English
First mobile release
The first 1Care mobile release focuses on general fitness, exercise activity, food history and water logging, and rewards. It does not collect medical history or pain information through its profile and assessment forms. Vital Scan, clinical FallRisk and MSK assessments, cognitive assessments, AI health chat, AI meal analysis, AI diet planning and InBody report extraction are unavailable in this mobile release. Ordinary browser services may offer these features under the descriptions below. This mobile scope does not erase existing information previously saved through another service or earlier use; account deletion and linked-service exceptions are described separately.
About this notice
GOFA is operated by GF Lab International Limited. This notice describes how GOFA processes information when you use 1Care, including its mobile app and web service. It applies to 1Care; a separately branded partner service may provide additional notices. For privacy questions, access or correction requests, contact support@gofa.co.
Account and wellness information
We process your name, email address, account identifier and sign-in information to create and protect your account. Profile information you provide can include birth date, gender, height, weight, activity and fitness levels, health conditions and goals. Features you use can save assessment results, body measurements, exercise activity, nutrition records and water intake, so you can view your history and receive relevant guidance.
Photos and camera features
Adding a profile photo is optional. Uploaded profile photos are stored in Google Cloud storage and referenced by a public image URL; anyone who has that URL may be able to access the image. Do not use a sensitive image as your profile photo.
Camera-based assessments use camera access to analyse your movements or estimate wellness measurements. Exercise lesson features can upload movement and pose records to Google Cloud storage. Body alignment assessments save derived findings with your assessment record. Vital Scan is unavailable in the first release of the 1Care mobile app. The browser service may offer Vital Scan using the FaceHeart SDK, which runs processing in the device and also connects to FaceHeart services for authentication. We do not promise that every camera feature or SDK network operation is entirely on-device. Optional InBody report extraction sends the photo you choose to an AI service to extract measurements. GOFA's extraction flow does not save the raw report photo as a report attachment; confirmed measurements can be saved. This does not establish the AI provider's log or backup retention.
Optional voice assessments
Voice-based cognitive assessment is unavailable in the first 1Care mobile release. The browser service may offer it. If you choose a voice-based cognitive assessment, we request microphone access and record your spoken answers after you agree to start the assessment and save recordings and results. You can decline this optional assessment or manage microphone permission in your device or browser settings.
Answer recordings are saved as WAV audio files in Google Cloud storage. Recordings are sent through Vercel AI Gateway to AI model providers, including Google Gemini, to recognise spoken answers and analyse assessment responses. Recognised answer information and analysis results are saved with the assessment in Firebase / Google Cloud for continuation, review and assessment history. Saved recordings are not limited to temporary processing during the test; provider logs and backups may have different retention arrangements. Avoid recording other people or information unrelated to the assessment.
Safety reports and blocked participants
We save your acceptance of content rules, blocked participant settings, and safety reports with your account. Reports contain a reason and references to the reported profile or saved AI response, rather than a separate copy of your chat or wellness history. Authorised reviewers can access the reported response or public profile to assess the report. Your submitted reports and block settings are included in sole-consumer account deletion. A report submitted by another person remains associated with their account; deletion of your account removes your public profile and saved responses, and does not preserve a copy of those contents in that report.
AI conversations and recommendations
AI health chat is unavailable in the first 1Care mobile release. The browser service may offer it.
Wellness chat stores conversation sessions, messages and responses in Supabase. When you use AI features, your messages and relevant account wellness information may be sent through Vercel AI Gateway to model providers, including OpenAI for wellness chat and Google Gemini for image extraction and nutrition features. The assistant can retrieve your wellness records to answer personalised questions. Avoid including information about other people or information you do not want processed by these services.
Service providers and access
GOFA uses Firebase / Google Cloud for account authentication, application records and file storage, Supabase for chat storage, Vercel for hosting and AI routing, and the AI and assessment providers described above. Signup uses Google reCAPTCHA for abuse prevention, which processes verification and browser signals. Resend processes your name and email address to deliver signup welcome emails. Providers process information as part of delivering these features. Hosting and processing may take place outside your country or region. Access by a partner organisation depends on your linked service and permissions; using 1Care does not automatically give every partner access to your account.
Device storage and security
The service uses authentication cookies and device storage to maintain sign-in, preferences and application operation. The first release of the 1Care mobile app does not start Google Analytics. The ordinary browser service can use Google Analytics for usage, device and cookie-derived regional analytics; this mobile setting does not disable authentication, reCAPTCHA or operational service processing. Requests and service errors may generate operational logs. Camera or photo access is used when you choose the corresponding feature; you can manage permissions in your device or browser settings. Restricting a permission can prevent that feature from working.
Your choices and account deletion
You can update available profile fields, remove your profile photo, stop using optional features, and request account deletion through the deletion page linked below. The deletion page explains the current removal scope and any exceptions. Account records and histories are stored to operate the service until removed through the applicable deletion process. We do not state a fixed retention period for all data: provider logs, backups and records managed by a linked organisation may have different handling. Contact support@gofa.co for questions about particular records or access and correction.
Updates
This notice is dated 8 October 2026. Changes to the service or its processing may require an updated notice. Review this page before using a newly introduced feature.