The short version
RenewGO helps you track continuing education and professional development (CE/CPD) for your professional licences. There is no account, no advertising and no tracking, and we do not sell your data. Your records live on your device and, if iCloud is on, in your own iCloud account. We run no server that holds your records and we cannot see them. Anonymous usage analytics and crash reports are optional and off until you turn them on. Your licence numbers stay on your device only.
1. Who we are
RenewGO is made by an independent developer ("we", "us"); the developer's name is shown as the seller on RenewGO's App Store page. We are the controller for the limited data described in sections 4 and 5. Contact for anything about privacy: info@familygo.app. Website: https://familygo.app.
2. What stays on your device and in your iCloud
These never reach us, under any setting:
- Your licences (profession, regulator, country or region, cycle dates, requirement rules).
- Your activities (course titles, providers, dates, hours or credits, topics, accreditation numbers, reflections).
- Certificates you add (stored as PDF files), with a file hash and the date added.
- Your settings (reminders, retention period, app lock, consent choices).
Where it is stored. On your device, protected by iOS Data Protection (complete file protection). When iCloud is available and on for RenewGO, it syncs through Apple's CloudKit private database in your own iCloud account. Only you (and Apple, under Apple's terms) can access it. We have no access to your iCloud data. iCloud sync uses silent system notifications from Apple to tell your devices that data changed; they carry no content from us.
Licence numbers are kept in the iOS Keychain, on this device only. They are not synced to iCloud. If you move to a new device, you enter them again.
Exports and backups. You can export a PDF report, a CSV of activities, certificates, and a full backup file. These are created on your device and handed to the iOS share sheet. Where you send them is your choice, and from then on they are outside RenewGO. They may contain personal and professional information, so check what a file contains before you share it.
3. Permissions and Apple services
- Face ID (and passcode): only if you turn on the app lock. iOS handles authentication. RenewGO never receives your face or fingerprint data.
- Notifications: only if you allow them. Reminders (deadlines, pace, open topics, yearly minimum, trial ending) are scheduled locally on your device. They contain amounts, dates and the licence name only, never licence numbers or certificate content.
- Camera and photos/files: if you scan or import a certificate. Text recognition runs on your device (Apple Vision). Where your device supports Apple Intelligence, field extraction uses Apple's on-device model; otherwise simple rules are used. The images do not leave your device except through your own iCloud sync.
- iCloud: for syncing, as above. You can turn it off in iOS Settings.
- If you use widgets or Siri shortcuts, they read your licence progress on your device.
4. What reaches us, and only if you allow it
During onboarding, and later in Settings, Privacy, you can turn on two separate choices. Both are off until you turn them on.
- Anonymous usage analytics (Firebase Analytics, Google). If on, RenewGO sends short events: profession and country selected, whether a template matched, licence created (from template or custom), paywall viewed, trial started, purchase completed, trial converted, certificate added (a bucketed number of fields detected, and whether on-device AI was used), a bucketed count of fields you edited, activity logged (how it was added), report exported, and a profession request. Parameters come from an allow-list: short ids, buckets, yes/no values and a two-letter country code. Free text never passes. We never send licence numbers, your name, course titles, providers, certificate content or reflections.
- Crash reports (Firebase Crashlytics, Google). If on, a crash sends the technical crash log, device model, iOS version, app version and a random installation identifier. Never your records or anything you wrote.
- Identifiers. Firebase assigns a random app-instance identifier, not your name, e-mail or Apple ID. It is not linked to your identity, and we have no accounts to link it to. Google sees technical data such as your IP address on any request. The app does not use Apple's advertising identifier (IDFA) or ask for tracking permission, and Google ad storage and ad personalisation are off.
- Remote Config (only with usage analytics on). If you have turned on usage analytics, the app also fetches updated licence requirement templates from Google Firebase Remote Config. The request carries a random Firebase installation ID, the app version and the device language, and nothing about you or your entries. If usage analytics is off, the app does not make this request and uses the templates built into it. Turning analytics off stops the fetching. The request sends no records from you.
Why and legal basis (GDPR / UK GDPR). To fix crashes and see which parts of the app are used. The basis is your consent (Art. 6(1)(a)), which you can withdraw at any time.
Who processes it for us: Google (Google Ireland Ltd and Google LLC), for Firebase Analytics, Crashlytics and Remote Config, under Google's data processing terms. It processes the data only on our instructions.
5. What reaches us without a choice
Purchases. Purchases are sold and billed by Apple. We never see your card or Apple Account details. We learn only whether you have an active entitlement, which the app checks on your device. Apple's own privacy policy applies to your payment and Apple Account.
E-mails you send us. If you write to info@familygo.app, we use your message and address to answer you. Legal basis: our legitimate interest in answering (Art. 6(1)(f)).
6. How long we keep it
- Your app data: we hold none. It stays on your device and in your iCloud until you delete it.
- Firebase Analytics event data: 2 months, then deleted.
- Crashlytics crash reports: 90 days.
- Support e-mails: deleted 12 months after the conversation ends, unless the law requires longer.
7. International transfers
Google may process data in the United States. Transfers are covered by the EU-US Data Privacy Framework (Google is certified) and the European Commission's Standard Contractual Clauses. Apple handles iCloud, App Store and Apple Maps data under its own policies.
8. Your choices and rights
- Change your consent at any time in Settings (Privacy). Turning a choice off stops sending at once.
- Export your records and a full backup in the app.
- Delete everything in Settings, Delete all data. It removes your records (the deletions sync to iCloud), licence numbers in the Keychain, reminders and the app lock. It also resets the analytics identifiers, so nothing sent later can be joined to anything sent before. Deleting the app removes the data on the device; iCloud data can be removed in iOS Settings, your name, iCloud, Manage Storage.
- Your rights under GDPR and UK GDPR: access, rectification, erasure, restriction, objection, data portability, and withdrawing consent without affecting what was done before. Your records are on your device and in your iCloud, so you control them directly in the app. We hold no records linked to you, and analytics identifiers are random and not linked to your identity, so we usually can't find data about you. Turning analytics off and Delete all data reset them. You can write to info@familygo.app and we will help where we reasonably can, within one month.
- Complaints: you can complain to the data protection authority where you live or work.
- US residents (including California): we do not sell or share personal information and do not use it for targeted advertising. You can use the rights above in any US state.
- Legal bases for running the app: the app runs on your device, so we mostly don't process that data as a controller. Where we do, the basis is performing our contract with you and our legitimate interest in providing a working app. We do not make automated decisions with legal effects about you.
9. Children
The app is not directed to children under 13 (under 16 in the EEA where that age applies). We do not knowingly collect data from children.
10. Changes
If we change this policy, we update the date at the top and, for changes that affect what is sent, ask again in the app before anything new is sent. The current version is at https://familygo.app/renewgo/privacy/.
Changes: 9 November 2026: first version.