Greater Good Labs

Privacy Policy

Version 2026-10-17 · Effective October 12, 2026 · Last updated October 17, 2026

This Privacy Policy explains how Greater Good Labs ("Greater Good Labs," "we," "us," or "our") collects, uses, discloses, and otherwise processes information in connection with our websites (including www.greatergoodlabs.io), our apps (including Rebar and Claude Credits), and any other product, service, or communication that links to this Policy (together, the "Services"). By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with it, do not use the Services.

This Policy is not a contract and does not create any contractual rights or obligations for you or for us, except where applicable law requires otherwise.

1. Information we collect

The information we collect depends on which Services you use and how you use them. We may collect information in the following ways.

1.1 Information you give us

  • Contact and correspondence. If you email us, report a bug, request support, or otherwise contact us, we collect what you send, such as your name, email address, and the content of your message and any attachments.
  • Accounts, purchases, and subscriptions. If we offer accounts, paid features, licenses, or subscriptions, we may collect account details, billing and transaction information, and license records. Payment card details are generally processed by our payment processors or app stores, not stored by us.
  • Other information you choose to provide, such as feedback, survey responses, testimonials, or content you submit.

1.2 Information collected automatically

  • Server and network logs. Our servers, hosting providers, and content delivery and security providers (such as Cloudflare) automatically log technical information when you access the Services. This includes IP address, browser and device type, operating system, referring URL, pages and files requested, date and time, and response codes.
  • Product analytics. We use analytics tools, including a self-hosted instance of Aptabase and Google Analytics, to understand how the Services are used. On our websites this currently includes pages viewed, the referring website, buttons and links clicked, approximate location (such as country) derived from IP address, language setting, a randomly generated session identifier, and the version of the site. Some apps send similar usage events, such as an event when the app is opened, together with the app version and operating system version. Some apps let you turn this off in their settings.
  • Google Analytics. Our websites use Google Analytics to measure traffic. It sets cookies and sends usage information to Google, which handles it under Google's privacy policy.
  • Performance and security data. Our infrastructure providers may collect performance measurements (for example, page load timings) and security signals to keep the Services fast, available, and protected against abuse.
  • Cookies and browser storage. See Section 5.

1.3 Information processed by our apps

  • Rebar. Your workouts, exercises, sets, routines, body measurements, and settings are stored on your device. If you choose to connect Apple Health (HealthKit), Rebar may write your workouts to Apple Health and read related information, such as heart rate and active energy, to show it in the app. If we add optional features such as accounts, backup, or sync, information you choose to sync will be stored on our servers or our service providers' servers, and we will describe this in the app.
  • Claude Credits. The app reads your Claude usage using the Claude Code login already on your Mac and talks directly to Anthropic's services. Your login credentials and any Admin API key you add are stored on your Mac. The app does not currently send your credentials or your usage figures to us. It may send anonymous usage events as described in Section 1.2. Your use of Anthropic's services is governed by Anthropic's own terms and privacy policy, not this one.

1.4 Information from other sources

We may receive information about you from app stores, payment processors, service providers, business partners, publicly available sources, and other users, such as purchase confirmations, aggregated download and crash statistics, and fraud-prevention signals. We may combine this information with other information we hold.

2. How we use information

We may use the information described above for the following purposes, and for any other purpose we describe at the time we collect the information or with your consent:

  • to provide, operate, maintain, and improve the Services, and to develop new products and features;
  • to understand usage and trends, measure performance, and analyze the effectiveness of the Services;
  • to process transactions, licenses, and subscriptions, and to provide customer support;
  • to communicate with you, including service announcements, updates, security alerts, and responses to your requests, and, where permitted by law, information about products and services we think may interest you;
  • to personalize the Services;
  • to detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or illegal activity;
  • to comply with legal obligations, respond to legal process, and enforce our terms, policies, and rights;
  • to protect the rights, property, and safety of Greater Good Labs, our users, and others; and
  • to create aggregated, anonymized, or de-identified information, which we may use and disclose for any lawful purpose.

3. How we disclose information

We may disclose information in the following circumstances:

  • Service providers. To vendors who perform services on our behalf, such as hosting (for example, DigitalOcean), content delivery and security (for example, Cloudflare), code and site hosting (for example, GitHub), email, analytics (for example, Google Analytics), payment processing, customer support, and app distribution.
  • App stores and platforms. To Apple, Google, and similar platforms as needed to distribute the apps, process purchases, and provide platform features you choose to use.
  • Legal and safety. When we believe in good faith that disclosure is necessary to comply with applicable law, regulation, subpoena, court order, or other legal process or governmental request; to enforce our terms or policies; or to protect the rights, property, or safety of Greater Good Labs, our users, or others.
  • Business transfers. In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, sale of all or part of our assets or business, bankruptcy, receivership, or similar transaction, information may be disclosed to the counterparty and transferred as a business asset. The successor may use the information as described in this Policy.
  • Affiliates. To any current or future parent, subsidiary, or affiliate under common control with us.
  • With your consent or at your direction, including when you choose to connect a third-party service.
  • Aggregated or de-identified information, which is not reasonably linkable to you, for any lawful purpose.

3.1 Sale of personal information and targeted advertising

As of the effective date of this Policy, we do not sell personal information for money and do not share personal information for cross-context behavioral (targeted) advertising, as those terms are defined under applicable law. We reserve the right to do so in the future. If we do, we will first update this Policy and provide any notice, opt-out right, or consent mechanism required by applicable law.

3.2 Health data

Information obtained through Apple HealthKit is handled as Apple's requirements dictate, as long as we access HealthKit. We do not use it for advertising or marketing, do not sell it, and do not disclose it to third parties except as Apple's terms and applicable law permit. Where consumer health data laws apply, we process health data only as those laws permit, including obtaining any consent they require.

4. Retention

We keep information for as long as we consider reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. How long depends on the type of information, how it is used, and our legal obligations. We may delete or anonymize information at any time without notice. Information stored only on your device stays there until you delete it or remove the app.

5. Cookies, browser storage, and similar technologies

Our websites store small values in your browser's local storage and session storage, for example to remember your display theme and to keep an analytics session together across pages. Our websites also use Google Analytics, which sets cookies. Our infrastructure providers may set cookies or use similar technologies for security, performance, and abuse prevention. We and our providers may use additional cookies, pixels, software development kits, and similar technologies in the future. Most browsers let you block or delete cookies and stored data. Blocking them may affect how the Services work.

We do not currently respond to "Do Not Track" browser signals. Where applicable law requires us to treat a Global Privacy Control signal as a valid request to opt out of the sale or sharing of personal information, we will do so.

6. Security

We use reasonable administrative, technical, and physical measures designed to protect information. No method of transmission over the internet or of electronic storage is completely secure, and we cannot and do not guarantee the security of any information. You use the Services and provide information at your own risk. You are responsible for keeping your devices, accounts, and credentials secure.

7. Your choices and rights

  • Email. You may opt out of promotional emails by following the instructions in them. We may still send transactional or service messages.
  • App settings and device permissions. You can turn off optional analytics where an app offers that setting, and you can revoke access to Apple Health and other device permissions in your device settings at any time.
  • Data on your device. You can export or delete data stored locally by our apps through the apps where that feature is available, or by deleting the app.

Depending on where you live, and subject to exceptions and limitations under applicable law, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information we hold about you. You may also have the right to object to or restrict certain processing, to withdraw consent, to opt out of the sale or sharing of personal information or of targeted advertising or profiling, and to appeal our decision on your request. To make a request, email us at [email protected]. We may need to verify your identity before acting on a request, and we may decline requests where permitted by law. You may use an authorized agent where the law allows, and we may require proof of the agent's authority. We will not discriminate against you for exercising rights you have under applicable law. Many of our apps keep data only on your device. In that case we may not hold any personal information to give you access to, correct, or delete.

European Economic Area, United Kingdom, and Switzerland. Where these laws apply, we process personal information on the basis of our legitimate interests (such as operating, securing, and improving the Services), to perform a contract with you, to comply with legal obligations, or with your consent. You may lodge a complaint with your local data protection authority.

8. Children

The Services are not directed to children under 13 (or under 16 where a higher age applies), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

9. International transfers

We are based in the United States, and we and our service providers may process and store information in the United States and other countries whose data protection laws may differ from those where you live. Where required, we use appropriate safeguards for such transfers.

10. Third-party services and links

The Services may link to, integrate with, or depend on third-party websites and services, such as Apple Health, Anthropic, Google, app stores, and GitHub. We do not control them and are not responsible for their content, policies, or practices. Your use of them is governed by their own terms and privacy policies.

11. Changes to this Policy

We may change this Policy at any time and for any reason. When we do, we will post the updated Policy on this page and update the "Last updated" date above. Changes take effect when posted unless we say otherwise. If we make material changes, we will provide any additional notice, and obtain any consent, required by applicable law. Your continued use of the Services after changes take effect means you accept the updated Policy, to the extent permitted by law. Please review this page periodically.

12. Contact us

Questions or requests about this Policy or our privacy practices: [email protected].