Golden Privacy Policy
Effective date to be announced
Draft, not yet in effect. This is the version we are preparing for launch. 5 details are still to be decided and marked below.
Golden is a wellness app for adults. This policy explains what information Golden collects, why, who else sees it, and how you can see, change, or delete it. We have tried to write it in plain language.
Golden Tech Holdings LLC ("Golden," "we," "us") runs the Golden app and the website at golden.fit.
The short version
- We collect only what Golden needs to count your activity and award points.
- If you connect Apple Health or Health Connect, Golden reads three things: your daily steps, your workouts, and your sleep. It never writes to your health app, and it never reads anything else.
- We never sell your information.
- Your health information is never shared for advertising, and never used for it. Not your steps, workouts, sleep, or anything you log.
- We share information with companies that help us run Golden, such as our hosting and email providers. We may also work with advertising partners to find new members, as explained in Advertising and measurement. You can opt out.
- You can delete your account at any time from inside the app.
- Golden is a wellness program. It is not medical care, and it does not give medical advice.
Information we collect
Information you give us
- Sign-in details. Your email address if you sign in with an emailed code, or an account ID (and usually an email address) from Apple, Google, or Facebook if you sign in with one of them. We never see your password for those services.
- Your name, if you choose to add one.
- Activity you log, such as a walk, a glass of water, or a night's sleep, and any note you add to it.
- Your time zone, so we count each day correctly.
- Referral codes you share or use.
- Your notification choices, such as whether you want reminders or news by email.
- Messages you send us, such as a question to privacy@golden.fit.
Health information, if you connect it
Connecting Apple Health (on iPhone) or Health Connect (on Android) is optional. Golden asks your permission first, and you can say no.
If you connect, Golden reads only these three kinds of data:
| What Golden reads | What Golden sends to our servers |
|---|---|
| Steps | The total for each day |
| Workouts recorded by your phone or watch | Each workout's type (such as "walking" or "yoga"), start time, and end time |
| Sleep | Each night's start time, end time, and minutes asleep |
Golden does not read or collect your heart rate, calories, location or routes, medical records, or any other health data. Entries you typed into your health app by hand are skipped. Golden reads only while the app is open on your screen. It never adds to or changes anything in your health app.
See Consumer Health Data below for more.
Information collected automatically
A push notification token, if you allow notifications, so we can send them to your phone.
Basic technical information that every internet service handles, such as your IP address, when your phone or browser connects to our servers. Our database does not store your IP address. Our hosting providers may keep it in short-term logs to run and protect the service.
Error reports when the app or our servers crash. These are set up to leave out your email, your name, and your health information.
Advertising and measurement information, if we use the tools described in Advertising and measurement.
We do not collect your phone number, date of birth, or precise location.
How we use your information
We use it to:
- Sign you in and keep your account secure
- Count your activity and award points, tiers, and rewards
- Send the notifications and emails you have chosen
- Deliver a reward when you claim one
- Credit referrals
- Answer your questions
- Fix problems, prevent fraud and abuse, and keep Golden working
- Follow the law
We do not use your information to diagnose, treat, or give medical advice.
What we never do
- We never sell your information.
- We never share your health information with advertising partners, and we never use it to choose or target ads. This includes your steps, workouts, sleep, the activity you log, your notes, and anything we could work out from them.
- We never give your information to data brokers.
- We never put a health number, such as your step count or sleep time, in a notification, because lock screens are visible to others.
Who we share information with
We share information only with service providers that run parts of Golden for us. They may use it only to provide their service to us.
| Provider | What they do for us |
|---|---|
| Railway | Hosts our servers and database |
| Vercel and Cloudflare | Host and deliver our website |
| Resend | Sends our emails, including sign-in codes |
| Expo, Apple, and Google | Deliver push notifications to your phone |
| Sentry | Receives error reports so we can fix crashes |
| Apple, Google, or Facebook | Signs you in, if you choose that option |
| To be decided: rewards vendor name | Delivers gift cards or charity donations you claim |
We may also share limited information with advertising partners, as described next.
Advertising and measurement
Golden advertises with partners such as Meta (Facebook and Instagram) and Google to reach people who might enjoy Golden. To learn which ads work, and to show our ads to people likely to be interested, we may use measurement tools from these advertising partners. These tools are sometimes called pixels, tags, cookies, or software development kits.
We keep a current list of our advertising partners at golden.fit/privacy/partners To be decided: publish this page before the first partner is added, and we update it before we start working with a new one.
What may be shared with advertising partners:
- That a browser or device visited golden.fit, viewed a page, or tapped a download button
- That the Golden app was installed or an account was created
- Technical information such as your IP address, browser or device type, and an advertising ID
- A scrambled (hashed) version of your email address, so the partner can match it to an account it already has, but only with your permission
What is never shared with advertising partners: your health information, including steps, workouts, and sleep; the activity you log and your notes; your points, tiers, and rewards; and anything about your health or wellness habits.
Your permission comes first where required. In the app, we will ask before any advertising tool runs, and we will not use one if you say no. On iPhone, Apple's "Allow tracking" prompt also lets you say no. On our website, where the law requires it, we will ask before setting advertising cookies.
How to opt out:
- Email privacy@golden.fit and ask us to stop sharing your information for advertising
- Turn on Global Privacy Control in your browser, which we honor as an opt-out
- On iPhone, turn off "Allow Apps to Request to Track" in Settings, Privacy & Security, Tracking
- On Android, delete your advertising ID in Settings, Privacy, Ads
- Use the "Your privacy choices" link at the bottom of our website
- Change your ad settings with each partner, or block cookies in your browser
Opting out does not change how Golden works for you.
Other sharing
We may also share information if the law requires it, to protect someone's safety, or as part of a sale or merger of our business. If that happens, this policy will still apply to your information.
How we protect your information
Your email address, name, and notes are encrypted before they are saved in our database. Your sign-in session can be ended at any time. We limit who on our team can access our systems and require two-step sign-in for them.
No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.
How long we keep your information
- Your account information stays while your account is open.
- Sign-in codes expire after 10 minutes.
- Records of notifications we sent are deleted after 30 days.
- Activity and points stay on your account, because points never expire.
- If you disconnect health sync, Golden stops reading new data. Activity already counted stays on your account until you delete your account.
- If you delete your account, To be decided: account-deletion-before-launch — state what is removed, what anonymous records stay, and that backups are erased within N days.
Your choices and rights
You can:
- See your information in the app, or ask us for a copy.
- Correct your information in the app, or ask us to.
- Delete your account in the app under Profile. To be decided: confirm the menu path once DELETE /me ships.
- Disconnect health sync in Golden, or turn off access in the Health app (iPhone) or Health Connect (Android).
- Opt out of advertising sharing, as described in Advertising and measurement.
- Turn off notifications in Golden or in your phone's settings, and unsubscribe from news email with the link in any email.
To make a request, email privacy@golden.fit. We will answer within 45 days. We may need to confirm it is really you first. We will not treat you differently for using these rights.
Depending on where you live, state law may give you more rights. You can use any of them by emailing us. If we turn down your request, you can ask us to reconsider by replying to our answer.
Children
Golden is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18. If you believe a child has signed up, email us and we will delete the account.
Changes to this policy
If we change this policy, we will update the date at the top. If a change is important, such as collecting a new kind of health data, we will tell you in the app before it takes effect and ask for your consent where the law requires it.
Contact us
Golden Tech Holdings LLC To be decided: mailing address privacy@golden.fit
Consumer Health Data
This section explains how Golden handles "consumer health data" as defined by Washington's My Health My Data Act and similar laws in Nevada and Connecticut. It applies to everyone, wherever they live.
What we collect. If you connect Apple Health or Health Connect: your daily step totals; the type, start time, and end time of workouts recorded by your phone or watch; and the start time, end time, and minutes asleep for each night. The activity you log yourself in Golden, such as a walk or a night's sleep, may also be consumer health data.
Where it comes from. From you, and from Apple Health or Health Connect on your phone, only after you give permission.
Why we collect it. Only to count your activity, award points, and show your progress in the app.
Your consent. Golden collects health data only after you choose to connect and allow access on your phone. You can withdraw consent at any time by disconnecting in Golden or turning off access in your phone's health settings.
Who we share it with. Only the service providers that host and run Golden for us (listed above), and only to provide that service. We do not sell consumer health data. We do not share it with advertising partners, data brokers, insurers, or employers.
Your rights. You can ask to see the health data we have about you, to learn which providers have received it, to delete it, and to withdraw your consent. Email privacy@golden.fit or delete your account in the app. If we turn down a request, you may appeal by replying to our answer, and if you are still not satisfied you may contact your state's attorney general.