Good Odds Privacy Policy
Last updated: 18 October 2026
1. Who we are
Good Odds is a wellbeing app made by the Good Odds team, an independent developer based in Nepal ("we", "us"). We are responsible for your personal data in Good Odds. Contact us about privacy at hello@goododds.app, or in the app: open My Journey → Send feedback, choose "Other", and tick "You can email me about this" so we can reply.
2. What we collect and why
| Data | Why we need it | Legal basis (GDPR) |
|---|---|---|
| Email address, and a password (stored only as a secure hash) or your Google account ID if you sign in with Google | To create your account, sign you in and send verification and password-reset codes | Contract (Art. 6(1)(b)) |
| Display name, optional bio, avatar and colour | To show your profile to people you interact with | Contract |
| Time zone | So "today" means your today. We don't collect your location. | Contract |
| Daily mood check-ins and private notes | To show your history and mood calendar, and to share moods with friends only if you turn that on | Your explicit consent (Art. 6(1)(a) and 9(2)(a)), which you give before your first check-in and can withdraw in Privacy |
| Daily challenge results and reminder settings | To run the daily challenge and on-device reminders | Contract |
| Community posts and reactions | To show your posts on the Good Day and Rough Day walls | Contract |
| Connections and per-person sharing settings | To let you share exactly what you choose with each friend | Contract |
| Friend chat and Day Buddy messages | To deliver your messages | Contract |
| Reports, blocks and moderation decisions, including a copy of reported content | To keep people safe and act on reports | Legitimate interests in a safe service (Art. 6(1)(f)) and, for EU users, legal obligations under the Digital Services Act |
| A push notification token for your device, if you allow notifications | To tell you when a friend messages you or your Day Buddy is found. Notifications say who, never what they wrote. You can switch them off in Reminders. | Contract |
| Feedback you send, the app version and your platform | To improve the app, and to reply only if you allowed it | Legitimate interests |
| Basic server logs and error reports | To keep the service secure and fix problems | Legitimate interests |
We don't use advertising, analytics or tracking tools, we don't sell your data, and we don't make automated decisions about you.
3. Who can see what
- Private notes: only you.
- Moods, challenges and your mood calendar: only the friends you switch sharing on for, and only while you're connected.
- Community posts: other signed-in users see your post with your display name and avatar. Only you see how many reactions your posts get.
- Day Buddy: your buddy sees a random nickname, never your name, photo or profile.
- Friend chat: only you and that friend.
- Our moderators: see reported content (see section 4) and use a separate admin tool. Every time they open the details of a report, it's logged.
- Your email is never shown to other users.
4. Reported chats and moderation
Nobody at Good Odds browses your chats. If someone reports a message, or a whole Day Buddy chat, our moderators can read the messages around it from both people (up to 10 before and 5 after the reported message), see who is behind a Day Buddy nickname, and see that person's recent posts and report history. We use this only to decide what to do: dismiss the report, hide or remove content, or suspend an account for 1, 7 or 30 days or permanently. When you report something, a copy of the reported person's recent messages or post is kept as evidence, even if it's later deleted.
5. Service providers
We use a few providers who process data only on our instructions:
- Brevo (email delivery, EU) receives your email address to send sign-in codes.
- Google receives a sign-in request if you choose "Continue with Google".
- Expo (push relay) and Google Firebase Cloud Messaging deliver notifications to your phone. They receive your device's push token and the notification text, such as "Fran sent you a message", never the message itself.
- Hosting: during the current beta, the service runs on the developer's own computer in Nepal and is reached through an encrypted tunnel (ngrok). We will update this policy before moving to a hosting provider.
- Error monitoring (Sentry), if enabled, receives technical details when something breaks. It's configured not to send personal details such as your IP address.
We share data with authorities only when the law requires it.
6. Where your data is processed
We are based in Nepal, and your data is processed there and by the providers above. Nepal does not have an EU adequacy decision, so we protect your data with the safeguards described in this policy and in our agreements with providers.
7. How long we keep it
| Data | Kept for |
|---|---|
| Account, profile, posts, connections | Until you delete them or your account |
| Check-ins and notes | Until you delete your account or withdraw consent (which deletes them) |
| Friend chat | Until either of you deletes the chat, or the connection ends (removed or blocked). If either of you turns on disappearing messages, new messages are deleted from our servers 1 minute, 1 hour, 1 day or 1 week (as chosen) after the other person sees them, or after 1 week if they never do. A copy kept with a report follows the report retention. |
| Day Buddy chats | 7 days after the chat ends, or 90 days if it was reported |
| Reports and copies of reported content | Until reviewed, then 12 months after the decision. If your account is deleted, the copy is kept without being linked to it. |
| Feedback | Until 12 months after we've dealt with it, or until you delete your account |
| Sign-in codes | 15 minutes; expired codes and sessions are cleared daily |
| Push notification tokens | Until you sign out on that device, delete your account, or the token stops working |
8. Your rights
Wherever you live, you can ask us to:
- give you a copy of your data, and in a portable format;
- correct it (you can edit your profile in the app);
- delete it: delete your account in the app (My Journey → Delete account) or on this website;
- restrict or object to processing based on legitimate interests;
- withdraw consent for mood check-ins at any time (Privacy → Store my mood check-ins).
Send your request to hello@goododds.app, or in the app: open My Journey → Send feedback, choose "Other", and tick "You can email me about this" so we can reply, and we'll reply within one month. If you're in the EU or UK, you can also complain to your data protection authority. In Nepal, you can bring a complaint under the Individual Privacy Act 2075.
9. Age
Good Odds is for adults (18 and over), because it includes chats with people you don't know. If we learn that an account belongs to someone under 18, we'll close it and delete its data.
10. Security
Passwords are stored as one-way hashes. Sign-in codes and invite links are stored scrambled. Connections to the app use HTTPS, and access to moderation tools is limited to named moderators. If a breach puts your data at risk, we'll tell you and the relevant authorities as the law requires.
11. Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect. The date at the top shows the latest version.