Privacy Policy

Last updated: October 22, 2026

FirstGoal is a goal, task and habit tracker operated by Michael Albrecht, doing business as FirstGoal ("we", "us"). This policy explains what information we collect when you use FirstGoal at startfirstgoal.com, how we use it, and the choices you have. Questions? Email brightmdapps@gmail.com.

Information we collect

Account information: your email address and password. Passwords are stored only as a secure one-way hash — we can't see them. If you turn on 2-step verification, we store the secret your authenticator app uses.
What you put into the app: goals, log entries, milestones, tasks (including notes, subtasks, scheduled times and reminder times), shopping lists, categories and settings such as your theme and time zone.
Testimonials and feedback: if you choose to share your experience, we keep what you write, the name you'd like shown, and whether you gave permission to publish it. We only quote it on our website or in ads if you said yes, and you can ask us to remove it at any time.
Notification details: if you turn on reminders, your browser gives us a device address that lets us deliver push notifications to that device.
Billing information: if you subscribe, payments are processed by Stripe. Stripe collects your card details directly; we never see or store your full card number. We receive your subscription status and basic billing details such as the last four digits of your card.
Technical information: like most websites, our servers record requests (such as the time, the page or feature used, whether it succeeded, and your IP address) to keep the service running, secure and fixed when something breaks.
Usage analytics: we use HeyCatch to understand how people use FirstGoal, so we can improve it. It records which pages you visit and what you click, your device and browser type, your approximate location (from your IP address), and which link or ad brought you here. When you're signed in, this is linked to your account ID, email address and plan. Inside the app, we remove what you clicked on before anything is sent, so the text of your goals, tasks, notes and log entries never reaches HeyCatch. HeyCatch doesn't record your screen.

Cookies and local storage

We use one essential cookie to keep you signed in. We also save a few preferences in your browser (such as your theme and calendar view) so the app looks the way you left it. To work offline, the app keeps a copy of your data on your device; logging out removes it. HeyCatch, our analytics service, saves a random visitor ID in your browser so it can tell visits from the same browser apart.

On our public home and sign-up pages only, we use the Meta Pixel to measure whether our Facebook and Instagram ads lead to sign-ups. It sets Meta cookies and tells Meta that a visit or a sign-up happened. It never runs inside the app, so Meta never sees your goals, tasks, notes or other content, and we don't send Meta your email address. We skip it entirely if your browser sends a Global Privacy Control signal.

How we use your information

To provide the app: storing your goals and tasks, calculating your progress, and showing your calendar.
To send emails you need: confirming your address, resetting your password, and important notices about your account or subscription.
To send reminders you set up, if you've turned on notifications.
To process payments and manage your subscription.
To keep the service secure, prevent abuse, and find and fix problems.
To understand which features get used and where people get stuck, so we can improve the app.

We don't sell your personal information. The only information shared for advertising is the Meta Pixel activity described above. You can opt out with your browser's Global Privacy Control setting or tracking protection, or in your Facebook and Instagram ad settings.

Services that process data for us

We use a small number of providers who handle data only to run FirstGoal for us:

Microsoft Azure (United States) — hosting, database, backups and error monitoring.
Resend — delivering account emails such as confirmations and password resets.
Stripe — payment processing and subscription billing.
HeyCatch — usage analytics (as described above), never including the content of your goals, tasks or notes.
Meta — measuring our Facebook and Instagram ads (public pages only, as described above).
Browser push services (run by your browser's maker, such as Apple, Google or Mozilla) — delivering reminder notifications to your device.

We may also disclose information if required by law, or to protect the rights, safety or property of our users or others.

Not medical advice, and no patient information

Despite the name, FirstGoal is a personal productivity tool. It is not a medical service and is not designed to store protected health information. Please don't enter other people's health or patient information.

How long we keep your information

We keep your account data while your account is open.
When you delete your account, it is removed from our live database right away. Copies may remain in encrypted database backups for up to 35 days before they're automatically erased.
Server request logs are kept for up to 30 days.
Billing records may be kept longer where the law requires (for example, for taxes).

Your choices and rights

Access and download: Settings → Your data → Download my data gives you a copy of everything in your account.
Correct: you can edit or delete your goals, entries and tasks at any time in the app.
Delete: Settings → Your data → Delete my account permanently deletes your account and its data.
Notifications: you can turn reminder notifications off in Settings at any time.

Depending on where you live (for example, California or the European Economic Area), you may have additional rights, such as to request information about how we process your data or to object to certain processing. To make a request, email brightmdapps@gmail.com. We won't treat you differently for exercising your rights.

Security

We protect your information with encrypted connections (HTTPS), hashed passwords, optional 2-step verification, and access controls on our systems. No method of storage or transmission is completely secure, but we work to protect your information and will notify you if a breach affects you as required by law.

Children

FirstGoal isn't intended for children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we'll delete it.

Changes to this policy

If we make material changes, we'll update the date above and let you know by email or in the app before they take effect.

Contact

Michael Albrecht, doing business as FirstGoal · brightmdapps@gmail.com