Goafie logo Goafie
← Back to Goafie

Privacy Policy

Last updated: September 25, 2026

This Privacy Policy explains how Goafie ("Goafie," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the Goafie mobile apps, the goafie.com website, and related services (the "Service"), and the choices and rights you have. Goafie is responsible for (the "controller" of) the personal information described here. Please read it together with our Terms of Service.

The short version. We collect what you put into Goafie (your account, trips, photos, and anything else you add), information about your device and how you use the app, and — only if you turn on Calendar Sync — events from the calendars you connect. Calendar events that look travel‑related are sent to an AI provider, DeepInfra, to pull out flight and hotel details; we don't use your data to train AI models. Your trips are visible to your friends unless you make them private, which is a Goafie Pro feature. To measure our own ads, we share advertising identifiers and conversion events with advertising platforms such as Reddit and Google. We don't sell your information for money, but some US state laws may treat that ad measurement as “selling” or “sharing” (sections 5 and 8 explain this and how to opt out). You can delete your account in the app at any time, and section 7 lists what is kept afterward.

1. Information we collect

Information you provide

Information from other sources

Information collected automatically

Location

The app does not ask for or collect your device's GPS location. Location information in Goafie comes from what you add (airports, cities, hotels, and addresses), from approximate location that providers can infer from your IP address, and from any location metadata inside trip photos you upload (see “Photos and files” above). The app does not use your camera, microphone, contacts, or reminders, even if an app store listing shows related permissions.

Subscriptions

If you buy Goafie Pro, the purchase is processed by the Apple App Store or Google Play and managed through our subscription provider, RevenueCat, using your Goafie account ID. We receive your subscription status, plan, price, and purchase and renewal history — not your payment‑card details.

2. How we use information

We do not use your personal information to train AI models, and we do not show third‑party ads in the app.

Advertising measurement

We promote Goafie with ads on platforms such as Reddit, Google, and Apple Search Ads. To learn which ads work:

We never give advertising platforms your name, email address, trips, calendar data, or photos.

As described above, when you use the Service, Google, Reddit, and Singular may collect information about your online activities over time and across different websites and apps.

App Tracking Transparency (iOS)

On iPhone and iPad, iOS asks your permission before Goafie uses your activity across other companies' apps and websites. If you choose “Ask App Not to Track,” Goafie does not access your device's advertising identifier and does not turn on Google's advertising features. Singular still receives the app events described above, linked to an app‑specific identifier (IDFV) and your Goafie account ID, and Apple's SKAdNetwork may still report installs to advertising platforms in a form that doesn't identify you. You can change your answer at any time in Settings → Privacy & Security → Tracking. If you allowed tracking and later turn it off, iOS stops giving Goafie your advertising identifier, but the app does not currently switch Google's advertising features back off on that device. To turn them off, delete and reinstall the app and choose “Ask App Not to Track” if iOS asks again.

3. How we use AI

Goafie uses AI in one feature: Calendar Sync, to find flights and hotel stays in your calendar events. That includes ongoing sync, importing past trips from your calendar history, and the scan that counts the trips in your calendar before you subscribe. No other part of Goafie uses AI. Goafie has no AI chat, and AI is not used to make decisions about you that have legal or similarly significant effects.

Google user data. Goafie's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to provide Calendar Sync as described in this section. We transfer it only to the service providers that help us run Calendar Sync as described in this Policy (Google Cloud, which hosts our servers; our AI provider, DeepInfra; Google Maps Platform, for hotel lookups; and our flight‑data providers, which receive flight numbers and dates to look up flights), to the people you share your trips with (see section 4), for security purposes, or where the law requires; if Goafie is involved in a merger, acquisition, or sale of assets, we will transfer it only after getting your explicit consent. We do not use it for advertising, sell it, or use it to train AI models. People at Goafie look at it only with your permission (for example when you ask us for help), for security purposes such as investigating bugs or abuse, or where the law requires. Authorized Goafie staff can see the Calendar Sync troubleshooting logs described above, which include shortened event titles; we limit that access to troubleshooting Calendar Sync.

4. Who can see your information

Uploaded files are stored privately and are not publicly listed, but trip photos, profile photos, and review photos are delivered through hard‑to‑guess links. Anyone who has one of these links can open that file, and a link that has already been delivered (for example, to a friend's app) keeps working until you delete the photo, even if you later turn sharing off or remove the friend. Blocking someone stops sharing in both directions.

5. How we share information

We share personal information only as follows:

“Selling” and “sharing” under US state privacy laws

We do not sell personal information for money. However, some US state privacy laws, including California's, treat giving advertising platforms identifiers and activity data for advertising — the ad measurement described in section 2 — as “sharing” for cross‑context behavioral advertising or as a “sale,” even when no money changes hands. To the extent those laws apply to us, this is the only selling or sharing we do. The categories involved are identifiers (advertising ID, device and cookie identifiers, and IP address), internet or app activity (installs, website visits, clicks, and sign‑ups), and commercial information (subscription purchases and their price), disclosed to Reddit and Google. You can opt out as described in section 8. We do not have actual knowledge that we sell or share the personal information of anyone under 16.

6. Service providers and other third parties

We require the third parties we share personal information with, including our analytics, advertising‑measurement, and SDK providers, to protect it at least as well as this Policy does and as Apple's and Google's app store rules require, through our contracts with them or the data‑protection terms they offer all their customers. Service providers may use it only to provide their services to us. Some of these companies — such as Apple, Google, Reddit, Mapbox, OpenWeather, and your calendar provider — also handle some of this information as independent businesses under their own privacy policies. The weather‑radar and logo services the app loads images from receive only your IP address and which image is being loaded, directly from your device, and handle it under their own privacy policies.

7. Data retention and deletion

We keep your information while your account is active, or as long as needed to provide the Service, unless a shorter period applies below.

Some information is not removed when you delete your account:

We may also keep information where the law requires it, or to resolve disputes, prevent fraud, and enforce our agreements.

8. Your choices and rights

Your privacy rights

Depending on where you live — for example in the European Economic Area (EEA), the United Kingdom, Canada, or a US state with a consumer privacy law — you may have the right to:

Your right to object (EEA and UK)

If you are in the EEA or the UK, you can object at any time, on grounds relating to your particular situation, to processing we base on our legitimate interests (section 12), including advertising measurement through Singular, by emailing support@goafie.com. We will stop that processing unless we have compelling legitimate grounds that override your interests, rights, and freedoms, or we need it to establish, exercise, or defend legal claims. One current limitation: the app does not yet have a per‑account switch for app analytics or advertising measurement, so we cannot yet stop the app on your device from sending the usage data and measurement events described in sections 1 and 2. If you object to that processing, we will ask Google and Singular to delete data tied to your Goafie account ID where they support such requests, and you can stop the app from using your device's advertising identifier with the device settings above.

How to use your rights

To use these rights, email support@goafie.com from your account email address, or include your @handle. We may ask you to confirm that the request comes from you. You can also use an authorized agent, and we may ask for proof that they act for you. We aim to respond within 30 days and always within the time the law that applies to you requires, and we'll tell you if we need longer. If you live in a US state that gives you the right to appeal and we decline your request, you can appeal by replying to our decision. If we deny your appeal, you can contact your state Attorney General.

If you have a complaint about how we handle your information, please email us first: we will acknowledge it within 30 days, look into it, and tell you the outcome. You also have the right to complain to a data‑protection authority, such as your local supervisory authority in the EEA, the UK Information Commissioner's Office, the Office of the Privacy Commissioner of Canada, or the Office of the Information and Privacy Commissioner of Alberta.

9. Security

We use reasonable technical and organizational measures to protect your information. Data is encrypted in transit and is encrypted at rest by our cloud provider; calendar access tokens are additionally encrypted with keys managed in Google Cloud KMS; access to our internal tools is limited to authorized Goafie staff accounts; and App Check attestation helps us identify requests that don't come from the genuine app. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children's privacy

The Service is not directed to children under 13 (or the minimum age of digital consent where you live), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

11. Where we process information

Our servers run in the United States, and our AI provider, DeepInfra, is a US company. Our other service providers (section 6) may process information in the United States and in other countries where they or their subcontractors operate, for the purposes described in section 6. These countries may have different data‑protection laws from those where you live, and information stored there may be accessible to courts, law enforcement, and national‑security authorities of those countries.

When personal information is transferred from the EEA, the United Kingdom, or Switzerland, we rely on the safeguards in our providers' data‑processing terms, such as the European Commission's Standard Contractual Clauses (and their UK equivalent), or on the EU–US Data Privacy Framework where a provider is certified. Contact us for more information about these safeguards or to get a copy of them. If you are in Canada and have questions about how our service providers outside Canada collect, use, disclose, or store your personal information, contact the person responsible for privacy at Goafie at support@goafie.com.

12. Legal bases (EEA and UK)

If you are in the EEA or the United Kingdom, we rely on these legal bases:

You need to give us an email address (directly or through Apple or Google) to create an account. Everything else you add is optional, although some features don't work without it.

13. Additional information for US residents

In the past 12 months we collected the categories of personal information below, from the sources and for the purposes described in sections 1 to 3, and disclosed each category for business purposes to the service providers in section 6:

The categories that may count as “sold” or “shared” are listed in section 5. We keep each category for the periods described in section 7. We do not use personal information to train large language models or other AI models.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you in the app or by other reasonable means before they take effect, and we will update the “Last updated” date above. If a change would let us use information we have already collected in a materially different way, we will ask for your consent before doing so.

15. Contact us

For privacy questions, or to use your rights, email support@goafie.com.

Read our Terms of Service →