Privacy Policy

Effective September 4, 2026 · Applies to the TapGoal app for iPhone and Apple Watch and to tapgoal.app

The short version. TapGoal stores your counters on your device. There is no account and no analytics. The app contacts a server only if you subscribe to the optional Coach feature, and then it sends only your goal sentence, a numeric summary of your tasks, or a link you explicitly asked Coach to read. Health data never leaves your device.

1. Who we are

TapGoal is published by PALMS STUDIO LLC ("Palms Studio", "we"). You can reach us at privacy@palmstudio.app.

2. Data that stays on your device

Everything you enter in TapGoal is stored locally in the app's own storage on your iPhone (and, if you use it, on your Apple Watch):

We have no access to this data. It is included in your normal iPhone backup (iCloud or computer backup) according to your own device settings.

3. iCloud sync (Pro)

If you purchase Pro, TapGoal syncs your data between your own devices using Apple's CloudKit, in your private iCloud database. The data goes from your device to Apple's servers under your Apple Account, and is governed by Apple's privacy policy. Palms Studio cannot read your private iCloud database. If you are not a Pro user, nothing is synced and the app works entirely offline.

The app also stores one setting, your chosen day start time, in iCloud Key-Value storage so your Apple Watch uses the same day boundary as your phone.

4. Apple Health

You can optionally link a task to a Health metric (steps, walking and running distance, exercise minutes, active energy or body weight). If you grant permission, TapGoal reads that value from the Health app to fill in the counter for the day. Health access is read-only. Health values are not stored by TapGoal, are not included in exports or iCloud sync, and are never sent to Palms Studio or any third party. You can revoke access at any time in Settings → Privacy & Security → Health.

5. Notifications

Reminders are local notifications scheduled on your device. No push server is involved and nothing about your reminders leaves the phone.

6. Purchases

Pro and Coach are sold through Apple's App Store. Apple processes the payment; we never see your payment details. TapGoal stores a flag on your device recording whether Pro or Coach is active.

7. Coach (optional subscription): the only network feature

Coach turns a goal you describe into an editable weekly plan using an AI model. It is the only feature of TapGoal that sends data off your device, and only while you are subscribed and have Coach planning turned on in Settings.

What is sentWhy
The goal sentence you type, and your replies to Coach's clarifying questionTo generate the plan
A numeric summary of the tasks in that plan: title, unit, target, how many days were scheduled and completed, average valueTo re-plan the next week
Your App Store subscription receipt (a signed transaction, which contains a subscription identifier but not your name, email or Apple Account)To verify the request comes from an active subscriber
A link you shared into TapGoal and chose to "Plan with Goly", plus any caption or note that came with it (at most a few hundred characters)Our server reads the public page behind the link and turns the routine it describes into a plan

What is never sent: your name, your other tasks and counts outside the Coach plan, Health data, device identifiers, contacts, location or anything else.

Where it goes. Requests are handled by a server operated by Palms Studio on Vercel (United States). The goal text and task summary are forwarded to Anthropic's Claude API to generate the plan. Anthropic processes API data under its commercial terms and does not use API inputs to train its models by default.

What we keep. Our server does not log request contents, prompts or generated plans. It keeps only aggregate counters (number of calls, errors, and a per-subscriber request counter that expires after one hour and is used to prevent abuse). We do not build a profile of you and cannot connect a request to your identity.

You can turn Coach off at any time in Settings. The plans it already created remain on your device as ordinary tasks.

7a. Sharing into TapGoal

TapGoal appears in the iOS share sheet. Text or a link you share is saved on your device only and shown to you as an editable list of tasks the next time you open the app; nothing is created until you confirm. Reading the text into tasks happens entirely on your device. If you are a Coach subscriber and tap "Plan with Goly", the shared link (or text) is sent to our server as described in section 7; without Coach, TapGoal never opens links and makes no network request for a share.

8. What TapGoal does not do

9. This website

tapgoal.app is a static site hosted on Vercel. Vercel records standard server logs (IP address, browser user agent, requested page, time) for security and operation. The site sets no cookies and runs no analytics scripts.

10. Children

TapGoal is not directed to children under 13 and we do not knowingly collect personal information from them.

11. Your rights and choices

Because your data lives on your device, you control it directly: edit or delete tasks in the app, use "Delete all data" in Settings, or delete the app. Deleting the app removes its local data; iCloud copies are removed according to your iCloud settings. For questions or requests about any data we might hold (in practice, only your support emails), write to privacy@palmstudio.app.

12. Changes

If we change this policy we will update the date at the top of this page. Material changes that affect what the app sends off your device will also be announced in the app's release notes.