Privacy Policy

Effective July 6, 2026 · Applies to the Goldilocks iOS app and this website

The short version

Goldilocks collects no data about you. There are no accounts, no analytics code, no tracking, no ad networks, and no servers operated by us. Your group’s chats live on your devices and sync through your group’s own iCloud. The AI reads your thread on your device and nothing from your chat is ever sent to us — or to anyone.

What we collect

Nothing. The app’s App Store privacy label is “Data Not Collected,” and this page exists to explain why that’s true rather than to enumerate exceptions.

• No accounts. You never register with us. Your profile name lives only on your device and in messages you choose to send to your group.
• No analytics or tracking SDKs. The app contains no third-party analytics, advertising, or measurement code — nothing to prompt for under App Tracking Transparency, because nothing tracks.
• No content on our servers. We don’t operate servers that store your data. There is nothing for us to read, sell, train on, lose, or hand over.

Where your data actually lives

On your device

Your plans, messages, photos, and PDFs are stored locally on your iPhone or iPad, in the app’s private storage.

In your group’s iCloud (Apple CloudKit)

The app never asks you to sign in to anything — there is no login screen. Sharing uses the iCloud account your device is already signed into (Settings → your name). Without iCloud, solo planning still works entirely on-device; only sharing is unavailable, and the app tells you so instead of pretending.

When you share a plan, Goldilocks syncs it between members using Apple’s CloudKit: the plan lives in the plan creator’s personal iCloud and is shared with invited members through Apple’s standard iCloud sharing. Apple encrypts this data in transit and at rest, under Apple’s privacy policy. We — the developer — cannot read your shared plans; the sharing relationship is between your group’s Apple accounts, not with us.

Nowhere else

That’s the whole list.

The AI

The “Chime In” assistant is Apple’s on-device foundation model (Apple Intelligence). Your conversation is processed on your own device. It is not sent to us, to Apple’s servers by Goldilocks, or to any AI company. When the on-device model isn’t available (unsupported device, or Apple Intelligence turned off), the AI features are disabled and say so — they never fall back to a cloud service.

Notifications

If you allow notifications, message alerts are delivered through Apple’s push system. The notification content (for example a message preview) is read from your group’s iCloud data by the app on your device — we never see it.

Identity between group members

Within a shared plan, members are identified to each other by the display name they choose and by a random, plan-specific code (a salted hash) that cannot be linked across plans. Your Apple ID email or phone number is handled by Apple’s iCloud sharing when you invite someone — the app itself neither stores nor transmits it.

Sponsorship (future)

Goldilocks may someday show a single, clearly-labeled sponsor banner. By design it will be the same for every user — untargeted, with no tracking and no measurement. No sponsorship feature will ever add data collection to the app; if that changes in any way, this policy and the App Store privacy label will change first, visibly.

Apple’s own analytics

Apple offers developers aggregate statistics (like approximate number of active devices) collected by Apple from users who opted into sharing analytics with developers in iOS Settings. That data is collected and anonymized by Apple, not by the app, and contains nothing about your content or identity.

This website

threeporridges.com is a static site served by GitHub Pages. We run no analytics or cookies on it. GitHub may log standard web-server requests (like IP addresses) to operate the service, under GitHub’s privacy statement.

Children

Goldilocks is a general-audience app. Because we collect no personal data from anyone, we collect none from children.

Your choices

• Delete a plan on your device to remove your local copy; plan owners can stop sharing at any time, which removes members’ access.
• Manage iCloud data through your Apple account (privacy.apple.com).
• Delete the app to remove everything it stored on your device.

Changes & contact

If this policy changes, the date above changes and material changes will be called out in plain language. Questions: support@threeporridges.com.