Privacy Policy – BigGoal

Last updated: April 22, 2026

1. Data Controller

The data controller is Angelo Marzocchi, reachable for any privacy-related request at: ososososato@gmail.com.

2. Personal Data Collected

BigGoal collects the following categories of personal data:

• Google account data – name, email address and unique Google user identifier, provided through the Google Sign-In authentication service. These data are used exclusively to identify the user's account within the app.
• User-generated content – goals, sub-goals (milestones), tasks, notes and any other organizational content created directly by the user inside the app.

The app does not collect location data, biometric data, financial information, device contacts, or sensitive information of any kind.

3. Purposes and Legal Basis of Processing

Personal data are processed for the following purposes:

• Authentication – allowing the user to sign in to the app with their Google account.
• Service operation – saving, synchronising, and displaying user-generated content across all devices linked to the same account.
• Security and abuse prevention – maintaining the integrity and availability of the service.

The legal basis for processing is the performance of the contract/service requested by the user (Art. 6(1)(b) GDPR).

4. Data Retention

Data are retained for as long as necessary to provide the service, or until the user requests deletion of their account and associated content. In the absence of an explicit deletion request, data are kept while the account remains active.

5. Data Transfers and Sharing

Data are stored and managed through Google Firebase cloud services (Firebase Authentication and Cloud Firestore), acting as a data processor under the Google Cloud / Firebase Terms of Service.

User data are never sold, shared, or disclosed to third parties for marketing or profiling purposes.

6. Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration or disclosure, including encrypted transmission (HTTPS/TLS) and Firebase's built-in authentication controls.

7. User Rights

Users have the right to:

• access their personal data;
• request rectification of inaccurate data;
• request erasure of their data (right to be forgotten);
• object to or restrict processing in certain circumstances;
• request data portability;
• lodge a complaint with the competent supervisory authority (e.g. Garante Privacy in Italy, or the relevant authority in your country of residence).

To exercise these rights, write to: ososososato@gmail.com.

8. Children

The app is intended for users aged 13 or older. If you become aware that a child under 13 has provided personal data through the app, please contact us so we can promptly remove it.

9. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be reflected in the "Last updated" date at the top of this page. Continued use of the app after changes are published constitutes acceptance of the revised policy.

10. Contact

For any questions or requests regarding this Privacy Policy: ososososato@gmail.com