Privacy Policy
Last updated: July 2026
Gofy ("we", "us") is based in Barcelona, Spain.
What data we collect
- Email address when you create an account
- Location data temporarily when you verify a gem (to check you are within 150 metres) — we do not store your precise location permanently
- Gems you post, verify, unlock, and save
- Basic usage data (which gems you view)
Why we collect it
- To provide the Gofy service
- To verify gem authenticity via proximity check
- To show you gems near you
- To improve the platform
Who we share it with
We do not sell your data. We use the following services:
- Supabase (database and authentication) — hosted in EU
- Mapbox (map rendering) — location data sent to Mapbox only for map display
- Railway (hosting)
- Umami (self-hosted analytics) — fully cookieless and GDPR compliant product analytics
Your rights (GDPR)
You have the right to access, correct, or delete your data at any time. To exercise your rights contact us at [email protected]. You can also delete your account directly from the app settings.
Cookies & Tracking
We are proudly 100% cookie-free for tracking. We use a self-hosted analytics solution (Umami) that does not use cookies, does not collect personal data, and does not track you across other websites. We only use local browser storage (localStorage) strictly to remember essential app states, such as your language preference.