GoalkitePrivacy policy
This policy explains how your personal data is processed when you use Goalkite (the website, the web app, and the Windows, Mac and Android apps), under Turkey's Personal Data Protection Law No. 6698 ("KVKK"). In short: we process the data needed to provide the service, we don't sell your data, and we don't use advertising or tracking tools.
Data controller
The data controller is Goalkite. For any question or request about this policy: emincan@dolmi.io
What data we process
| Data | What for |
|---|---|
| Name, email address, password (the password is stored in a form that can't be reversed) | To create your account, let you log in, and send password reset codes |
| Time zone, notification preferences, team logo | To show you to your teammates and send reminders at the right time |
| Teams, projects, tasks, routines, comments, tags, time entries and their change history | The service itself: storing your work, sharing it with your team, syncing it across devices |
| Notifications and the device notification token (Android) | To let you know when a task is assigned to you, someone mentions you or a task is due |
| App version and operating system type | To offer the right update |
We don't collect payment information; Goalkite is currently free.
Data that stays on your device
So that it can work offline, a copy of your work is kept on your device (IndexedDB or local storage in the browser, the app folder in the apps). A Claude, ChatGPT or Gemini key you enter for the AI assistant is stored only on your device and never sent to us. When you use the assistant, your messages go directly from your device to the provider you chose and are subject to that provider's own privacy terms.
We don't use advertising, analytics or tracking cookies on the website or in the app. The browser only stores what's needed to keep you logged in and remember your preferences.
Legal grounds
We process your data under KVKK article 5/2 on these grounds: establishing and performing the contract you accept when you create your account (paragraph c), our legitimate interests such as keeping the service secure and preventing abuse (paragraph f), and our legal obligations (paragraph ç).
Our service providers and transfers abroad
We use the infrastructure providers below to run Goalkite. Because their servers are outside Turkey, your data is transferred abroad. This transfer is made in line with the conditions of KVKK article 9 and only to the extent needed to provide the service.
| Provider | What it does | Location |
|---|---|---|
| Supabase | Database, accounts and login, file storage, sending codes by email | India (Mumbai) |
| Google Firebase Cloud Messaging | Delivering notifications to Android phones | USA and other Google data centers |
| Vercel | Hosting the website and the web app | Servers distributed worldwide |
These providers process your data only on our behalf and on our instructions. We don't share your data with any other person or organization, and we don't sell it; cases where we are legally required to (for example, a request from the authorities) are the exception.
Who can see it
Only you see the work in your personal space. Work in a team space is visible to that team's members, and private projects only to the people added to them. Team admins can see team members' names, emails and their work in the team. Permissions are enforced at the database level.
How long we keep it
We keep your data while your account is open. To close your account, just write to us; your account and personal data are deleted within 30 days. Comments and tasks you wrote in a team may stay in the team as part of its work; in that case your name is removed. Records we're legally required to keep are kept for that period.
Security
Connections are encrypted (HTTPS). Passwords are stored in a form that can't be reversed. Every user and team can access only their own data; app updates are digitally signed.
Your rights
Under KVKK article 11, you can contact us to:
- learn whether your personal data is processed and, if so, request information about it,
- learn the purpose of the processing and whether the data is used in line with that purpose,
- learn who it is transferred to, in Turkey or abroad,
- ask for it to be corrected if it is incomplete or wrong, deleted when the conditions are met, and for those it was transferred to be notified,
- object to a result against you that comes from analysis by automated systems,
- claim compensation if you suffered damage because of unlawful processing.
Send your request to emincan@dolmi.io from the email address registered to your account. We answer free of charge within 30 days at the latest. If you're not satisfied with our answer, you can complain to Turkey's Personal Data Protection Board.
Children
Goalkite is not designed for children under 13. If you're under 18, you should open an account with your parent's or guardian's permission.
Changes to this policy
When we update this policy, we change the date on this page; if there's an important change, we announce it in the app.