Goafie
Privacy Policy
Last updated: August 12, 2026
This Privacy Policy explains how Goafie ("Goafie," "we," "us," or "our") collects, uses, and shares information when you use the Goafie mobile apps, websites, and related services (the "Service"). By using the Service, you agree to this Policy.
1. Information we collect
Information you provide
- Account information: your name, email address, and profile details. You sign in with Apple or Google, which share a basic identifier and the email associated with your account.
- Travel content: the flights, trips, stays, dates, places, notes, and photos you add. Any location information comes from the entries you create (such as airports and cities). Goafie does not collect or store your device's GPS position; if you allow it, maps in the app can show where you are on your device only.
- Calendar data (optional): if you turn on Calendar Sync, Goafie reads events from the calendars you select so it can find your flights and hotel stays, and — if you choose — writes your trips back to a calendar you pick. Event details are processed on our servers, including by an AI service provider acting on our behalf, to extract trip details. You control which calendars are included and can turn this off at any time.
- Reports you submit: if you report a profile or a photo, we receive the report, what it refers to, and any note you add, so our team can review it.
- Support communications: messages you send us.
Information collected automatically
- Usage and diagnostic data: basic app interactions and error/diagnostic information used to keep the Service running, plus analytics events (for example opening the app, creating an account, or starting a subscription) and an analytics identifier that lets us count these accurately.
- Website data: if you consent on goafie.com, cookies and similar technologies measure how the site performs and how well our advertising works. Decline and the site works exactly the same.
- Device data: device type, operating system, app version, and identifiers, including an App Check attestation token used to verify that requests come from the genuine app.
- Push token: a notification token (via Firebase Cloud Messaging) so we can send the alerts and live activity you enable.
- Advertising identifiers: to measure our own advertising, we collect the device's advertising identifier (on iOS, only with your permission) together with install and conversion information — for example, that the app was installed or a subscription started after one of our ads ran. See “Advertising measurement” below.
Subscriptions
If you buy a subscription, the purchase is processed by the Apple App Store or Google Play and managed through our payments provider, RevenueCat. We receive your subscription status, not your full payment‑card details.
2. How we use information
- To provide, maintain, secure, and improve the Service;
- To calculate your travel statistics, status tiers, and year‑in‑review;
- To enable the sharing and social features you choose to use;
- To send notifications and live activity you opt into;
- To manage subscriptions and prevent fraud and abuse; and
- To review reports, enforce our Terms, and keep the community safe; and
- To communicate with you about updates, security, and support, and to comply with legal obligations.
Advertising measurement and App Tracking Transparency (iOS)
We promote Goafie with ads on platforms such as Reddit. To know whether those ads work, our measurement partner Singular receives the device's advertising identifier and a small set of app events (such as first app open, account creation, and subscription purchase, including its price) and matches installs to the ad campaigns that led to them. The attribution result, including the device identifier and the conversion event, is shared with the platform that showed the ad so it can report campaign performance. This measures our own advertising only: we never share your name, email, trips, or photos with advertising platforms, and we do not show third‑party ads in the app.
On iPhone and iPad, iOS asks your permission before Goafie uses your activity across other companies' apps and websites to personalize your experience and measure how the app performs. If you decline, we do not use your data for that purpose. You can change your answer at any time in Settings → Privacy & Security → Tracking. Either way, we do not sell your personal information.
3. How we share information
We do not sell your personal information. We share it only as follows:
- With other users: according to the sharing and visibility choices you make in the app. Trip photos are shared per flight, are off by default, and reach only friends who are on that same flight. Blocking someone stops this in both directions.
- With service providers: vendors who process data on our behalf to run the Service (listed below), under contracts that limit their use of it.
- With advertising platforms, for measurement: when an app install or purchase is attributed to one of our ads, the device's advertising identifier and the conversion event are shared with the platform that showed the ad (currently Reddit) so we and they can measure campaign performance — never your name, email, trips, or photos.
- For legal reasons: when required by law or to protect the rights, safety, and security of users and the Service.
- In a business transfer: if Goafie is involved in a merger, acquisition, or sale of assets, subject to this Policy.
4. Service providers we use
- Google Firebase: authentication, Cloud Firestore database, Cloud Functions, Cloud Storage, Cloud Messaging, App Check, and website hosting.
- Google Analytics: measures how the app and website are used, and how people find us, so we can tell which of our marketing actually works.
- Reddit: the Reddit Pixel on goafie.com measures whether a visit or an app download came from one of our Reddit ads. It loads only if you accept cookies, and never if you decline. See Reddit's Privacy Policy.
- Apple and Google: Sign in with Apple and Google Sign‑In, and app distribution through the App Store and Google Play.
- Mapbox: powers the maps in the app. Serving map tiles means Mapbox receives your device's IP address, and its SDK collects anonymous usage telemetry.
- RevenueCat: subscription management.
- Singular: our mobile measurement partner; attributes app installs and subscriptions to our ad campaigns so we can measure our advertising, as described in sections 2 and 3. See Singular's Privacy Policy.
- DeepInfra: AI processing that extracts flight and hotel details from the calendar events you choose to sync. Event text is processed on our behalf and is not used to train AI models.
- Flight‑data providers: to look up schedules, routes, and status information.
These providers process data under their own privacy policies in addition to ours.
5. Data retention
We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de‑identify your personal information within a reasonable period, except where we must retain it to meet legal obligations, resolve disputes, or enforce our agreements.
6. Your choices and rights
- Access and update: view and edit your information in the app.
- Delete: delete your account and associated data from within the app, or follow the steps on our Delete Your Account & Data page.
- Sharing controls: change what you share, per trip, at any time.
- Calendar Sync: turn it off in the app, change which calendars are included, or revoke calendar access in your device settings at any time.
- Advertising ID (Android): reset or delete your device's advertising ID in Settings → Privacy → Ads.
- Notifications: turn push notifications and live activity on or off in your device settings.
- Website cookies: choose Accept or Reject when the banner appears on goafie.com. To change your answer later, clear this site's data in your browser and the banner will ask again.
- App tracking (iOS): change your answer any time in Settings → Privacy & Security → Tracking. Declining does not reduce what the app can do.
- Regional rights: depending on where you live (for example, under the GDPR or CCPA/CPRA), you may have rights to access, correct, port, or delete your data, or to object to certain processing. Contact us to exercise them; we will not discriminate against you for doing so.
7. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit and App Check to help ensure requests come from the genuine app. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Children's privacy
The Service is not directed to children under 13 (or the minimum age of digital consent where you live), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
9. International users
Goafie relies on global providers such as Google and Apple, so your information may be processed and stored in countries other than your own, which may have different data‑protection laws. Where required, we take steps to ensure appropriate safeguards for these transfers.
10. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you and will update the "Last updated" date above.
11. Contact us
For privacy questions or to exercise your rights, email support@goafie.com.