Privacy Policy

1. Introduction

GoFight ("we," "our," "us") values your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information. By using our Service, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information Collected via Google Sign-In

When you register or sign in using Google Sign-In, we collect:

• Name
• Email address
• Profile photo (if provided)
• Google user ID

Important: We do NOT collect or store your Google password. Authentication is handled entirely by Google.

2.2 Information You Provide

• Profile information (birthday, gender, location, bio)
• Contact information (phone number)
• Activity information (activities you create or join)
• Messages and chat content
• Ratings and reviews

2.3 Automatically Collected Information

• Device information (browser type, operating system)
• Usage data (features you use, activity interactions)
• Log data (IP address, access times, error logs)

3. Use of Google User Data

Our use of information received from Google APIs strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.1 How We Use Your Google Data

• Authentication: To verify your identity and manage your login sessions
• Account Creation: To create your GoFight profile using your name and email
• Communications: To send you important account updates and notifications
• Personalization: To personalize your experience based on your profile information

3.2 We Do NOT Use Your Google Data For

• Selling or renting to third-party advertisers
• Targeted advertising
• Sharing with third parties not explicitly stated in this policy
• Any unauthorized or beyond-scope purposes

3.3 Revoking Access

You can revoke GoFight' access to your Google account at any time by visiting your Google Account Permissions page.

4. How We Use Your Information

We use your information to:

• Provide and maintain our Service
• Process activity registrations and management
• Facilitate communication between users
• Process payments and manage subscriptions
• Send you notifications and updates
• Improve our Service and user experience
• Prevent fraud and ensure security
• Comply with legal obligations

5. Data Storage and Security

5.1 Data Storage

Your data is securely stored in Supabase (a secure PostgreSQL-based database) with:

• Encryption at rest and in transit
• Regular automated backups
• Row-level security policies
• Secure authentication tokens

5.2 Security Measures

• HTTPS/SSL encryption for all data transmission
• Secure OAuth 2.0 authentication flow
• Regular security audits and updates
• Access controls and permission management
• Secure payment processing (via Stripe)

5.3 Data Location

Your data is stored on secure cloud servers. We implement industry-standard security measures to protect your information from unauthorized access, disclosure, or destruction.

6. Data Sharing and Disclosure

6.1 Who We Share Your Data With

We may share your data with:

• Other Users: Your profile information, activities, and ratings are visible to other users
• Service Providers:
  • Google (authentication)
  • Stripe (payment processing)
  • Supabase (data storage and hosting)
• Legal Requirements: When required by law or in response to valid legal process
• Business Transfers: In the event of a merger, acquisition, or asset sale

6.2 What We Don't Share

We will never sell, rent, or trade your personal information to third-party advertisers.

7. Your Rights and Choices

You have the right to:

• Access: View the personal information we have collected about you
• Correct: Update or correct inaccurate information
• Delete: Request that we delete your account and data
• Export: Receive a copy of your data in a portable format
• Revoke Consent: Revoke Google access or delete your account
• Object: Object to processing of your data for certain purposes

To exercise these rights, contact us at: support@govibes.hk

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. When you delete your account:

• Your personal data will be deleted within 30 days
• Some data may be retained longer for legal and audit purposes
• Anonymized or aggregated data may be retained indefinitely

9. Third-Party Services

9.1 Google

Our Service uses Google Sign-In for authentication. Please review Google's Privacy Policy and Google's Terms of Service.

9.2 Stripe

Payments are processed through Stripe. We do not store your full credit card details. Review Stripe's Privacy Policy.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your language preference
• Analyze service usage and performance
• Ensure security and prevent fraud

You can control cookies through your browser settings, but disabling cookies may affect service functionality.

11. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child, we will delete that information.

12. International Data Transfers

Your information may be transferred to and stored on servers located outside your country of residence. By using our Service, you consent to the transfer of your information to these locations.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this page
• Sending a notification via email or in-app notice (for material changes)

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: