Legal
Privacy policy
Last updated: 10 November 2026. The plain-English companion to this policy lives at Privacy & data handling.
1. Who we are. Groovy Inc Ltd ("Groovy", "we") is a company registered in England & Wales with its place of business in London, United Kingdom. We are the data controller for personal data described in this policy. Contact: privacy@groovyinc.app. This website and the Groovy mobile app are currently published in demo phase; the company registration number will be added to this policy once the entity's public details are finalised.
2. What we collect. From the app: your routines, habits, session logs, check-ins and reviews are stored on your device and are not transmitted to us unless you enable the optional account. Optional account: an email address, a password stored only as a hash, and a user identifier, held with our EU infrastructure provider. Optional backup: an end-to-end encrypted copy of your records — encrypted on your device with a key derived from your account that we do not hold — stored with the same provider. Contact form and support email: the name, email address, topic and message you send us, kept to handle your enquiry.
3. What we do not collect. We run no advertising SDKs, third-party analytics, attribution trackers or session recording, and we do not sell or broker personal data. The app does not request health, location, contacts, microphone or camera permissions.
4. Why we process data (lawful bases). Performance of our contract with you: providing the app and the optional account/backup service. Legitimate interests: securing the service, preventing abuse, and handling enquiries you send us. Consent: any optional communication you explicitly opt into, withdrawable at any time.
5. Retention. Account records are kept while your account is active. On deletion, server-side copies (account row and encrypted backups) are removed within thirty days across redundant storage. Contact enquiries are kept for up to twenty-four months, then deleted. On-device records are yours and remain until you uninstall.
6. Sharing. We share personal data only with the infrastructure providers needed to run the optional account and backup service, under contracts that restrict processing to our instructions. We are not aware of any other disclosure; we do not transfer personal data to advertisers or data brokers, and we do not make ad-hoc overseas transfers of it.
7. Your rights. Under the UK GDPR and the Data Protection Act 2018 you have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where processing is based on it. The in-app export (Settings → Export) serves access and portability directly. To exercise any right, write to privacy@groovyinc.app; we respond within one month.
8. Complaints. You may complain to the Information Commissioner's Office (ico.org.uk) at any time — we'd appreciate hearing from us first so we can try to fix it, but this is your right regardless.
9. Children. The app is rated for teens and up. We do not knowingly create accounts for children under 13; if you believe a child has created one, write to us and it will be deleted within the thirty-day window described above.
10. Changes. Material changes to this policy are announced in-app at least fourteen days before taking effect and dated at the top of this page.