Privacy Policy
Effective October 28, 2026
Goldfish shows you the automations and agents you run, what they make, and what needs your attention. This policy says what Goldfish keeps, why, who else handles it, and what you can do about it. Goldfish is made by Nade LLC, a Missouri company.
What Goldfish keeps
- Your account. Your name and email address. If you sign in with Apple, Google or GitHub, Goldfish keeps the account ID that company gives it and the email it shares (Apple may share a private relay address instead of your real one). If you sign in with email, Goldfish keeps a one-way hash of your password (Argon2), never the password itself.
- Your workspace. The automations and agents you connect, their schedules and run history, what they make, the notes you choose to connect, and what Goldfish learns from them (your Brain).
- Connection keys. The tokens that let Goldfish reach the services you connect, such as GitHub or Notion. They’re encrypted (AES-256-GCM) on the server, and never stored on your phone or in your browser.
- Your iPhone. If you allow notifications, the token Apple gives Goldfish to send your phone alerts when something breaks. The home screen widget shows your health score from what the app last saved on your phone.
- Settings. Small choices, like your look (Bento or Flow) and which alerts you want.
- Technical logs. Short server records (times, errors, IP addresses) kept only as long as needed to run Goldfish and keep it secure.
What Goldfish doesn’t do
- No advertising, and no tracking you across other apps or websites.
- No analytics tools or third-party trackers in the app.
- Nothing you connect is used to train AI models.
- Goldfish doesn’t sell or rent your data, and doesn’t share it except as described below.
Who else handles it
- Hosting. Goldfish runs on Fly.io, which stores workspace data on Goldfish’s behalf.
- AI. When you use an AI feature (finding why something broke, asking about a fix, planning or building something, asking your Brain), the parts of your workspace that request needs go to Anthropic’s Claude through Goldfish’s own account. Anthropic handles them under its commercial terms, which don’t allow training its models on them.
- Sign-in. Apple, Google and GitHub confirm who you are when you use their buttons.
- Alerts. Apple’s push notification service delivers alerts to your iPhone.
- The services you connect. Goldfish reaches GitHub, Vercel, n8n, Notion, Slack and the others you connect with your permission, only to read and run what you asked for.
- Fonts. Goldfish’s pages load their typeface from Google Fonts, which sees the request (your IP address), as with any site that uses them.
- The law. Goldfish discloses information only if the law requires it, and tells you first when it’s allowed to.
Your choices
- Export. Profile → Export everything downloads your workspace.
- Disconnect. Remove any connected service in Profile. Goldfish deletes its key right away.
- Notifications. Turn alerts off in the app or in your iPhone’s Settings at any time.
- Delete. Profile → Delete account removes your account, your workspace, your Brain, your run history and your stored keys. Your automations keep running wherever they run; Goldfish just stops watching them.
Security
Everything travels over HTTPS. Keys are encrypted at rest under a master key that never touches the database, and each workspace sees only its own data. No system is perfectly secure, so Goldfish keeps only what it needs.
Children
Goldfish isn’t meant for children under 13 and doesn’t knowingly collect their information. If you think a child has made an account, write to the address below and it will be deleted.
Changes
If this policy changes, the date at the top changes too. For anything significant, Goldfish tells you in the app before it takes effect.
Questions
Write to privacy@nadellc.com. Nade LLC, Missouri, United States.