Privacy Policy

1Information we collect

Account information

To create and secure your account we collect:

• Phone number — required; it is your login identifier and is verified by a one-time SMS code.
• Name — required, shown to other users where relevant (for example, on bookings and teams).
• Password — stored only in a hashed (encrypted) form; we never store it in plain text.

Optional profile details

You may add these in your profile; they are not required to use the app:

• Additional phone number
• Gender
• Date of birth
• Email address (optional; kept for legacy and contact purposes)
• Profile photo — optional; if you add one, it is stored on our servers and shown to other users where your name appears (for example, on teams and bookings).

Location information

With your permission, the app accesses your device location to show nearby venues, display them on a map, and provide directions. You can deny or revoke this permission in your device settings; the app remains usable, but location-based features will be limited.

Photos and camera

Venue owners can upload up to three photos per venue, and any user may add a profile photo, from the device camera or photo library. We access the camera or gallery only when you choose to add a photo. Uploaded venue photos are stored on our servers and shown publicly in the app; profile photos are shown to other users where your name appears.

Content and activity you create

• Bookings and reservations, including the venue, date and time.
• Reviews and ratings you post for venues.
• Teams and memberships, team invitations, and match requests.
• Customer contact details (name and phone) when a venue owner records a booking made on behalf of another person.
• Payout requests submitted by venue owners (an amount and an optional note).
• Support messages — when you contact us through in-app support chat, the message text, timestamps and your identity are stored on our servers so we can answer you and keep a conversation history. Our support staff can read these messages. They are deleted when you delete your account.

Device and notification data

If you enable notifications, we register a device push token so we can send you alerts about bookings, invitations and approvals. You can turn notifications off at any time in your device settings.

Subscription and payment information

GoalBook offers optional paid subscriptions (for players and for venue owners). When you purchase a subscription we collect and store:

• The subscription plan and billing period you choose (1, 3 or 6 months).
• Payment status, amount, date, and the transaction identifier returned by the payment provider.

Payments are processed by Click, a third-party payment provider. Your full card details (card number, expiry date, CVV) are entered on and handled by Click — we never receive or store your card details. Booking a venue is paid in cash directly at the venue and is not processed through the app; only subscriptions are paid in-app.

2How we use your information

We use the information above to:

• Create your account and verify your phone number by SMS.
• Let you search, view and book venues, and let owners manage venues and bookings.
• Show nearby venues and provide maps and directions.
• Enable teams, invitations, match requests, reviews and payout requests.
• Send service notifications about your activity (for example, when a booking is approved or cancelled).
• Keep the service secure, prevent abuse, and comply with legal obligations.
• Process optional subscription payments through Click and manage your subscription status.

We do not sell your personal information.

3How information is shared

We share information only as needed to run the service:

• With other users — limited profile and activity data is visible where the feature requires it (for example, your name on a team or booking). Search results that match a team by captain phone never expose that phone number to the searcher.
• With service providers that process data on our behalf, listed in the table below.
• For legal reasons — if required by law, regulation, or a valid legal request.

Provider	Purpose	Data shared
Eskiz.uz (SMS gateway)	Delivering one-time verification codes by SMS	Phone number
Google Firebase Cloud Messaging	Sending push notifications to your device	Device push token
Google Firebase Crashlytics	Diagnosing app crashes and stability issues	Crash reports and diagnostic data, which may include your user ID
Google Maps Platform	Maps, place search and directions	Location and map queries
Click (payment provider)	Processing in-app subscription payments	Subscription and transaction details (plan, amount, transaction ID). Card details are handled by Click and are never shared with us.

These providers handle data under their own privacy terms. You can review Google’s practices in the Google Privacy Policy.

4Permissions we request

• Location — to find and map nearby venues. Optional.
• Camera / Photos — for venue owners to upload venue images. Optional.
• Notifications — to deliver booking and activity alerts. Optional.

Each permission is requested only when the related feature is used, and can be changed in your device settings.

5Data retention

We keep your information for as long as your account is active or as needed to provide the service. SMS verification codes are short-lived and expire automatically. When you delete your account, we delete or anonymize your personal data, except where we must keep certain records to meet legal, accounting or security obligations.

6Your rights and choices

You can:

• Access and update your profile information from within the app.
• Revoke location, camera or notification permissions at any time.
• Request deletion of your account and personal data by contacting us at the address below. We will process your request within a reasonable time.

7Security

We take reasonable technical and organizational measures to protect your data, including hashed passwords and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8Children’s privacy

GoalBook is not directed to children under 12 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the app. Continued use of GoalBook after changes take effect means you accept the updated policy.