1. Scope
This Privacy Policy applies to the GoCare mobile application, its CareForce and CarePulse modules, and the go.care.mn website (the "Service"), developed and operated by GoCare Walk To Earn LLC ("we", "us").
We comply with Mongolia's Law on Personal Data Protection, the Law on Cyber Security and other applicable legislation. By using the Service you acknowledge that you have read this policy.
2. Information we collect
2.1. Information you provide
| Category | Examples |
|---|---|
| Account | Phone number, name, email address, password (stored hashed) |
| Profile | Gender, height, weight, step length, daily step goal, province/city, district, profile photo, language |
| Communications | Support requests and feedback you send us |
2.2. Information collected automatically
| Category | Examples |
|---|---|
| Steps and activity | Daily step count and the distance, kcal and active minutes derived from it. Read, with your permission, from Apple Health (iOS) or Health Connect / the phone's step counter (Android). |
| In-app activity | CARE earned and spent, coupons obtained and redeemed, challenge history, achievements, invite code |
| Location | GPS coordinates — only for the purposes in section 4 and with your permission |
| Device | Device model, OS version, app version, push notification token, device integrity check result (rooted/jailbroken) |
| Technical | Crash and error reports, usage statistics, IP address |
2.3. Health measurements
The CarePulse module lets you measure indicators such as heart rate and stress level by looking at your phone's camera for about a minute. Camera frames are processed only on your device; no photos or video are stored or sent to our servers. Only the numeric results are saved to your history.
Health data is a special category of personal data, so we collect it only with your explicit consent and never use it for advertising.
3. How we use your information
- Create your account and authenticate you
- Count your steps, award CareCoin (CARE) and maintain your wallet
- Issue coupons and let partners verify that a coupon is valid
- Run challenges, leaderboards and achievements
- Show your health stats (kcal, km, walking history)
- Prevent fraud such as fake steps or multiple accounts
- Send notifications (CARE received, new coupons, challenge results, etc.)
- Fix bugs, improve performance and produce aggregate statistics
- Comply with legal obligations
4. Device permissions
Some features need the permissions below. You can revoke them at any time in your phone settings; only the related feature will stop working.
| Permission | Purpose |
|---|---|
| Motion & Fitness / Physical activity | Count steps |
| Apple Health / Health Connect | Read and sync step data |
| Location | Suggest nearby challenges; verify attendance and visits for CareForce and CarePulse users. We do not continuously track regular users' location in the background. |
| Camera | Health measurement (2.3) |
| Photo library | Choose a profile photo |
| Face ID / fingerprint | Quick sign-in. Biometric data never leaves your device and we cannot access it. |
| Notifications | Send push notifications |
| Background activity, battery optimisation exemption | Count steps reliably in the background |
5. Organisation users (CareForce, CarePulse)
If your employer has an agreement with us and has enrolled you in CareForce or CarePulse, we additionally process:
- Check-in / check-out records with the location and time
- Visit plans, visited locations, meeting notes and reports
- Daily tasks and completion, sales and bonus reports
- Work contact details of customers you enter (for example, doctors)
Your employer has access to this information and is responsible for using it within the employment relationship. Location is captured only when you check in/out or log a visit. Detailed results of your health measurements are not shared with your employer on an individual basis without your consent.
6. Sharing
We do not sell or rent your personal data. We share the minimum necessary only in these cases:
- Partner businesses — the coupon code and its validity when you redeem a coupon. Your phone number and step data are not shared.
- Your employer — as described in section 5, for organisation users only.
- Challenge participants — your name, profile photo and step count appear on leaderboards.
- Service providers — third parties that provide hosting, notifications, analytics and similar services on our behalf (section 7).
- Legal requirements — when required by law, a court or a competent authority.
- Aggregate statistics — non-identifiable aggregated figures for public-health initiatives such as "Let's Walk Together".
7. Third-party services
| Service | Purpose |
|---|---|
| Google Firebase (Analytics, Crashlytics, Cloud Messaging, Firestore, Remote Config) | Usage statistics, crash reports, push notifications, configuration |
| Google AdMob | Rewarded videos. AdMob may use your device's advertising ID; you can turn off personalised ads in your phone settings. |
| Apple HealthKit, Google Health Connect | Read step data. Data from these sources is never used for advertising or sold to third parties. |
| Google Maps | Display maps |
| Health measurement SDK | On-device calculation of vitals from camera frames |
These services operate under their own privacy policies, and some data may be processed on servers outside Mongolia.
8. Retention
- Account and step data are kept while your account is active.
- Within 30 days of an account deletion request we delete your personal data or make it non-identifiable.
- Data that the law requires us to keep (for example, financial transactions) is kept for the legally required period.
- Work data of organisation users is kept for the term of the agreement with the employer.
9. Security
We protect your data with technical and organisational measures including HTTPS (TLS) encryption in transit, hashed passwords, restricted server access and regular security updates. No transmission over the internet is 100% secure, so please never share your password or PIN.
In the event of a data breach we will notify the relevant authorities and you as required by law.
10. Your rights
You have the right to:
- Access the data we hold about you and obtain a copy
- Correct inaccurate or incomplete data (most of it can be edited in the app's Profile section)
- Have your data deleted and your account closed
- Withdraw consent (in your phone settings or by contacting us)
- Opt out of marketing notifications
- Lodge a complaint with the National Human Rights Commission of Mongolia
Send requests to the contacts in section 13. We will verify your identity via your registered phone number and respond within the legal time limit.
11. Children
GoCare is not intended for children under 13. Users aged 13–18 should use it with the consent of a parent or guardian. If we learn that we have collected data from a child under 13, we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will update the "Last updated" date on this page and notify you in the app of significant changes.
13. Contact
GoCare Walk To Earn LLC
Room 701, 7th floor, Meru Tower, S. Jamyan Gun Street, 1st khoroo, Sukhbaatar district, Ulaanbaatar
Phone: 1900-2407
Email: [email protected]