Service operator
Goat Journey Lab is a recipe, menu and training service provided under the Goat Journey company and brand, managed by Wael Irzeqat in Ramallah, Palestine. Privacy enquiries: goatjourney.ps@gmail.com.
Information we process
Account information includes your email, account identifier, verification and access status, permissions and subscription periods. Our authentication provider manages passwords; the application administrator is not shown your password.
When you contact support, we store the ticket title, details, optional screenshot, status and administrator reply. Access is limited to your account and the service administrator. We also store manual payment amounts, dates and notes. If you upload a transfer receipt, we store its image and the associated request and price snapshot, accessible only to your account and the service administrator for payment review. We do not request bank card details; omit unrelated financial information from receipts.
Workspace information includes recipes, ingredients, quantities, costs, prices, categories, menus, images, imported files and branding. Training information includes trainee names, progress, attempts, notes, drink photos and supervisor evaluations.
Customer menu feedback stores the rating, optional name and comment, and submission time privately for the café owner. A keyed identifier derived from the network address limits repeat submissions; the raw address is not shown to the owner. Owners can delete reviews.
Enabled assistant features process chat messages and the recipe or workspace context sent to the assistant. Technical information includes provider operational and security logs. Application error reports contain fixed error codes and general routes, without recipe or conversation text.
How we use information
To authenticate accounts, save your work, manage access and subscriptions, import files, operate the assistant, digital menus and training, provide support, prevent abuse and investigate faults. We do not sell your personal information.
Who can access it
Workspace roles determine member access. Café supervisors can review the trainees and results associated with their training. The service administrator has administrative access to accounts, permissions, archives and information needed for operations and support.
Publishing a digital menu makes the selected content available to anyone with its link or QR, including images, prices, ingredients, calories and allergens if you enable them. Training links grant access to their assigned content. Revocation stops subsequent access but cannot retrieve copies saved outside the service.
Service providers and AI
We use global service providers for authentication, databases, file storage, application hosting and delivery, and account emails. Depending on their infrastructure and configuration, they may process information outside Palestine. Contact us to request information about the providers processing your data.
AI features send the request and necessary context to the OpenAI API. Under OpenAI’s policy, API data is not used for model training by default, and security or abuse-monitoring logs may be retained. Not storing responses with the AI provider does not remove chat history saved by this application. Do not submit passwords, secret keys or unnecessary personal information in messages or files.
Sessions and device storage
Session cookies and local storage support persistent sign-in, language preferences, recovery drafts, feature state and app installation. Drafts may remain after closing a window. Sign out and remove site data when appropriate on shared devices; removing it can erase local drafts and your session.
Camera permission is requested when you use it for training evidence. The photo you select or capture is uploaded when submitted. Browsing a menu does not require camera access.
Retention, deletion and archives
Workspace data and conversations remain while saved in the service unless removed or otherwise agreed. Account deletion through the administrator currently blocks account access and retains a separate administrative snapshot of its data and files. It does not erase all data immediately. Ask for archive erasure as well if that is your intention.
Encrypted backups and information needed for security, obligations or disputes may remain after deletion. Archives and backups currently have no uniform automatic erasure deadline. Application error logs use a 30-day window; older entries are cleaned when new reports are accepted. Subscription expiry is not a deletion request.
Your requests
Contact the address above to request access, correction, a copy, account closure or erasure of account data and archives. We may verify account ownership and will explain the scope, any necessary retention and its reason. Do not send passwords or secret keys. In-app export permissions depend on your plan; you may still make a privacy request when exports are disabled.
Workspace owners must inform their team and trainees about data use and obtain necessary permissions for uploaded images and content. This is a professional service, not a service intended for children.
Security and updates
We use account checks, permissions, workspace separation and access controls, but cannot guarantee elimination of every risk. Contact us about suspected unauthorized access. Updates will be reflected in the policy and its date here; a new data use requiring additional action will be addressed before activation.