chose not to make and track the amounts you may decide to move into your own savings. ImGood does not connect to your bank, hold or transfer money, process payments, or obtain your bank or card information.
Information We Collect
Account information
You must create an account to use the Service. We collect your email address and display name. If you create an account with an email address and password, Supabase Auth handles and hashes the password; ImGood does not store a readable copy. If you use Sign in with Apple or Google sign-in, we receive the account information that the provider makes available. Apple may provide a private relay email address instead of your personal email address.
Content you create
| Type | Information |
|---|---|
| Logged skips | A free-text description, amount in whole cents, local date, whether the item is a repeat habit or one-off product, and how it was entered. |
| Habits | Name, default amount, color, and display order. |
| Paychecks | Week start and end dates, amount issued, amount taken, and whether and when it was taken, skipped, or expired. |
| Goal | A free-text goal name and target amount. |
| Account identifier | A user identifier generated by Supabase for authentication and record access. |
Free-text fields may contain any information you choose to enter. Please do not enter bank account numbers, card numbers, passwords, health information, or other sensitive information that the Service does not require.
Information we do not collect
- Bank account, payment-card, transaction, or payment-processing information.
- Precise or approximate location, contacts, calendars, health information, biometric information, photos, or camera access.
- Advertising identifiers or information from ad networks.
- Analytics or crash-reporting data from third-party analytics SDKs.
- Push-notification tokens. Reminders are scheduled locally on your device.
The current Service does not use your information for advertising, cross-context behavioral advertising, analytics, profiling, or training artificial intelligence models.
How We Collect Information
We collect information directly from you when you create an account or enter content. We may also receive limited account information from Apple or Google when you choose one of those sign-in methods. The app creates technical account identifiers needed to authenticate you and associate your synced records with your account.
How We Use Information
- Create and maintain your account.
- Display your logged skips, weekly totals, paychecks, habits, and savings goal.
- Synchronize your information between your devices and maintain a server-side backup replica.
- Authenticate you, protect account access, troubleshoot the Service, and maintain security.
- Respond to support requests and exercise requests.
- Comply with law and enforce our Terms and Conditions.
How the Service Stores and Synchronizes Information
Your device is the primary source of the information shown in the app. The app stores data first in a SQLite database within the app’s device sandbox and can operate offline. When you are signed in and online, the app sends changed records to Supabase and retrieves changed records so your information can be backed up and used on another device. Conflicts are resolved using the most recent change.
Supabase stores account information and replicated entries, paychecks, habits, and goals. Access controls require each signed-in account to match the user identifier on its records.
When We Disclose Information
We disclose personal information only as described below. We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising, and we do not disclose it for another company’s direct marketing.
| Recipient | Information and purpose |
|---|---|
| Supabase | Account information and user-created content for authentication, database hosting, backup, and synchronization. |
| Apple | Information needed to complete Sign in with Apple when you select it. Apple also maintains App Store download and purchase records under its own policies. |
| Information needed to complete Google sign-in when you select it. | |
| Authorities and legal recipients | Information when reasonably necessary to comply with law, legal process, or a valid government request; protect rights and safety; investigate fraud or misuse; or enforce agreements. |
| Transaction parties | Information reasonably necessary to evaluate or complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and legal requirements. |
Our service providers may process information only to provide services to us and subject to their contracts and applicable law.
Retention and Deletion
Individual entries
Deleting an individual entry hides it from the app but does not immediately erase the underlying record. The record receives a deletion timestamp and remains in your account so that history, totals, and synchronization remain consistent. Soft-deleted records are included if you export your account data.
Account deletion
You may delete your account in the app by opening Menu and selecting Delete account. Account deletion immediately removes the active Supabase Auth account and deletes associated entries, paychecks, habits, and goals from the active database. The app also erases that account’s rows from the device. Account deletion has no grace period and cannot be reversed.
Sign out
Signing out does not delete your account. Data stored locally remains on the device but is hidden until the same account signs in again. You should delete your account before disposing of a device if you want the local data erased through the app.
Your Choices and Privacy Rights
You can review and change much of your content in the app. You may export a complete JSON copy of your account data, including soft-deleted records, to a file you control. You may also delete your account in the app.
Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, or deletion of personal information; obtain a portable copy; or appeal our response to a request. Because we do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use it for qualifying profiling, there is no opt-out mechanism for those activities.
To submit a request or appeal, contact us at info@imgoodonthat.com. We may need to verify your identity before completing a request. You may use an authorized agent where applicable law permits. We will not discriminate against you for exercising a privacy right.
Security
We use administrative, technical, and organizational measures designed to protect personal information. These include device sandboxing, password hashing through Supabase Auth, and row-level access controls on synced records. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or disclosure will never occur.
International Data Transfers
The Service may process and store information in the United States or Canada. If information is transferred from another country, we use safeguards required by applicable law. The laws of the receiving country may differ from those where you live.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. You must be at least 13 to use the Service. If the law where you live requires a higher minimum age to consent to online services, you may use the Service only if you meet that age or a parent or legal guardian validly consents. If you believe a child provided personal information in violation of this section, contact us at info@imgoodonthat.com.
Third Party Services
Apple, Google, Supabase, and the applicable app store process information under their own terms and privacy notices. We do not control their independent processing. The Service does not currently include RevenueCat, advertising networks, analytics SDKs, or crash-reporting SDKs. We will update this Policy before using a new service in a way that materially changes the practices described here.
Changes to This Policy
We may update this Policy as the Service or applicable law changes. We will post the revised Policy and update the Last updated date. If a change materially affects how we use personal information, we will provide additional notice when required by law. Your continued use after the effective date of a revised Policy is subject to the revised Policy, but we will obtain consent where the law requires it.