GoalBlocks

Privacy Policy

Effective July 29, 2026 · Applies to the GoalBlocks app for iPhone and Apple Watch

The short version

We collect your training, nutrition, and health data to coach you toward your goal, and we improve GoalBlocks using only de-identified, aggregated numbers, which you can opt out of in Settings. We never sell your data, never share it with advertisers or data brokers, and never use it for marketing.
There are no ads in GoalBlocks. We use one analytics tool, PostHog, to see how the app is used. It never receives your health data, and you can switch it off in Settings.
Your run routes never leave your device. Only aggregate numbers like distance and pace sync to your account.
AI features send the minimum needed to our AI providers, under terms that do not allow them to train their models on your data.
You can delete your account and all of its data from inside the app, immediately and completely.

Who we are

Module Creative LLC ("we", "us") builds GoalBlocks, a training and nutrition coaching app. This policy explains what data GoalBlocks handles, why, and the choices you have. If anything here is unclear, write to us at hello@goalblocks.app.

What we collect

Account

You sign in with Apple or Google. We receive your email address and, if you share it, your name and profile picture. With Sign in with Apple you can hide your real email; the private relay address works fully with GoalBlocks.

Health and fitness data

With your permission, GoalBlocks reads from Apple Health: workouts, running distance, heart rate, body composition, nutrition, steps, and sleep. It writes back the runs you complete and the meals you log so your history stays consistent across apps.

Inside the app you create training data directly: goals, training plans, completed sessions, strength sets and weights, bodyweight test results, body weight entries, readiness check-ins, and daily energy and recovery signals.

Location

During outdoor runs, with your permission, GoalBlocks uses your location to record route, pace, distance, and elevation. Route coordinates are processed on your device and saved to Apple Health on your device. They are never uploaded to our servers. Only summary numbers such as distance, duration, pace, and elevation gain sync to your account.

Meal photos and food logging

When you photograph a meal or a nutrition label, the photo is sent to our servers to estimate its nutrition. A small preview image is kept so your meal log has a thumbnail, and it is automatically deleted from our servers after 30 days. The nutrition estimate itself (calories, protein, and so on) stays in your log.

When you search the food database, your search text and the foods you pick are sent to FatSecret, our food database provider. Your identity is not shared with them.

Coach conversations

Messages you exchange with the GoalBlocks coach are stored with your account so your conversation history survives reinstalls and syncs across devices. You can delete individual conversations or your entire coach history at any time in the app.

Usage analytics

We use PostHog to understand how GoalBlocks is used: which screens you visit, which features you use, and product events such as completing onboarding, starting and finishing a workout session and how long it took, logging a meal and by which method, or applying a plan change. These events are linked to a random account identifier, not to your name or email.

Usage analytics never include your health data. Heart rate, sleep, body weight and composition, readiness scores, meal contents, and locations are never sent to PostHog. You can turn usage analytics off in Settings, and the app works identically without it.

Device and notifications

If you enable notifications, we store a push token for your device and a log of what we sent you, along with your notification preferences. We do not collect device fingerprints or advertising identifiers, and we do not track you across other companies' apps or websites.

Purchases

Subscriptions are processed entirely by Apple. We never see your card number or billing details. We receive only your subscription status so the app knows what you have access to.

What we do with it

Everything above serves the same purpose: building your plan, adapting it to how you are actually recovering and progressing, and coaching you. Specifically, we use your data to:

Generate and adapt your training plans across your goals
Compute readiness, recovery, and progress from your workouts, sleep, and heart data
Estimate nutrition from photos, labels, and food searches
Answer your questions and make plan suggestions through the coach
Send you the notifications you have opted into
Keep your data in sync across your iPhone and Apple Watch

We also improve GoalBlocks itself. To understand which programs work and to tune how plans adapt, we analyze de-identified, aggregated training data: things like how far athletes get in a program, how many sessions they complete, how long sessions take, and how plans hold up over weeks. These are numbers that are no longer connected to your name, email, or account. Improvement work never uses your photos or the content of your coach conversations, and we never re-identify this data. You can opt out of improvement work in Settings, and the app works identically without it.

We do not use your data for advertising or marketing. We do not sell it or rent it. We do not share it with data brokers. We never use Apple Health data for anything other than the features described here, and we never disclose it to third parties for advertising, marketing, or data mining. Health data is not stored in iCloud by GoalBlocks.

AI processing

GoalBlocks uses large language models for three things: coach replies, food photo and label analysis, and the wording of some notifications. To do that, relevant slices of your data are sent to AI providers:

OpenAI processes your coach messages together with a summary of your training context (recent sessions, readiness, plan state) to generate replies, and short training summaries to word notifications.
Google processes your meal and label photos to estimate nutrition.

We use these providers through their business APIs, under terms that do not permit them to use your content to train their models. They process your data only to return a result and do not receive your name or email from us.

The coach is a training tool, not a medical professional. Its suggestions are not medical advice. Talk to a doctor before acting on anything that concerns your health.

Who processes your data

We run GoalBlocks on a small set of service providers, each doing one job:

Provider	What it does	What it handles
Supabase	Hosts our database, sign-in, and file storage	Your account and all synced app data, in the United States (AWS us-east-1)
OpenAI	Generates coach replies and notification wording	Coach messages and training context summaries
Google	Analyzes food photos; optional sign-in	Meal and label photos; your Google account email if you sign in with Google
FatSecret	Food nutrition database	Food search text and selected foods, without your identity
PostHog	Usage analytics	Screens and features used, product events; linked to a random account identifier; never health data
Apple	Sign in with Apple, subscriptions, push notifications, Apple Health on device	Per Apple's own privacy policy

These providers act on our instructions and cannot use your data for their own purposes. We share data beyond this list only if the law requires it, or to protect the rights and safety of our users, and in a business transfer such as a merger, in which case this policy continues to apply to your data.

How long we keep it

Your account and training data: for as long as your account exists.
Meal photos: deleted from our servers automatically after 30 days.
Coach conversations: until you delete them or your account.
Usage analytics: deleted from PostHog when you delete your account.
Everything: deleting your account removes your data from our servers immediately, including photos. This is not a soft delete, and your data takes no further part in improvement work after deletion.

Your controls and rights

Delete your account from Settings in the app. This permanently removes your account and all associated data from our servers.
Apple Health access can be granted, narrowed, or revoked at any time in the Health app on your iPhone.
Location, camera, and photo access are controlled in iOS Settings and can be revoked at any time.
Notifications can be tuned or turned off in the app and in iOS Settings.
Usage analytics can be turned off in Settings inside the app. Nothing about the app changes when it is off.
Product improvement can be turned off in Settings inside the app. When it is off, your data stays out of the de-identified, aggregated numbers we study to improve GoalBlocks.
Coach history can be deleted per conversation or entirely, in the app.

Depending on where you live, you may also have legal rights to access, correct, export, or delete your personal data, to restrict or object to processing, and to complain to a data protection authority. You can exercise any of these by using the in-app controls or by emailing hello@goalblocks.app. We respond within the timelines the law requires, and we do not discriminate against you for exercising your rights.

Security

Data moves between your device and our servers over encrypted connections (TLS). Server-side, your data is isolated per account: our database enforces row-level rules so one account can never read another's data, and meal photos live under access rules scoped to your account. Access to production systems is limited to what operating the service requires.

Children

GoalBlocks is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

International transfers

Our servers are hosted in the United States (AWS us-east-1, Northern Virginia). If you use GoalBlocks from elsewhere, your data is transferred there and protected as this policy describes. Where the law requires specific safeguards for transfers, such as standard contractual clauses, we rely on those with our providers.

Changes to this policy

If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top always reflects the current version.