Goallex
00Goallex privacy & terms · 2026

Your data
stays yours.
We treat it like it is.

Goallex is built on the belief that your routines, your goals and your daily data belong to you. This page explains what we collect, why we collect it, and the terms under which Goallex is offered. Plain words. No tricks. No surprises.

Last updated12 May 2026
Version1.0
Read time~ 9 min
Plain words No third-party ad tracking No surprises You can leave any time Plain words No third-party ad tracking No surprises You can leave any time Plain words No third-party ad tracking No surprises You can leave any time Plain words No third-party ad tracking No surprises You can leave any time Plain words No third-party ad tracking No surprises You can leave any time Plain words No third-party ad tracking No surprises You can leave any time Plain words No third-party ad tracking No surprises You can leave any time Plain words No third-party ad tracking No surprises You can leave any time
01The short version

We don't sell your data.
We don't pretend.

If you do not read another word, this is the bit we would want you to know. Goallex is funded by subscriptions, not surveillance. Every line of policy below follows from these four promises.

01 · Funding

We don't sell your data.

Not to advertisers, not to data brokers, not ever. Goallex is paid for by subscriptions and creator fees — full stop.

02 · Storage

Encrypted, safe.

Logs, check-ins and private notes are encrypted in transit and at rest. Only you, and the people you invite, see them.

03 · Portability

You can edit anything.

Every map, every entry, every measurement — any time, from settings.

04 · Delete

Delete means delete.

One tap removes your account and wipes your data within 30 days. No soft-delete, no shadow profile.

You write it You own it You delete it You write it You own it You delete it You write it You own it You delete it You write it You own it You delete it You write it You own it You delete it You write it You own it You delete it You write it You own it You delete it You write it You own it You delete it
02Privacy notice

Privacy.
In plain words.

What we know, why we know it, and what you can do about it. Written in plain English, with the legal terms where they have to be.

01Introduction

This Privacy Notice describes how Onnica Pty Ltd ABN 12601456857 ("Goallex", "we", "us") collects, uses, stores and shares personal information when you visit our website, create an account, or use the Goallex application and related services (together, the "Service"). It applies to all visitors and registered users, worldwide.

We have tried to write this in plain language. Where we use a term that has a specific legal meaning under the EU GDPR, the Australian Privacy Act 1988, or the California Consumer Privacy Act, that meaning applies. If anything is unclear, email info@goallex.com and a human replies.

02What we collect

We only collect what we need to run the Service and improve it for you. Three categories:

You give us

  • Account details — name, email, password (stored as a one-way hash), profile image, time zone.
  • Health & lifestyle entries — anything you choose to log: mood, sleep, meals, workouts, hydration, journals, photos, voice notes.
  • Goals & routines — the maps you follow, the tasks you tick off.
  • Payment information — handled by Stripe; we store only the last four digits, brand, and expiry of your card.

We collect automatically

  • Device & usage — device model, OS version, app version, language, crash logs, randomly-generated installation ID.
  • Approximate location — city-level, derived from your IP. No GPS unless you turn on a location-aware map.
  • Interaction events — which screens you open, which buttons you tap, session length. Aggregated.

We receive from third parties

  • If you sign in with Apple, Google or Facebook — your name, email, profile image.
  • If you connect Apple Health, Google Fit, Oura, Whoop — only the metrics you authorise.
Never

Goallex does not collect biometric identifiers (face geometry, fingerprints), contacts, photo libraries, or microphone audio in the background. If a feature needs one, the app asks first, and you can refuse.

03How we use it

We use your personal information to:

  • Provide and personalise the Service — run your maps, generate insights, send the daily companion messages you have opted into.
  • Communicate — onboarding, security, billing, and (if you opt in) the weekly Goallex newsletter.
  • Improve Goallex — debug crashes, measure feature performance, train internal models on de-identified aggregates.
  • Comply with law — tax, fraud prevention, lawful requests.

We do not use your health or lifestyle entries to train third-party AI models, and we do not feed individual entries into ad-targeting systems.

Purpose

Run the Service

Legal basis
Contract
Retention
Lifetime of account
Purpose

Personalised insights

Legal basis
Consent (revocable)
Retention
Until you opt out
Purpose

Security & fraud

Legal basis
Legitimate interest
Retention
24 months
Purpose

Analytics (aggregate)

Legal basis
Legitimate interest
Retention
14 months
Purpose

Marketing emails

Legal basis
Consent
Retention
Until you unsubscribe

04Sharing

We share personal information only with:

  • Service providers — hosting, email, payments, analytics, error reporting. Each is bound by a data-processing agreement.
  • People you invite — accountability partners, coaches, creators you share a map with see only what you choose to share.
  • Authorities, when compelled by valid legal process. We notify you unless prohibited.
  • Successors, in the event of a merger, acquisition or wind-down — under the same protections.

We don’t sell your data or share it for advertising; we only disclose it where needed to provide the service, comply with the law, or honour your sharing choices.

05Cookies & tracking

The Goallex website uses a small set of first-party cookies for authentication, language and CSRF protection. One privacy-respecting analytics cookie (PostHog, self-hosted, IP-anonymised) helps us understand which pages perform well. We do not use third-party advertising cookies, Meta Pixel, Google Ads or similar.

You can refuse non-essential cookies on first visit, or via the "Cookie preferences" link in the footer. Mobile app analytics are off-able in Settings → Privacy → Send anonymous usage data.

06Your rights

Wherever you live, you have the right to:

  • Access the personal information we hold about you.
  • Export it in a portable, machine-readable format.
  • Correct anything inaccurate.
  • Delete your account and the data associated with it.
  • Object to certain processing, or withdraw a consent you have given.
  • Complain to a supervisory authority — the OAIC in Australia, the ICO in the UK, your local DPA in the EU.

Exercise any of these via Settings → Privacy, or email info@goallex.com. We respond within 30 days, usually faster.

07Retention

We keep your account data for as long as your account is active. When you delete it, we begin a 30-day wind-down: removal from production immediately, removal from encrypted backups within 30 days. Anonymised aggregate statistics may be retained indefinitely — they no longer identify you. Where law requires longer retention (e.g. tax records for seven years), we keep only the specific records required.

08Security

  • TLS 1.3 in transit, AES-256 at rest.
  • Least-privilege access; engineer access to production data is logged and reviewed quarterly.
  • Two-factor authentication available, and enforced for creators and admins.
  • Annual independent penetration testing.

No system is perfectly secure. If we discover a breach affecting your data, we notify you and the relevant authority within 72 hours, as required by GDPR Article 33.

09Children

Goallex is not directed at children under 16, and we do not knowingly collect personal information from anyone under that age. If you believe a child has provided information to us, email info@goallex.com and we will delete it.

03Terms of service

Terms.
How Goallex is offered.

The rules of the road — what you agree to by using Goallex, and what we promise back. Read once. Keep handy.

01The agreement

These Terms of Service form a binding agreement between you and Onnica Pty Ltd ABN 12601456857 governing your use of the Goallex Service. By creating an account, joining the waitlist, or otherwise using the Service, you accept these Terms.

If you are using Goallex on behalf of an organisation, you confirm that you have authority to bind that organisation and that they accept these Terms too.

02Your account

You must be at least 16 to register. Account credentials are personal — do not share them, sell them, or transfer them. You are responsible for activity under your account; tell us straight away if you suspect someone else has access.

We may suspend or terminate accounts that breach these Terms.

03Using Goallex

You can use Goallex for any lawful personal purpose. You may not:

  • Reverse-engineer, decompile or scrape the Service.
  • Upload content that is unlawful, defamatory, infringing, hateful, or that violates someone else’s privacy.
  • Use Goallex to provide regulated medical, legal or financial advice without proper qualifications and disclosures.
  • Attempt to access another user’s data, or interfere with the Service.
  • Use automated systems to send messages, generate maps, or extract data without our written permission.
Important

Goallex is a personal-action and lifestyle tool, not a medical device. It does not diagnose, treat or prevent any disease. For a health concern, talk to a qualified clinician.

04Content & maps

You retain all rights to the content you create or upload — your logs, photos, notes, custom maps, creator publications ("Your Content"). By posting Your Content, you grant us a worldwide, non-exclusive, royalty-free licence to host, copy, transmit, display and adapt it solely to run and improve the Service. This licence ends when you delete the content, except for backup copies that age out per our retention policy.

Goallex content — software, design, copy, illustrations, templates we author — is © Onnica Pty Ltd, licensed to you for personal use.

05Creators & payouts

If you publish maps to the Goallex library as a creator, the supplementary Creator Agreement also applies. It will be published as soon as our Premium is offered. In summary, you keep copyright over your maps; you receive royalty on the maps you publish; we take up to 15% platform fee on paid maps and services you offer; payouts run monthly.

You are responsible for the accuracy of your maps and any claims they make. Goallex moderates content that breaches our community guidelines but does not pre-approve every map.

06Subscriptions

  • Goallex offers a free tier and paid subscriptions ("Premium"). Upon the product launch, prices will be published at goallex.com, in your local currency, including applicable tax.
  • Subscriptions renew automatically unless cancelled.
  • Cancel any time from Settings → Billing; access continues until the end of the paid period.
  • Refunds follow the consumer-protection law of your country. In Australia, the ACL applies.

Early-access supporters receive twelve months of Premium at no charge; after that, the standard subscription terms apply. The most active pre-beta supporters, our most active beta testers, and all our pre-beta creators will receive Founding Member status and lifetime free access to our Premium.

07Intellectual property

"Goallex", the Goallex wordmark and logo, and the proprietary design system are trademarks of Onnica Pty Ltd. You may not use them without our written permission, except to describe that you use the Service ("I track my routines with Goallex" is fine).

08Termination

You can close your account any time. We may suspend or terminate your account if you materially breach these Terms, if your use creates a legal or security risk, or if we discontinue the Service in your region. Where possible, we give you 30 days’ notice and a way to export your data.

09Disclaimer & liability

Goallex is provided "as is" and "as available". To the maximum extent permitted by law, we disclaim implied warranties of merchantability and fitness for a particular purpose. Our aggregate liability to you for any claim arising out of the Service is limited to the greater of (a) the amount you paid us in the twelve months preceding the claim. Nothing limits liability for fraud, gross negligence, or anything that cannot be excluded under applicable consumer law.

10Governing law

These Terms are governed by the laws of New South Wales, Australia. Disputes will be resolved in the courts of New South Wales, unless your local consumer law gives you the right to sue in your home jurisdiction — in which case, that right is preserved.

We may update these Terms from time to time. Material changes will be announced via email and via an in-app notice at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

Updated 12 May 2026 Version 1.0 ABN 12601456857 Updated 12 May 2026 Version 1.0 ABN 12601456857 Updated 12 May 2026 Version 1.0 ABN 12601456857 Updated 12 May 2026 Version 1.0 ABN 12601456857 Updated 12 May 2026 Version 1.0 ABN 12601456857 Updated 12 May 2026 Version 1.0 ABN 12601456857 Updated 12 May 2026 Version 1.0 ABN 12601456857 Updated 12 May 2026 Version 1.0 ABN 12601456857
04Questions, asked back

Frequently
asked.

Short answers to the questions that come up most. Email us anything else — a real person reads it.

01Does Goallex use my health data to train AI?+
No. Your individual entries are never used to train any external AI model. Internal models that power your personalised insights run on de-identified aggregates, and you can opt out from Settings → Privacy → Personalisation.
02How do I export my data?+
Settings → Privacy → Export. We generate a ZIP of every map, log, journal, photo, and measurement on your account, plus a machine-readable JSON manifest, usually within a few minutes. The download link expires after 7 days.
03What happens if I delete my account?+
We start a 30-day wind-down. Your account is deactivated immediately and removed from production systems. Encrypted backups age out within 30 days. After that, we keep only what law requires (e.g. tax records).
04Who can see what I share with an accountability partner?+
Only the partner you invite, and only the slice you choose to share (e.g. “morning routine” without “journal entries”). You can revoke access any time, and the partner immediately loses visibility on past and future entries.
05Do you read my journal entries?+
No human at Goallex reads your journal entries. They are encrypted at rest and accessible only to you and any partner you have explicitly shared them with.