Goylo Privacy Policy
Effective 19 August 2026
Goylo helps footballers organize teams, matches, and tournaments. This policy explains what information Goylo processes and the choices available to you.
Information we process
- Account details such as email or phone number, password hash, display name, city, playing position, sessions, and Terms acceptance.
- Content and activity you provide, including teams, rosters, invitations, matches, venue coordinates, tournament details, scores, reports, and blocks.
- Device push-notification tokens if you enable notifications.
- Approximate technical data in security logs, including IP address, request path, response status, request ID, and timing.
- Your approximate device location only when you grant permission to browse nearby matches. The app reduces and snaps the search location to a coarse grid before sending it; the search location is used for that request and is not stored. Match organizers' user-selected venue coordinates are stored separately as part of a match.
- Information you submit through support, privacy, or safety forms.
Why we use it
We use this information to provide and secure the service, show relevant football activity, send requested notifications, prevent abuse, investigate reports, answer support requests, and meet legal obligations. Goylo does not sell personal information or use it for third-party advertising.
Sharing and processors
Information may be processed by infrastructure and delivery providers needed to run Goylo, including Microsoft Azure, Expo, Apple Push Notification service, Firebase Cloud Messaging, and Google Places. Public profile, team, match, and tournament information is visible to other signed-in users as required by the feature. We may disclose information when legally required or to protect users and the service.
Retention and deletion
Account data is kept while your account is active. Deleting your account immediately removes your credentials and personal profile from the live service. Sole-member teams are removed; shared teams are transferred to another member. Some match data may remain under the new team owner, with your personal notes removed. Operational logs and encrypted database backups may remain for up to 30 days before automatic expiry. Reports and support records are retained only as reasonably needed for safety, disputes, and legal obligations.
Your choices and rights
You can edit profile information, control device permissions and notifications, block users, report content, and delete your account in the app or at the account deletion page. Depending on where you live, you may request access, correction, restriction, objection, portability, or deletion through support.
Children
Goylo is not intended for children under 16. Do not create an account if you are below the minimum age required in your country.
Contact and changes
Submit privacy questions through the support form. Material changes will be reflected here with a new effective date.