Privacy Policy
GoalWall ("the App") turns your goals into motivational lock screen wallpapers for iPhone. This policy explains what data the App and its backend services collect, why, how long it is kept, and the choices you have. The short version: we collect no account, no name, and no email address; the goal text you type is sent to our servers and AI providers to generate your wallpaper; your generation history stays on your device.
1. Data we collect
- Goal text (queries). The text you type describing your goal is sent to our backend to produce a motivational line and a wallpaper background. The original query text is stored on our servers as an analysis sample, linked to your anonymous installation identity, and is retained until you request deletion or the service is discontinued.
- Anonymous installation identity. The App creates a random installation ID, stored in the iOS Keychain, and verifies device integrity using Apple App Attest. We do not require or store any account, name, email address, or phone number.
- Device model identifier. The App reports its hardware model identifier (for example, "iPhone17,1") so the backend can render the wallpaper at the exact pixel size of your device.
- Generated wallpapers. Finished wallpapers are stored in a private Cloudflare R2 bucket and delivered to your device through download URLs that expire after 15 minutes.
- Subscription status. GoalWall Pro subscriptions are processed by Apple StoreKit and managed by RevenueCat. We receive an anonymous purchase identifier and entitlement status; we never see your Apple ID, payment card, or billing details.
2. Data that stays on your device
- Your generation history — wallpapers, the queries that produced them, and timestamps — is stored only in the App's private on-device storage. It is not synced to any cloud account and is permanently deleted when you uninstall the App.
- Wallpapers you save to your photo library are managed entirely by iOS.
3. Third-party processors
To operate the service, limited data is shared with these providers:
- DeepSeek — receives your goal text to generate the motivational line.
- Ofox — receives generation prompts to produce the wallpaper background image.
- RevenueCat — processes subscription purchases and entitlements.
- Cloudflare — hosts the private image storage (R2) and this website.
- Fly.io — hosts our API servers and database.
- Apple — App Attest device verification and StoreKit payments.
Optional operational telemetry (request structure, token usage, latency, anonymized installation ID) may be sent to Langfuse for reliability analysis. User goal text and images are excluded from this telemetry by default.
4. What we do not do
- No advertising, no advertising identifiers, and no third-party analytics or tracking SDKs.
- No sale or rental of your data to anyone.
- No user accounts, and no collection of your name, email address, or contacts.
- No use of your data to train models outside the generation providers listed above.
5. Retention and deletion
Goal text, generation records, and wallpapers are retained on our servers until you request deletion or the service is discontinued. On-device data is removed by uninstalling the App. Because we do not collect your identity, to request deletion of server-side data email privacy@goalwall.app and include your installation ID if you can provide it; we will delete the records we can associate with it and confirm within 30 days.
6. Children
The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13.
7. International processing
Data is processed in the regions where our providers (Fly.io, Cloudflare, DeepSeek, Ofox, RevenueCat) operate, which may include the United States, the European Union, and other jurisdictions. By using the App you consent to this transfer.
8. Changes to this policy
If we change this policy, the updated version will be posted at goalwall.app/privacy with a revised effective date. Material changes will also be noted in the App's release notes.
9. Contact
Questions or deletion requests: privacy@goalwall.app.
隐私政策
GoalWall（"本应用"）把你的目标生成成 iPhone 激励锁屏壁纸。本政策说明应用及后端服务收集哪些 数据、为何收集、保留多久以及你有哪些选择。简而言之：我们不设账号体系，不收集姓名和邮箱；你输入 的目标文字会发送到我们的服务器和 AI 服务商用于生成壁纸；你的生成历史只保存在本机。
1. 我们收集的数据
- 目标文字（Query）。你输入的目标描述会发送到后端，用于生成激励短句和壁纸背景。 原始 Query 会作为分析样本保存在我们的服务器上，并与匿名安装身份关联，直到你主动要求删除或服务 关闭为止。
- 匿名安装身份。应用会生成一个随机的安装 ID，保存在 iOS 钥匙串中，并通过 Apple App Attest 验证设备完整性。我们不要求也不保存任何账号、姓名、邮箱或手机号。
- 设备型号标识。应用会上报硬件型号标识（例如 "iPhone17,1"），以便后端按你设备的 精确像素尺寸渲染壁纸。
- 生成的壁纸。成品壁纸保存在私有的 Cloudflare R2 存储桶中，通过 15 分钟后失效的 下载链接发送到你的设备。
- 订阅状态。GoalWall Pro 订阅由 Apple StoreKit 处理、RevenueCat 管理。我们只会收到 匿名购买标识和权益状态，不会看到你的 Apple ID、支付卡或账单信息。
2. 只保存在你设备上的数据
- 你的生成历史——壁纸成品、产生它们的 Query 以及时间——只保存在应用的私有本机存储中，不会同步 到任何云端账号，卸载应用后会被永久删除。
- 你保存到相册的壁纸完全由 iOS 管理。
3. 第三方处理方
为提供服务，有限的数据会共享给以下服务商：
- DeepSeek — 接收你的目标文字，用于生成激励短句。
- Ofox — 接收生成提示词，用于生成壁纸背景图。
- RevenueCat — 处理订阅购买与权益。
- Cloudflare — 托管私有图片存储（R2）及本网站。
- Fly.io — 托管我们的 API 服务器与数据库。
- Apple — App Attest 设备验证与 StoreKit 支付。
可选的运行遥测（请求结构、token 用量、延迟、匿名化安装 ID）可能发送到 Langfuse 用于可靠性分析。 默认情况下用户目标原文与图片不会包含在该遥测中。
4. 我们不会做的事
- 不投放广告，不使用广告标识符，不集成任何第三方分析或跟踪 SDK。
- 不出售或出租你的数据给任何人。
- 不设用户账号，不收集你的姓名、邮箱或通讯录。
- 不将你的数据用于上述生成服务商之外的模型训练。
5. 保留与删除
目标文字、生成记录和壁纸会在服务器上保留，直到你要求删除或服务关闭。本机数据通过卸载应用即可 删除。由于我们不收集你的身份信息，如需删除服务端数据，请发送邮件至 privacy@goalwall.app，如能提供你的安装 ID 请一并附上； 我们将在 30 天内删除能够关联到的记录并回复确认。
6. 儿童
本应用不面向 13 岁以下儿童，我们不会故意收集 13 岁以下儿童的个人信息。
7. 跨境处理
数据会在我们的服务商（Fly.io、Cloudflare、DeepSeek、Ofox、RevenueCat）所在的地区进行处理，可能 包括美国、欧盟及其他司法辖区。使用本应用即表示你同意该等传输。
8. 政策变更
如本政策发生变更，更新版本将发布在 goalwall.app/privacy 并更新生效日期；重大变更还会在应用的版本更新说明中注明。
9. 联系我们
如有疑问或删除请求，请联系 privacy@goalwall.app。