Privacy Policy
Last updated August 15, 2026
What good.pm does
What we collect
- Account: your email address, a passkey credential (public key only — we never see a password), and an optional display name.
- Preferences: your city, interests, whether you want kid-friendly picks, your timezone, and your reactions to events (likes, dislikes, category votes). This is the taste profile our recommendations run on.
- Your personal calendar feed (optional): if you connect a private iCal URL, we read it to learn when you are busy or free. We store the URL and use busy/free times to schedule around your life. We never display the URL or your calendar contents back to anyone.
- Google Calendar (optional): see the dedicated section below.
- Social features: if you invite friends to a hangout or forward an event, we store the email addresses you provide in order to send those invitations.
- Messages: what you type to the concierge, so the conversation works and your preferences improve.
Google Calendar — and the Limited Use disclosure
If you connect Google Calendar, we request calendar access to do two things: create a dedicated calendar named “good.pm” in your account, and write and update our event picks inside that calendar. We read your calendar list only to find or create that calendar. We do not read, store, or process events from your other calendars. You can disconnect at any time in good.pm, and you can revoke our access at myaccount.google.com/permissions, which invalidates our stored tokens.
good.pm’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use AI
Who else touches the data
- Convex — our database and hosting provider; all application data lives there.
- Resend — delivers our emails (invites, your calendar link).
- Google — only if you connect Google Calendar, as described above.
- An IP-based lookup may run in your browser once to suggest your city; the guess is only saved if you keep it.
We do not sell your data, run ads, or share your information with anyone beyond these service providers.