Privacy Policy for Goldfish

Effective date: July 13, 2026

Goldfish is a memory-training companion app provided by Liam Richards ("we," "us," or "Goldfish"). This policy explains, in plain English, what information the app handles, where it lives, and the one situation in which a small amount of text leaves your device. If anything here is unclear, email us at liamrr18@gmail.com.

Goldfish is designed to be private by default. It has no user accounts, collects no analytics, and stores your memories and photos on your device.

The short version

• Your memories, photos, recall history, Stars, trait scores, and settings are stored only on your device. We never receive them.
• There are no accounts and no login.
• We use no analytics, tracking, advertising, or third-party data-collection SDKs.
• The only information that ever leaves your device is the text of a memory you choose to practice with the optional AI Randomized Recall feature. That text is sent securely to an AI service to create or grade a recall question, with no name, account, or device identifier attached.
• Your photos never leave your device.
• Purchases are handled by Apple and RevenueCat, using an anonymous ID that is not tied to your identity.
• Uninstalling the app deletes all of your Goldfish data. You can also erase everything at any time from inside the app.

Information stored on your device only

Almost everything Goldfish keeps is stored locally on your device (using your device's standard app storage) and is never sent to us or anyone else. This includes:

• The memories and moments you write down (for example, your "On Your Mind" notes and nightly Recap entries).
• Any photos you attach to a memory.
• Your recall history and scores from Daily Recall, Reminder Recall, and AI Randomized Recall.
• Your weekly and monthly recap data.
• Your Stars balance and any cosmetic items (hats, scales) you earn or buy for your goldfish companion.
• Your Profile trait scores (Observation, Reflection, and Retention).
• Your app settings and preferences, including notification and reminder choices.

Because this data lives only on your device, we cannot see it, back it up, or recover it for you. If you delete the app or clear its data, this information is gone.

Onboarding questions

When you first set up Goldfish, the app asks a few optional questions to personalize your experience (for example, your age range and gender, and a question about your background). Your answers are used only during that setup session to tailor the app and are never saved to your device and never sent anywhere. Once onboarding is finished, they are discarded.

Goldfish is a memory-training companion for everyday use. It is not a medical or clinical app, does not diagnose or treat any condition, and does not provide medical advice.

The one thing that leaves your device: AI Randomized Recall

Goldfish includes an optional feature, AI Randomized Recall, that turns a memory you previously wrote into a personalized recall question and grades your answer. This is the only feature that sends any of your content off your device, and it only runs when you use it.

What is sent:

• To create a question: the text of the memory you are practicing, plus a general time hint (for example, "2 days ago").
• To grade your answer: the question, the original memory text, and the answer you typed.

How it is sent and handled:

• The text is sent over an encrypted (HTTPS) connection to a small Cloudflare Worker service we operate, called `goldfish-ai`.
• That Worker is a stateless relay. It does not log or store your text, does not keep any record of the request, and does not attach your name, account, email, or any device identifier — because there are no accounts, there is no identifier to send.
• The Worker forwards the text to Anthropic's Claude API (the "Claude Haiku" model) solely to generate or grade the recall question, and returns the result to your device.

How Anthropic handles it:

• Anthropic processes the text transiently to produce a response.
• Under Anthropic's commercial API terms, inputs and outputs may be retained for a limited period (up to about 30 days) for safety and abuse-monitoring purposes, after which they are deleted.
• Your text is not used to train Anthropic's models.

Attached photos are never part of this. Only text is ever sent. Your photos stay on your device.

If you never use AI Randomized Recall, no memory content ever leaves your device. (AI Randomized Recall is part of the Goldfish+ subscription described below.)

Photos

Photos you attach to a memory are stored only on your device. Goldfish accesses your photo library only when you choose to add a photo, and only to let you pick one. Photos are never uploaded to us, to the AI service, or to anyone else.

No accounts

Goldfish has no sign-up, no login, and no user accounts. You do not give us an email address, phone number, password, or profile. We have no way to identify you and no server-side record of you.

No analytics or tracking

Goldfish contains no analytics SDKs, no advertising, no tracking, and no third-party data-collection tools. We do not build a profile of you, and we do not track you across apps or websites. In Apple's App Tracking Transparency terms, Goldfish does not track you.

Purchases and subscriptions

Goldfish offers an optional subscription, Goldfish+, with a 3-day free trial ($11.99/month, auto-renewing). Goldfish+ unlocks AI Randomized Recall, the weekly and monthly recaps, and exclusive fish skins. Cosmetic items (hats and scales) for your goldfish are earned with Stars, an in-app reward earned through use that involves no real money. Goldfish+ is the only paid purchase.

• All payments are processed by Apple through the App Store. We never see or receive your credit card or payment details. Your purchase is governed by Apple's terms and privacy policy.
• We use RevenueCat to manage subscription and purchase status (for example, to know whether your Goldfish+ trial or subscription is active, and to restore purchases). RevenueCat receives the purchase records associated with an anonymous RevenueCat app-user ID. This ID is not linked to your name, email, or any personal identity, because Goldfish has no accounts.

Manage or cancel your subscription any time in your device's Settings → your Apple Account → Subscriptions.

Children

Goldfish is a general-audience app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Because the app has no accounts and stores content only on the device, we do not collect personal information from users of any age in the first place. If you believe a child has provided information in a way that concerns you, contact us at liamrr18@gmail.com.

Data retention and deletion

Since your Goldfish data is stored on your device, you are in control of it:

• Delete everything from inside the app. Goldfish provides a "Clear all data" control that permanently erases your memories, photos references, recall history, Stars, trait scores, and settings from your device.
• Uninstall the app. Deleting Goldfish from your device removes all of its local data.

We do not hold a copy of your content, so there is nothing on our side to delete. For the AI Randomized Recall feature, any short-term retention by Anthropic is handled automatically as described in the section above (deleted after roughly 30 days).

Changes to this policy

If we make material changes to this policy, we will update the effective date above and post the new version at the same URL where you found this one. Continued use of Goldfish after an update means you accept the revised policy.

Contact

Questions about this policy or your privacy? Email us:

Liam Richards — Goldfish

liamrr18@gmail.com