Privacy policy
The short version. Silly Goose reads the things you send it, works out the dates and prices that matter, and keeps only those facts. It does not keep your emails, it shows no ads, it uses no analytics or tracking, and it never sells or shares your data.
What Silly Goose stores
- The facts it works out: a title (for example "Vodafone"), an amount and currency, dates, a notice period, and one line explaining how a date was derived and where it came from.
- Your account: an anonymous account is created on first launch. If you verify an email address, that address is stored so forwarded mail can be accepted and so you can recover your data on a new phone.
- Your Silly Goose forwarding address and the email addresses you verified as senders.
- If you connect an inbox: the account's email address and an access token that lets Silly Goose read that inbox. The token is stored on our server, never in the app.
- Your settings: country, home currency and reminder preferences.
What it does not store
- Email contents and attachments. A forwarded or scanned email is read once to extract the facts and is then discarded.
- Photos. A photographed document is read once to find its date and is not kept.
- Anything from your contacts. Saving Silly Goose as a contact uses Apple's own form; the app never has access to your address book.
Connecting an inbox (optional)
You can connect an Outlook or Hotmail inbox. Silly Goose then stores that account's email address and a read-only access token on its server, searches the inbox for contracts, subscriptions, documents and appointments, and reads the matching messages and their PDF attachments to extract the facts above. It never sends, deletes or changes anything. Disconnecting in Settings deletes the token.
Gmail works the same way but is currently limited to testers we add by hand, while the app is in Google's testing phase. Silly Goose's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: data from Google is used only to provide the features described here, is never used for advertising, and is not read by humans.
Your calendar (optional)
If you allow it, Silly Goose reads upcoming events from the Calendar app on your phone — which may include Google, Outlook or iCloud calendars you set up there — and offers them as appointments to confirm. The reading happens on your phone; only the appointments you confirm are stored, as the facts above. Silly Goose never changes your calendar.
Who processes your data
- Supabase hosts the database and server functions, in Frankfurt, Germany.
- Anthropic provides the AI model that reads a message, PDF or photo to extract the facts. The content is sent for that single purpose and is not used to train models.
- Cloudflare receives mail sent to your forwarding address and passes it on; it also serves this website.
- Microsoft, only if you connect an Outlook inbox; Google, only for invited Gmail testers.
Anthropic, Cloudflare, Google and Microsoft may process data outside the European Union.
Reminders
Reminders are scheduled on your phone. Silly Goose does not send push notifications from a server and has no record of which reminders you saw.
Your choices
- Delete everything: Settings → "Delete my account and everything in it" permanently removes your account and all data tied to it, immediately.
- Delete any single item, disconnect any inbox, or remove any verified email, in the app.
- You can ask for a copy of your data, or for anything to be corrected, by writing to hello@sillygooseapp.com.
Children
Silly Goose is not intended for children under 16.
Changes
If this policy changes in a way that matters, the app will say so before the change applies.