Privacy Policy

PHẦN 2 — ENGLISH

1. Scope and contact

This policy applies to the Goalora website and Goalora iOS and Android apps as those services are made available. Goalora is the service name used in this policy. For privacy questions or rights requests, contact goalora.ai@gmail.com. Please do not email sensitive health records through ordinary email.

2. Data we process

Depending on the features you use, we process account and sign-in information; language preferences, device and technical information needed to operate the service; goals, plans, workouts, nutrition entries and content you submit; screening answers, symptoms, health conditions or other sensitive information you choose to provide; transaction and entitlement records if you purchase a plan; and support, export and deletion requests. Optional features may request access to your camera, photos, location or device health data when you use them. You can decline optional permissions, but the related feature may not work.

The website uses essential cookies for language preferences and session operation. Non-essential product analytics is enabled only if you opt in through the cookie controls, where you can change your choice. We do not include health content in product analytics events.

3. Why we process data

We use data to provide accounts and requested features; generate and adjust training and nutrition suggestions; support safety; process transactions and support requests; protect the service and detect abuse; and respond to data requests and legal obligations. Health information you provide is processed for the relevant feature according to your choices and applicable consent. You can withdraw consent in the app or by contacting us; this may stop features that require the data.

4. Who receives data

We may provide necessary data to hosting and infrastructure providers, AI model providers that generate responses, sign-in and notification providers, and payment processors when those features are used. Content submitted to AI features may be processed by a model provider, currently including Anthropic for features using Claude. Apple or Google may process in-app purchases under their own policies. We do not sell personal data or share health data with ad networks or data brokers. We may also disclose data where legally required.

Data may be processed outside your country of residence. We apply safeguards and procedures required by applicable law for those transfers.

5. Retention and security

We keep data for as long as needed to provide the service or fulfill the purposes described above. When you request account deletion, the account enters a pending state; you have 7 days to cancel in the app. Deletion of account data from operational systems is scheduled within 30 days of the request. Some transaction, security or legally required records may be retained longer. Backups and data already transferred to other processors may follow their own cycles or policies. See the account deletion page.

We use appropriate technical and organizational measures to limit unauthorized access. No transmission or storage method is perfectly secure. If a reportable incident occurs, we will provide notices required by applicable law.

6. Your rights and choices

You can view or edit information in the app, manage optional permissions, withdraw consent, request data export or deletion, and delete your account. You may also contact goalora.ai@gmail.com to request access, correction, restriction, objection or complaint handling where provided by applicable law. We may verify account ownership before acting and will respond within the applicable legal period.

Goalora is intended for people aged 18 or older. If you become aware of an account belonging to someone under 18, contact us so we can address it.

7. Changes

If we materially change how we process data, we will update the date on this page and give notice or seek fresh consent where required by law.