Privacy Policy

We collect only the information necessary to provide our booking and store services:

• To create and manage your account securely
• To verify your identity via WhatsApp OTP during login
• To process and confirm field booking reservations
• To allow field/stadium owners to manage their listings
• To send important notifications about your bookings (via push notifications)
• To improve app performance and user experience

We do not sell or rent your personal information to third parties. We may share limited data with:

• Field/Stadium Owners — your name and booking details are visible to the owner of the field you booked
• Supabase — our cloud database and authentication provider (data stored securely on their servers)
• Firebase (Google) — used solely to deliver push notifications to your device
• OTP Service Provider — your phone number is sent to our WhatsApp OTP API only for verification; it is not retained by them

Your data is stored securely using Supabase, a trusted cloud platform with row-level security (RLS) policies. We implement the following safeguards:

• All data is transmitted over HTTPS (TLS encryption)
• Authentication tokens are stored only on your device
• Row-level security ensures users can only access their own data
• Passwords are never stored — we use OTP-based authentication only

We use Firebase Cloud Messaging (FCM) to send push notifications about:

• Booking confirmations and status updates
• Cancellation alerts
• Important announcements from field owners

You can disable push notifications at any time through your device's system settings. This will not affect your ability to use the app.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and all associated data
• Withdraw consent for data processing at any time

To exercise any of these rights, contact us using the email address below.

Goal is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

Our app integrates with the following third-party services, each governed by their own privacy policies:

• Supabase — supabase.com/privacy
• Firebase / Google — firebase.google.com/support/privacy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.