Privacy

GoodSet stores the account details needed to identify you, your preferences, workouts, performed sets, exercise history, and any training locations you choose to save.

The service also keeps limited technical logs for security, reliability, and error diagnosis. Those logs may include request timing, network metadata, and error details.

GoodSet does not receive your microphone recording. The assistant you use handles speech and sends GoodSet the workout details needed to update your log. That assistant processes the conversation under its own privacy terms.

We use your data to run the workout log, answer history queries, authenticate your connection, prevent abuse, and diagnose problems. We do not sell workout data or use it for advertising.

The assistant you connect receives the GoodSet results needed to answer you and show your workout. Its provider handles your conversation under its own privacy terms.

GoodSet uses Amazon Web Services for hosting, database recovery, and account email delivery. If you choose Google sign-in, Google handles that sign-in. If you use place search, Apple receives the search text and any country or location bias included in the request. If diagnostic reporting is enabled, Sentry receives limited error and performance details. These providers receive data only for the service named here.

Email routing and mailbox providers process messages sent to support@goodset.app, including the sender address and message, so GoodSet can respond.

Account details, preferences, workouts, performed sets, exercise history, and saved locations do not expire automatically. GoodSet keeps them while the account exists. Requesting account deletion schedules deletion 14 days later; when it runs, your sign-in identity and live workout, location, and preference data are removed. We retain a minimal record of the deleted sign-in identity to prevent old credentials from recreating the account. This security record does not contain your workout or profile data and currently has no automatic expiry.

Confirmation and continuation records expire after 15 minutes so they cannot be reused. Expired records do not yet have a fixed purge interval. Production RDS automated recovery is kept for 14 days, so deleted live data may remain in those recovery copies until they expire.

GoodSet may also keep encrypted daily logical backups for disaster recovery. When that system is enabled, each copy is protected from deletion for at least 100 days, with storage lifecycle expiry scheduled after the protected period. Deleted live data can remain in those recovery copies until they expire.

Service logs rotate by stored size, up to 5 × 10 MiB files per service, rather than after a fixed number of days. If Sentry is enabled, its own retention terms also apply to diagnostic events.

You can edit workout data and preferences in GoodSet, and you can revoke the connection from the assistant you used. You can delete your account yourself from the Preferences page: deletion is scheduled 14 days out, nothing changes during that window, and you can cancel it from the same page at any time before the deadline. GoodSet sends no reminder email; the schedule is shown in the app. When deletion completes, you can no longer access the account. The limited security record and recovery copies described above may remain.

Email support@goodset.app to ask a privacy question. GoodSet verifies requests before changing or disclosing account data.

Email support@goodset.app if you believe someone accessed your account or GoodSet exposed data incorrectly. Never send your password or sign-in code.