Privacy Policy

Your account: your email address, and your password if you set one (stored only as a one-way hash, never as the password itself).

Your profile: your name, photo, the city or area you give, your time zone, and the answers you give during onboarding and on your profile — what you care about, what you are building, what you can offer and what you are looking for.

What you do in Goshens: the messages and voice notes you send, the meetings you book, the Communities, Circles, Goshens and Projects you join or start, and the people you save, block or report.

On a phone, if you turn notifications on: a notification token for that phone, so we can tell it when someone writes to you.

Basic records of use: which screens are opened and which actions are taken, so we can tell what works. These never contain your email address or what you wrote.

When something breaks: an error report with the screen it happened on and the technical details. Ids, emails and anything you wrote are removed before the report is kept.

You choose who sees each thing on your profile: anyone, members, people you share a Community or Circle with, or nobody. Nothing starts as public; that is only ever your choice.

Some answers can be marked “for introductions only”. We use those to find the right people for you, and never show them to anyone. Land, money and housing answers start that way.

Your messages are seen only by the people in that conversation. Video calls are not recorded.

A small number of stewards who run Goshens can see account details when they need to — for example to let you in, answer a report, or help you get back into your account.

To run Goshens: sign you in, show your profile to the people you have chosen, deliver messages, and hold meetings and calls.

To introduce you: we compare what you have shared with what other members have shared, to suggest people, rooms and groups worth your time.

To write to you: about your account, about people who write to you, and about meetings you have booked. Every email that is not about your account has a one-click unsubscribe link that works without signing in.

To keep members safe: to act on reports, stop abuse, and limit how fast any one account can act.

We use a few companies to run Goshens. Each one gets only what its job needs and may use it only to do that job for us.

Supabase stores the database, accounts and uploaded photos. Hetzner runs the servers the website and app talk to. Resend sends our emails. LiveKit carries video and audio calls while they happen. Expo delivers phone notifications. MapTiler draws maps. Sentry receives the cleaned-up error reports described above.

OpenAI reads what you write during onboarding and on your profile, so Goshens can turn your own words into the profile and introductions you see. It is not allowed to train its models on it.

These companies are mainly in the United States and the European Union, so your information may be handled outside the country you live in.

We do not sell your information, and we do not share it with advertisers or data brokers. We would hand it over to a public authority only when the law requires us to.

See and change it: everything on your profile can be changed or hidden from your profile page, and who can reach you is in Settings.

Take it with you: Settings → Your data downloads a copy of what we hold about you.

Delete it: Settings lets you delete your account. That removes your profile, photo, answers, messages, bookings and memberships, and signs out every device. Rooms other people are still in carry on without you, and reports and moderation records are kept for safety.

Notifications and email: turn phone notifications off in Settings or in your phone’s settings, and stop emails from the link at the bottom of any of them.

Anything else — a question, a correction, or a request we have not covered — write to support@goshens.app.

For as long as you have an account. When you delete your account, your information is removed from the live database straight away and from backups as they are replaced.

A phone that has not opened Goshens in sixty days is forgotten automatically.

Everything travels encrypted. Access is checked by the database itself on every request, so one page forgetting a check does not expose anyone. On a phone, your sign-in is kept in the phone’s own secure storage.

No system is perfect. If something goes wrong that affects your information, we will tell you.

If we change this policy, the date at the top changes. If a change means we use your information in a new way, we will tell you by email before it applies to you.