Who we are
You the Winner is a personal growth and daily tools platform, operated by GoEnhanced LLC, founded by Marcelo Aragão, Highland Village, TX.
This policy covers all services and websites under the you-the-winner.com domain and its subdomains, including:
- tools.you-the-winner.com ("YTW-Daily Tools") — the daily tools hub (Plans, Money, My Day, Level Up Board, Calendar & Schedule, Calm Corner, Cycle Tracker, Roadmap, Rewards, Picture Frame Mode, and more)
- [name].you-the-winner.com — personalized instances created for subscribers, each on their own subdomain
Contact for privacy matters: [email protected]
What data we collect
- Booking and contact forms: your name, a child's name (piano lesson bookings), email address, phone number, project details, and messages
- Support pledges: email address, optional note, and amount selected
- Quiz results: first name and optional comment, if you choose to save and share your quiz result publicly
- Maintenance contact form: email address and message (only while the site is in maintenance mode)
- Daily wellness data: mood score, energy level, sleep quality, medication tracking (AM/PM), activities, and personal notes (My Day)
- Cycle tracking: menstrual cycle dates and related entries you choose to log (Cycle Tracker)
- Body measurements: weight and height entries you choose to log
- Goals, plans, and checklists: titles, statuses, deadlines, and personal notes (Plans, Level Up Board, Roadmap, Wishes, Rewards)
- Financial practice data: income, expenses, budget categories, savings goals, account balances (used for SSI/ABLE planning and financial skill-building)
- Receipt photos: images you upload as proof of purchase, stored in Google Firebase Storage
- Schedule and calendar entries, including optional read access to your Google Calendar if you connect it
- Billing information: your subscription status and plan; full payment card details are collected and stored by Stripe, not by us
The tools hub includes a demo mode where anyone can try the app without signing in. Demo data is shared across all demo visitors and is not tied to any individual. Do not enter real personal information in demo mode.
How we store your data
All data is stored on Google Firebase (Realtime Database and Cloud Storage), infrastructure operated by Google LLC. Firebase encrypts all data in transit using HTTPS and encrypts data at rest on Google's servers.
Receipt photos and uploaded images are stored in Firebase Cloud Storage. They are accessible only via unique download URLs that are stored in your account data.
We do not operate our own servers. Google's infrastructure is used exclusively as a storage layer.
Family Plans & Picture Frame Mode
If your account is part of a Family Plan, data you enter is visible to and manageable by the plan owner (typically a caregiver). This is a deliberate design choice to support caregiving relationships, and it means Family Plan data is not private between members the way a standalone account's data is private from us.
Picture Frame Mode ("Kiosk") displays information you've already entered — a photo, weather, your day's message, schedule, and medication reminders — on a screen you choose. It doesn't collect any new data; it's a display of what's already in your account, and you control where that screen is placed and who can see it.
Who can access your data
This access exists solely for the purpose of maintaining the platform, debugging technical issues, and providing support. We commit to the following:
- We do not read personal data unless required to diagnose a reported technical problem
- We do not sell your data to anyone, ever
- We do not share your data with third parties, except as required by law or to process payments through Stripe
- We do not use your data for advertising or profiling
- We do not use your health, cycle, or financial data for any purpose other than making the tools work for you
No other person or system has access to your data, unless you explicitly share it yourself (for example, by joining a Family Plan).
Sensitive personal data
Some tools on this platform store information that is considered sensitive, including:
- Health-related data: mood, energy, sleep quality, medication tracking (My Day), and weight/height entries
- Reproductive health data: Cycle Tracker entries. Several states — Washington's My Health My Data Act is currently the strictest — classify this as a specially protected category with its own consent and disclosure rules, sometimes independent of HIPAA. We treat all Cycle Tracker data with that level of care regardless of where you live: it is never sold, never used for advertising, and never shared with a third party except the infrastructure providers needed to run the app (see Third-party services, below).
- Financial data: income, expenses, budget categories, and ABLE/SSI-related planning information (Money Planner tools)
This data is yours. It is only accessible to you when signed in (and to your Family Plan owner, if applicable), and to platform administrators for technical maintenance as described above. It is never analyzed, sold, or used for any purpose outside of making the tool function.
Children's privacy
The piano lesson booking form on this platform collects the name of a student, who may be a minor. This information is submitted by a parent or guardian on behalf of the child — the child does not submit it directly.
We do not knowingly collect personal information directly from children under the age of 13. If you believe a child has submitted personal information directly and without parental consent, contact us at [email protected] and we will delete it promptly.
Your rights
You have the right to:
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. Data deletion requests will be completed within 7 days of confirmation.
How long we keep your data
We keep your data for as long as you use the platform and your account is active. You may request deletion at any time.
Accounts with no sign-in activity for 24 consecutive months may have their data deleted after we make a reasonable attempt to notify you using the email address on record.
Data submitted via public forms (booking requests, contact messages) is kept for up to 12 months for operational purposes, after which it may be deleted.
If this service is discontinued
This section covers two distinct scenarios: a planned decision to stop the service, and an unplanned stop due to death, incapacity, or sudden circumstances beyond our control.
If we decide to discontinue this platform — whether as an individual operator or as GoEnhanced LLC — we commit to the following process:
- We will notify all users who have provided an email address at least 30 days before service end
- During that 30-day window, you will be able to save or export your personal data from your account
- On the shutdown date, all user data in Firebase (Realtime Database and Cloud Storage) will be permanently and irreversibly deleted
- Active subscriptions will be cancelled and any unused, already-paid period refunded on a prorated basis
- The domain will be redirected to a static page confirming the service has ended and that all data has been erased
- If GoEnhanced LLC is formally registered at the time of shutdown, we will follow Texas LLC dissolution requirements, which include notifying creditors and settling obligations before dissolution
We take this seriously because this platform stores sensitive personal information. To protect users even in unexpected scenarios, the following is in place:
- A designated technical person (a trusted individual named separately outside this document) holds documented instructions to access and delete the Firebase project in its entirety
- Deleting the Firebase project permanently erases all Realtime Database data and all files in Cloud Storage — no data is retained by us after project deletion
- This designated person also has instructions to cancel Netlify hosting, redirect or expire the domain, and cancel active Stripe subscriptions
- If advance notice to users is not possible, the designated person will make a best-effort attempt to send a final notification email before or immediately after data deletion
We encourage all users to:
- Keep your own copies of anything important (plans, goals, financial records) — do not rely solely on this platform as the only place that data exists
- Make sure the email address on your account is current so we can reach you if shutdown is planned
- Contact us at [email protected] at any time if you would like a copy of your data or wish to delete your account proactively
Third-party services we use
- Google Firebase (Google LLC) — database and file storage. Firebase Privacy
- Stripe, Inc. — subscription billing and payment processing. We never see or store your full card number. Stripe Privacy Policy
- Google Analytics — anonymous site usage statistics (page views, session counts). No personal data is linked to analytics. Google Privacy Policy
- Google Fonts — font files served by Google. No personal data is sent.
- Netlify — website hosting. Netlify may log standard server access information (IP address, browser type) for security purposes. Netlify Privacy Policy
We do not use advertising networks, tracking pixels, or any service that profiles users for marketing purposes.
Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will always reflect the most recent revision.
For significant changes (such as a change of legal entity when GoEnhanced LLC is registered, or changes in how we handle sensitive data), we will attempt to notify signed-in users by email.
Continued use of the platform after a policy update constitutes acceptance of the revised terms.
Contact us
For any privacy-related question, request, or concern:
We are not lawyers and this policy is not legal advice. If you have complex legal or compliance questions, please consult a qualified attorney. This policy is written to be clear and honest, not to be a legal shield.