Privacy Policy for GOFLIC

Last Updated: November 21, 2025

Introduction

Welcome to GOFLIC ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.

Information We Collect

Personal Information You Provide

When you register for an account, we collect:

• Account Information: Email address, password, username
• Profile Information: First name, last name, street address, city, state, zip code
• Location Data: Geographic coordinates (latitude/longitude) derived from your address
• Profile Photos: Images you upload for your profile
• Event Information: Details about events you create or host
• Payment Information: Processed securely through Stripe (we do not store credit card numbers)

Information Collected Automatically

When you use the App, we automatically collect:

• Location Data: Real-time location when you use location-based features (with your permission)
• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App features you use, events you view, searches you perform
• Analytics Data: App performance, crash reports, and usage statistics

Information from Third Parties

We integrate with third-party services that may provide additional information:

• The Movie Database (TMDB): Movie and TV show information
• RAWG: Video game information
• BoardGameGeek: Board game information
• Mapbox: Geocoding and mapping services
• Stripe: Payment processing

How We Use Your Information

We use your information to:

• Provide Services: Create and manage your account, host events, process bookings
• Location Features: Show nearby events, calculate distances, geocode addresses
• Payments: Process featured event upgrades and platform fees via Stripe
• Communications: Send notifications about bookings, messages, and event updates
• Improve Services: Analyze usage patterns, fix bugs, develop new features
• Security: Prevent fraud, enforce terms of service, protect user safety
• Legal Compliance: Comply with applicable laws and regulations

How We Share Your Information

We share your information in the following circumstances:

With Other Users

• Public Profile: Username, profile photo, city, state (visible to other users)
• Event Hosts: Your booking information when you RSVP to events
• Event Attendees: Your profile when you host events

With Service Providers

• Supabase: Database and authentication services
• Stripe: Payment processing (PCI-DSS compliant)
• Mapbox: Geocoding and mapping services
• TMDB, RAWG, BoardGameGeek: Content information APIs

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

Business Transfers

If GOFLIC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmitted over HTTPS/TLS
• Authentication: Secure password hashing and email verification
• Row Level Security (RLS): Database policies ensure users can only access their own data
• Payment Security: Stripe handles all payment card data (PCI-DSS Level 1 compliant)
• File Validation: Image uploads are validated for type and size

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights:

Access and Portability

You can access and export your personal data from your profile settings.

Correction

You can update your profile information at any time through the App.

Deletion

You can request deletion of your account by contacting us at support@goflic.com. We will delete your data within 30 days, except where required by law.

Location Permissions

You can disable location access in your device settings. This may limit certain features.

Marketing Communications

You can opt out of promotional notifications in your account settings.

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act. Contact us to exercise these rights.

European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including the right to object to processing and data portability.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account:

• Personal data is deleted within 30 days
• Some data may be retained for legal compliance (e.g., payment records for tax purposes)
• Anonymized analytics data may be retained indefinitely

Children's Privacy

GOFLIC is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. Please review their privacy policies.

International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the App, you consent to such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy, please contact us:

Summary of Data Collection

Data Type	Purpose	Third Party	Required
Email & Password	Authentication	Supabase	Yes
Name & Address	Profile, Event Location	Supabase, Mapbox	Yes
Location (GPS)	Nearby Events	Mapbox	Optional
Photos	Profile & Events	Supabase Storage	Optional
Payment Info	Featured Events	Stripe	Optional
Usage Data	Analytics	None	Automatic