Privacy Policy

We use the information we collect to:

• Create and manage your account
• Calculate and credit Goovo Points based on your step activity
• Process reward redemptions and in-app purchases
• Display leaderboard rankings (using your display name / username)
• Show nearby partner locations on the in-app map
• Send you transactional notifications (reward confirmations, leaderboard updates)
• Improve, personalise, and develop the Service
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not use your data for targeted advertising, and we do not sell your personal data to any third party.

We may share your information with:

• Service providers: Third-party vendors who assist us in operating the Service (e.g. Supabase for database hosting, RevenueCat for subscription management, Expo / Apple / Google for app distribution). These providers are contractually obligated to protect your data.
• Partner businesses: When you redeem GP at a partner location, the partner receives only the information necessary to fulfil your redemption (e.g. redemption code, GP amount). Your full profile is not shared.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email or prominent notice in the app before your data becomes subject to a different privacy policy.

The monthly leaderboard displays your username and GP points earned for the current month. Your email address, full name, and health data are never shown publicly. If you wish to use a pseudonym on the leaderboard, you can update your username in the app at any time.

Goovo Pro subscriptions are processed entirely through Apple In-App Purchase (iOS) or Google Play Billing (Android). We do not collect or store your payment card details. Subscription status is managed via RevenueCat. Please refer to Apple's and Google's privacy policies for information about how they handle payment data.

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at support@goovo.app. Upon account deletion, your personal data is permanently removed within 30 days, except where retention is required by law.

Step and GP data is retained for up to 12 months to support leaderboard history and reward dispute resolution.

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing of your data for certain purposes.

To exercise any of these rights, contact us at support@goovo.app. We will respond within 30 days.

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete such information.

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), encrypted storage, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

The Service integrates with the following third-party services, each governed by their own privacy policies:

• Supabase — database and authentication hosting
• RevenueCat — subscription and in-app purchase management
• Apple HealthKit — step data access (iOS)
• Google Fit — step data access (Android)
• Expo / EAS — app build and update delivery

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date above. For material changes, we will send a notification via email or in-app notice at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: