Privacy policy
This policy explains how GoalGlim handles your personal data. Please read it alongside our terms of service.
The short version
- We collect what your roadmap needs, plus the basics to run your account.
- We never sell your data, and we never share it for advertising.
- Health answers are used only with your consent, and answers about criminal records never leave your device.
Who we are
This service is operated by GoalGlim FZE-LLC, a company registered in the United Arab Emirates ("GoalGlim", "we", "us"). GoalGlim is the controller responsible for the personal data described in this policy.
If you have any question about this policy or your data, contact us at info@goalglim.ai.
What this policy covers
This policy explains how we handle personal data when you join our waitlist, create an account and use GoalGlim, or visit our website.
GoalGlim helps nurses understand the steps involved in moving their career to another country. It builds roadmaps from published official sources and shows where each fact comes from. It is not a migration agency, and it does not give legal, immigration, medical, or financial advice. Our terms of service explain the limits of the service.
The personal data we collect
We collect personal data directly from you, and a small amount of technical data automatically when you use the site.
When you join the waitlist: your email address and the language you are using the site in. If you ask to be told when a route is ready, we also keep that route: the destination, and the country you trained in or your passport country.
When you sign in: your email address, verified through a one-time code sent to that address. We do not use passwords.
When you answer the setup questions: your first and last name, your years as a nurse, where you are in nursing now (licensed, working abroad, or studying), your nursing title and the country that registered you or where you work or study, your nationalities, your country of residence, your qualification (type, status, dates, institution and city) and the destination you are looking at.
When you answer the questions a route asks: further answers such as your birth country and year of birth, where you have lived and when, registrations and licenses, test results and scores, exams passed, practice hours and program length. Health answers are covered in the next section.
When you use the app: your goals for ranking routes, the currency you choose, the steps you mark as started or done, the destinations you follow, the roadmaps you save or share, your email preferences, and the updates we show you.
When you send a report or feedback: what you report about a step (for example a wait, a fee, an extra document, or a note) or the feedback message you write, the page you sent it from, and your language. Feedback is linked to your account only if you ask us to reply.
When you ask about your roadmap: your question, while we answer it. We keep only its category, not its text.
Automatically, to run the site and keep it secure: a shortened, irreversibly hashed form of your IP address, your device and browser type, a random identifier for your browser, and analytics about how the site is used. We do not store your raw IP address.
Health answers and criminal records
Some destinations ask about health or fitness to practise. GoalGlim asks these questions only after you turn on "Use my health answers". We record that consent, its purpose and the date. Your health answers are used only to check the health requirements of the routes you look at. They are not shown back to you as answers, not sent to AI models, not used for analytics, and not shared with anyone. Where the EU or UK GDPR applies, our legal basis is your explicit consent.
You can withdraw this consent at any time in You, under Consents. When you do, we delete your health answers.
Questions about criminal records are answered on your device only. Your answers stay in your browser for the tab you are using, are cleared when you close it, and are never sent to us.
How and why we use your data
Where the EU or UK GDPR applies to you, we rely on the legal bases named below. Where UAE law applies, these activities are carried out on the lawful grounds allowed under the UAE Personal Data Protection Law.
- Managing the waitlist and telling you when places open or a route is ready. Purpose: to contact you about what you asked for. Legal basis: your consent.
- Verifying your email and signing you in. Purpose: to give you access to your account. Legal basis: performance of a contract.
- Building your roadmap and matching it to your answers. Purpose: to provide the core service you asked for. Legal basis: performance of a contract.
- Using your health answers. Purpose: to check health requirements. Legal basis: your explicit consent.
- Saving and sharing roadmaps, following destinations and showing updates. Purpose: to provide the features you use. Legal basis: performance of a contract.
- Sending alert and digest emails about the destinations you follow. Purpose: to tell you when something that affects you changes. Legal basis: your consent.
- Combining reports from nurses. Purpose: to show other nurses what nurses report about a step, only as totals from at least five nurses. Legal basis: our legitimate interest in giving nurses useful, grounded information.
- Counting which routes are asked for, without your name, email or account. Purpose: to decide which routes to build next. Legal basis: our legitimate interest in improving coverage.
- Preventing abuse and limiting request rates. Purpose: to keep the service secure and available. Legal basis: our legitimate interest in security.
- Monitoring and fixing errors. Purpose: to keep the service working. Legal basis: our legitimate interest in reliability.
- Understanding how the product is used and improving it. Purpose: to improve GoalGlim. Legal basis: our legitimate interest in understanding and improving the product.
- Replying to feedback you send. Purpose: to answer you, only when you ask us to reply. Legal basis: your consent.
You can withdraw any consent at any time. Withdrawing consent does not affect processing we already carried out.
Analytics and session recording
We use PostHog, hosted in the European Union, and Vercel Web Analytics and Speed Insights to understand how the product is used and how fast it loads, and Sentry to detect and diagnose errors. PostHog and Sentry may record interaction sessions to help us reproduce problems. In these recordings, all text and form inputs are masked, so the content you type is not captured. Analytics events are linked to a random account identifier or to a hashed IP address, never to your email address, and may include your nursing role, license status and language. We do not sell your data, and we do not use it for third-party advertising.
How we use AI
GoalGlim builds each roadmap from published official sources, and every fact shows where it comes from. AI models, reached through Vercel AI Gateway (currently models from Anthropic, OpenAI and Google, with web search through Perplexity), help us read and check official pages, translate, and write short summaries of what the sources say. These uses work on public information, not on your personal data.
When you use "Ask about your roadmap", we send the model your question and the parts of your roadmap it needs to answer: which requirements you meet or do not yet meet, your route, and the countries of your nationality, residence or license that a rule depends on. We do not send your name, your email address, the answers you gave, or your health answers. We do not keep your question after answering it.
"From nurses" notes are written by AI from totals of what at least five nurses reported and from public posts. Your individual report and any note you write are never shown to other people.
Your roadmap is information assembled from public sources. It is not an automated decision that produces legal or similarly significant effects about you: the authorities make those decisions.
International data transfers
We are based in the UAE, and some of our service providers are in the European Union and the United States. This means your personal data may be transferred outside your country, including to the United States. Where we transfer data internationally, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider’s certification under a recognized transfer framework, together with the safeguards allowed under UAE law. You can ask us for more detail about the safeguards that apply by contacting info@goalglim.ai.
How long we keep your data
We keep personal data only as long as we need it for the purposes described above.
- Waitlist email: until you ask us to remove it, or until 24 months after you joined the waitlist, whichever comes first.
- Account data, your answers, saved and shared roadmaps, progress, follows, updates and reports: while your account is active, and deleted within 30 days after you close your account or ask us to delete it.
- Health answers: until you withdraw your consent or close your account.
- Feedback: 24 months after you send it, then deleted automatically.
- Counts of the routes people ask for, without your name, email or account: kept to plan which routes to build.
- Analytics data: retained by our analytics provider for up to 12 months, then aggregated or deleted.
- Error logs: up to 90 days.
- The short-lived copy of your roadmap: up to two hours.
- Rate-limiting and abuse-prevention counters: from about one minute up to one day.
Your rights
Depending on where you live, you have some or all of these rights over your personal data: access, correction, deletion, restriction of processing, portability, objection to processing, and rights relating to automated decision-making. Where we rely on consent, you can withdraw it at any time: health answers and emails in You, under Consents, and every email has an unsubscribe link.
You can correct your answers in You at any time. To get a copy of your data, close your account, or exercise any other right, contact us at info@goalglim.ai. We will respond within one month. There is no charge, unless a request is clearly unfounded or excessive.
Complaints
If you believe we have handled your data improperly, we would like the chance to put it right, so please contact us first. You also have the right to complain to a data protection authority: in the UAE, the UAE Data Office; in the EU, your local data protection authority; and in the UK, the Information Commissioner’s Office.
How we protect your data
We use encryption in transit, hashed IP addresses so that we never store the raw address, masking of text and inputs in session recordings, scrubbing of personal data from error reports, a database rule that refuses health answers without your consent, and share links that cannot be guessed. No online service can be completely secure, but we take reasonable steps to protect your data.
Children
GoalGlim is intended for adults working in or training for the nursing profession. It is not directed to anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
Representatives
As a company established outside the EU and the UK that offers services to people in those regions, we may be required to appoint representatives there under Article 27 of the GDPR. If we appoint them, their contact details will be listed here.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top and, where appropriate, notify you. Where a change expands how we use data under your consent, we will ask for your consent again rather than rely on your continued use.
Languages
This policy is provided in English, Arabic, French and Spanish. If there is any difference between the versions, the English version applies, except where the law that applies to you requires the version in your language to prevail.
Contact us
GoalGlim FZE-LLC United Arab Emirates info@goalglim.ai
Questions about your data?
Email us and we will reply within one month. For the terms that govern the service, read the terms of service.