1. Who we are
DROP is a fitness and wellbeing app operated by Scrolling Stock (“DROP”, “we”, “us” or “our”). For privacy questions, contact drop@scrollingstock.com.
This policy applies to the DROP iOS and Android apps, this website, support communications and related services.
2. Information we collect
Account and profile information
- Account identifiers provided when you choose to sign in: Google Sign-In on Android or Sign in with Apple on iOS. Depending on the provider and the choices you make, this may include your name, email address (including an Apple private relay address), profile photo and a unique account ID.
- Your chosen DROP display name, profile photo, friend code and profile settings.
- Authentication and cloud-sync status.
Workout, progress and wellbeing information
- Completed, missed, abandoned and practice DROPS.
- Workout type, rarity, date and time, duration and completion status.
- Points, effort bonuses, daily goals, streaks, Streak Shields, Perfect Days, missions, badges and leaderboard progress.
- Estimated calories and the factors used to create those estimates.
- Derived motion and effort information, such as motion score, active time, inactive time and confidence level. DROP does not need to retain a continuous raw sensor recording to provide these features.
Optional health-platform information
DROP can connect to Health Connect on Android and Apple Health on iOS. These integrations are optional and operate only after you choose to connect them and grant the relevant system permissions.
On Android, DROP may request permission to read:
- Steps.
- Active calories burned.
If you separately enable calorie saving, DROP may write estimated active calories from completed DROPS to Health Connect.
On iOS, DROP may request permission to read from Apple Health:
- Steps.
- Active energy burned.
- Basal energy burned.
DROP may combine permitted active and basal energy data to derive a total calorie figure for the relevant period. If you separately enable calorie saving, DROP may write estimated active energy from completed DROPS to Apple Health.
Health-platform access is not required to use DROP's core workout, points, streak and social features.
Friends and challenge information
- Friend requests, accepted friends and friend codes.
- Challenge requests, challenge type, progress, result, reward and timestamps.
- Stats shared with friends, such as display name, profile image, points, completed DROPS, streak, level and featured badge.
- Blocked-user records and reports submitted about another user, including the selected reason, any additional details, the involved account identifiers, the profile content being reported, report-counting signals and moderation status.
Notifications, device and support information
- Notification permission and delivery information, active hours, quiet days, Rest Mode, claim window and push-notification token.
- Basic technical information needed to operate, secure and troubleshoot the service, such as app version, device platform, error details and server logs.
- Information you send when contacting support or reporting another user.
3. How and why we use information
| Purpose | Information used | UK legal basis |
|---|---|---|
| Provide and restore your account | Account, profile, settings and progress | Performance of our service agreement with you |
| Run workouts, scoring and progress features | Workout history, goals, points, effort and estimated calories | Performance of our service and our legitimate interests in operating DROP |
| Use optional health-platform features | Permitted Health Connect or Apple Health records and calorie-saving choices | Your consent; where information qualifies as health or special-category data, your explicit consent |
| Send DROP and social notifications | Push token, notification preferences and relevant activity | Your permission and our legitimate interests in delivering requested alerts |
| Provide friend and challenge features | Profile, friend code, shared stats, requests and challenge activity | Performance of our service and our legitimate interests in providing social features |
| Protect the app, review user reports and prevent abuse | Account identifiers, profile information, reports, blocked-user records, interaction history, account age, moderation outcomes, completion data, derived effort metrics and technical logs | Our legitimate interests in user safety, security, fairness, moderation and fraud prevention |
| Meet legal obligations and handle disputes | Relevant account, support and technical records | Legal obligation and legitimate interests |
To reduce abusive or coordinated reporting, DROP may assess whether reports come from separate authenticated accounts, whether the accounts had a genuine social interaction, the age and moderation status of the reporting account, and whether multiple reports concern the same version of profile content. After repeated credible reports, DROP may automatically replace a reported profile photo with a standard DROP avatar, reset a reported display name, or temporarily restrict new friend and challenge requests. Repeated separate automatic moderation actions may suspend social features pending review. DROP does not permanently delete an account solely because a report threshold is reached.
You can withdraw optional permissions through DROP and your device settings. On Android, Health Connect permissions can also be reviewed or revoked in Health Connect. On iOS, Apple Health permissions can be reviewed or revoked in the Health app, and notification permission can be managed in iOS Settings. Withdrawal does not affect processing that took place before permission was withdrawn.
4. Health platforms
DROP remains usable when you do not connect a health platform, although health-based activity summaries and cross-app calorie features may be more limited.
On Android, DROP uses Health Connect only for user-facing fitness features: reviewing permitted steps and active-calorie information around a workout, supporting effort calculations and optionally saving estimated active calories from completed DROPS.
On iOS, DROP uses Apple Health only for user-facing fitness features: reviewing permitted steps and energy information, supporting activity summaries and workout effort signals, and optionally saving estimated active energy from completed DROPS. Where permitted, active and basal energy may be combined to derive a total calorie figure for the relevant period.
Where a health platform is enabled, a limited summary of relevant records — such as steps and active-calorie or active-energy information for the workout period — may be included with a completed DROP record and synced to our cloud service. On iOS, the summary may also include a total calorie figure derived from permitted active and basal energy data. This supports scoring, progress restoration and anti-abuse checks.
We do not sell Health Connect or Apple Health data, use it for advertising or cross-app tracking, determine creditworthiness, or share it with data brokers. We request only the health data types needed for the features described above.
You can review or revoke DROP’s Health Connect permissions in Android Health Connect settings. Records that DROP writes to Health Connect are managed through Health Connect and may need to be deleted there separately.
On iOS, you can review or revoke DROP’s Apple Health permissions in the Health app. Records that DROP writes to Apple Health are managed through Apple Health and may need to be deleted there separately.
5. When information is shared
We may share information with:
- Google Firebase, which provides authentication, cloud storage, server functions and database services.
- Google Sign-In, when you choose to connect or restore a DROP account on Android.
- Sign in with Apple, when you choose to connect or restore a DROP account on iOS. Apple may provide a private relay email address if you choose Hide My Email.
- Expo notification services, Apple Push Notification service and Firebase Cloud Messaging, to deliver permitted workout and social notifications.
- Android Health Connect, when you grant access or ask DROP to save estimated calories on Android.
- Apple Health, when you grant access or ask DROP to save estimated active energy on iOS.
- Other DROP users, when you use friends, leaderboards and challenges. Only the profile and progress information needed for those features is shown.
- Our email hosting or delivery provider, when a user-safety report is submitted and an alert is sent privately to DROP support for review.
- Professional advisers, authorities or courts, where reasonably necessary to comply with law, protect users or defend legal rights.
- A buyer or successor, if DROP or its operating business is reorganised, sold or transferred, subject to appropriate safeguards.
We do not sell personal information. DROP does not currently contain third-party advertising and does not use personal information for cross-app tracking or targeted advertising.
6. International data transfers
Some service providers may process information outside the United Kingdom. Where required, we use recognised safeguards for international transfers, such as adequacy regulations or approved contractual protections.
7. How long we keep information
- Local app data remains on your device until you reset it, delete your DROP profile, clear app storage or uninstall the app.
- Cloud account and progress data is generally kept while your account remains active and is needed to provide the service.
- Support correspondence, user reports, reported profile-content references, moderation votes and outcomes, and limited security records may be retained for a reasonable period to investigate and appeal decisions, protect users, prevent abuse and meet legal obligations.
- Backups may retain deleted information for a limited period before secure overwrite.
We review retention as the service develops and aim not to keep identifiable information longer than necessary.
8. Security
We use access controls, authenticated services and encrypted network connections to protect information. No online service can guarantee absolute security, so you should also protect access to your Google or Apple account and device.
9. Your privacy rights
Depending on where you live, you may have rights to:
- Access personal information we hold about you.
- Correct inaccurate or incomplete information.
- Ask us to delete information.
- Restrict or object to certain processing.
- Receive certain information in a portable format.
- Withdraw consent for optional processing.
To exercise a right, email drop@scrollingstock.com. We may need to verify that the request relates to your account.
10. Account and data deletion
You can delete your DROP profile from inside the app through Settings. You can also submit a request without the app using our public account-deletion page.
Deleting a DROP profile does not delete your Google account or Apple Account. It may also not remove calorie or energy records already written to Health Connect or Apple Health; those records can be managed directly in the relevant health platform.
11. Age requirement
DROP is intended only for users aged 18 or over. You must be at least 18 years old to create a DROP account or use the app.
We do not knowingly allow anyone under 18 to create or use a DROP account. If we learn that an account belongs to someone under 18, we may close the account and delete the associated personal information, subject to any information we are legally required to retain.
12. Changes to this policy
We may update this policy as DROP changes or legal requirements develop. We will update the date at the top and provide additional notice where a change materially affects how information is used.
13. Contact and complaints
Email: drop@scrollingstock.com
If you are in the UK and remain unhappy with how a privacy concern is handled, you may complain to the Information Commissioner’s Office.