Privacy Policy
1. Who we are
Good Girl (“the app”, “we”, “us”) is a private intimacy and relationship app for two consenting, paired adult partners. The app is operated by Good Girl, a sole trader based in England. You can reach us at info@good-girl.app. Good Girl is a trading name of a sole trader established in England. A postal address for service of documents is available on request from info@good-girl.app, and is provided to Google, regulators and law enforcement whenever required.
This policy explains what data the app handles, how it is protected, and the rights you have.
2. Who can use Good Girl
Good Girl is strictly for adults aged 18 or over. The app contains mature, relationship-oriented content and is not intended for, or directed at, anyone under 18. You confirm you are 18+ when you first use the app.
3. What data we handle
We deliberately collect as little as possible. The data the app handles falls into these groups:
| Group | Examples | Why |
|---|---|---|
| Account & identity | An anonymous or Google account identifier (UID); your email address if you sign in with Google | To sign you in and keep your account across devices |
| Pairing data | A pairing link between two partner accounts; partner role; the title each of you chose (a nickname, stored as plain text so notifications can use it) | So two partners can connect and share their space |
| Intimacy & activity content | Session logs, ratings, notes, moods, quests, points, achievements, cycle information | The core features of the app |
| Free-text notes & captured media | Personal notes; photos/video/audio you capture in-app | Stored encrypted on your device before upload (see §5) |
| Whispers (messages) | Messages, voice notes, photos, video and files sent between paired partners | Stored encrypted on your device before upload (see §5) |
| Technical | A push-notification token; basic diagnostic and crash information (always on, with no content) | To deliver notifications and keep the app stable |
| Usage counts (only if you say yes) | That something happened, such as a moment logged, a treat picked or a screen opened, plus your role, days since pairing, app version and a scrambled couple code. Never what you write, your names or titles, treat names, moods or anything you share. Google Analytics also works out an approximate location (country or region) from your connection | To see which parts of the app help couples, and fix the rest (see §5a) |
| Feedback you choose to send | A rating (three faces) and any words you type into a feedback box, with your role, app version and the scrambled couple code. No account identifier | To hear what is working and what is not (see §5a) |
| Safety reports | The reason and description you write when you report a concern; if you report a specific message, a readable copy of that one message | So a person can review the report and act on it (see §5) |
We do not collect your contacts, precise location, browsing history, or advertising identifiers. We do not use the app’s data for advertising, and we do not sell data.
4. How the data is stored and where
Data is stored using Google Firebase (Firestore, Authentication, Cloud Storage, Cloud Messaging, and Cloud Functions), processed on Google Cloud infrastructure in the European region (europe-west2). Google acts as our data processor. See Google’s privacy terms: firebase.google.com/support/privacy.
A local copy is also kept on your device so the app works quickly and offline.
5. Encryption — how your private content is protected
Sensitive content — your notes, captured media, and partner messages — is encrypted on your device before it is stored or sent, using an encryption key that belongs to your couple. Only the two paired partners’ signed-in accounts can access that key; it is never available to other users, and your encrypted content is never read or processed by our systems in normal operation. Notification content likewise travels encrypted — the notification text you see is decrypted on your own device.
To be precise about the trust model: the couple key is stored in your private, access-controlled cloud space so that your content survives a lost or replaced phone. That recovery guarantee means content is unreadable to other users and to anyone intercepting traffic — but the operator’s administrative access could technically reach the stored key. We commit to never using administrative access to read private content, except where the law compels us or to investigate a child-safety report that you or your partner file (see our Child Safety Standards).
The one case where we do see your content: when you report it. If you report a specific message from inside the conversation, the app attaches a decrypted, readable copy of that one message to your report, and we store that copy in plain text so a person can review it. This is the only situation in which content you wrote or received is readable by us, and it only ever happens because you chose to report it. Nothing is copied unless you report it, only the single reported message is included (never the surrounding conversation), the copy is made on your own device from content already there, and the person you are reporting is not told — nothing in the conversation changes. We use it only to review the report and to meet our obligations under our Child Safety Standards (§8.1), including reporting to authorities where required.
All data is additionally encrypted in transit (TLS/HTTPS) and at rest by Google’s infrastructure.
Important: if the encryption keys are lost (for example, both partners remove the app and the key backup is gone), your encrypted content cannot be recovered. Encryption is a trade-off that favours your privacy over recoverability.
5a. Usage analytics and feedback
Usage counts are off until you say yes. The app asks once (and you can change your answer any time in Settings, under “Help improve Good Girl”). If you say yes, the app uses Google Analytics for Firebase to count that things happened, never what they said. Each count can carry only a number or a fixed word (for example “yes” or “no”), your role, how many days you have been paired, the app version, and a scrambled couple code made with a one-way hash, so it cannot be turned back into your account identifiers. No advertising identifier is collected, nothing is used for advertising, and nothing is sold. If you turn it off, counting stops at once and this phone’s analytics identifier is reset; counts already sent stay in Google Analytics until its retention period ends (set to the shortest period available, 2 months). Your answer is kept with your account so it survives reinstalling the app.
Feedback is anonymous. When you answer a feedback question or use Settings → Send feedback, what you send is stored on its own, apart from your notes and messages, with no account identifier. It is not end-to-end encrypted, because we read it: please leave out anything private. Because it is not linked to your account, we cannot find it again to delete it on request.
5b. Information about your sex life, and your consent
Most of what you keep in Good Girl (moments, moods, requests, treats, wishes, photos and messages) is information about your sex life. UK and EU data protection law treats this as special category data, so we only keep it with your explicit consent.
- How we ask. The first time you open the app (and once for everyone who was already using it), a screen explains what is stored and asks you to tick “I'm happy for Good Girl to store what I share about our intimate life”. It is separate from the age check and from the analytics question, and the box starts unticked. If you choose “I do not consent”, the app does not open, because there is nothing it could store for you.
- What we record. That you agreed, which version of the wording you saw, when, and the app version, at your account. Nothing else.
- What we use it for. Only to run the app for you and your partner. Never for advertising, never sold, never shared beyond the service provider described in section 4.
- Withdrawing. You can withdraw at any time: Settings, Privacy & encryption, “Withdraw consent and delete my account”. It happens in this order: you are unpaired, then everything you shared is deleted from our servers and your account is deleted, then the app clears itself from your phone. What your partner can still see of yours goes too. A few records are kept, as section 8 explains.
- If what we collect changes, for example a new kind of data, we will ask you again.
6. How your data is shared
- With your paired partner. The whole point of the app is a shared space between two partners, so the content you create is visible to the partner you have paired with.
- With our service provider (Google Firebase) purely to operate the app, as described above.
- No one else. We do not share, rent, or sell your data to advertisers, data brokers, or any other third party. We may disclose data only if legally required to do so.
7. Payments
If you purchase a subscription or a one-time premium unlock, the payment is processed by Google Play Billing. We never see or store your card or payment details. We receive only confirmation of your subscription status so we can unlock premium features for you and your partner.
8. How long we keep data
We keep your data for as long as your account exists. You can:
- Unpair at any time, which clears the shared data held on your phone.
- Unpair and delete my data (in the app): deletes everything you have shared, here and on our servers. Your account stays, so you can pair again later.
- Withdraw consent and delete my account (in the app, Settings, Privacy & encryption): unpairs you, deletes everything you have shared and then your account itself.
- Request deletion by email at info@good-girl.app if you cannot use the app. We will delete your server-stored data within 30 days of a verified request.
What is kept after a deletion, and why:
- Messages in a conversation where one partner blocked the other are kept as a record neither partner can wipe.
- Safety reports, and the copy of reported content attached to them, are kept for 90 days after the report is resolved and are then deleted, unless the report has been escalated to law enforcement or a child-safety authority, in which case it is preserved until that authority confirms it is no longer needed.
- Basic purchase records, which we must keep for tax and accounting.
- Treats and guides a partner set up in the other partner's shop or library stay there, because they are part of that partner's shop.
9. Your rights
Depending on where you live (including under UK/EU GDPR), you have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to withdraw consent. To exercise any of these, contact info@good-girl.app. You also have the right to complain to your local data protection authority (in the UK, the ICO: ico.org.uk).
10. Children
Good Girl is not for anyone under 18. We do not knowingly collect data from minors. If we learn that we have, we will delete it. See our Child Safety Standards for our full approach to protecting children.
11. Security
We encrypt sensitive content on your device before it is stored or sent (see §5 for the precise trust model), alongside encryption in transit and at rest and authenticated access controls. No system is perfectly secure, but we design the app so that the most sensitive content is unreadable without your couple’s key.
12. Changes to this policy
We may update this policy. We will change the “Last updated” date above and, for material changes, notify you in the app. Continued use after an update means you accept the revised policy.
13. Contact
Questions or requests: info@good-girl.app.
← Back to Good Girl