Privacy Policy

1. What data we collect

Data controller: INFOTECH SERVICE FZ-LLC, Ras Al Khaimah, UAE (RAKEZ). Contact: support@goolazo.app We collect data you provide during registration (name, email, avatar), your football profile data (position, level, goals), and app usage data (training history, progress, XP, streaks, coach messages). Payment data is processed exclusively through Stripe and is not stored on our servers. For mobile app users: device push notification token (only if you grant permission in settings), in-app purchase receipts processed via Apple App Store / Google Play Store.

2. How we use data

• Personalizing training plans for your profile and position
• Generating coach responses tailored to your progress
• Tracking progress and generating statistics
• Processing payments and managing subscriptions via Stripe
• Improving service quality and algorithms
• Sending training notifications (only with your consent)

3. Sharing with third parties

We do not sell or share your personal data with third parties for marketing purposes. Data is shared only with the following services to operate the platform:

• Stripe — for payment processing and subscription management (web only; mobile payments go through Apple/Google)
• Supabase — for data storage (EU/US servers)
• OpenAI — for request processing (Starter, Pro plans)
• Anthropic — for request processing (Elite plan)
• Vercel — for hosting and web app delivery

Neither OpenAI nor Anthropic train their models on your data under our agreements with them.

4. Storage and security

Data is stored on Supabase servers with encryption at rest (AES-256) and in transit (TLS 1.3). Database access is strictly restricted. Passwords are stored as bcrypt hashes and never transmitted in plaintext. However, no system provides absolute protection — we recommend using a unique strong password.

5. Your rights

You may at any time:

• Request a copy of all your data (Data Export)
• Correct inaccurate data in the Profile section
• Delete your account and all associated data
• Withdraw consent to marketing notifications
• File a complaint with a data protection supervisory authority

For data requests, write to support@goolazo.app — we will respond within 30 days.

6. Cookies

We use only necessary cookies for authentication (Supabase Auth session tokens). Analytics and advertising cookies are not used. You can delete cookies in your browser settings, but this will sign you out.

7. Policy changes

For material changes, we will notify you by email at least 14 days before they take effect. Continued use of the service after changes constitutes agreement with the new version.

8. Contact

For any privacy questions: support@goolazo.app