Last updated: July 2026
GoPals ("we," "us," or "our") lets groups of people, friends, teams, clubs, run their shared money, activities, and lists in one place. This Privacy Policy explains what information we collect, how we use it, and your rights over it.
Account information: when you sign in with Google, Apple, or Microsoft, we receive your name and email address from that provider. We never see or store your password with any of them.
Profile information: in your Member Profile, you may optionally add a phone number, birthday, emergency contact, and medical notes. All of this is optional, self-managed, and used only to help your own groups coordinate, most usefully for anything physical, like a ride or a hike.
Group content: anything you or other members create inside a group, Activities, expenses, pool contributions, checklists, photos, polls, wishlist items, calendar events, and messages.
Public group page information, if a group's admin turns it on: that group's display name, bio, cover photo, and member count become visible to anyone, including people who aren't signed in.
Usage data: standard server logs, including IP address and browser type, to help us diagnose issues and keep the Service secure.
Basic error logs: if something goes wrong while you're using GoPals, we may log a short technical error message along with your account and the screen you were on, solely to help us find and fix bugs. These logs don't include the content of your groups.
We do not sell your personal information. We share it only in these circumstances:
Emergency contact and medical notes are the two most sensitive fields GoPals stores. Both are entirely optional, edited only by you, and visible only to members of your own group(s), never on a public group page, never to a group you're not in.
Your data is stored on Supabase infrastructure, with row-level security policies enforced at the database level so a group can only ever access its own data. All traffic is encrypted with HTTPS. Depending on where our infrastructure providers operate, your data may be processed or stored in a country other than the one you live in; wherever that happens, we require our providers to protect it to a standard consistent with this policy.
If we ever experience a data breach that puts your personal information at meaningful risk, we'll notify affected users without undue delay, and cooperate with any legal notification requirements that apply.
We keep your account information for as long as your account is active. If you delete your account, we remove your personal information right away (see Section 7). Group content you were part of, expenses, pool records, and the like, is retained as part of that group's shared history unless the whole group is deleted, since removing it would corrupt other members' accurate records. Basic error logs (Section 1) are kept for a limited period for debugging and then routinely cleared.
You can download a copy of everything tied to your account at any time. You can delete your account at any time: this removes your personal information (name, email, phone, emergency contact, medical notes), while historical expense and pool records you were part of stay intact, attributed to "Former member," so the group's financial history stays accurate for everyone else. You can also leave any group yourself, at any time, without deleting your whole account.
GoPals uses a session cookie set by our authentication provider to keep you signed in. We do not use advertising cookies or tracking pixels.
Depending on where you live, you may have some or all of the following rights over the personal data we hold about you:
If you're a California resident, you have similar rights under California law, including the right to know what personal information we collect and to request its deletion; we do not sell personal information. To exercise any of these rights, contact us at hello@gopals.app.
GoPals is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a minor has provided us with personal information, contact us so we can remove it.
We may update this Privacy Policy from time to time. We'll note material changes on this page. Continuing to use GoPals after a change takes effect means you accept the revised policy.
Questions about this policy? Contact us at hello@gopals.app.
This document was written to be genuinely thorough and grounded in what GoPals actually does, but it is not a substitute for review by a real lawyer, especially regarding GDPR/CCPA compliance obligations that go beyond what's written here. Treat it as a solid starting point, not final legal sign-off.