Privacy Policy

Effective: June 10, 2026 · Operator: Cacao Group LLC (“Gollog”, “we”, “us”) · Contact: info@gollog.me

This Privacy Policy describes how Cacao Group LLC collects, uses, and shares information when you use gollog.me (marketing) and me.gollog.me (the Gollog application), together the “Service”. It should be read with our Terms of Service.

1. Information we collect

Account and profile

Name, email address, and password (stored as a secure hash) when you register
Google account identifier when you sign in with Google
Optional profile fields: birthday, sex (for health reference ranges), avatar, preferred currency

Your Gollog data (“User Content”)

Gols, logs, tags, planning windows, and dashboard preferences
Financial amounts, transactions, and related notes you enter
Health measurements and marker values you enter
Gol sharing memberships, invitations, and in-app notifications

Subscription and billing

Plan status, Paddle customer and subscription identifiers, and billing interval
Payment card and billing address are collected by Paddle as merchant of record—we do not store full card numbers on our servers

Technical and usage data

IP address, browser type, device information, timestamps, and requested URLs in server logs
Session cookies and similar tokens that keep you signed in to the app
On gollog.me, Google Analytics 4 (GA4) when a Measurement ID is configured—aggregate page views and engagement

2. How we use information

We use information to:

Provide, maintain, and secure the Service
Authenticate you and manage your account
Process subscriptions and communicate about billing
Send transactional email (for example verification codes and invitations) via Brevo
Enable gol sharing and collaboration features you choose to use
Understand aggregate usage and improve the product
Comply with law and enforce our Terms

We do not sell your personal information.

3. Gol sharing

When you invite someone to a gol or accept an invitation, relevant gol and log information is visible to other members of that gol according to the feature’s design. Do not share sensitive health or financial data with collaborators unless you intend them to see it.

4. Cookies and similar technologies

We use cookies and similar storage for:

Essential operation — sign-in sessions, security, and preferences you set in the app
Analytics (gollog.me only) — GA4 when enabled, to measure marketing traffic in aggregate. You can limit analytics via browser settings or Google’s opt-out add-on.

5. How we share information

We share information only as needed to run the Service:

Service providers — hosting, database, email (Brevo), payments (Paddle), and Google (OAuth sign-in; GA4 on the marketing site), under contracts that require appropriate safeguards
Other gol members — when you use gol sharing, as described above
Legal requirements — if required by law, court order, or to protect rights, safety, and security
Business transfers — in connection with a merger, acquisition, or asset sale, with notice where required

6. Retention

We keep account and User Content while your account is active. When you delete your account, we delete or anonymize associated personal data within a reasonable period, except where we must retain information for legal, security, or backup obligations. Server logs and analytics exports are retained only as long as needed for operations and security, then deleted or aggregated.

7. Security

We use reasonable technical and organizational measures to protect information, including encryption in transit (HTTPS) and hashed passwords. No method of transmission or storage is completely secure; please use a strong, unique password and protect your credentials.

8. International transfers

Cacao Group LLC is based in Armenia. Service providers may process data in other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

9. Your choices and rights

Depending on your location, you may have rights to:

Access, correct, or delete personal data
Export data you provided
Object to or restrict certain processing
Withdraw consent where processing is consent-based

You can update profile and preferences in the app, delete your account in Settings, and email info@gollog.me for other requests. We will respond within timelines required by applicable law.

10. Children

Gollog is not directed at children under 16, and we do not knowingly collect their personal information. Contact us if you believe a child has provided data so we can delete it.

11. Changes

We may update this policy as the Service and regulations evolve. The effective date above will change when we do; material updates may also be announced in the app or by email.