Privacy policy
Effective 21 October 2026. Goalendar is operated by AureKA Tech LLC. Contact us at support@goalendar.app or through “Contact us” in the app’s Me tab.
What Goalendar is
Goalendar is a private football score-prediction league for groups of friends. Nothing can be won in it but your place in the table. Every competition is free to play in one group of up to four friends; a group grows to twenty members while any member in it has a Plus or Pro plan bought through the App Store or Google Play, and Plus and Pro play in more groups and unlock some features. Your predictions are private until kick-off: nobody else sees your picks or your Banker before a fixture kicks off. After that, members of your groups who have a Pro plan can see them; everyone else sees only the points you earn.
What we store and why
| Data | Where | Purpose | Kept |
|---|---|---|---|
| Your sign-in identity: the Apple or Google account you sign in with, the email address and name they supply, or the email address you sign in with by link | Firebase Authentication | Your account | Until you delete the account |
| Display name, email address, profile photo link, when you last signed in, your pick mode, notification settings and the language you chose for the app | Our database (Cloud SQL, through Firebase SQL Connect) | Your profile and settings. Your name and photo are shown to the members of your groups; your email address is shown only to you | Until deletion; then cleared, and you appear as “Deleted player” |
| Your profile photo | Firebase Cloud Storage | Shown to the members of your groups | Until you replace or remove it, or delete the account. Only the 256 × 256 JPEG the app makes, with its metadata removed, is stored, never your original photo. |
| Your groups: membership, role (owner, admin or member), when you joined, which groups you pinned, your requests to join groups that approve new members, and when you left a group or were removed from it and by whom | Our database | Running the groups. Members of a group see each other’s name, photo, role, join date and whether they have a Plus or Pro plan (a Plus or Pro mark next to their name; nothing is shown for Free). The owner and admins of a group also see who asked to join (name and photo) while the request waits, and whom they removed | While the group exists (a join request for 7 days); your account is anonymised on deletion |
| Your predictions and your Banker | Our database | Scoring | Private until the fixture kicks off (picks lock a minute earlier); after that, members of your groups who have a Pro plan can see your pick and Banker for it, and other members never see them. If you leave a group or are removed from it, your predictions there are set aside: they no longer count and a rejoin starts from zero, but we keep them so support can restore them after an accidental leave; they are deleted with your account. Predictions for fixtures that have not started are deleted with your account; predictions for started fixtures stay in the group’s history as “Deleted player” |
| Your points, round scores and table positions | Our database | The tables; visible to the members of your groups | Kept so the tables still add up; anonymised on deletion |
| Your chosen Head to head rival | Our database, private to you | Comparing yourself with one member | Until you clear it or delete the account |
| Your plan (Free, Plus or Pro), whether it is active, cancelled, in a payment grace period or ended, when the paid or trial period ends, and a record of each subscription event the store reports (its type and when we received it) | Our database, and RevenueCat, our subscription service, which receives the purchase and renewal records Apple or Google send for your user ID, with the app version, the platform, the OS version and the country of the purchase and, while attribution is on, Adjust’s identifier for your installation | Knowing how many groups you can play in, how many members your groups can hold and which features you can use, on every device you sign in on; showing a Plus or Pro mark next to your name to the members of your groups; and restoring purchases | Until you delete your account; then deleted from our database and from RevenueCat. Your payment details stay with Apple or Google: we never see them. Apple and Google keep their own purchase records under their own terms |
| A push notification token for this device, with the platform and the device’s time zone | Our database and Firebase Cloud Messaging | Reminders before a round, round results, news from your groups and changes to your role in a group, each with its own switch under Me → Notifications. The time zone is stored with the token | While the token is valid; deleted when you sign out on that device or delete the account |
| A record of each notification sent to you | Our database | So that nothing is sent twice | Deleted with the account |
| Support messages: the name, email address and message you enter in “Contact us”, with the app version and your platform (iPhone or Android) | Our database until delivered, then Zendesk, our support service | Answering you by email. Sent only after you agree to it in the form | Our copy is deleted as soon as Zendesk has the message, or when you delete your account before that. Zendesk keeps the correspondence until we delete it, including after you delete your account; email support@goalendar.app to have it removed. Emails you write to support@goalendar.app go to the same place |
| Reports: when you report a member from the group, your name and email address, the group, the member and what is reported (as identifiers), your role in the group and the details you write | Our database until delivered, then Zendesk, our support service | Looking into the report. Sent only after you agree to it on the report page | As for support messages: our copy is deleted as soon as Zendesk has the report. The member you report is not told who reported them |
| Server logs | Google Cloud Logging | Operating and debugging the service | Logs carry your user ID and technical details, never your predictions or messages. Kept for about 30 days |
| Crash reports: where the app failed in its own code, the device model, the OS version and the app build, with an identifier for this installation | Firebase Crashlytics (Google) | Finding and fixing crashes | Never your name, email address, user ID, predictions or anything you type. Kept for 90 days |
| Usage events: which features are used and where they fail (for example that a pick was saved or a join failed, never the pick or the code), the device model, the OS and app version, an identifier for this installation, and a rough location (country or city) that Google estimates from the IP address | Google Analytics for Firebase (Google) | Counting how the app is used in each build | Never your name, email address, user ID, group names, predictions or anything you type, and never linked to your account. Kept for the retention period set in Google Analytics, at most 14 months |
| Ads (Free plan only, when ads are on): your device’s IP address, from which Google estimates a rough location; the ads shown to you and whether you tapped them; technical information about the app and device; and device identifiers (on iPhone the identifier Apple gives each app vendor, never the advertising identifier; on Android the advertising ID, which you can reset or delete in your device settings) | Google AdMob (Google) | Showing ads, measuring them and preventing ad fraud | Never your name, email address, user ID, groups, predictions or anything you type. Kept by Google under its own policies |
| Attribution: an identifier Adjust gives this installation, on iPhone the identifier Apple gives each app vendor (never the advertising identifier), on Android the advertising ID, the IP address and a rough location from it, the device model and app version, the link or campaign that led to the install, a few app events (onboarding started and finished, first pick, a group created or joined, an invite shared, a round’s picks completed, notifications allowed, the plans page shown, a purchase started) and, from RevenueCat, purchases, trials and renewals | Adjust (Adjust GmbH, Germany), our attribution service | Measuring which links and campaigns bring installs and subscriptions | Never your name, email address, user ID, groups, predictions or anything you type. In the EEA, the UK and Switzerland only with your consent in Google’s form. Kept for 24 months; when you delete your account, Adjust is asked to forget this device |
Firebase services (Google) run the app. Our database and server code run in the United States (region us-east4); Firebase may process some data, such as sign-in and push delivery, in other regions. Fixtures and results come from a football data provider (API-Football); we send it no personal data. Support messages you send through “Contact us” go to Zendesk, our support service. Plus and Pro are sold by Apple (App Store) and Google (Google Play); RevenueCat, our subscription service in the United States, receives your user ID and the store’s purchase records so it can tell us your plan. Crash reports and usage events go to Google (Firebase Crashlytics and Google Analytics for Firebase) without your user ID; we can switch either off for everyone from our servers, and when usage events are switched off the app deletes what it had stored for them. Members on the Free plan may see ads from Google AdMob (see “Ads” below); Google receives the ad data in the table above and uses it as its own, for advertising, measurement and fraud prevention. Adjust measures for us which links and campaigns bring installs and subscriptions, as described in the table. Apart from that, we share personal data with no one for their own use. There is no tracking across other companies’ apps or websites, no advertising identifier on iPhone and no App Tracking Transparency request (on Android, see “Ads”), and no sale of personal data.
Firebase also processes installation and device identifiers, app and device information and request metadata needed to operate and protect the service. We do not ask for your location; the only location used is the rough one Google estimates from the IP address for Google Analytics, for attribution and, on the Free plan, for ads.
Ads
Goalendar may show ads to members on the Free plan: a card under the group picker on the app’s tabs, and occasionally a full-screen ad at a natural pause, for example after you have finished a round’s picks. Members on Plus or Pro, and during a free trial, see no ads, and the ad software is not started for them. We decide from our servers whether ads are shown at all; while they are off, the app sends nothing to Google AdMob.
Ads are served by Google AdMob. Google chooses the ads. We do not give Google your name, email address, user ID, groups or predictions; it receives only the ad data in the table above. Goalendar does not ask for the advertising identifier on iPhone. On Android, Google and Adjust read the advertising ID, which you can reset or delete in your device settings; without consent in the regions below, ads are not personalised. In the European Economic Area, the United Kingdom and Switzerland, Google’s consent form appears before the first ad request; you can consent, refuse, or choose by purpose, and the app works the same either way. The same form asks for consent to Adjust and to usage events (Google Analytics for Firebase); without it neither runs. There, you can change your choice at any time: open the Me tab and tap Privacy options for ads. How Google uses this data is described in How Google uses information from sites or apps that use our services.
What other members see
The members of a group see each other’s display name, photo, role and join date, and a Plus or Pro mark next to the name of a member with that plan (nothing for Free). They see your points, round scores and position at all times. They never see your predictions or your Banker before a fixture kicks off; after that, members with a Pro plan can see them for that fixture. Nobody else sees how many exact scores and correct results you have. Every member of a group also sees its invite code and can share it. In a group that approves new members, the owner and admins see your name and photo while your request waits; they also see the list of members they removed. Nobody sees your email address, your rival choice or your settings.
Sign-in methods
You sign in with Apple, with Google, or with a link we email to your address; Goalendar keeps no passwords. With Sign in with Apple you can hide your email address; Apple then gives us a relay address. With Google, your Google name is used until you set your own in the app; your Google photo is not used. For an email link, the address you enter receives the link and is kept on this device until the link is used. Under Me → Sign-in methods you can add another of these methods for the same address. Your sign-in session is kept in the device’s secure storage (Keychain on iPhone, Keystore on Android); signing out removes it and this device’s push registration.
Photos
The system picker shares only the image you choose. Before upload the app crops it to the square you choose (you can move, zoom and turn the photo), resizes it to 256 × 256 and re-encodes it as a JPEG of at most 150 KB, which removes the photo’s metadata, including any location. Everyone in your groups can see it. A Goalendar sign-in is required to fetch it. You can replace it or return to initials from the Me tab.
Notifications
The app asks for notification permission after you create or join your first group. These are sent: a reminder 24 hours before a round’s first kickoff while you still have picks missing, a reminder an hour before each kick-off time when a pick for a match starting then is still missing, one notification when a round is complete with your score and any change of place, when someone joins or leaves one of your groups, and when your role in a group changes (removed, made or no longer an admin, made the owner). Each has its own switch under Me → Notifications, all on to start with. Notifications go out when they happen, at any hour. To turn off all Goalendar alerts, use your phone’s notification settings.
Deleting your account
Open the Me tab and tap Delete account, then type DELETE to confirm. You need to have signed in within the last five minutes. If you own a group that still has other members, transfer ownership or leave it first. We then delete your name, email address, photo, settings, pinned groups, rival choices, push tokens, notification records, your plan and subscription records here and at RevenueCat, any support message not yet delivered and your predictions for fixtures that have not started; you leave every group, and a group where you were the only member is archived. Your predictions for started fixtures and the points they earned stay in your groups’ history as “Deleted player”, with nothing that identifies you. Your sign-in account is deleted last, so if a step fails you can sign in and try again. Support correspondence already in Zendesk is not deleted with your account; email support@goalendar.app to have it removed. Deleting the app from your phone does not delete your account. Deleting your account does not cancel a Plus or Pro subscription: cancel it in your App Store or Google Play settings.
If you no longer have the app, email support@goalendar.app from the address on your account and ask us to delete it; we delete the same data as above and confirm by email. If you signed in with Apple, you can also remove Goalendar under Sign in with Apple in your Apple Account settings. Crash reports and usage events are not linked to your account, so they are not deleted with it; they expire as described above.
Children
Goalendar is not directed at children under 13, or under the age of digital consent where that is higher, and we do not knowingly collect their data.
Changes
We update this page when the app changes what it stores. The date at the top is the version in force.