Privacy Policy

Last updated: 21 July 2026

1. Who we are

Goggy is an AI-powered sports data companion that helps athletes understand their training data through natural language chat. The service is operated by Kompot Studios EOOD, a company registered in Bulgaria.
Contact: info@askgoggy.com

2. What data we collect

We collect the following categories of personal data:

• Account and profile data: Information you provide when joining the waitlist, creating an account, or completing onboarding, such as your email address, WhatsApp phone number, name, country or state, sports, devices, and training background.
• Health and sports data (special category): With your explicit consent, we process health and fitness information you provide in conversations and read-only data from connected platforms made available through Goggy's Terra connection flow. The providers currently available to connect are shown in the connection screen and may change over time. Terra maintains a list of supported integrations; availability within Goggy may vary. When you connect a provider through Terra, we also receive connection identifiers, provider and permission information, and the health and fitness data made available by that connection. This may include activity metrics, heart rate, HRV, sleep or recovery data, glucose data, workout history and, where you authorise it, location data. We may store relevant health and fitness information in your long-term profile to provide personalised training insights. This is sensitive data under GDPR Article 9 and is only processed with your explicit consent.
• Conversation data: The messages you send to Goggy, primarily via WhatsApp, including any health or fitness information you choose to share.
• Usage and analytics data: Browser type, pages visited, session duration, and interaction events, collected via Google Analytics and the Meta (Facebook) Pixel. See Section 7 for full details.

3. Legal basis for processing (GDPR)

We process your data under the following legal bases:

• Contract performance (Article 6(1)(b)): Processing your account, profile, authentication, and conversation data to provide the Goggy service.
• Explicit consent (Article 6(1)(a) and Article 9(2)(a)): Processing your health and sports data, which is special category data, including health and fitness information you provide in conversations, relevant long-term profile information, and data from supported connected platforms and Terra-enabled connections. You may withdraw this consent at any time by emailing info@askgoggy.com or by disconnecting a connected provider in the dashboard.
• Separate optional consent (Article 6(1)(a) and, where applicable, Article 9(2)(a)): Analysing identifiable conversations or service-use data to identify product feedback and improve Goggy. This is optional and is not required to use Goggy's core service.
• Consent (Article 6(1)(a)): Sending you marketing and product update emails. You can unsubscribe at any time via the link in any email.
• Consent or legitimate interests, as applicable (Article 6(1)(a) or 6(1)(f)): Using analytics and advertising-related technologies to understand how users interact with our website, measure campaigns, and improve the product, subject to applicable law.

4. How we use your data

• To provide the Goggy service — answering your questions using your connected training data
• To create and manage your account, authenticate you, and provide dashboard access
• To help you connect supported data sources and access your training history
• To create aggregated, anonymous statistics about how Goggy is used, such as which devices are most commonly connected
• With separate optional consent, to analyse identifiable conversations or service-use data to identify product feedback and improve Goggy
• To send product updates and early access notifications (with your consent)
• We never sell your data to third parties
• We do not permit third-party AI providers to use your content to train or fine-tune their general-purpose AI models. Your queries and relevant training context are processed by third-party AI APIs solely to generate Goggy's responses (see Section 14).
• We do not write training or health data back to your connected platforms

5. Data storage, security & retention

• All data is encrypted in transit (TLS) and at rest (AES-256)
• Primary application data is hosted on infrastructure located in the European Union
• Account and health data is retained for as long as your account is active, unless a longer retention period is required for legal, security, or backup-related reasons.
• Waitlist data (email address) is retained until you ask us to delete it or 12 months after collection, whichever comes first.
• Analytics data is retained according to the settings and retention controls we configure with the relevant providers from time to time.
• Terra connection data is processed by Terra while it provides the connected-device service. Terra's processing and retention are also governed by its End User Privacy Policy.

6. Your rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to processing based on legitimate interest
• Withdraw consent at any time (including for health data, optional product-improvement analysis, or marketing emails)
• Lodge a complaint with your national data protection authority

To exercise any of these rights, email info@askgoggy.com. We will respond within 30 days.

7. Cookies and tracking technologies

We use the following tracking technologies on our website:

• Strictly necessary browser storage: We use browser local storage to store a signed session token so you can stay logged in to the Goggy dashboard. This storage is necessary for dashboard authentication and may persist until logout, token expiry, or deletion from your browser.
• Google Analytics (GA4): Collects anonymised data about how visitors interact with our site (pages visited, session duration, referral source). Google may process this data in the US under Standard Contractual Clauses. You can opt out via Google's opt-out tool.
• Meta Pixel (Facebook): Used to measure the effectiveness of our advertising on Instagram and Facebook, and to build relevant audiences. Meta may process this data in the US. You can manage your preferences via Meta's ad preferences.

You can control or delete cookies and local storage through your browser settings. Blocking strictly necessary storage may prevent some dashboard features from working as intended.

8. Third-party services and sub-processors

Goggy relies on the following third-party services to deliver the product. Their roles and processing of your data are governed by their applicable terms and privacy notices:

• WhatsApp / Meta: The primary chat interface. Your messages to Goggy are transmitted via WhatsApp's infrastructure and subject to WhatsApp's Privacy Policy.
• Telnyx: Used to receive and send WhatsApp messages on our behalf.
• AI model providers: Your queries and relevant training data context may be sent to third-party AI APIs to generate responses. We use API service tiers and configurations under which the provider does not use that content to train or fine-tune its general-purpose models.
• Brevo (formerly Sendinblue): Used to manage the waitlist and send transactional and marketing emails. Your email address is stored in Brevo.
• Google Cloud Platform: Our cloud infrastructure provider, hosting Goggy's backend and databases.
• Terra: Used to connect supported wearable and fitness providers, manage those connections, standardise the authorised health and fitness data, and deliver it to Goggy. Terra processes connected-device data as part of this service. Please also review Terra's End User Privacy Policy.
• Supported fitness platforms: Connected fitness platforms may provide data to Goggy through Terra when you authorise those connections. The providers currently available in Goggy are shown in the connection screen and may change over time. Terra maintains a list of supported integrations; availability within Goggy may vary. Your use of those third-party platforms remains subject to their own privacy policies.

9. International data transfers

Some of our service providers may process personal data outside the European Economic Area, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Children

Goggy is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at info@askgoggy.com.

11. Changes to this policy

We will notify you by email of any material changes to this policy at least 14 days before they take effect. The latest version will always be available at this URL.

12. Contact

info@askgoggy.com

13. Connected devices and Terra

When you choose to connect a wearable, fitness app, or other supported provider, Goggy uses Terra as an intermediary to manage the connection and receive the data you authorise. Terra standardises the information made available by your provider and delivers it to Goggy's configured secure destination, where we use it to provide the service.

You choose whether to connect a provider and what permissions to grant. You can disconnect a provider from the Goggy dashboard, which stops future syncing from that connection. Disconnecting does not by itself delete data that Goggy has already received; you can request deletion of your account and associated data as described above. Terra's processing of connected-device data is also subject to its End User Privacy Policy.

14. Product improvement and AI

We may use aggregated, anonymous statistics to understand and improve Goggy, for example by measuring which types of devices are most commonly connected. These statistics are designed not to identify individual users.

Before using identifiable conversation content, chat interactions, or identifiable service-use data to infer product feedback or improve Goggy, we will request your separate, optional consent. This consent is not required to use Goggy's core service and can be withdrawn at any time by contacting us. If information cannot be irreversibly anonymised, we continue to treat it as personal data and protect it accordingly.

Goggy uses third-party AI APIs to generate responses. We use service tiers and configurations under which the AI provider does not use your prompts, files, or responses to train or fine-tune its general-purpose models. These providers may still process limited information for service operation, security, abuse prevention, or legal compliance under their applicable terms. We do not sell your personal data to third parties.