GolyxAI is operated by individual developer and data controller Kaan Arda Yaşar. Contact support.golyxai@gmail.com with questions or data requests.
This policy covers free use and, in versions and regions where offered, Pro subscriptions and optional rewarded ads. We do not create payment or ad transactions for features you do not use.
The 1.1.0 App Store subscription release does not display ads and does not include Google's advertising or consent SDKs. Distributions of version 1.2.0 and later with the advertising feature may offer optional rewarded ads. The advertising disclosures below apply to those distributions.
Where offered, you must choose to enable phone notifications through the optional invitation after an analysis experience or Profile and grant iOS notification permission. Permission is not required to use the app. If enabled, we send Apple's device token for this app, your language, notification preferences and favourite analysis identifiers needed for favourite results to our server. A private installation session authenticates the registration; when signed in with Apple, the registration is also associated with your current account. The token is encrypted on our server.
New live analyses, favourite results and achievement celebrations have separate preferences. Pre-match results do not generate phone notifications unless separately selected. Achievement celebrations start off; enabling this option permits verified live-prediction streaks and historical performance counts to appear on your lock screen. An earlier general notification permission does not enable new live analyses or achievement celebrations. Live-analysis and achievement alerts share a maximum of 3 in the preceding 24 hours; achievements have a further maximum of 1. Favourite results follow their separate preference.
Apple Push Notification service (APNs) uses the token and limited notification content to deliver messages to your device. Lock-screen messages contain no prediction selection, future probability, payment or account information; a notification identifier opens the relevant analysis or verified historical performance summary. Analysis content is fetched after opening the app and remains subject to your access rights. General notification permission does not cover promotional or marketing messages you have not separately selected.
Disabling the feature in Profile or deleting the relevant device/account data removes the server registration and unsent jobs. Signing out of Apple also removes the registration associated with that session. Removal cannot finish until a network request reaches our server; you can immediately stop notifications in iPhone Settings → Notifications → GolyxAI. A notification already submitted to Apple may not be retractable. Uninstalling the app does not immediately delete its server registration.
A registration is removed after 30 days without an authenticated app sync. Delivery jobs remain for at most 15 minutes, or 5 minutes for new live analyses. A mapping to the analysis or achievement evidence, containing no user or device information, remains for at most 24 hours. To enforce daily limits and avoid notifying the same match again, delivery times linked to one-way hashes of installation and device-token identifiers remain for at most 7 days; disabling and re-enabling notifications does not reset this limit. These hashes cannot by themselves be used to send notifications. Aggregate delivery/error counts without identifiers may be used to monitor operation; Apple's acceptance does not prove display on your device. Previously created server backups remain subject to the backup disclosure below.
Watching ads is optional and is not required to continue using the free service. When an ads-enabled version opens, Google's User Messaging Platform (UMP) may make a technical request to determine required privacy choices and whether an earlier choice remains current. This check can occur before you choose to watch an ad. Any required consent message appears when you select an ad; ads are not loaded unless the consent status allows a request. When required, revisit your choices through Profile → Ad privacy options. Unavailable or incomplete ads do not reduce your free or rewarded-card allowance.
We request nonpersonalized ads, disable publisher first-party identifiers and ad personalization, and do not request ATT permission to access Apple's advertising identifier. These settings do not eliminate data processing. Google's SDKs may process IP-derived approximate location, device or app identifiers, ad views and interactions, and crash, performance and other diagnostic information for consent management, ad delivery, measurement, security and SDK operation. See Google's SDK disclosures and Google's Privacy Policy.
This feature appears in Profile only in versions where it is available and is off by default. No product usage events are sent without your explicit choice. If enabled, limited events such as the first observed card opening, returning on later days, viewing Pro, choosing a plan, purchase or ad action outcomes, and returning to an analysis are sent to our own server to improve the app. Event content contains only the event type, an optional plan period and a general outcome; it contains no name, email, account or card identifier, local usage dates, payment details, advertising identifier or free text. Requests use the existing installation session for authentication; this identity is not added to daily measurement totals. Our server retains 30 days of event totals, and we use no third-party analytics SDK.
A return-visit event is attempted at most once per later UTC day when this device has a local record of an earlier analysis experience. The first analysis day and last attempted return-event day stay on the device and are not sent with the event. These aggregate counts do not identify unique users or establish user-level retention rates.
Turn off Profile → Optional usage measurement to stop sending new events. Consent, the first-observed-card marker and the return-event day marker are stored locally for this installation and reset when you delete this device's data. Previously aggregated counts cannot be separated into individual records. This choice is separate from ad privacy preferences and the transaction records needed to provide subscription and access services you request.
Render hosts our servers; Apple verifies accounts, processes subscriptions and delivers phone notifications you enable; Google manages ad consent and delivers and verifies the rewarded ads you choose. These providers may process data outside Türkiye, the EEA or the UK. We do not sell your information as marketing lists. API-Football supplies match data and does not receive your account or allowance information.
We do not access your camera, contacts, personal files or precise GPS location. We do not request your name or contact details unless you choose to share them when contacting support.
Private installation and session credentials use iOS Keychain, or this site's local storage in a browser. Our server stores credential hashes. Apple refresh credentials are encrypted. New access is not granted before its durable record is saved.
Favourites, preferences and opened-card records remain associated with an installation until deletion. Old daily counters are cleaned during subsequent usage; card-opening records remain separate to avoid charging again. Account records remain until account deletion. An encrypted Apple revocation job may remain until Apple's access revocation succeeds.
A reward request's 15-minute validity period is not a data deletion period. Installation-linked reward requests and card-access records remain until you delete this device's data. That action removes the installation and its reward requests; a minimal transaction digest and timestamp may remain to prevent replay. This minimal record contains neither the raw advertising transaction identifier nor your Apple account.
Minimal transaction-ownership hashes are retained while we offer the subscription service to prevent replay and resolve ownership disputes. Apple and Google apply their own retention policies. Deleted data may remain in previously created server backups that are still retained; contact support for data requests concerning backups. The 90-day detailed match archive does not define the retention period for personal usage records.
Profile → Delete this device's data removes that installation's favourites, notification preferences, access records and pending rewards. Local identifiers and preferences reset after server confirmation. This does not cancel your Apple subscription or delete your separate Pro account.
When signed in with Apple, Profile → Delete Pro account removes the account and its sessions and starts revocation of Apple's sign-in authorization. Account deletion does not automatically cancel your Apple subscription. Use Profile → Manage subscription or your Apple account settings to cancel. Uninstalling the app alone does not delete server data. Contact support if you need help.
Depending on applicable law, you can request access, correction, erasure, restriction, objection and portability, and withdraw consent. EEA and UK users can complain to their competent data protection authority. Under Article 11 of Türkiye's KVKK, you can request information about processing, its purpose and recipients, and ask for correction or erasure and notification of those actions to recipients.
Records necessary for the app and subscription service you request are processed to provide that service. Security and replay-prevention records protect access. Where consent is required for ads, your choice applies. Send requests to our support address; we respond within the applicable legal period.
The analysis image is created on your device. If you choose Save Image in Apple's share sheet, the system may request permission to add it to Photos. We do not read your photo library or upload it to our server, and this permission is not requested at app launch.
Sharing starts only when you choose it. The app you select receives an analysis image, match and prediction text, recording time, the result observed at that moment and a public analysis link. Account, payment and installation details are excluded. A recipient opens the analysis with their own access rights. Copies of a shared image may remain with recipients; our deletion tools cannot remove copies in external apps.
GolyxAI is for users aged 18 and over. We update this policy and its date when our service or processing changes.