GOALIX
This policy explains what Goalix does with data when you use the app. It is written to be read, not to be survived. If anything here is unclear, write to us and we will explain it in plain words.
Goalix is an iOS app published by Gurcan Karaduman, an individual developer. There is no company behind it. For data protection purposes, Gurcan Karaduman is the data controller.
Contact: support@goalix-app.com. This is the only support and privacy channel for the app.
Goalix publishes football match predictions (a pick, its odds and an optional written analysis) and combined coupons, in free and subscription-only categories. Match outcomes are marked as won or lost by hand by us, and category success rates are calculated from those manually entered results. The app contains no betting, no gambling, no real-money play, no links to bookmakers and no affiliate links. Everything in it is for information and entertainment only.
eur3 multi-region (Europe), with the limited operational exceptions described in section 5.The first time you open Goalix, the app signs in to anonymous Firebase Authentication. This creates a random, opaque user ID (a UID). That UID is not derived from you or from your device identity, and it contains no name or other information about you. It is, however, a stable identifier for your installation and it is the only thing that links your favourites and your subscription entitlements together — so we treat it as personal data and it gets the full protection of this policy.
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Anonymous user ID (Firebase UID) | To keep your favourites and your VIP access attached to your installation, without an account | Performance of a contract (providing the app) | Kept while the installation is active; deleted on request |
isAnonymous, createdAt, lastSeenAt in users/{uid} |
To create the user record, confirm it is an anonymous session, and see whether an installation is still in use | Legitimate interest (running the service, spotting abuse and stale records) | Kept while the installation is active; deleted on request |
entitlements: which VIP category is unlocked and, where applicable, its expiry date |
To unlock the VIP categories you are entitled to and to stop unlocking them when access ends. An entitlement comes either from an App Store purchase confirmation or, while in-app purchases are still being connected, from us setting it by hand — see section 8 | Performance of a contract (delivering the subscription) | Kept while the installation is active; deleted on request |
Favourites in users/{uid}/favorites/{matchId}: the match identifier, its categoryKey and addedAt |
To show your saved matches. The match content itself is not copied here, only its identifier | Performance of a contract (providing the app) | Until you remove the favourite, or until deletion on request |
| App Store purchase confirmation, where subscriptions are offered | To verify that a subscription is active and unlock the matching category | Performance of a contract (delivering the subscription) | Processed by Apple; on our side only the resulting entitlement is stored |
| Only if you turn notifications on: your device push token and your anonymous UID (sent to OneSignal as the external ID) | So a notification we send can reach your device, and so it can be addressed to the right one | Consent, which you give by turning notifications on and can withdraw at any time | Held by OneSignal while notifications stay on; removed when you turn them off or on deletion request |
That is the complete list. No other personal data is stored on our servers.
Your data is stored in Google Cloud Firestore, in the eur3 multi-region, which is located in Europe. Google LLC (Firebase) acts as our processor: it stores and serves the data on our instructions and is not allowed to use it for its own purposes.
Google may process some operational data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses.
If — and only if — you turn notifications on, a second processor is involved: OneSignal, which holds your push token and your anonymous UID in order to deliver messages, and which may process them outside the European Economic Area under the same Standard Contractual Clauses. It receives nothing else, and nothing at all until you consent.
All traffic between the app and our servers is encrypted in transit with TLS.
Notifications are off until you turn them on. Goalix never asks for notification permission on its own. The app shows a card explaining what notifications are for, and nothing happens unless you tap to enable them.
Until you do, our notification provider receives nothing about you. The OneSignal SDK is present in the app but starts in a consent-required state: no push token is registered, no device or user record is created, and no identifier is sent. We verified this on a fresh install — before consent, the only thing stored is OneSignal's own public configuration, which contains no data about you.
If you turn notifications on, two things are sent to OneSignal, which acts as our processor for delivery: your device push token, and your anonymous UID as the external ID so a message can be addressed to the right device. Nothing else is sent to them — not your favourites, not your entitlements, not your activity in the app.
Every notification is written and sent by hand by us from the OneSignal dashboard. There is no automated messaging, and notifications are never used for advertising.
The permission is entirely optional and withdrawable. You can turn notifications off at any time in Settings › Notifications › Goalix, and doing so does not affect anything else in the app — the picks, your favourites and your subscriptions all keep working exactly as before. If you decline the permission prompt, we drop the consent flag again so that nothing is sent.
Some categories — PRO ANALYSIS, ELITE PICKS, RISK HUNTER and GOALIX SIGNATURE — are VIP categories. Where subscriptions are offered, each of them is sold as its own separate auto-renewing subscription through Apple In-App Purchase.
Apple takes the payment. We never see and never store your card number, billing address or any other payment detail. All we receive is the confirmation that a subscription is active, which we turn into an entitlement on your anonymous UID.
To be exact about how that record is created today: in-app purchases are not connected yet, so VIP entitlements are currently assigned by hand by us from the admin panel. Whichever way an entitlement arrives, the only thing written to your record is which category is unlocked and, where applicable, when it expires.
Apple's own handling of your purchase is covered by Apple's privacy policy, not by this one. The subscription terms themselves — renewal, cancellation and refunds — are described in our Terms of Use.
You have the right to:
Because there is no account, we have no way to verify who you are beyond the anonymous UID itself. Anyone who can show us a UID is treated as the person behind it. This is the honest trade-off of an app with no sign-up: it keeps you unidentified, but it also means you should not share your UID with people you do not trust.
Your data is kept for as long as the installation is in use, and is deleted when you ask us to delete it.
This part is unusual, so please read it before you delete Goalix.
Your anonymous UID lives in your device keychain. When you delete the app, iOS removes that keychain entry. If you install Goalix again, the app creates a brand new UID — it has no way to recognise you, because it never knew anything about you in the first place.
After a reinstall, your favourites and any VIP access stay attached to the old UID, and the fresh installation starts empty. Favourites cannot be moved across. Once in-app purchases are live, Restore Purchases will be able to re-establish a subscription entitlement on the new UID from your Apple ID; until purchases are connected, there is nothing for it to restore.
If you did not copy your old UID from the Profile tab before deleting the app, that old record can no longer be found or reached — not by you and not by us. It becomes orphaned data that nobody can connect to you, which also means we cannot act on a deletion request for it, because we would have no way of telling which record was yours.
This is a deliberate consequence of building an app with no account. It is the price of not asking you for an email address, and we would rather state it plainly than let you discover it after the fact. If keeping your favourites matters to you, copy your UID from the Profile tab and store it somewhere safe.
Goalix is intended for an adult audience, 18 and over. It is not directed at children, it is not designed for them, and we do not knowingly collect data from them. Match predictions are commentary on sport, not advice to gamble.
If you believe a child has been using the app and data relating to them is stored, contact us and we will delete the record.
No system is perfectly secure, but because we hold so little — no names, no emails, no payment details — there is very little to lose in the first place.
If this policy changes, the updated version is published on this page with a new date at the top. Meaningful changes — a new processor, a new type of data, a new purpose — will be spelled out on this page rather than buried in a version bump. Continuing to use Goalix after a change means the updated policy applies to you.
Questions, data requests, corrections or complaints about this policy all go to the same place: support@goalix-app.com. Please include your UID from the Profile tab if your message is about your own data.