Privacy & Trust

Your goals stay yours.

Goalpen runs on Google Firebase with encryption, strict per-organisation isolation, and a clear path to a dedicated environment when you need it. Below is the plain-language overview, followed by our full Privacy Policy and Terms.

Hosted on Firebase

Google Firebase / Cloud for hosting, database, auth, and storage —with HTTPS encryption in transit and encryption at rest.

Org isolation

Every organisation’s workspace is strictly isolated. Other customers cannot access your goals, tasks, or files.

Private Cloud option

Need residency or full control? Deploy Goalpen inside your Firebase project —your region, your cloud account.

We don’t sell your data

You own the content you create. Delete your account anytime; active data is removed within 30 days.

How Goalpen handles your data

A short overview for buyers and admins. The legal detail is in the policy below.

Standard cloud (Free, Team, Business)

  • ·Stored in Goalpen’s managed Google Firebase infrastructure (US region for standard plans).
  • ·Firebase Authentication, Firestore, and Cloud Storage with encryption in transit and at rest.
  • ·Per-organisation data isolation —your workspace is never shared with another organisation.

Private Cloud & Enterprise

  • ·Private Cloud: Goalpen runs in your Firebase / Google Cloud project. You choose the region; data stays in your account.
  • ·AI (Gemini) calls can run inside your project so usage is billed by Google to you.
  • ·Enterprise: self-host on your Linux server or license the source code. See Services.

AI features

Features such as SuperAgent, Ask AI, Task Advisor, and AI Summary send the content needed for that request to Google Gemini, subject to Google’s privacy terms.

We use AI to help you work —not to sell your workspace contents. On Private Cloud, Gemini can run entirely under your cloud project.

Your control

  • ·You retain ownership of content you create in Goalpen.
  • ·Cancel billing anytime (keeps data). Delete workspace from Usage when you want data removed —export first; backups/logs may linger up to 90 days.
  • ·Privacy requests: hello@goalpen.com

Need a dedicated environment or rollout help? Explore Professional Services or contact us.