GOM exists to serve your practice, not to harvest it. This policy is written to be read.
When you use the AI Scribe to log by voice, text, or a photo of a paper practice log, the text or image you submit is processed by Anthropic's Claude models to draft the entry. Nothing is saved until you confirm it — the model proposes, you decide. Your submissions are not used to train AI models. Your stored practice history is never sent to any AI service without you initiating it.
When you join a circle, completed sessions can appear in that circle's feed. You control exactly what each circle sees — which practice categories, whether duration shows, whether the practice name shows — from the circle's Sharing settings. This filtering happens on our servers before anything is shared, not on your screen. You can block another member (their messages and shared practice disappear for you) and report any message; reports are reviewed within 24 hours.
If you turn on Health sync in Settings (off by default), GOM writes each timed session to Apple Health as a Mindful Session. GOM never reads anything from Health — your health data stays in Health. Turn it off any time in Settings or in the Health app's data access controls.
The watch app stores your practice list and unsent sessions on the watch itself, and syncs through your paired iPhone. It talks only to your phone — never directly to the internet.
Data is stored with Supabase (PostgreSQL, hosted in the United States) with row-level security: our own database rules make it technically impossible for one account to read another's practice data outside the circle-sharing you configure. The login token on your device is stored encrypted, with the key held in your phone's hardware keychain.