Privacy
Goalie is a text-message assistant for planning your day and following through. This policy explains what we collect and how we use it.
What Goalie Collects
Goalie may collect your phone number, messages with Goalie, voice transcripts when voice notes are supported, reminders, check-ins, habits, goals, timezone or rough location details you choose to share, media metadata or URLs, and operational logs.
If you connect Google Calendar, Goalie accesses your calendar list and event details, such as titles, times, descriptions, and locations, to help with your schedule. We also store your Google account identifier and encrypted authorization tokens to maintain the connection. Google Calendar is optional and is not used to sign you into Goalie.
Goalie uses PostHog for website analytics, including page visits, clicks, heatmaps, browser performance, and account signups. We use Google Analytics for basic public page visits and signup attribution for advertising. These services use first-party cookies and receive device, browser, approximate location, referring page, and ordinary page URL information. We exclude private form contents and login credentials, and do not enable session recordings. We do not send your conversations to these services.
We store a random browser identifier to connect a website visit with your Goalie account. Prefilled messages may include an invisible representation of that identifier. When received, it can connect your visit to a signup and preserve an eligible invite referral. Referral handling continues even when analytics collection is disabled. The browser record can also contain Google Analytics identifiers and an invite code; these are not login credentials.
We use an OpenAI advertising image pixel to measure accepted new-user signups and mobile Get Started taps. After a phone signup succeeds or you tap the mobile button to open a message to Goalie, it sends a lead event and, when available, the ad-click identifier saved for your browser tab. The request also exposes ordinary connection information such as your IP address and browser type to OpenAI. We do not load OpenAI's form-scanning script or send phone numbers, phone-number hashes, messages, or Calendar information through this advertising integration. We skip this measurement when your browser signals Global Privacy Control or Do Not Track.
How Goalie Uses Data
We use this data to provide and personalize Goalie, send replies, check-ins, and reminders, maintain memory, debug and secure the service, comply with legal obligations, and create aggregated or de-identified product insights.
Goalie does not sell your personal data or use your messages to train AI models. Authorized access to account and operational data is limited to providing support, investigating bugs or abuse, protecting security, and complying with legal obligations. The additional restrictions below apply to Google Calendar data, including Calendar details in messages.
Google Calendar Data
We use Google Calendar data only to provide or improve your calendar features in Goalie: answering schedule questions, planning your day, check-ins, and creating, updating, or deleting events when you ask. Goalie reads events across calendars you can access; event changes are currently limited to your primary calendar.
Relevant Calendar details are processed by our AI provider, OpenAI, to respond to you and carry out your requests. Calendar details included in replies are also processed by our messaging providers, and details in conversation context or memory may be stored by Cloudflare and Supermemory to support your ongoing use of Goalie. This processing provides your personalized assistant experience; it is not model training.
We do not sell Google Calendar data, use it for advertising or credit decisions, or use or transfer it to train or improve general-purpose AI or machine-learning models. These limits also apply to information derived from Calendar data. Human access to identifiable Calendar data requires your explicit agreement to view specific data, unless access is necessary to investigate security issues or bugs, prevent abuse, or comply with law. Anonymized, aggregated data may be reviewed for permitted internal operations.
Goalie's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy and the Google Workspace user data and developer policy, including their Limited Use requirements. These restrictions take precedence over more general descriptions of data use in this policy.
Protecting Your Data
We use encrypted connections for communication with Google and our service providers, access controls, and encrypted storage. Google access and refresh tokens are additionally encrypted by the application before database storage. No system can guarantee absolute security.
Service Providers
Goalie relies on service providers to operate, including Spectrum by Photon for iMessage/SMS transport, Cloudflare for hosting and D1 storage, OpenAI for AI responses and supported audio transcription, Supermemory for durable memory, Google Analytics for aggregated website measurement, telecom carriers for message delivery, and website hosting or font providers where applicable.
Retention and Deletion
We keep data as long as needed to provide Goalie, maintain reminders and memory, operate and debug the service, protect security, and meet legal obligations. Messages may remain in your messaging app, carriers, or service providers according to their policies.
You can ask Goalie to forget specific memories or contact us to request deletion of your data.
To stop future Calendar access, select Disconnect in your Goalie account. This deletes Goalie's stored Google authorization credentials and attempts to revoke them with Google. You can also remove Goalie from your Google Account connections. Disconnecting does not delete events from Google Calendar or erase Calendar details already included in messages, conversation context, or memory.
To request deletion of retained Calendar information or your account data, email privacy@goalie.chat. We may need to verify your identity. We delete data from our systems and request deletion from relevant service providers, subject to necessary legal or security retention. Copies in your own messaging app or other recipients' devices are outside our control.
Contact
For privacy requests, contact privacy@goalie.chat.