Privacy

Who we are

Gosh Mode is published by Karim Nasreddine, based in Lebanon, and is intended for adults. Contact hello@goshmode.com for privacy requests or support.

Waitlist and support

We manage early-access interest on our servers using Scripiora. We keep your email, channel, referral source and signup time. Authorized operators and workspace collaborators can access and export the list. Spam checks and network-based limits help prevent misuse.

The waitlist is for one email when Gosh opens. Request removal at hello@goshmode.com. Requests are manual, without automatic self-service removal. App account deletion does not remove a separate signup.

Support messages contain the information and attachments you send. Please leave out passwords, sign-in codes and unnecessary medical, financial or identity documents.

Device records and accounts

Local tools work without an account. Food, workout, Money, task, Care, learning, conversation, settings and file records stay on your device. Optional profile details include your name, phone number, bio and location.

Ask Gosh, photo tools and People need an account. We use your email and a one-time code delivered through Resend. Our service keeps your email, account ID, sign-in verification and session records, timestamps and security counters for authentication and abuse prevention.

Gosh Mode does not offer cloud backup, device sync or cloud file storage. Your records are not uploaded unless you send them to one of the tools described below.

AI requests

AI requests follow a processor disclosure and explicit Send. Ask Gosh sends your message and selected recent text or Food/Workout summaries through our server to Google Gemini on Google Cloud. Photo tools send selected meal, nutrition-label or Care images and observations. Care cutout can run on our server. Camera permission or photo selection does not authorize an upload.

We keep daily usage counts per account to limit AI requests. These counts hold no message or photo content, and we delete them within days. We record the duration and token count of each request, without its content, to keep the service reliable.

Google Cloud processes requests under the Google Cloud Service Specific Terms and Cloud Data Processing Addendum. The Cloud terms restrict training or fine-tuning with customer data without prior permission or instruction. Cloud safety monitoring, project logging and implicit caching can retain data under Google Cloud’s retention controls. We do not promise zero provider retention.

Requests made during testing before 31 October 2026 used the Gemini Developer API. Google’s abuse-monitoring guidance describes 55-day retention for those requests. These policies do not guarantee that every copy disappears after 55 days.

You can decline uploads and use manual entry. Saved results are separate from provider processing.

People

When you use People, your profile, friend requests, connections, messages and photos go to our service and the people you connect with. Our server can read them. They are not end-to-end encrypted. Pass-phone games remain local.

When someone reports you, or you report someone, we review the report, the reason and the related messages. We keep reports and removal decisions to handle abuse and appeals. Removed users disappear from search and cannot use People, and they can still export their data and delete their account.

Providers and international processing

Our current server is hosted by Hetzner in Nuremberg, Germany. Resend delivers sign-in and other outgoing service email. Incoming mail for our contact domain routes through Cloudflare Email Routing.

Providers may process information outside Lebanon or your country. Their policies describe their processing and retention. Resend publishes 30-day email and log retention for standard plans, with other plans and backup copies subject to separate handling. Provider-published periods are not a promise that every message copy is erased on that date.

Hosting services receive network information such as IP addresses. Sharing or exporting sends a copy to the app or recipient you choose. We cannot erase copies they keep. Local reminder text can appear on your lock screen.

How long information remains

Device and live account records

Device records remain until removed through supported controls or the app/device lifecycle. Applicable account deletion removes live account and cloud records and revokes access. Exports and operating-system backups can retain separate copies.

Sign-in credentials

Codes are valid for 10 minutes; ordinary sessions for 30 days. Deletion receipts remain valid for 30 days. Expiry prevents use; cleanup can happen later when the sign-in service processes requests.

Waitlist records

Signups remain in the list until removal is processed. Removal requests are manual. Website database backups use a 30-day age threshold, and a separate file-backup layer can keep copies of those backups within its own 29-day window. The combined layers can retain data beyond 30 days.

Recovery and maintenance copies

Routine encrypted account backups rotate by count: seven successful archives, not seven days. Separate, access-restricted maintenance checkpoints support upgrades and recovery and can include plaintext database copies and preserved encrypted archives. They are outside that rotation. Account deletion does not immediately remove every checkpoint or archive.

Reporting and safety history

Reporting evidence and revocation records support abuse handling and prevent removed data or access from returning after recovery. These records are separate from live account records and can remain after account deletion.

Technical logs

Technical logs rotate under age and size limits, including 14 daily web-server log archives, a 30-day service-log setting with a size cap, and size-based website logs.

Current automated backups remain local to the server. Independent offsite setup is deferred. We do not guarantee loss-free recovery after server loss; keep separate copies of records you need.

Your choices and requests

You can edit and export supported records and use account deletion where available. For access, correction, deletion, waitlist removal or other privacy requests, contact hello@goshmode.com. We may need to verify ownership.

Depending on applicable law, you may also have rights to restrict or object to processing, receive portable data, withdraw consent or complain to a competent authority. Stopping future uploads does not undo earlier provider processing, and account deletion cannot retract recipient or exported copies.