Privacy Policy
Last updated: August 2026
1. Introduction, Scope of This Policy, and Identity of the Data Controller
1.1 Welcome to the GoalGeine website, system, and service, which offer a technological tool for analyzing data and information relating to live sporting events, including presenting data, identifying trends, fluctuations in the pace of play, attacking pressure, momentum, and additional statistical metrics, as well as sending alerts to users in accordance with their service plan and preferences.
1.2 This Privacy Policy is intended to explain, in a detailed and transparent manner, how personal information is collected, received, stored, processed, used, transferred, and secured in connection with browsing the Site, opening a user account, purchasing a subscription, receiving alerts, contacting the Company, and receiving the services offered through the system.
1.3 The controller of the databases relevant to operating the Site and the Service is BOBO MARKET, identification number 514195239, whose registered address is Dayag 3, Eilat, Israel, and who may be contacted regarding privacy and information security matters at the email address goalgeine@gmail.com and by phone at +972-52-7040239 (hereinafter: the "Company", the "Service Operator", or the "Data Controller").
1.4 This Policy applies to the GoalGeine website at goalgeine.com, the user's personal area, the registration and payment systems, the alert delivery and receipt interfaces, landing pages, applications, push notifications, emails, text messages, and any additional digital medium through which the Company provides the Service, directly or through providers acting on its behalf.
1.5 This Privacy Policy forms an integral part of the GoalGeine Terms of Use. Any use of the Site or the Service is also subject to the Terms of Use, the terms of the selected subscription plan, and any specific notices presented to the user when providing information or using a particular function.
1.6 Where separate and explicit consent to a particular action is required by law, including receiving advertising material or activating tracking technologies that are not essential to operating the Site, the Company will act to obtain appropriate consent. Mere browsing of the Site will not be deemed automatic consent to every possible use of personal information, but only to uses permitted by law, required to operate the Site, or in respect of which appropriate notice has been given.
1.7 This Policy may use certain grammatical forms for convenience only, but it applies equally to all genders. Section headings are for convenience and reference only and will not be used to interpret this Policy.
2. Definitions
2.1 "Personal Information" means any data relating to an identified or identifiable individual, directly or indirectly and with reasonable effort, including via name, identification number, address, phone number, email address, online identifier, device data, IP address, location data, usage data, account details, or any other feature relating to a person's identity, condition, behavior, or activity.
2.2 "Sensitive Information" means information to which the law grants heightened protection, including, as applicable, information about a person's intimate personal affairs, medical information, genetic or biometric information, criminal history, political opinions or religious beliefs, location and traffic data, information about financial activity, and any additional information falling within the statutory definition.
2.3 "Processing" means any operation or series of operations performed on personal information, whether manually or by automated means, including collection, receipt, recording, storage, organization, sorting, review, analysis, matching, cross-referencing, retrieval, use, disclosure, transfer, disclosure, dissemination, restriction, deletion, alteration, or destruction.
2.4 "User" means any person who browses the Site, visits it, submits information through it, registers for the Service, opens an account, purchases a subscription, receives alerts, contacts the Company, or otherwise uses the Site or the Service.
2.5 "User Account" means the personal account opened for the user for the purpose of using the Service, managing the subscription, selecting preferences, and receiving alerts.
2.6 "Service Provider" or "Data Holder" means an external party that processes personal information on behalf of the Company or provides it with a service involving access to personal information, including cloud, hosting, information security, payment processing, messaging, marketing, support, data analytics, and system maintenance providers.
3. Types of Information the Company May Collect
3.1 In the course of using the Site and the Service, the Company may collect information that the user provides to it directly, as well as information collected automatically as a result of using the Site, the system, the personal area, or the alerts.
3.2 Information provided directly by the user may include their full name, email address, phone number, password or other authentication means, account details, alert preferences, preferred sports, leagues, teams, or matches, choices made within the system, information provided when contacting customer service, information provided as part of a cancellation request, billing inquiry, complaint, or support request, and any additional detail the user chooses to provide on their own initiative.
3.3 The Company may collect and process information relating to the subscription and payments, including the selected subscription plan, the subscription price, the signup date, billing periods, subscription status, billing dates, payment confirmations, transaction numbers, invoices, credits, cancellations, dishonored charges, transaction disputes, and payment-related inquiries.
3.4 To the extent payment is processed through an external payment or clearing provider, full credit card details or payment method details may be provided directly to the payment provider and stored on its systems in accordance with its terms and privacy policy. The Company may receive limited information from the payment provider required to manage the transaction, such as the payer's name, transaction status, transaction identifier, the last four digits of the payment method, card type, payment token expiry, or similar information. Unless expressly stated otherwise, the Company does not store the full credit card number on its systems.
3.5 When using the Site and the Service, technical and operational information may be collected automatically, including IP address, device type, device and browser identifiers, operating system type, browser version, device language, time zone, screen resolution, connection type, internet service provider, date and duration of access, pages and screens viewed, actions performed within the system, referral source, usage times, crash data, errors, malfunctions, login attempts, and security data.
3.6 The Company may process information relating to the receipt of alerts, including the types of alerts the user has chosen to receive, the matches or leagues they have set, the selected delivery channel, alert delivery times, delivery status, opens, clicks, blocks, muting, cancellation, or changes to preferences. This information is used to operate the Service, diagnose malfunctions, measure performance, and improve the manner in which alerts are delivered.
3.7 To the extent the Company enables registration or login via a third-party service, such as a Google or Apple account or another identity provider, it may receive from that provider information the user has approved for transfer, such as name, email address, profile picture, account identifier, or other basic information. The scope of information provided depends on the user's settings, the permissions they have approved, and the policy of the external service provider.
3.8 The Company does not request that users provide medical information, biometric information, genetic information, criminal history, information relating to minors, or sensitive information that is not required to operate the Service. Users are requested to refrain from providing such information in open-text forms or customer service inquiries, unless providing it is necessary to handle the inquiry and the Company has expressly requested it.
3.9 The Company does not seek to collect information regarding gambling activity, the extent of gambling, accounts on gambling sites, balances, winnings, losses, or financial activity of the user in connection with gambling. GoalGeine is a sports data analysis tool and is not a gambling service or a gambling recommendation service. Users are requested not to provide the Company with information of this kind, which is not necessary for operating the Service. The Company undertakes to act in accordance with the provisions of the Israeli Privacy Protection Law, 5741-1981 (hereinafter: the "Law"), including Amendment 13 thereto and the regulations enacted thereunder, as well as in accordance with any other relevant law, in order to safeguard the personal information of data subjects and protect their constitutional right to privacy.
4. Is There an Obligation to Provide Information, and What Are the Consequences of Not Doing So
4.1 The user is not subject to a general legal obligation to provide the Company with personal information, and providing it depends on their will, choice, and consent. However, providing certain details is a practical and contractual condition for opening a user account, purchasing a subscription, making a payment, receiving alerts, verifying the user's identity, securing the account, or handling an inquiry.
4.2 A user who chooses not to provide information marked as a mandatory field will not be able to complete registration, purchase a subscription, receive the Service, receive alerts through the requested channel, or receive a response to an inquiry requiring identification or verification. Fields not essential to providing the Service will be marked, where possible, as optional.
4.3 The Company will provide the user, at the time information is collected and in a manner appropriate to the circumstances, with a notice including the identity of the data controller and how to contact them, whether providing the information depends on the user's will or is required by law, the consequences of not providing the information, the purposes of collection and use, the types of parties to whom the information may be disclosed and the purposes of such disclosure, and the existence of rights of access and correction under law.
4.4 The user represents that any information they provide to the Company will be true, complete, accurate, and current. To the extent the user provides information relating to another person, they represent that they are lawfully authorized to do so, that providing the information does not infringe that person's rights, and that they have given that person the information required regarding how their information will be processed.
5. Purposes of Collecting and Using the Information
5.1 The Company will process personal information only for legitimate, defined purposes relevant to the operation of the Site and the Service, in accordance with the notice given to the user, the consent given, the relationship between the parties, the obligations applicable to the Company under law, and other purposes permitted by law.
5.2 The Company may use the information to create a user account, verify the user's identity, manage the account, manage the subscription, provide the Service, present sports data, send alerts, save the user's preferences, tailor alerts to the selected plan and preferences, manage billing and payments, issue invoices, handle cancellations and refunds, and provide service and support.
5.3 The Company may use the information to secure the Site and the Service, identify and prevent impersonation, fraud, unauthorized use, breach of the Terms of Use, account sharing, cyberattacks, intrusion attempts, data mining, systematic copying, or other activity liable to harm the Company, users, or third parties.
5.4 The Company may process information for the purpose of monitoring service performance, detecting malfunctions, handling errors, maintenance, backup, disaster recovery, analyzing usage patterns, measuring response times, improving the user experience, developing new features, examining alert effectiveness, and improving the models and technological systems.
5.5 The Company may use the user's preferences and usage history to tailor the order in which information, alert types, matches, leagues, or teams are presented to them. Such personalization is intended to improve the Service and is not used to make a legal, medical, financial, or other decision having a similarly material effect on the user.
5.6 The Company may use the information to manage the relationship with the user, handle inquiries, complaints, and requests, deliver notices regarding changes to the Terms of Use or the Privacy Policy, handle disputes, defend against claims or legal proceedings, collect debts, comply with instructions from competent authorities, and meet accounting, legal, and regulatory obligations.
5.7 The Company may derive statistical, aggregate, or anonymous data from the information, which does not enable reasonable identification of a particular individual. Such information may be used for research, development, business analysis, usage review, service improvement, and presenting general data regarding the system's activity.
5.8 The Company will not use personal information for a new purpose that is not reasonably compatible with the purposes disclosed to the user, except after providing further notice and obtaining new consent, to the extent required by law.
6. Alerts, Operational Notices, and Marketing Communications
6.1 To provide the Service, the Company may send the user operational notices required to manage the account and the subscription, including verification, security, password change, billing, subscription renewal, payment failure, service change, maintenance, cancellation, support, and legal update notices.
6.2 Operational notices may be sent via email, text message, push notification, a notice in the personal area, a messaging application, or another channel the user has provided or selected. These notices are part of the Service and the relationship with the user, and it is not always possible to unsubscribe from them as long as the user's account or subscription is active.
6.3 Sports alerts included in the Service will be sent in accordance with the subscription plan, the user's choices, the permissions granted on their device, and the availability of delivery channels. The user may change their alert preferences or revoke permission for a particular channel, but changing a permission, muting notifications, or deleting the application do not, in themselves, constitute a cancellation notice for the subscription.
6.4 Advertising material, commercial offers, promotions, and marketing updates will be sent only in accordance with consent lawfully given and subject to the provisions of the Israeli Communications Law (Telecommunications and Broadcasting), 5742-1982, the Privacy Protection Law, and any other relevant law.
6.5 Consent to receive marketing communications is not a condition for purchasing the subscription or receiving the Service. The Company will not automatically add a user to a marketing distribution list merely because they registered for the Service, unless appropriate consent has been given or another basis permitted by law exists.
6.6 A user who has agreed to receive marketing communications may withdraw their consent at any time via an unsubscribe link appearing in the message, by changing their preferences in the personal area, or by writing to the Company. The Company will work to remove the user from the marketing distribution list as soon as reasonably possible.
6.7 Unsubscribing from a marketing distribution list does not cancel the user's account or subscription and does not prevent the Company from sending operational notices required to manage the relationship, secure the account, process billing, or provide the Service.
7. Cookies and Similar Technologies
7.1 The Site may use data files known as cookies, as well as local storage, pixels, tags, identifiers, and similar technological tools, to enable the Site to function properly, save user preferences, manage account login, ensure security, prevent fraud, measure usage, detect malfunctions, improve performance, and personalize the Service.
7.2 Essential cookies are required to operate the Site and the Service, including maintaining login state, managing security, load balancing, and preserving user choices. Blocking essential cookies may prevent the user from logging into their account or using part of the services.
7.3 Functional cookies may be used to save language, time zone, display preferences, and previous choices made by the user. Analytics cookies may be used to measure Site usage, identify popular pages, detect malfunctions, and improve the user experience.
7.4 To the extent the Company uses marketing cookies, advertising pixels, or non-essential technologies, they will be activated in accordance with law and the user's preferences, and, where required, only after obtaining consent via a cookie banner or another appropriate mechanism.
7.5 The user may change their browser or device settings to block, restrict, or delete cookies. Blocking certain cookies may impair the availability, proper functioning, or convenience of some Site components.
7.6 To the extent the Company uses third-party analytics, advertising, or measurement tools, additional information regarding the identity of the providers, the types of cookies, their retention period, and the purposes for which they are used will appear in the cookie banner, the preference management interface, or an updated list of providers published on the Site.
8. Disclosure of Information to Third Parties
8.1 The Company does not sell personal information and does not rent it to third parties. The Company may disclose personal information to third parties only to the extent required for the purposes detailed in this Policy, in accordance with the user's consent, for the purpose of fulfilling the relationship, or in cases where disclosure is permitted or required by law.
8.2 The Company may disclose information to service providers acting on its behalf, including hosting and cloud providers, information security services, payment and clearing providers, email, text message, and push notification delivery services, support services, customer management systems, data analytics providers, software maintenance, backup, monitoring, and communications infrastructure.
8.3 Service providers will receive access only to the information required to provide the service ordered from them. The Company will act to regulate their activity through appropriate undertakings regarding confidentiality, information security, purposes of use, retention, and deletion of information, in accordance with their role and applicable law.
8.4 The Company may disclose information to professional advisors, accountants, lawyers, auditors, insurance companies, banks, or financial providers, to the extent disclosure is required to manage its activity, comply with a legal obligation, manage a dispute, collect payment, defend against proceedings, or protect its rights.
8.5 The Company may disclose information to a competent authority, a court, a law enforcement authority, or another party where there is a legal obligation, a judicial order, an authorized demand, or another legal need to do so.
8.6 The Company may disclose information where there is reasonable suspicion of fraud, impersonation, a cyberattack, prohibited use of the Service, harm to the rights of the Company or a third party, or where disclosure is reasonably necessary to prevent damage, detect a breach, enforce the Terms of Use, or protect the safety of users and the public.
8.7 In the event of a merger, acquisition, investment, change of control, reorganization, or sale of business or assets, personal information may be disclosed to the parties involved in the transaction, including their advisors, for the purpose of due diligence and completing the transaction. Such disclosure will be subject to confidentiality obligations and continued processing of the information in accordance with the purposes for which it was collected and applicable law.
8.8 The Company may use statistical, aggregate, or anonymous information and disclose it to third parties, provided this information does not enable reasonable identification of a particular user.
9. Transfer of Information Outside Israel
9.1 Some of the infrastructure, cloud, storage, payment processing, messaging, support, or analytics providers used by the Company may operate servers, systems, or service teams outside Israel. As a result, personal information may be stored, accessed, or processed in other countries.
9.2 Privacy protection laws in other countries may differ from the laws of the State of Israel. The Company will act to transfer information outside Israel in accordance with the provisions of the Privacy Protection Law, the Privacy Protection Regulations (Transfer of Data to Databases Outside the State's Borders), 5761-2001, and any other relevant law.
9.3 To the extent the transfer is based on a contractual undertaking by the recipient of the information, the Company will act to obtain an appropriate undertaking under which the recipient will take suitable measures to protect the privacy and the information and will process it in accordance with the purposes permitted and the conditions established.
9.4 To the extent the Company receives personal information transferred to Israel from the European Economic Area, the Privacy Protection Regulations (Provisions Regarding Information Transferred to Israel from the European Economic Area), 5783-2023, may also apply to this information, including provisions relating to notice, accuracy, data minimization, and deletion, in accordance with their scope and the exceptions established therein.
10. Data Retention and Deletion Periods
10.1 The Company will retain personal information only for the period reasonably necessary for the purposes for which it was collected, taking into account the type of information, its sensitivity, its scope, the duration of the relationship with the user, security needs, legal and accounting obligations, limitation periods, and the need to protect the rights of the Company and users.
10.2 Information required to manage a user account and subscription may be retained as long as the account or subscription is active, and for a reasonable period thereafter, to handle inquiries, cancellations, refunds, disputes, transaction disputes, security, and legal defense.
10.3 Information relating to payments, invoices, and transactions may be retained for the periods required under tax law, bookkeeping requirements, and relevant laws, even after the subscription is cancelled or the account is deleted.
10.4 Information no longer needed for the purposes for which it was collected will be deleted, undergo an anonymization process, be restricted from use, or be retained in a manner that no longer enables reasonable identification of the user, to the extent possible and in accordance with the Company's data retention policy.
10.5 Cancelling a subscription or deleting an account does not necessarily require the immediate deletion of all information. The Company may continue to retain information required to comply with a legal obligation, maintain accounting records, handle a dispute, prevent fraud, secure information, protect legal rights, or enforce the Terms of Use.
10.6 Backup copies may be retained for limited periods in accordance with the Company's backup and recovery cycles. Information contained in backups will continue to be protected by appropriate means and will be deleted or overwritten as part of the regular backup cycle, unless there is a legal obligation to retain it.
11. Information Security
11.1 The Company implements reasonable and accepted organizational, technological, and physical measures to protect personal information, taking into account the nature of the information, its scope, sensitivity, the purposes of its use, and the risks it faces. Security measures may include, as applicable, access and permission management, identification and authentication means, communications encryption, separation of permissions, logging and monitoring, software and security updates, backups, incident response procedures, risk assessment, appropriate arrangements with providers, and training of authorized personnel.
11.2 The Company will limit access to personal information to employees, providers, and personnel who need the information to perform their role, subject to confidentiality undertakings and appropriate permissions. However, despite the measures taken, no computer system or internet-connected system is completely immune to intrusion, malfunction, unauthorized access, loss, or exposure. Accordingly, the Company cannot guarantee that a security incident will never occur.
11.3 In the event of a security incident or suspected incident of this kind, the Company will act to examine the incident, mitigate the damage, remedy the deficiency, and document the handling of the matter, and will report to the Privacy Protection Authority or to data subjects to the extent a reporting or notification obligation applies under law.
11.4 The user is responsible for maintaining the confidentiality of their account login details, choosing a strong password, refraining from providing a password or verification code to another person, logging out of the account when using a shared device, and notifying the Company without delay in the event of suspected unauthorized use of their account.
12. Rights of Data Subjects
12.1 Every person is entitled, personally or through a lawfully authorized representative, to request to review the personal information held about them in the Company's database, in accordance with Section 13 of the Privacy Protection Law and subject to the conditions, exceptions, and procedures established by law.
12.2 A person who has reviewed the information and finds that the information about them is incorrect, incomplete, unclear, or outdated may request that the data controller correct or delete the information, in accordance with Section 14 of the Privacy Protection Law. The Company will examine the request and respond to it in accordance with applicable law.
12.3 Nothing in this Policy grants a general and unqualified right to delete all information at the user's request, where such a right is not established by law. A deletion request will be examined taking into account the purposes of data retention, the Company's legal obligations, third-party rights, and the need to retain information for transaction management, dispute handling, security, or legal defense purposes.
12.4 The user may withdraw their consent to receive marketing communications at any time. Withdrawal of consent will apply going forward and will not affect the lawfulness of processing carried out before the withdrawal or the continuation of processing required to fulfill the relationship, provide the Service, or comply with a legal obligation.
12.5 To exercise a right of access, correction, or another right, the Company may be contacted at goalgeine@gmail.com together with a full name, contact details, and a clear description of the request.
12.6 To handle a request and protect against disclosure of information to an unauthorized person, the Company may request reasonable details, documents, or verification means to confirm the identity of the requester and locate the relevant information.
12.7 The Company will handle requests in accordance with the timeframes, conditions, and exceptions established by law. To the extent the Company rejects a request, in whole or in part, it will act to provide a response in accordance with its applicable obligations.
12.8 To the extent laws or regulations grant a data subject additional rights with respect to particular information, including in relation to information transferred to Israel from the European Economic Area, the Company will act in accordance with the provisions applicable to it.
13. Information Relating to Minors
13.1 The Service is intended for users aged 18 and over and is not intended for minors. The Company does not knowingly seek to collect personal information from minors and does not permit a minor to independently purchase a subscription or open a user account.
13.2 If the Company becomes aware that personal information has been collected from a minor in violation of this Policy, it will act to clarify the circumstances of the collection, restrict its use, and delete the information, to the extent required and permitted by law.
13.3 A parent or guardian who believes that a minor has provided the Company with personal information may contact goalgeine@gmail.com together with details enabling the Company to locate the information and examine the request.
14. Third-Party Services and Links
14.1 The Site may include links, plugins, interfaces, or services operated by third parties. Use of these services may be subject to the terms and privacy policy of those parties.
14.2 The Company does not control the manner in which independent third parties process information outside the context in which they act as service providers on its behalf, and is not responsible for their privacy policy, content, or activity.
14.3 The user is asked to review the privacy policy and terms of use of any external service before providing personal information to it or using it. The mere inclusion of a link or interface on the Site does not constitute an approval, recommendation, or commitment by the Company regarding that service.
15. Data Protection Officer
15.1 To the extent the Company is required to appoint a data protection officer under the Privacy Protection Law, or to the extent the Company chooses to appoint one even in the absence of such an obligation, the officer's details and contact information will be published in this section or on a dedicated page of the Site. The mere inclusion of this section in the Policy does not represent that the Company is under an obligation to appoint a data protection officer or that one has in fact been appointed.
15.2 Data protection officer details: Name: Barak Edri, Role: CTO, Email: goalgeine@gmail.com, Phone: +972-52-7040239.
16. Changes to This Privacy Policy
16.1 The Company may update this Privacy Policy from time to time, among other things due to a change in the Service, technology, the types of information collected, service providers, work procedures, or legal requirements.
16.2 The date of the last update to the Policy will appear at the top of the document. The current version published on the Site will be the binding version from the date it takes effect.
16.3 In the event of a material change to the manner in which information is processed or to users' rights, the Company will take reasonable measures to bring the change to users' attention, such as a notice on the Site, in the personal area, by email, or through the Service. Where a change to the Policy requires obtaining new consent under law, the Company will act to obtain it and will not rely solely on continued use of the Site.
17. Governing Law and Jurisdiction
17.1 This Privacy Policy and any matter relating to the collection and processing of information within the Site and the Service will be governed solely by the laws of the State of Israel, without derogating from the application of any other mandatory legal provision, to the extent applicable. Jurisdiction over any dispute relating to this Policy will lie solely with the competent court in the city of Tel Aviv.
17.2 The Company will handle inquiries within a reasonable time and in accordance with the timeframes established by law. The Company may request additional information to verify the identity of the requester, locate the relevant record, or understand the request.