What we store. What we never collect.

We store

• Account email, display name, and an optional photo of you (shown to people you're connected with; you can skip this)
• When you last checked in (last_confirmed_at), and a simple source label (I'm good tap, app open, optional Health, or optional Phone)
• Your settings: the system quiet threshold, timezone, overnight notification preferences, pause and its chosen preset, optional connected-source preferences, and Location precision
• Who you've connected with and invite codes you create
• Device push tokens so we can send notifications
• An optional phone number, if you add one in Settings, so people who can see your check-ins can call or message you
• Optional place labels (country, region, or city names), if you turn on Location. Text only. Off by default.
• One last-known Live pin, if you choose Live. Overwritten. Deleted when you leave Live. Your people see it as a pin on a small map, never as numbers.
• Minimal notification records to avoid repeated quiet alerts and enforce check-in request cooldowns

Optional Health (iOS and Android)

If you turn on Health, the app may read today's step total only on your device (Apple Health / HealthKit on iPhone, Health Connect on Android) to check you in. Both platforms evaluate on app open; iPhone may also receive a background HealthKit update. Background updates are not guaranteed. We do not store step counts, workouts, or heart rate on our servers. Health is never required; I'm good and opening the app are enough. Your people never see step numbers. Each phone must complete setup separately.

Optional Phone unlock (Android)

If you turn on Phone unlock, using this Android phone can check you in. We do not store unlock times, usage timelines, or app lists. We do not ask for usage-access permission. This is never required and is not available on iPhone. Any shared source is only a coarse "Phone" label, never an unlock time.

Optional Location

If you turn on Location, this phone may read approximate location while you use the app so it can reverse-geocode a city, region, or country name on the device. City and below store text labels only, truncated to Country, State or region, or City. If you choose Live, we also store one last-known point so people you trust can see a pin next to your check-in. It is overwritten each time, so we never keep where you have been. Live asks for Always and Precise location. Turning Off or leaving Live deletes the point. There is no geofence, and your list of people is never a map. I'm good still works if a geocode fails. You can leave this off forever.

We never collect (core product)

• Where you have been: no location history, no geofences
• A map of your people (Live keeps one overwritten last-known point, shown only on that person's sheet)
• Full device activity timelines or contact scrapes
• Unlock times, usage timelines, or app lists
• Step counts or fitness samples stored on our servers
• A public directory of users

Who can see your status

Only people you've shared your check-ins with. Removing someone ends their access to your status. Authorization is enforced in the database with row-level security, not only in the app UI.

Invite links

When you share an invite, its preview can show your display name and invite code. It never shows your check-ins, photo, or phone number. Expired or replaced links stop showing your name on new requests, though messaging services may keep an earlier preview.

On your device

Daily reminder preferences and phone numbers linked through your device's contact picker stay on that device. We do not upload your address book. If you have no profile photo, the app may make a one-time Gravatar request using a hash of your email to seed one; it is then stored privately, with no ongoing Gravatar calls.

Error reports

Test and production builds may send crash and error reports to Sentry so we can fix bugs. Those reports do not include your email, name, coordinates, or raw geocode dumps. We do not record session replay or screenshots of the app. Builds without Sentry configured send nothing.

Quiet notifications

If you go past the quiet threshold and have notifications enabled, your people may get a gentle notification suggesting they reach out to you. That is not an emergency service. If you tap Not good, the people who can see your check-ins get one notification from you. Call 911 only opens your phone’s dialer; we never call anyone. You can pause or turn off those notifications in settings.

Contact

Questions about this product: contact the MAR3 team that runs You Good. You can delete your account in the app under Settings (deletes your profile, check-ins, connections, any place labels, and any Live pin).