Privacy Policy for GOAT. the sports app
Effective Date: 26th February 2026
Last Updated: 26th February 2026
1. Introduction
Welcome to GOAT. the sports app ("we," "our," or "the App"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our mobile application.
2. Information We Collect
2.1 Account Information
- Device ID: A unique identifier generated for your device
- Nickname: An auto-generated username (e.g., "SwiftTiger1234") or custom nickname if you choose to provide one
- Authentication Token: A secure token (JWT) stored on your device to maintain your session
2.2 Usage Data
- Sports Voting Activity: Your votes and choices on sports moments/matchups
- Game Sessions: Records of your participation in voting rounds
- Sports Preferences: Which sports categories you interact with
- Leaderboard Rankings: Your placement in game rankings based on your voting activity
2.3 Technical Data
- App Performance Data: Crash reports and error logs to improve app stability
- Device Information: Operating system version, app version
- Network Information: API request logs for debugging purposes
2.4 Cached Data (Stored Locally on Your Device)
- Sports Data: List of available sports (cached for 30 minutes)
- User Session Data: Your authentication token and basic profile information
- App Preferences: Your app settings and configurations
3. How We Use Your Information
We use the collected information for the following purposes:
3.1 Core Functionality
- User Authentication: To identify you and maintain your account session
- Voting & Gameplay: To record your votes on sports moments and calculate rankings
- Leaderboards: To display rankings and competitive scores
3.2 App Improvement
- Performance Monitoring: To identify and fix bugs
- Feature Development: To understand which features are most used
- Server Optimization: To ensure fast and reliable service
3.3 Security
- Fraud Prevention: To detect and prevent unauthorized access
- Account Security: To protect your account from malicious activity
4. Data Storage and Security
4.1 Where Your Data is Stored
- Mobile Device: Authentication tokens are stored securely using iOS Keychain (with AsyncStorage as fallback), user data in local encrypted storage
- Cloud Servers: User accounts, voting history, and game data are stored on secure servers hosted by Heroku
- Database: PostgreSQL database with encrypted connections
4.2 Security Measures
- Encryption: All data transmitted between your device and our servers uses HTTPS/TLS encryption
- Token-Based Authentication: JWT (JSON Web Tokens) with expiration for secure sessions
- Password Protection: Passwords are encrypted using industry-standard bcrypt hashing
- Secure Storage: Sensitive data stored using iOS Keychain and Android Keystore
4.3 Data Retention
- Active Users: We retain your data as long as your account is active
- Inactive Accounts: Anonymous user data may be retained indefinitely for leaderboard integrity
- Deletion Requests: You may request account deletion by contacting us at contact@goatapp.io
5. Data Sharing and Disclosure
5.1 We DO NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties.
5.2 Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Heroku | Backend hosting | User accounts, voting data, game sessions |
| Expo | App updates & distribution | Device type, app version |
5.3 Legal Requirements
We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).
6. Your Privacy Rights
6.1 Access and Control
- Delete Account: Request deletion of your account and associated data
6.2 Anonymous Usage
- You can use the app completely anonymously without providing an email address
- Anonymous users can upgrade to a registered account at any time
6.3 Data Portability
You may request a copy of your data by contacting us at contact@goatapp.io
7. Children's Privacy
Our app is intended for general audiences. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.
8. International Data Transfers
Your data may be transferred to and stored on servers located outside your country. We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the app
- Updating the "Last Updated" date
Continued use of the app after changes constitutes acceptance of the updated policy.
10. Analytics and Tracking
Current Status: Our app currently does NOT use third-party analytics or tracking services (e.g., Google Analytics, Facebook SDK).
If we add analytics in the future, we will update this policy and notify users.
11. Cookies and Similar Technologies
Our mobile app does not use cookies. We use local device storage (AsyncStorage, iOS Keychain) to store authentication tokens and app preferences.
12. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know: What personal information we collect and how we use it
- Delete: Request deletion of your personal information
- Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
To exercise these rights, contact us at contact@goatapp.io.
13. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Data Portability: Receive your data in a machine-readable format
- Object: Object to processing of your personal data
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:
- Email: contact@goatapp.io
- App Developer: Colin Marshall
15. Legal Basis for Processing (GDPR)
We process your data based on:
- Consent: You voluntarily provide information when creating an account
- Contract: Processing necessary to provide the app service
- Legitimate Interests: Improving app functionality and security