Privacy Policy

1. Data We Collect

Gokie collects only the data necessary to operate the platform:

• Email address — used for authentication, account management, and sending check-in reminders.
• Goal content — the goals you create, including titles, descriptions, deadlines, and check-in frequency settings.
• Check-in notes — the notes and evidence you submit when logging a check-in.
• Payment metadata — transaction IDs, stake amounts, and payment status. We do not store card numbers, CVVs, or full card details — all payment processing is handled by Stripe.

2. Data Processors

Gokie uses the following third-party processors to operate the service:

• Supabase — our database and authentication provider. Your account data, goals, and check-ins are stored in Supabase-managed infrastructure located in the US and EU. Supabase is GDPR-compliant and acts as a data processor under a Data Processing Agreement.
• Stripe — our payment processor. Stripe is PCI DSS Level 1 compliant. All payment card data is handled exclusively by Stripe and is never transmitted to or stored on Gokie servers.

3. Data Retention

Account data (including goals and check-in history) is retained until you request deletion. Payment records are retained for 7 years in compliance with tax and financial reporting requirements, even after account deletion. After the 7-year period, payment records are permanently deleted.

4. Your Rights

You have the right to request a full export of your personal data or to request deletion of your account and associated data at any time. To exercise these rights, email us at support@gokie.com with the subject line "Data Export Request" or "Account Deletion Request". We will respond within 30 days.

5. No Data Sold

Gokie does not sell, rent, or trade your personal data to any third parties. We do not share your data with advertisers. Your data is used solely to operate and improve the Gokie platform.

6. Cookies

Gokie uses session cookies only for authentication purposes. These cookies are necessary to keep you logged in and are set by Supabase Auth. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but doing so will prevent you from logging in.

7. GDPR — EU Users

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to data portability
• The right to object to processing
• The right to lodge a complaint with your local supervisory authority

To exercise any of these rights, contact us at support@gokie.com.

8. Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure authentication via Supabase, and PCI-compliant payment handling via Stripe. However, no internet service can guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or an in-app notice. Continued use of Gokie after changes are posted constitutes acceptance of the revised policy.