Privacy Policy
Goober is an app for making AI memes of your friends. This policy explains what we collect, why, who we share it with, and the choices you have. We wrote it to match what the app actually does.
The short version
- You sign in with your phone number. Other people never see it.
- Contact sync is optional. Contact names never leave your phone; we only receive scrambled (hashed) phone numbers to find friends who are already on Goober.
- Your profile photos can be used by your friends to make memes, and you can turn that off at any time.
- To make a meme, we send the photos and text involved to OpenAI, which generates the image.
- We don't use facial recognition and don't create face templates or "faceprints".
- We don't sell your personal information or share it for targeted advertising.
- In a meme and not on Goober? You can ask us to take it down at trygoober.com/takedown.
- You can delete your account in the app. We keep one small, scrambled record of your phone number so the free meme allowance can't be reset by re-signing up.
1. Who we are
Goober is operated by Samika Labs, Inc. ("Goober", "we", "us"), 169 Madison Ave STE 78064, New York, NY 10016, USA. Questions about this policy or your data: support@trygoober.com.
2. What we collect
Information you give us
- Phone number. Used to create your account and sign you in with a one-time SMS code. It is never shown to other users.
- Birth date. Used to confirm you are 18 or older.
- Display name, handle and profile photos. Shown to your friends and to people who already have your number in their contacts.
- Photos you upload and prompts you type to make memes, plus any caption text you add or edit.
- Reports you submit about memes or users, and messages you send to support.
- Your "before you meme" agreement: when you agreed in the app that your photos and prompts go to OpenAI to make memes, and that you'll only upload people 18+ who are ok with being memed.
- Settings such as whether friends may use your photos, notification preferences, and default roast level.
Contacts (only if you allow it)
If you turn on contact sync, the app reads phone numbers from your address book on your device, converts each one into a one-way hash (SHA-256 of the number in international format), and sends only those hashes to us to check which belong to Goober users. Contact names, emails and other details are never sent. We don't store the hashes of contacts who aren't on Goober; we record only the matches, so we can show you friend suggestions. If you invite someone by text, we store a hash of their number so we can credit you when they join. You can skip contact sync and still use Goober.
Information created as you use Goober
- Your social graph: friend requests, friendships and blocks.
- Memes you make, including the inputs used, the generated image, and status information.
- Share links you create, and how many times each one has been viewed.
- Usage and allowance records: how many free memes you have used, invite and ad rewards, and Goober+ credits.
- Subscription status received from Apple (product, renewal and expiry dates, trial status, and a transaction ID). We never receive your payment card details.
- Device information: a push notification token if you allow notifications, the app version, and basic technical logs (such as IP address and request times) kept by our hosting providers for security and debugging.
3. How we use it
- To run Goober: sign-in, finding and connecting friends, making and storing memes, sharing, and notifications (for example, when a friend accepts your request, a meme is ready, or a friend memes you).
- To enforce limits: the free meme allowance, invite and ad rewards, and Goober+ credits.
- To keep Goober safe: checking prompts and images with automated moderation, reviewing reports, preventing abuse and fraud, and enforcing our Terms.
- To improve the app and fix problems.
- To comply with law and respond to lawful requests.
We don't use your photos or memes to train our own AI models, and we don't sell your personal information or share it for cross-context behavioral advertising.
If you are in the EEA or UK, our legal bases are: performing our contract with you (running the service), our legitimate interests (safety, fraud prevention, improving Goober), your consent (contacts, notifications, and anything else we ask permission for, which you can withdraw), and legal obligations.
4. Photos and memes: who can see what
- Profile photos are visible to your friends. While "let friends use my photos" is on, friends can use them as inputs for memes. Turn it off in Account, or remove a photo, and friends can no longer use it. Blocked users can't see your photos.
- Uploaded photos (from your camera or library) are private to you and are deleted from our storage after 30 days.
- Memes are visible to you, the creator. The person in a meme may be notified that they were memed. Locked memes (past the free limit) can't be viewed or shared until unlocked.
- Shared memes: when you share a meme (for example in iMessage), we create a private link at trygoober.com/m/… Anyone who has the link can see that one meme, your first name, and your invite code. The page isn't listed in search engines. You can revoke a link at any time, and links stop working if the photo used is removed or no longer allowed.
AI labels
Memes are AI-generated, and the image files we save and send keep the embedded content credentials (C2PA data) that mark them as made by AI. You can check any Goober meme with a free tool such as contentcredentials.org/verify.
Face data
Memes are made by sending photos to an AI image model, which draws a new image. Goober does not use facial recognition, does not create face templates, face geometry scans or other biometric identifiers, and does not use photos to identify or verify who someone is. We don't sell, lease or trade photos, and we don't profit from any biometric information. If a law treats any of this processing as biometric, we keep the photos involved only as long as section 6 says, and in any case delete them within 3 years of a person's last interaction with Goober, or sooner when the purpose is fulfilled.
If you're in a meme and don't use Goober
Goober is built so friends meme friends who agreed, but someone could upload your photo without asking. If you see a meme of you that you didn't agree to, ask us to remove it at trygoober.com/takedown or support@trygoober.com. We'll revoke its share link and delete it. Requests about intimate images are handled within 48 hours.
5. Who we share it with
We share information only with service providers who help us run Goober, under contracts that limit their use of it, and in the cases below.
- Supabase hosts our database, file storage, sign-in and server functions.
- Twilio (through Supabase Auth) sends your SMS sign-in code to your phone number.
- OpenAI generates memes. For each meme we send the photos used, your prompt and settings, and a pseudonymous ID (a salted hash, never your name, number or account ID) used for abuse monitoring. OpenAI also runs automated moderation on prompts and images. Under OpenAI's API terms, data sent through the API is not used to train its models by default and may be retained for up to 30 days for abuse monitoring.
- Apple processes Goober+ purchases and delivers push notifications, under Apple's own privacy policy.
- Google AdMob serves optional rewarded video ads. If you choose to watch an ad, Google may collect device and ad-interaction information (for example IP address and device identifiers) under Google's policies. We pass Google only an internal account ID so we can credit your reward. We don't allow cross-app tracking unless you have given permission through Apple's App Tracking Transparency prompt.
- Render hosts our website, including this page.
- Other users, as described in section 4.
- Legal and safety: when required by law, or to protect the rights, property or safety of our users, the public or Goober.
- Business transfers: if Goober is involved in a merger, acquisition or asset sale, your information may transfer, subject to this policy.
6. How long we keep it
- Account data, photos and memes: until you delete them or your account.
- Uploaded photos: 30 days.
- Free meme allowance records: kept after account deletion, as a keyed one-way hash (HMAC) of your phone number with counts and dates only. This stops the free allowance from being reset by deleting and re-creating an account. It contains no name, photo or meme.
- Records we must keep for legal, tax, fraud-prevention or safety reasons: as long as needed for that purpose.
- Server logs held by our providers: typically a few weeks.
- Reports, takedown requests and our responses: up to 3 years, to show we handled them and to stop removed content from coming back.
- Records of your consent to Goober+ renewal terms: kept by Apple and by us as required by law (at least 3 years).
7. Deleting your account
Go to Account → Delete account in the app. We delete your profile, photos, uploads, memes you made, friendships, share links and device tokens, and your sign-in. Memes your friends made using your photos stay with them, but no longer link to your account. Deleting your account does not cancel a Goober+ subscription; cancel it in your iPhone's Settings → Apple ID → Subscriptions. You can also email us to request deletion.
8. Your choices and rights
- Edit your name, handle and photos, and turn photo use, notifications and camera-roll saving on or off, in the app.
- Turn off contacts, camera, photos or notifications access in iOS Settings.
- Unfriend or block anyone at any time.
Depending on where you live (for example California, Colorado, Connecticut, Texas, Virginia and other U.S. states, or the EEA or UK), you may have the right to:
- know what personal information we collect, use and disclose, and get a copy of it in a portable format;
- correct inaccurate information;
- delete your information;
- opt out of the sale of personal information, "sharing" for cross-context behavioral advertising, targeted advertising, and profiling that produces legal or similarly significant effects (we don't do any of these, but you can still tell us to opt you out);
- limit the use of sensitive personal information (we only use it as needed to run Goober);
- object to or restrict some processing, and withdraw consent.
To make a request, email support@trygoober.com from any address and tell us the phone number on your account. We'll verify the request by confirming that number, and respond within the time the law requires (usually 45 days). You may use an authorized agent; we may ask for proof of their authority and confirm your identity directly. We honor Global Privacy Control browser signals as an opt-out request on our website. We won't discriminate against you for exercising these rights.
Appeals. If we decline your request, you can appeal by replying to our decision with the subject "Appeal". We'll answer within the time the law requires (usually 45 to 60 days) and explain why. If you're not satisfied, you can contact your state attorney general. In the EEA or UK, you may also complain to your local data protection authority.
California notice at collection. In the last 12 months we collected the categories in section 2: identifiers (phone number, account ID, device token, IP address), customer records, commercial information (Goober+ status), internet activity (usage logs), audio/visual information (photos and memes), inferences (none for advertising), and sensitive personal information only as needed to run Goober (account login). We disclosed them for business purposes to the service providers in section 5. We don't sell or share personal information and haven't in the last 12 months, and we don't knowingly sell or share information of anyone under 16.
9. Security
We use encryption in transit, private storage buckets, row-level access rules on our database, and least-privilege server keys. No system is perfectly secure, so please keep your phone and SIM protected.
10. Age requirement
Goober is only for people 18 and older. We check your birth date at sign-up and, where the law requires it (for example in Texas), we may use the age range Apple provides for your account. We use that age information only to keep minors out and to comply with the law. We don't knowingly collect information from anyone under 18, and Goober is not directed to children. If you believe a minor is using Goober, or that a meme shows a minor, contact us and we'll act on it promptly.
11. International transfers
We and our providers process data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
12. Changes
We may update this policy. If the changes are material, we'll tell you in the app or by other reasonable means before they take effect. The date at the top shows the latest version.
13. Contact
Samika Labs, Inc., 169 Madison Ave STE 78064, New York, NY 10016, USA
support@trygoober.com