Public website · 25 October 2026

Website privacy

This notice covers GoalX’s public marketing website and optional guided early-access programme. The separate app privacy policy covers your GoalX account, money records, cloud sync and Sara conversations.

Optional programme interest

If you submit interest, we store the email you enter, your explicit programme-contact consent and its server-recorded time, approved campaign tags and any optional answers you choose to save. Optional answers cover your main goal, current tracking approach, interview interest and preference for possible paid Sara access. An optional note is limited to 300 characters. Please do not include salary, bank details or sensitive personal information.

We do not check email ownership or send automated confirmation emails. Research answers do not create a subscription, buy credits or authorize payment. Joining does not create or change a GoalX app account.

Optional basic measurement

Measurement starts only when you allow it. A random browser-session identifier and approved campaign tags count a page-view session and an app-click session. These events contain no email, programme answers, financial records or free text. Repeated events of the same kind in that session are deduplicated. Session choice and identifiers use your browser’s session storage, which may persist if the browser restores a session. You can leave measurement off or turn it off without affecting the programme or app.

Programme submissions and explicitly saved research steps are recorded as part of the requested programme service. They are distinct from optional page-view and app-click measurement. An app click does not prove app signup, activation, retention or payment.

Security and providers

Google Firebase provides hosting, database storage, App Check and server processing. Google reCAPTCHA protects form and measurement requests against abuse and can process browser, device and network signals. It loads when you use the protected form or enable measurement, rather than merely reading the page. Firebase App Check may cache security tokens in your browser. Hosting and cloud services can retain operational and security logs according to their service configuration.

Short-lived hashed network counters and daily limits restrict requests. Public database reads and writes are denied; only the protected backend processes submissions. Internal identifiers use secret-key hashes rather than email addresses in document paths. No advertising scripts are added.

Retention and removal

Programme records are set to expire after 180 days, measurement events after 60 days and network-rate counters after two days. Managed deletion can take additional time. Anonymous aggregate operational counts can remain longer. Raw email addresses and notes are not included in the aggregate review report.

To withdraw programme contact consent or request removal, contact the independent developer, Raja Chakraborty, through GoalX support. Ownership may need to be checked before a request can be completed. Removing website programme interest does not delete an app account; see app account and data deletion for that process.

More information

See Google’s privacy policy and terms. Research preferences are not proof of verified demand, willingness to pay or actual payment.