Privacy Policy

Goaty is built on a “privacy by design” principle: the app runs entirely on your iPhone. We do not collect any personal data through the app.

1. Privacy at a glance

The following notes give an overview of what happens to personal data when you visit this website or use the Goaty iPhone app (the “App”).

2. Controller

3. Data processing in the app (local only)

• Local storage: Player names or nicknames, age, chosen picture and difficulty, duel results (logbook), stickers and settings are stored exclusively on your iPhone.
• No server, no account: The app does not transfer any of this data to us or to third parties. It contains no advertising, no analytics or tracking tools and no third-party software that collects data.
• Backups: The data may be part of your own iCloud or device backup, managed by Apple according to your settings.
• Deletion: Delete all data in the parents area under “Data”. Deleting the app also deletes all locally stored data.

4. Reminders and speech

• Reminders are local notifications scheduled by your iPhone. No push services or servers are used. You can turn them off at any time in the app or in iOS Settings.
• Speech: The app reads instructions aloud using the built-in iOS voices, on the device. The app uses neither the microphone nor the camera.

5. Purchase through the App Store

Goaty is purchased once through Apple’s App Store (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). Payment is handled exclusively by Apple. We receive neither your name nor payment or contact details. Apple’s privacy policy applies. The app contains no in-app purchases.

6. Children

Goaty is made for families with children. We do not collect any data from children. The parents area of the app is protected by a math question.

7. Hosting of this website (Cloudflare)

This website is served via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit it, Cloudflare processes technically necessary connection data (e.g. IP address, browser type, date and time) to deliver the site and protect it against attacks. Cloudflare may set a technically necessary security cookie (e.g. “__cf_bm”) for this purpose. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.

This website uses no analytics or advertising cookies and loads no fonts or content from Google or other third parties.

8. Contact by email

If you email us, we process your details only to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that purpose.

9. Your rights

You have the right to access, rectification, erasure and restriction of processing, as well as the right to object and to data portability. As the app does not transfer any data to us, we hold no app data about you. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information.

Last updated: October 2026