GoesHere Privacy Policy
A home inventory is sensitive. GoesHere collects only the information needed to organize, synchronize, share, purchase, export, and delete your moving-box inventory. We do not sell personal data, show ads, or track you across other companies’ apps and websites.
Information we process
We process account email and display name; workspace, move, room, box, item, collaborator, and event data; photos you take or select; scoped invitation and customer-access records; and purchase entitlement records. We do not request your address book or device location.
Photos and AI inventory
AI photo processing is the core GoesHere service. You must explicitly accept the current disclosure before creating or entering a workspace. GoesHere creates a resized derivative, removes EXIF and GPS metadata, redacts detected faces, and sends it through OpenRouter to Google Gemini to suggest visible contents. Production prompts and images are not logged. AI suggestions can be wrong and are always editable.
Cloud AI requires providers to process the derivative, so the inventory is not end-to-end encrypted during inference. Data is encrypted in transit and at rest. Withdrawing permission stops new upload and sync processing and returns you to the mandatory disclosure. Existing local move data remains intact and reappears after you accept again.
Product analytics
GoesHere records Product Interaction events, such as onboarding, packing, purchase-funnel, referral, and feedback interactions, with a linked installation identifier for first-party Analytics. We do not use this information to track you across other companies’ apps or websites.
Sharing and service providers
Authorized workspace members and holders of an active move-scoped grant can access only the content permitted by that role. A QR identifies a box but does not grant access. GoesHere uses service providers for hosting and storage, authentication, email, app-store purchases, and AI processing. They may process data only to provide those functions under their terms.
Retention and deletion
Photos and inventory stay with your move while it is active. After a move is closed, we keep its data for the organization retention period (default 730 days) before permanent removal. Soft-deleted moves are purged about a day later. Workspaces that only ever had anonymous (unclaimed) accounts may be cleaned up after about 30 days of no activity. Deleting a move revokes access immediately and removes its live database records and stored objects. You can export or delete a move and delete your account from Account → Privacy & Data.
Deleting your account immediately removes your sign-in sessions, passkeys, saved Google credential, personal moves, private photos, and active invitations. GoesHere also asks Google to revoke its Sheets authorization. If Google cannot accept that request, the saved credential is still deleted and cannot be used by GoesHere.
Moving-company records may need to remain available to that company. When they do, your attribution is replaced with “Former member” and your access is removed. Pseudonymized purchase, entitlement, ledger, and audit records may be retained with their transaction identifiers for accounting, fraud prevention, and legal obligations. They cannot be used to restore access or credits to a deleted account.
Security and choices
GoesHere uses encrypted transport, private object storage, short-lived authorized media links, hashed invitation secrets, and revocable access grants. No system is perfectly secure. Keep invitation links private and report suspected access promptly.
Children and changes
GoesHere is not directed to children under 13. If this policy materially changes, the app will present updated notice or consent where required.