Privacy Policy

This policy explains what personal data Stretch Shuffle (“we”, “us”, “our”) collects, why we collect it, and the choices you have. We are the data controller for the information described here. If you have any questions, reach us at stretchshuffle@outlook.com.

Information we collect

Information you give us

• Account details — your email address and a securely hashed password when you create an account. If you sign in with Google, we receive your email address and basic profile information from Google.
• Content you create — stretches and videos you upload, playlist names, and any other content you add to your library.
• Preferences and activity — your shuffle configuration, favorites, exclusions, and streak history, so the app can personalise your routine.

Information collected automatically

• Technical data — IP address, browser and device type, and similar information gathered through cookies and analytics.
• Usage data — how you interact with the app, which helps us fix bugs and improve the experience.

Payment information

Subscriptions are processed by Stripe. Your card details are entered directly with Stripe and are never sent to or stored on our servers. We receive only the information needed to manage your subscription, such as its status and billing period.

How we use your information

• To provide, personalise, and maintain the app.
• To create and secure your account and process your subscription.
• To send you essential service emails, such as password resets.
• To monitor performance, diagnose errors, and prevent abuse.
• To understand how the app is used so we can improve it.

Legal bases for processing

Under UK data protection law we rely on the following legal bases:

• Contract — to run your account and provide the service you sign up for.
• Legitimate interests — to keep the app secure, prevent abuse, and improve it.
• Consent — for non-essential analytics and advertising cookies, which you can withdraw at any time.
• Legal obligation — where we must retain information to comply with the law.

Cookies and analytics

We use a small number of cookies and third-party tools:

• Essential cookies — keep you signed in and the app functioning. These cannot be turned off.
• Analytics — Vercel Analytics helps us understand aggregate usage.
• Error monitoring — Sentry records technical errors so we can fix them.
• Advertising — the Meta (Facebook) Pixel helps us measure and improve our marketing.

Who we share your data with

We do not sell your personal data. We share it only with service providers who help us operate the app, and only as needed to perform their service:

• Supabase — database, authentication, and file storage.
• Stripe — subscription payments.
• Resend — transactional email.
• Vercel — hosting and analytics.
• Sentry — error monitoring.
• Meta and Google — advertising measurement and sign-in.

We may also disclose information if required by law, or to protect the rights, safety, and property of our users or of Stretch Shuffle.

International transfers

Some of our providers process data outside the UK. Where that happens, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or equivalent contractual protections, to keep your data protected.

Data retention

We keep your personal data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to retain it to comply with legal obligations.

Your rights

Subject to UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent where we rely on it.

To exercise any of these rights, email stretchshuffle@outlook.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for significant changes we will provide a more prominent notice.