Privacy Policy

1. Introduction

This Privacy Policy explains how GoalTrack / VelGameStudios ("GoalTrack", "we", "us", or "our") collects, uses, stores, and shares information when you use the GoalTrack website, desktop app, and Android app.

GoalTrack is a local-first goal planning app. You can use core planning features on your device. If you create an account, sign in, enable sync, use shared grids, upload attachments, or manage a subscription, some information is processed through cloud services so those features can work.

GoalTrack does not show third-party display advertisements and we do not sell your personal data.

2. Information we collect

2.1 Information you provide

We collect the information you choose to enter or upload, including:

• goals, boards, notes, tasks, checklists, reminders, progress, categories, and custom text
• achievements and completion history
• app settings, theme, language, profile preferences, and local app state
• attachments you upload or save, plus attachment names, sizes, types, and related note metadata
• shared grid names, membership, invites, roles, ownership, read-only states, and related activity
• support messages, deletion requests, and any details you include when contacting us

2.2 Account information

If you create an account or sign in, we process account information such as your email address, display name, Firebase user ID, authentication status, email verification status, subscription status, plan ID, and timestamps used to maintain your profile.

2.3 Billing information

For website and desktop subscription flows, Stripe processes payment details through Stripe Checkout and the Stripe Customer Portal. We may store subscription status, Stripe customer or subscription identifiers, plan information, renewal or cancellation status, and related billing events. We do not receive or store your full card number.

2.4 Automatically collected technical information

Depending on your platform and features, we may collect technical information needed to operate, secure, and improve GoalTrack, such as:

• device type, operating system, app version, language, and network status
• authentication, sync, invite, storage, and billing timestamps or identifiers
• diagnostics, crash reports, performance events, and error logs
• basic usage events in the Android app through Firebase Analytics

We do not intentionally collect sensitive personal data such as government IDs, precise location, health data, biometrics, contacts, camera data, or microphone data. If you type sensitive information into your goals, notes, attachments, or support messages, it is processed as part of the content you provide.

3. How we use information

We use information to:

• provide goal tracking, notes, reminders, achievements, attachments, shared grids, and related features
• save data locally on your device and, when enabled, sync data across devices
• authenticate accounts, verify emails, maintain profiles, and protect account access
• process subscriptions, open checkout or billing portal sessions, and keep plan status in sync
• enforce plan limits for shared grids, members, attachment storage, and paid features
• diagnose crashes, fix bugs, improve reliability, prevent abuse, and maintain security
• respond to support, privacy, and deletion requests
• comply with legal, tax, accounting, security, and fraud-prevention obligations

4. Local storage and cloud services

GoalTrack stores your content locally on your device by default. Local data remains on that device until you delete it in the app, clear app data, or uninstall the app.

If you sign in or use cloud features, GoalTrack uses Google Firebase and Google Cloud services such as Firebase Authentication, Firestore, Realtime Database, Cloud Storage, Cloud Functions, Hosting, Firebase Analytics, and Crashlytics. These services support authentication, profile records, personal sync, shared grids, attachment storage, server-side plan enforcement, diagnostics, and hosting.

The website may use browser storage such as localStorage to keep you signed in through Firebase Auth and to temporarily track a Stripe checkout handoff. Browser storage can usually be cleared through your browser settings.

5. Security and encryption

We use reasonable technical and organizational measures to protect your information. Network connections to our cloud services use HTTPS/TLS where supported by those services.

Synced goal state is encrypted before upload where the current GoalTrack clients implement that feature. Some information must remain readable to our backend or service providers so the app can work, including profile fields, subscription status, plan limits, shared-grid coordination data, diagnostics, attachment metadata, and billing-related records. Attachments and shared content may be processed by Firebase/Google services as needed for upload, download, storage, access control, and collaboration.

No method of storage or transmission is completely secure. You are responsible for protecting your device, operating system account, GoalTrack password, and email account.

6. Sharing and service providers

We do not sell your personal data, and we do not share personal data for cross-context behavioral advertising. We share information only as needed to operate GoalTrack, comply with law, protect rights and security, or complete actions you request.

GoalTrack uses service providers that process data for us or provide services directly to you:

• Google Firebase / Google Cloud: authentication, databases, cloud storage, server functions, hosting, Android analytics, diagnostics, and crash reporting
• Stripe: subscription checkout, payment processing, billing portal, payment methods, receipts, tax, fraud prevention, and subscription lifecycle events
• Operating system and app platform providers: notifications, file picker/save/open actions, app distribution, and platform security features
• Email/support providers: support messages, privacy requests, and account or data deletion requests sent to us

When you invite someone to a shared grid, the shared grid content, attachments, membership, roles, and activity needed for collaboration are available to the people who have access to that shared grid.

7. Permissions and device access

GoalTrack requests permissions only for app functionality:

• Internet and network state: used for sign-in, sync, shared grids, attachments, billing status, diagnostics, and service connectivity.
• Notifications: used for reminders and app notifications when you allow them, including Android 13+ notification permission prompts.
• Files and attachments: used when you choose a file, upload an attachment, save a downloaded attachment, or open a file through a system-mediated file flow.

GoalTrack does not request access to your camera, contacts, precise location, microphone, or broad device file library for V1 features.

8. Retention

We retain information for as long as needed to provide GoalTrack, maintain your account, operate sync and shared grids, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.

• Local-only data remains on your device until you delete it, clear app data, or uninstall the app.
• Cloud account data remains associated with your account until it is deleted in-app where available or through a deletion request.
• Shared grid data may remain available to other members while the shared grid exists or while required for recovery, audit, or abuse-prevention purposes.
• Subscription, payment, security, support, and tax/accounting records may be retained where required or reasonably necessary.
• Backups and logs may retain deleted data for a limited period before they expire from normal backup cycles.

9. Account and data deletion

You can request deletion of your GoalTrack account and cloud data through the GoalTrack account deletion page. Sign in with the account you want deleted and submit the form so we can verify the request belongs to that account.

If you cannot access your account, email velgamestudios@gmail.com from the account email if possible. Include that you want to delete your GoalTrack account and associated data. We may ask for additional verification before processing the request.

For local-only data, delete the data inside GoalTrack where available, clear the app data, or uninstall the app. Local-only content may not be available to us because it is stored on your device.

When we process a cloud deletion request, we will delete or de-identify account data and cloud content that we are not required to keep. Some records may be retained if needed for legal, tax, accounting, security, fraud-prevention, dispute, backup, or compliance reasons. Deleting an account may also remove access to paid features, cloud sync, shared grids, and attachments.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal data, and to withdraw consent where processing is based on consent. You can exercise privacy rights by contacting us at velgamestudios@gmail.com.

For EU/EEA and UK users, our legal bases may include providing the service you request, our legitimate interests in operating and securing GoalTrack, compliance with legal obligations, and consent where required for optional processing.

For California users, we do not sell personal information and do not share personal information for cross-context behavioral advertising. If applicable privacy laws grant additional rights, we will respond to verified requests as required by those laws.

You can also control some processing through app settings, notification permissions, browser storage settings, device settings, and by choosing whether to sign in or use cloud features.

11. Children's privacy

GoalTrack is not intended for children under 13 or the minimum age required in your country. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data through GoalTrack, contact us and we will take appropriate steps.

12. International transfers

GoalTrack and its service providers may process information in countries other than where you live. Where required, we rely on appropriate safeguards provided by our service providers or applicable law for international transfers.

13. Changes to this policy

We may update this Privacy Policy as GoalTrack changes. The updated version will be posted on this page with a new "Last updated" date. If changes are significant, we will also notify users in-app or by other reasonable means where practical.

Contact

Privacy and deletion contact: velgamestudios@gmail.com
Operator: GoalTrack / VelGameStudios