Your planning data deserves clarity and care.

1. Introduction

Welcome to GoalBay.

GoalBay is a personal savings planning and tracking application developed and operated by an independent individual developer under the MAWSI brand.

This Privacy Policy explains how information is collected, used, stored, protected, and handled when you use the GoalBay website, mobile applications, and related services.

GoalBay is designed primarily to help individuals and families organize savings, plan life goals, monitor savings progress, and better understand their personal financial planning.

By using GoalBay, you acknowledge the practices described in this Privacy Policy.

2. Information We Collect

Account Information

When you create a GoalBay account, we may process information such as:

• Your name
• Email address
• User account identifier
• Date of birth, used to derive age and confirm adult eligibility
• Gender and selected GoalBay profile character
• Profile information
• Authentication-related information
• Account creation and login information

GoalBay stores date of birth rather than a separate age value, because age changes over time. GoalBay accounts and Home membership are intended for adults. Authentication is handled using our authentication service provider.

GoalBay does not store your account password in readable plain text.

3. Household and Financial Planning Information

GoalBay allows you to voluntarily enter information for your personal savings planning.

Depending on the features you use, this may include:

• Average monthly income, dated income entries, income sources, dated expenses, expense categories, and average household expenses
• Life goals and debt-repayment goals
• Target amounts and expected goal dates
• Savings amounts, current values, categories, and linked goals
• Institution, bank, lender, or provider names
• Deposit, recurring-savings, fixed-deposit, insurance, and gold-savings information
• Loan type, original loan amount, outstanding principal, and amount repaid
• Start, maturity, payoff, installment, premium, and next-payment dates
• Tenure entered in months or years
• Interest rates, installment amounts, EMI amounts, and payment status
• Premium amounts, payment frequency, maturity values, and sum-assured information
• Custom reminder schedules
• Completion, deletion, restoration, and reactivation history
• Other information you choose to enter in connection with your savings and goals

This information is used only as necessary to provide GoalBay's planning, tracking, calculation, reporting, reminder, recovery, and goal-progress features.

3A. Spend Records

When you use the Spend tracker, GoalBay may process the transaction description, amount, date, income or expense category, merchant or payer name, payment-method label, account nickname, recurrence schedule, tags, notes, monthly budget, event-ledger name, ledger budget, ledger date, ledger notes, whether ledger expenses affect available-income calculations, and—inside Family—the selected family member. You may also keep a private Mine-profile list of reusable account nicknames, such as bank, cash, wallet, or card labels. Selecting one for a Family expense copies that nickname into the shared Family transaction. These fields are optional except for the basic information required to create the record. Account nicknames must not contain bank-login credentials, account or card numbers, PINs, or OTPs.

4. Sensitive Credentials You Should Not Enter

GoalBay does not require and should not be used to store:

• Internet-banking passwords
• Debit-card PINs
• Credit-card PINs
• ATM PINs
• UPI PINs
• Banking OTPs
• Card CVV/security codes
• Other banking authentication credentials

Users should never enter such information into GoalBay savings records or notes.

5. How We Use Your Information

We may use information processed through GoalBay to:

• Create and maintain your account
• Authenticate your identity and support account-security controls
• Maintain your profile
• Provide income-based savings planning and Needs, Wants, and Life Savings allocations
• Calculate current-month income and spending from the dated records you add
• Create and manage life goals, debt-repayment goals, savings, and loan-repayment records
• Link or unlink savings and calculate progress toward goals
• Record how a completed goal was fulfilled and resolve its linked savings according to your choice
• Display dashboards, schedules, activity, reports, and monthly trackers
• Calculate due amounts and estimated maturity, payoff, or interest illustrations
• Provide notifications and custom reminders where available
• Recover deleted records during the applicable Trash period
• Provide the guided product tour, GoalBay Plus functionality, and educational Guidance features
• Maintain subscription entitlements
• Respond to support enquiries
• Maintain application security and prevent abuse or unauthorized access
• Diagnose technical problems with your permission where optional crash reporting is available
• Improve application reliability and functionality
• Comply with applicable legal obligations

GoalBay does not use the financial information you enter to execute investments or independently make financial transactions on your behalf.

6. Authentication and Database Infrastructure

GoalBay currently uses Supabase for services including authentication, database functionality, and related backend infrastructure.

Your GoalBay account and application data may therefore be processed through Supabase infrastructure.

GoalBay uses authenticated accounts and database access controls intended to separate each user's private application information from other users.

7. Data Privacy and User Separation

GoalBay is designed so that personal financial-planning records belong to the authenticated account that created them.

Security controls are intended to prevent one ordinary GoalBay user from accessing another user's private:

• Income and expense information
• Household information
• Goals
• Savings
• Reminders
• Reports
• Other personal planning records

Administrative functionality is intended to be restricted to authorized operational purposes.

Administrative access for subscription or account management does not automatically require access to users' detailed personal financial records.

8. Financial Information

GoalBay is a personal savings planning and tracking service.

GoalBay does not:

• Hold customer deposits
• Operate bank accounts
• Execute stock trades
• Operate mutual-fund accounts
• Provide cryptocurrency trading
• Transfer money from users' bank accounts as part of its savings-tracking functionality
• Guarantee returns on savings or investments

Financial information entered by users is used primarily to provide personal organization, calculation, planning, tracking, and educational functionality.

9. GoalBay Plus, Home, Trials, and Subscription Information

GoalBay may offer optional GoalBay Plus and GoalBay Home access, including paid subscriptions and a one-time non-renewing 30-day free period for either plan where eligible.

To enforce one free period per account across the website, app, devices, reinstalls, and local-data deletion, GoalBay stores the authenticated account identifier, selected trial plan, trial start time, and trial expiry time in the protected backend. This eligibility record is not based on a device identifier and ordinary users cannot edit it.

Subscriptions may be processed through supported third-party providers depending on the platform and country.

These may include:

• Google Play
• A web payment provider
• Apple App Store in a future iOS version
• Other supported payment providers introduced later

GoalBay may receive limited access-related information such as:

• Subscription or trial status
• Subscription or trial plan
• Billing provider
• Transaction or subscription reference
• Purchase status
• Access start date
• Subscription renewal date
• Access expiry date
• Currency
• Renewal status
• Refund or cancellation status

The one-time free period does not require payment information and does not automatically charge or renew. GoalBay does not need to store your full payment-card number, card PIN, CVV, or UPI PIN when payments are handled by third-party payment providers.

Payment providers process payment information according to their own terms and privacy practices.

9A. GoalBay Home and Family Sharing

GoalBay Home provides a shared Family space for up to five signed-in adults including the purchaser, who becomes the Organizer. Home includes GoalBay Plus features for active adult Home members.

Each member uses a separate GoalBay account and keeps a private Mine space. Only records intentionally created in the Family space are shared with other Home members. GoalBay does not offer creation of new managed profiles for people under 18.

Family membership information may include display name, date of birth, gender, selected GoalBay character, role, and membership dates. To invite an adult, the Organizer enters the email address of that person's existing GoalBay account. GoalBay uses that email address only to find the account and deliver the invitation to it inside the app and, on Android, as a push notification. GoalBay does not send the invitation by email or link, and its response never reveals whether an email address belongs to an account. The invited person accepts or declines inside their own GoalBay app, and the Organizer is notified of the answer. Family data remains visible but read-only if Home expires. Leaving or removal can end that member's access to the shared Family space without deleting their private Mine information.

9B. Lender: Links, Solo Ledgers, and Groups

Lender lets you link with other GoalBay users to keep shared records of money you lend, borrow, or split. It is optional. GoalBay does not move money, collect payments, or verify that a payment took place.

To link with someone, you enter the email address of their existing GoalBay account, and they must accept before a link exists. Once accepted, a link is permanent and cannot be removed. People who share a link or a group can see each other's display name and selected GoalBay character, and every entry, amount, note, date, and settlement recorded between them.

Lender may process link requests and their answers; entries (amount, note, date, and who owes whom); settlements and the entries they cover; groups (name, creator, members, and invitations); group expenses, each member's share, and group settlements; and notifications about requests, invitations, entries, and settlements. Notifications appear in the app and, on Android, as push notifications.

Lender records are shared by their nature: when you add an entry or settlement, the other participants see it. Some entries can be deleted, but an entry that already has a payment linked to it cannot. A group can be deleted by its creator once everyone is settled up, which removes the group, its entries, and its payments for every member, and a settled-up member can be removed from a group. Spend and Income records created from Lender entries stay with the person who owns them.

If you delete your GoalBay account, your links, group memberships, and Lender entries are deleted with it, so those records may also disappear from other participants' views.

10. App Crew Information

Certain users may be manually granted App Crew status by the GoalBay administrator.

App Crew status is an account eligibility attribute. An administrator may grant an eligible App Crew account time-limited GoalBay Plus access for a selected number of months or years. This administrative grant remains separate from a paid subscription and is recorded in a protected audit log.

App Crew status does not provide access to users' financial information and does not automatically authorize administrative access.

11. Notifications and Reminders

GoalBay may send notifications including:

• A fixed Android-device reminder at 10:00 PM local device time to finish recording the day's expenses
• A monthly push notification showing savings or installments due during the current month
• Custom reminders available to eligible GoalBay Plus users
• Lender and Home notifications about link requests, group and Home invitations, entries, settlements, and their answers
• Account-related notifications
• Security-related notifications
• Subscription-related information
• Important service notices

The daily expense reminder is scheduled locally on a signed-in Android device and is not an editable GoalBay reminder. Its delivery follows the device's current time zone and notification settings. Where push notifications are enabled, GoalBay or its notification provider may process device notification identifiers required to deliver those notifications.

You may control notification permissions using your device or browser settings where supported.

12. Email Communications

GoalBay may send transactional emails relating to:

• Email verification
• Account confirmation
• Password reset
• Security matters
• Important account changes
• Subscription-related matters
• Support enquiries

GoalBay may use third-party email infrastructure to deliver such messages.

For assistance, contact: support@mawsi.in.

13. Third-Party Service Providers

GoalBay relies on third-party services to operate certain functionality.

These may include providers of:

• Authentication
• Database infrastructure
• Hosting and content delivery
• Email delivery
• Push notifications
• Payment and subscription processing
• Application-store distribution
• Optional crash reporting and technical monitoring

These providers may process limited information necessary to provide their services and operate according to their respective privacy policies and legal obligations.

The Android application uses Firebase Crashlytics, provided by Google, for optional crash reporting after device-level permission is granted. The website uses GoalBay's protected Supabase backend to receive and retain sanitized website crash reports after browser-level permission is granted.

14. How We Share Information

GoalBay does not sell users' personal information.

GoalBay does not sell users':

• Income or expense information
• Savings information
• Goal information
• Household financial-planning information

to advertisers or data brokers.

Information may be disclosed when reasonably necessary:

• To infrastructure providers required to operate GoalBay
• To payment providers required to process subscriptions
• To application stores
• To email or notification providers
• To protect GoalBay from fraud, abuse, or security threats
• To comply with applicable law or a valid legal requirement
• To protect the rights and safety of users or the service

15. Advertising

GoalBay does not currently use users' private financial-planning information for targeted advertising.

If GoalBay introduces materially different advertising practices in the future, this Privacy Policy will be updated where required.

16. Analytics, Diagnostics, and Optional Crash Reports

GoalBay may process limited technical information to understand application performance, protect the service, and improve reliability.

Crash reporting is off by default on both Android and the website. A report is collected only after you choose to allow it on that installed Android device or in that browser. You can review or change the choice in Toolbox > Privacy & diagnostics. Android disabling also requests deletion of unsent reports held by the app; the website does not keep a local queue of unsent reports.

An approved Android crash report may include:

• A generic error description and sanitized technical stack trace
• The GoalBay application identifier, release, and version code
• The Android operating-system version and device-model information
• The permitted GoalBay technical source where the error was detected
• The crash time and randomly generated Firebase, Crashlytics, and session installation identifiers
• Technical device information that Firebase Crashlytics ordinarily attaches to Android crash and application-not-responding reports

An approved website crash report may include:

• A sanitized error type and up to 30 sanitized stack frames containing only technical function names, script filenames, line numbers, and column numbers
• A broad GoalBay route category without the full URL, query parameters, or URL fragment
• Broad browser and operating-system families, screen-size range, website release label, and event time
• A one-way technical fingerprint used to recognize repeated errors

Website reports require an authenticated GoalBay session, are rate-limited, and are available only through the protected administrator workspace with two-step verification. The report record does not store the reporting user's GoalBay ID, name, or email address.

GoalBay configures its reporting code not to add:

• Your GoalBay user ID, name, email address, password, OTP, authentication tokens, cookies, or authorization headers
• Salary, savings, goal, loan, insurance, gold, bank, or repayment values
• Goal names, saving names, institution names, bank or lender names, or personal notes
• Form contents, request and response bodies, custom activity breadcrumbs, full website addresses, screenshots, session recordings, or keystrokes

GoalBay sanitizes application-generated error details before an approved report is transmitted. Android and Firebase may still attach standard technical crash metadata described in Google's Firebase privacy documentation. Supabase may process ordinary request metadata needed to operate and secure its infrastructure under its own privacy practices. Declining or later disabling optional crash reports will not prevent you from using GoalBay.

GoalBay does not enable Google Analytics for this crash-reporting feature and does not use private financial-planning information for targeted advertising or third-party marketing analytics.

16B. User-Submitted Bug Reports

Signed-in users may voluntarily submit a bug report from Toolbox > Report a bug on the website or Android app. The report includes the short and full descriptions supplied by the user, the GoalBay screen and platform, the signed-in account email, a random report reference, and Android application version information where applicable.

Users may optionally select up to three supporting photos. GoalBay resizes and re-encodes selected photos before transmission to remove embedded metadata and reduce unnecessary data. Users should nevertheless review every description and image and must not submit passwords, OTPs, card details, bank-login information, or unnecessary financial or third-party personal information.

Bug reports are authenticated, rate-limited, and delivered to support@mawsi.in using Supabase Edge Functions and the Resend email-delivery service. GoalBay does not copy these reports or photos into its financial-planning database. The resulting support email and attachments remain in the support mailbox and relevant email-delivery systems for as long as reasonably necessary to investigate, respond to, prevent abuse, and maintain support records, after which they may be deleted according to operational and legal requirements.

17. Data Security

GoalBay uses technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse.

These measures may include:

• Supabase authentication
• Database access controls and row-level access restrictions
• HTTPS encrypted connections
• Restricted backend credentials and administrative functionality
• Server-side authorization for sensitive actions
• Two-step verification and signed-in-device management where available
• Security logging, rate limits, and session protections
• Client-side removal of sensitive fields from approved diagnostic reports

No internet-connected service can guarantee absolute security.

Users should use a strong and unique password, enable available two-step verification, and protect access to their email account and devices.

18. Data Retention

GoalBay may retain information for as long as reasonably necessary to:

• Provide your account and requested services
• Maintain savings and goal history
• Maintain application security
• Prevent fraud and abuse
• Resolve disputes
• Meet legitimate operational requirements
• Comply with applicable legal obligations

Completed savings and goals may remain available as historical records while your account remains active. Deleted goals and savings remain recoverable only for the Trash period applicable to your plan unless you permanently clear them sooner.

Google states that Firebase Crashlytics retains crash stack traces and associated installation identifiers for 90 days before beginning removal from live and backup systems. GoalBay does not separately copy approved Android Crashlytics reports into its application database.

Sanitized website crash-report records are retained in GoalBay's protected Supabase database for up to 30 days. A protected daily database job deletes expired records; the reporting service also performs cleanup whenever a new report is accepted.

When an account is deleted, associated personal application data will be deleted or anonymized as appropriate, except information that may legitimately need to be retained for purposes such as security, fraud prevention, transaction records, or legal compliance.

Where some data must remain after an account-deletion request, GoalBay will disclose the legitimate retention reason as required by applicable platform rules and law.

19. Account and Data Deletion

GoalBay provides users with the ability to request or initiate deletion of their account.

Where required, GoalBay will provide:

• A readily discoverable account-deletion option within the application; and
• A web-based method for requesting account and associated-data deletion.

After a valid account-deletion request is completed, associated GoalBay personal data will be deleted or anonymized subject to legitimate retention requirements.

Deleting a GoalBay account does not necessarily cancel an independently managed subscription.

Users with an active subscription should also manage or cancel the subscription through the payment provider through which it was purchased.

For assistance with account or data deletion: support@mawsi.in.

You can also review the public GoalBay Account Deletion page.

20. Your Choices

Depending on applicable law and the functionality available in GoalBay, users may be able to:

• View and update their profile information
• Edit, complete, reactivate, delete, or restore eligible savings and goal records
• Choose what happens to linked savings when completing a goal
• Request account deletion
• Control notification permissions
• Allow, decline, or disable optional crash reports from Toolbox > Privacy & diagnostics where available
• Manage subscription preferences
• Contact GoalBay regarding privacy concerns

Identity verification may be required before certain privacy or account requests are processed.

21. Age Eligibility

GoalBay accounts and GoalBay Home membership are intended for people aged 18 or above. GoalBay does not offer creation of new managed under-18 profiles. If you believe information relating to a child has been provided improperly or remains from an earlier product version, contact support@mawsi.in so it can be reviewed and removed where appropriate.

22. Financial Guidance Disclaimer

GoalBay provides personal savings organization, calculations, tracking tools, and educational guidance.

GoalBay does not provide personalized regulated investment advice.

GoalBay does not recommend individual:

• Stocks
• Mutual funds
• Securities
• Cryptocurrency investments
• Buy/sell transactions

GoalBay does not guarantee:

• Returns
• Interest rates
• Maturity or payoff amounts
• Investment performance
• Savings outcomes
• Achievement of financial goals

Calculations or projections—including an illustrative bank-savings value using an assumed annual rate—are approximate estimates based on information supplied by the user. Your bank's actual rate, compounding method, tax treatment, fees, and resulting value may differ.

Users remain responsible for their own financial decisions.

23. International Processing

Some technology providers used by GoalBay may operate infrastructure in countries other than the user's country.

As a result, certain information may be processed or stored internationally according to the provider's infrastructure and applicable data-protection requirements.

24. Changes to This Privacy Policy

This Privacy Policy may be updated as GoalBay develops, including when:

• Features change
• Subscription functionality changes
• Payment providers change
• Infrastructure changes
• Legal requirements change
• Privacy practices change

The Last Updated date will be revised when the policy is updated.

Where required, users may receive additional notice of material changes.

25. Contact

GoalBay is developed and operated by an independent individual developer under the MAWSI brand.

For privacy enquiries, support, or account-deletion assistance:

GoalBay Support
Independent Developer
Email: support@mawsi.in
Website: https://www.goalbay.mawsi.in