Privacy Policy

OneGoal is operated by ClaritasVentures, LLC.

Last updated: October 23, 2026

Operator: ClaritasVentures, LLC ("OneGoal", "we", "us")

Contact: [email protected]

1. Who we are and what OneGoal is

OneGoal is a web application that helps independent professionals run their business: publishing availability, taking bookings, messaging, bookkeeping, and payments. Our users are sole proprietors and small businesses across a range of trades — sports and lesson coaches, wellness and bodywork practitioners, tutors and instructors, other appointment-based service businesses, and pet-care providers.

There are two kinds of accounts: the provider (the paid subscriber who runs the business) and their client (free). Depending on the trade, the person who receives the service is either the client themselves — an adult booking for themselves — or someone the client is responsible for, such as a child or an animal. Children never use OneGoal and never create accounts.

2. Information we collect

From coaches: name, business name, email, phone, time zone; lesson types, pricing, schedule, and roster; bookkeeping entries; messages sent through the app; and subscription billing details (processed by Stripe — see §5).

From clients (including parents/guardians): name, email, phone; bookings and history; messages; and payment details for appointments (processed by our payment partner — see §5). A client may be connected to more than one provider.

About the person or animal receiving the service: this depends on the trade.

  • When the client books for themselves — common for wellness, tutoring and other service businesses — there is no third party. The details are the client's own, described directly above.
  • When the client books for a child, the provider or parent supplies the child's first name only, associated with the parent and provider for scheduling. We do not collect a child's contact information, and children do not interact with the app directly.
  • When the client books for an animal, the details describe the animal, not a person.

From Partner Program participants (see §6): your referral code; a record of which coach referred you and which coaches you referred; commissions earned and paid; and — only if you earn commissions we must pay out — the tax and payout information described in §6.2, which includes a Social Security Number or other taxpayer identification number.

Automatically: basic technical data needed to run and secure the service (e.g., IP address, device/browser type, and log/error data), and, when you arrive through a referral link, the referral code contained in that link. We use a privacy service (Cloudflare) at the network layer.

If you allow notifications: where to send them. On the website that is a push subscription your browser gives us; in the OneGoal iPhone and Android apps it is a notification token for your device, together with an identifier for the app's installation on it. We use these only to deliver your notifications. Signing out removes them; if your device cannot reach us at that moment, they remain until the next sign-in on that device replaces them. If you turn notifications off instead, the app removes its token the next time you open it, and a website subscription is removed the next time a notification to it is refused.

If a coach connects an AI assistant (such as Claude or ChatGPT): a record of each request the assistant makes to OneGoal on the coach's behalf — what it asked to do, whether it worked, which rule stopped it or whether it was something OneGoal can't do, and when. A record of an action taken or refused includes a one-line description, such as which lesson was booked, that the coach can see in Settings; we erase that description after 30 days. We use the rest of the record, which is designed not to identify any family or child, to learn which actions coaches rely on and what they ask for that OneGoal can't do yet. If the coach agrees, the assistant can also pass along a short feature suggestion; we ask it to leave out names, and we delete suggestions after 180 days. What a coach types to the assistant itself is handled by that assistant's provider under its own terms; we receive only what the assistant sends to OneGoal: its requests, and a feature suggestion if the coach agrees to pass one along.

At the moment you enter a card: our payment processor's fraud-screening agent runs on the payment page and collects device and browser characteristics, network identifiers including your IP address, browser cookies and storage, and a persistent browser identifier. It is used to prevent fraud, block automated abuse, and stop duplicate charges. It is not used for advertising, profiling, or any decision about you other than whether a payment attempt looks legitimate. See §5 and §7.

Website analytics. On getonegoal.com, and on the app's coach sign-up page, we use PostHog to understand how visitors use the site:

  • which pages and sections they view;
  • which buttons they click;
  • how far they scroll;
  • how quickly pages load, and any errors.

PostHog stores a random visitor identifier in a first-party cookie and in browser storage. That lets us see when the same visitor moves from our website to coach sign-up. PostHog also receives your IP address and basic browser and device information. When a coach creates an account, we link that identifier to the coach's internal account number, never to a name, email address or phone number.

We may record sessions on getonegoal.com to see how the page is used. Everything typed into a form is masked before it leaves your browser.

We do not use PostHog, or any other analytics, in the parent side of the app, in the OneGoal iPhone and Android apps, or on any screen that shows a roster, a child's name or a payment. We do not use this information for advertising. You can block these cookies in your browser and still use everything on the site.

We do not collect precise location, and we do not use advertising trackers.

3. How we use information

To provide and operate the service (scheduling, messaging, booking, bookkeeping); to process payments; to send transactional notifications (email, push, and text — see the text-messages section) you enable; to operate the Partner Program — attributing referrals, calculating and paying commissions, and meeting our tax-reporting obligations; to secure the service and prevent abuse; to provide support; and to comply with law. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

De-identified and aggregated data. We may create aggregated, anonymized, or de-identified information that does not identify any individual and may use such information for analytics, service improvement, benchmarking, research, security, and business operations.

4. Legal bases / your choices

Depending on where you live (for example, under California's CCPA/CPRA or a similar US state privacy law), you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these, contact [email protected]. Coaches and parents can also request deletion of their account and associated data; we honor deletion requests subject to records we must keep for legal, tax, or fraud-prevention reasons — including Partner Program payment and tax records, which we are required to retain (see the Retention section).

5. Payments and card/bank data

OneGoal uses PCI-compliant payment processors and does not store full card or bank-account numbers on our servers:

  • Coach subscriptions are processed by Stripe. Stripe handles and stores the coach's card data under its own privacy terms.
  • Parent lesson payments are processed by North/EPX, where the coach is the merchant of record for the lesson. Card/bank details are tokenized by the processor; we store only non-sensitive references (e.g., a token, last-4).
  • Partner Program payouts are sent through Stripe Connect. If you earn commissions, you set up a payout account with Stripe, which verifies your identity, collects your W-9 and bank details, sends your payouts and, where required, files your Form 1099-NEC. Stripe receives the amounts we pay you and the details it needs to pay you; it does not receive your referral activity. We do not use an affiliate platform. See §6. For the card and bank data they handle under their own terms, Stripe and North act as independent controllers; please review their privacy policies.

Fraud screening is different, and we want to be plain about it. The device and browser signals described in §2 are collected on our payment page, and we are the controller of that data — North acts as our processor, and North's fraud-detection provider acts as North's subprocessor. That means the responsibility for how those signals are used is ours, not theirs: questions, access requests, or complaints about that data should come to [email protected], and we will handle them rather than send you to a processor you never chose.

6. The Partner Program

6.1 What other coaches can see about you. If another coach referred you to OneGoal, we show that coach a list of the coaches they referred so they can track their commissions. About you, that list shows only your display name, the date you joined, and whether your account is currently active or inactive — nothing more specific about your billing.

We deliberately do not tell the coach who referred you whether a payment of yours has failed, whether you are in a trial, or whether you canceled. They see only whether your account currently counts toward their referral tier.

It does not show your email address, phone number, roster, lessons, messages, bookkeeping, revenue, or payment information, and the coach who referred you has no access to your account.

6.2 Tax and payout information. If you earn commissions, US tax law requires a completed IRS Form W-9 before we pay you. That form includes your legal name, address, and taxpayer identification number (SSN or EIN). Your W-9 and the bank or debit-card details needed to send your money are collected and held by Stripe, our payout provider, through the payout account you set up with them. OneGoal sees whether that account is ready to be paid and the amounts we send, not your full taxpayer identification number or account number.

  • We use this information only to pay you and to meet our tax-reporting obligations. We do not use it for any other purpose and we never sell it.
  • Commission payments are reported to the IRS on Form 1099-NEC where required (generally US participants paid $2,000 or more in a calendar year, the IRS threshold for payments made from 2026, which it may adjust for inflation from 2027), and to state tax authorities where required. Stripe files these forms on our behalf.
  • Your taxpayer identification number is held by Stripe, a provider built for that purpose, rather than by OneGoal.

6.3 Referral links. A referral link carries a code identifying the coach who shared it. When you arrive through one we store that code in your browser so we can credit the right coach if you sign up. If you sign up, we keep a permanent record of who referred you, because it determines commission.

7. Service providers (subprocessors)

We share data only with providers that help us run OneGoal, under contract and only as needed:

ProviderPurposeData
SupabaseDatabase, authentication, hosting of app dataAccount + app data (§2)
CloudflareHosting, CDN, serverless functions, securityTechnical/log data; app traffic
ResendTransactional email (confirmations, invites)Email address, message content
TwilioTransactional text messages (invites)Mobile number, message content
StripeCoach subscription payments; Partner Program payouts and tax forms (Stripe Connect)Coach billing data; for partners who earn commissions, payout amounts and the identity, bank and W-9 details Stripe collects to pay them
North/EPXParent→coach lesson paymentsTokenized payment data
FingerprintJS (via North)Fraud screening at card entry — preventing fraudulent payments, automated abuse, and duplicate charges. Loaded by North's checkout and running on our payment page. We are the controller; North is our processor and FingerprintJS is North's subprocessor.IP address, browser cookies and storage, device and browser characteristics, and a persistent browser identifier, for the person entering a card
Google (Firebase Cloud Messaging)Delivering notifications to the OneGoal iPhone and Android appsYour device's notification token and the identifiers Firebase uses to issue it, and each notification's title, text, the page it opens in the app, and a label used to group repeated notices
PostHog (US)Website and coach sign-up analytics (§2)Random visitor identifier, IP address, browser and device information, pages and sections viewed, clicks, page performance and errors; for coaches who sign up, their internal account number
Apple (Apple Push Notification service)Delivering notifications to iPhones, handed on by FirebaseYour device's notification token, and each notification's title, text, the page it opens in the app, and a label used to group repeated notices

Notifications in the OneGoal apps. When you allow notifications in the OneGoal iPhone or Android app, each notification's title and text pass through Google (and, on an iPhone, Apple) on their way to your phone. That text can include your provider's name or business name, the name of the person a booking is for, and the booking's date, time and place. A message notification says only that you have a new message: never what it says, or who wrote it. Notifications on the website are encrypted end to end, so the services that carry them cannot read them.

Partner Program attribution and commission tracking run entirely on our own systems; there is no affiliate platform. Payouts are sent through Stripe Connect, which receives the amounts we pay you and the details it needs to pay you, not your referral activity.

Data location: app data is stored in Supabase, US East (Ohio) — us-east-2; Cloudflare serves globally from edge locations.

International data transfers. Your information may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to these transfers, subject to applicable law.

Business transfers. If OneGoal is involved in a merger, acquisition, financing, asset sale, bankruptcy, or other corporate transaction, your information may be transferred as part of that transaction, subject to applicable law.

8. Text messages (SMS)

A coach may enter a parent/guardian's mobile number and confirm they have that person's permission to text them about lessons. We then send transactional messages only — principally a one-time link to set up the parent's OneGoal account. We do not send marketing or promotional texts.

Consent. Each coach confirms, for their own records, that they have a parent or guardian's permission to text them, and we will not text a number on a coach's behalf without that coach's confirmation. A parent can ask any coach to remove their number, or turn off texts from every coach in the app's settings.

Opting out. Reply STOP to any message to stop all texts from OneGoal; reply HELP for help. Opting out is permanent for that number unless you ask us to resume, and it does not affect email notifications or your use of the app.

Frequency and cost. Message frequency varies and is typically limited to account setup. Message and data rates may apply; carriers are not liable for delayed or undelivered messages.

We do not sell or share mobile numbers or SMS consent with third parties or affiliates for their marketing or promotional purposes. Numbers are shared only with our messaging provider (Twilio — listed under Service providers) for the sole purpose of delivering the messages described here.

9. Health and clinical information

Some OneGoal users are wellness or health-adjacent practitioners. OneGoal is scheduling, bookkeeping and payment software. It is not an electronic health record, not a medical records system, and it is not intended for clinical use.

We are not a HIPAA covered entity and we do not act as a business associate. We do not offer or enter into Business Associate Agreements.

Do not enter clinical, medical or health information into OneGoal. Notes fields are for scheduling and billing details only — the app labels them that way, and the underlying database column is documented to the same effect. If you are a provider whose records are regulated (for example under HIPAA or a state health-privacy law), you are responsible for keeping regulated information out of OneGoal and for meeting your obligations in whatever system you do use for it.

If you believe health information has been entered into your account, contact us at [email protected] and we will help you remove it.

10. Children's privacy

OneGoal is not directed to children and is intended for use by adults (providers and their clients). In many trades on OneGoal no child is involved at all. Where one is, we do not knowingly collect personal information directly from children under 13: the limited child information we hold (a first name) is provided by an adult — the parent/guardian or the provider — to arrange appointments, and by providing it that adult represents they are authorized to do so. If you believe a child provided us information directly, contact [email protected] and we will delete it.

11. Security

We protect data with encryption in transit, database row-level security that isolates each coach's and parent's data, server-side authorization for sensitive actions, and least-privilege handling of secrets. Partner Program tax information is restricted to the people and systems that need it to pay you and file required forms. No system is perfectly secure, but we work to protect your information and to notify you of incidents as required by law.

While we employ commercially reasonable administrative, technical, and physical safeguards, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and promptly notifying us of unauthorized access.

12. Retention

We keep personal information while your account is active and as needed to provide the service, then delete or de-identify it on account closure or valid request, except where we must retain records for legal, tax, accounting, or fraud-prevention purposes. Partner Program payment and tax records — including W-9 information and amounts paid — are retained for 7 years to meet IRS recordkeeping requirements, even after you close your account or leave the Program.

Different categories of information may be retained for different periods based upon operational, legal, tax, fraud prevention, and regulatory requirements. We may retain backups and archived records for a reasonable period following deletion requests.

AI assistant activity (§2): the one-line descriptions are erased 30 days after the action, and feature suggestions after 180 days. The rest of the record, which is designed not to identify anyone, is kept while the coach's account is active.

Fraud-screening signals (§2, §7) are short-lived by design. The transaction identifier is cached for around 30 minutes to catch duplicate submissions, and the browser identifier for a rolling window of about 5 minutes, with any temporary block lasting up to 30 minutes. A transaction identifier is kept in our processor's records for as long as payment records must be retained under PCI-DSS and financial recordkeeping rules, and the fraud-detection provider retains its own event history for roughly 30 to 90 days before purging it.

13. Changes

We may update this policy; we will post the new date above and, for material changes, provide additional notice. Continued use after an update means you accept the revised policy.

14. Contact

Questions or requests: [email protected], ClaritasVentures, LLC, 21750 Hardy Oak Blvd, Ste 104 #797624, San Antonio, TX 78258-4946.