Privacy Policy

The Good Deeds app lets you record a good deed (for example, “helped a neighbor” or “donated blood”), optionally attach your location, and see it appear as a “glow” on a shared public map. You may use the app without creating an account: your device keeps a “persona” (a handle and avatar you choose). If you sign in with Google, we connect your persona to your account so it can follow you across devices. Deeds and glow walls are public by default; you can mark a wall private so only you can view it. The service is supported by advertising: free-tier users will see ads on glow wall pages and panels (never on the Google map); premium users (those who hold credits) are ad-free.

• Information you provide: your good-deed submissions (type, optional short note), the persona handle and avatar you choose, feedback you send us, and optional location attached to a deed when you choose to share where it happened.
• Account information (if you sign in with Google): your name, email address, and Google user ID returned by Google at sign-in. We use these only to authenticate you and to keep your glow consistent across devices.
• Invitations and cohorts: if you are invited to join an organization or cohort on the service, we store the email address the invitation was sent to and the cohort label, and we may email you an invite link.
• Credits and premium features: if you top up credits or use paid AI features, our payment processor (Stripe) handles your payment details; we store only your balance and usage counts.
• Device and usage information: IP address, browser/device type, and pages or features you use. We use a session identifier to correlate activity for abuse prevention, rate limiting, and troubleshooting.
• Advertising data (free tier): ads on glow wall pages are served by advertising partners who may place cookies or use device identifiers to serve and measure ads and to show you ads more relevant to your interests. You can opt out of personalized ads in Settings; premium (credit-holding) users see no ads and no ad cookies are used for them.
• Presence status: while you have the map open, the service records that your persona is “glowing now” so friends can see who is active. You can turn this off in Settings.

• To provide the service: record and display your deeds, maintain your persona and wall, show presence, and power challenges, reactions, and weekly recaps.
• AI features: when you ask for a challenge card or a weekly recap, we send the relevant deed text to our AI provider (currently DeepSeek) to generate the content. We do not use AI to build advertising profiles.
• To send you service emails: if you are invited to a cohort, we email you an invite link (sent from our Google Workspace mail).
• To keep the community safe: rate limiting, duplicate detection, spam/abuse review, and responding to reports you or others file about content.
• To support the free tier: show ads on glow wall pages so the service can remain free for everyone; premium users are ad-free.
• To operate and improve: hosting, security, monitoring, analytics, and feature development on Google Cloud infrastructure.

We do not sell personal information. Information is shared only as needed to run the service:

• Public content is public: deeds, personas, and public walls are visible to anyone on the map and web, by design — that is the product. Content on a private wall is visible only to you.
• Advertising partners (free tier): ad networks that serve ads on glow wall pages may receive limited device/advertising data through their own cookies and SDKs. We do not sell your name, email, or account data to advertisers.
• Service providers: Google (Cloud/Firebase hosting and authentication), Google Maps (map rendering), Stripe (payments, if you top up), DeepSeek (AI text generation), and our email provider — each processes data only to provide its service to us, under their own privacy terms.
• Legal and safety: we may disclose information where required by law, to protect rights and safety, or to enforce our terms.

ONSERV offers “Sign in with Google” so that your glow — your handle, your wall, and your deeds — can follow you across devices and browsers. This section explains exactly what Google user data we access, and how we use, store, and share it.

What we access. When you choose “Sign in with Google,” Google returns only the basic profile information covered by the openid, email, and profile scopes: your name, your email address, your profile picture URL, and the stable identifier for your Google Account. We request no other scopes. We do not request or receive access to your Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google product data.

How we use it. We use this information to authenticate you, to keep your persona and deeds attached to a single account across devices, and to administer your account (including any credits you hold). We do not use Google user data for advertising or marketing, we do not use it to build advertising or interest profiles, and we do not use it to train or fine-tune AI models.

How we store it. Your account record is held by Google Firebase Authentication, and the link between your account and your persona is stored in our own databases on Google Cloud infrastructure (including Cloud SQL for PostgreSQL). Google user data is encrypted in transit (TLS) and at rest, and access is limited to the systems and the personnel who operate the service. We retain it only for as long as your account is active; when you delete your account, we delete it as described in Section 11.

How we share it. We do not sell, rent, or trade Google user data, and we do not share it with advertisers, data brokers, or any other third party for advertising or marketing purposes. It is not sent to the AI provider that generates challenge cards and weekly recaps — that processing uses the deed text you write and your public persona handle. It is never placed in public map content. The only parties that handle it are the Google Cloud infrastructure that hosts the service on our behalf and, where legally required, disclosures of the kind described in Section 4 (“Legal and safety”).

Limited Use. ONSERV's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not:

• use Google user data to serve advertising, including personalized or retargeted advertising;
• sell or transfer Google user data to third parties, except as necessary to provide or improve our user-facing features, to comply with applicable law, or as part of a merger or acquisition with notice to you;
• allow humans to read Google user data, unless we have your affirmative consent, it is necessary for security purposes (such as investigating abuse), it is necessary to comply with applicable law, or the data has been aggregated and anonymized for internal operations;
• use Google user data to determine credit-worthiness or for lending purposes;
• use Google user data for any purpose other than providing and improving the features you can see in the app.

Revoking access. You can remove ONSERV's access to your Google Account at any time at myaccount.google.com/permissions. Revoking access stops any future sign-in with Google; to have the account data we already hold deleted, follow Section 11.

Google Maps. Our map features use the Google Maps API; Google processes certain device and location data directly through the Maps integration under the Google Privacy Policy.

We only receive your precise location when you choose to attach it to a deed you submit (for example, to show where a good deed happened). You can always submit a deed without a location. We do not track your location in the background. Your IP address is used only for security, rate limiting, and approximate regional estimates.

• Persona and walls: you can edit your handle/avatar at any time, and make your wall private from the wall page.
• Ads (free tier): you can opt out of personalized ads in Settings; holding credits makes you ad-free entirely.
• Presence: turn off “show me in who’s glowing now” in Settings.
• Anonymous use: you can use the app without signing in; your persona lives on your device and you can clear it at any time (sign out clears it).
• Deletion: request deletion of your account and personal data at any time (see Section 10).

We use industry-standard safeguards (encryption in transit and at rest, access controls, rate limiting) to protect your information. We retain personal data only as long as your account is active or as needed to provide the service and meet legal obligations. Presence records expire shortly after you go offline; invite links expire on the date set when they are created.

Bot protection (Cloudflare Turnstile): to keep our public write surfaces — such as submitting a good deed or sending feedback — free of automated abuse, we use Cloudflare Turnstile. When you submit on those surfaces, Turnstile may process limited technical data (for example, browser and device signals and an IP address) to verify that a human, not a bot, is acting. Turnstile runs silently in the background and does not set advertising or tracking cookies. Cloudflare processes this data under its own terms; because we use Turnstile's invisible mode, we incorporate by reference Cloudflare's Turnstile Privacy Policy and Addendum, and you can learn more about the service on Cloudflare's Turnstile product page.

Our services are not directed to children under 13 years of age (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at support@onserv.com and we will delete it promptly.

Depending on where you live, you may have rights to access, correct, delete, or obtain portability of your personal information. If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) grants you the right to know what personal information we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell personal information.

To exercise any of these rights, contact us at support@onserv.com. We will verify your identity and respond within the timeframe required by applicable law.

You may request the deletion of your account and associated personal data at any time by emailing support@onserv.com or using the account dashboard where available. We will action verified requests within 30 days, subject to legal retention obligations.

We operate on Google Cloud infrastructure with servers in multiple regions (including the United States). Your information may be processed in countries other than your own, and by using our services you consent to such transfers. We apply safeguards consistent with applicable law.

We will update this page as our services evolve and will revise the “updated” date above. If changes are significant, we will notify you before they take effect where we have your contact details.

Questions about this policy? Contact us at support@onserv.com.