1. Who we are
DROP is a fitness and wellbeing app operated by Scrolling Stock (“DROP”, “we”, “us” or “our”). For privacy questions, contact drop@scrollingstock.com.
This policy applies to the DROP iOS and Android apps, this website, support communications and related services.
2. Information we collect
Account and profile information
- Account identifiers provided when you choose to sign in: Google Sign-In on Android or Sign in with Apple on iOS. Depending on the provider and the choices you make, this may include your name, email address (including an Apple private relay address), profile photo and a unique account ID.
- Your chosen DROP display name, profile photo, friend code and profile settings.
- Authentication and cloud-sync status.
Workout, progress and wellbeing information
- Completed, missed, abandoned and practice DROPS.
- Workout type, rarity, date and time, duration and completion status.
- Points, effort bonuses, daily goals, streaks, Streak Shields, Perfect Days, missions, badges and leaderboard progress.
- Estimated calories and the factors used to create those estimates.
- Derived motion and effort information, such as motion score, active time, inactive time and confidence level. DROP does not need to retain a continuous raw sensor recording to provide these features.
Optional Android Health Connect information
On Android, when you choose to connect Health Connect, DROP may request permission to read:
- Steps.
- Active calories burned.
- Total calories burned.
If you separately enable calorie saving, DROP may write estimated active calories from completed DROPS to Health Connect.
The current iOS version does not request access to Apple Health or HealthKit. It still records fitness activity created within DROP, such as completed workouts, effort, points, streaks and estimated calories, and this information may be synced to your DROP account.
Friends and challenge information
- Friend requests, accepted friends and friend codes.
- Challenge requests, challenge type, progress, result, reward and timestamps.
- Stats shared with friends, such as display name, profile image, points, completed DROPS, streak, level and featured badge.
- Blocked-user records and reports submitted about another user, including the selected reason, any additional details, the involved account identifiers, the profile content being reported, report-counting signals and moderation status.
Notifications, device and support information
- Notification permission and delivery information, active hours, quiet days, Rest Mode, claim window and push-notification token.
- Basic technical information needed to operate, secure and troubleshoot the service, such as app version, device platform, error details and server logs.
- Information you send when contacting support or reporting another user.
3. How and why we use information
| Purpose | Information used | UK legal basis |
|---|---|---|
| Provide and restore your account | Account, profile, settings and progress | Performance of our service agreement with you |
| Run workouts, scoring and progress features | Workout history, goals, points, effort and estimated calories | Performance of our service and our legitimate interests in operating DROP |
| Use optional Android Health Connect features | Permitted Health Connect records and calorie-writing choices | Your consent; where information qualifies as health or special-category data, your explicit consent |
| Send DROP and social notifications | Push token, notification preferences and relevant activity | Your permission and our legitimate interests in delivering requested alerts |
| Provide friend and challenge features | Profile, friend code, shared stats, requests and challenge activity | Performance of our service and our legitimate interests in providing social features |
| Protect the app, review user reports and prevent abuse | Account identifiers, profile information, reports, blocked-user records, interaction history, account age, moderation outcomes, completion data, derived effort metrics and technical logs | Our legitimate interests in user safety, security, fairness, moderation and fraud prevention |
| Meet legal obligations and handle disputes | Relevant account, support and technical records | Legal obligation and legitimate interests |
To reduce abusive or coordinated reporting, DROP may assess whether reports come from separate authenticated accounts, whether the accounts had a genuine social interaction, the age and moderation status of the reporting account, and whether multiple reports concern the same version of profile content. After repeated credible reports, DROP may automatically replace a reported profile photo with a standard DROP avatar, reset a reported display name, or temporarily restrict new friend and challenge requests. Repeated separate automatic moderation actions may suspend social features pending review. DROP does not permanently delete an account solely because a report threshold is reached.
You can withdraw optional permissions through DROP and your device settings. On Android, Health Connect permissions can also be reviewed or revoked in Health Connect. On iOS, notification permission can be managed in iOS Settings. Withdrawal does not affect processing that took place before permission was withdrawn.
4. Health platforms
DROP remains usable when you do not connect Health Connect, although cross-app calorie features may be more limited. The current iOS version does not access Apple Health or HealthKit.
On Android, DROP uses Health Connect only for user-facing fitness features: reviewing relevant activity around a workout, supporting effort calculations and optionally saving estimated active calories from completed DROPS.
Where Android Health Connect is enabled, a limited summary of relevant records — such as steps and calorie totals for the workout period — may be included with a completed DROP record and synced to our cloud service. This supports scoring, progress restoration and anti-abuse checks.
We do not sell Health Connect data, use it for advertising or cross-app tracking, determine creditworthiness, or share it with data brokers. We request only the Health Connect data types needed for the features described above.
You can review or revoke DROP’s Health Connect permissions in Android Health Connect settings. Records that DROP writes to Health Connect are managed through Health Connect and may need to be deleted there separately.
Because the current iOS version does not access Apple Health or HealthKit, there are no Apple Health permissions or Apple Health records for DROP to manage at this time. If this changes, we will update this policy and request the relevant permission before accessing that data.
5. When information is shared
We may share information with:
- Google Firebase, which provides authentication, cloud storage, server functions and database services.
- Google Sign-In, when you choose to connect or restore a DROP account on Android.
- Sign in with Apple, when you choose to connect or restore a DROP account on iOS. Apple may provide a private relay email address if you choose Hide My Email.
- Expo notification services, Apple Push Notification service and Firebase Cloud Messaging, to deliver permitted workout and social notifications.
- Android Health Connect, when you grant access or ask DROP to save estimated calories on Android.
- Other DROP users, when you use friends, leaderboards and challenges. Only the profile and progress information needed for those features is shown.
- Our email hosting or delivery provider, when a user-safety report is submitted and an alert is sent privately to DROP support for review.
- Professional advisers, authorities or courts, where reasonably necessary to comply with law, protect users or defend legal rights.
- A buyer or successor, if DROP or its operating business is reorganised, sold or transferred, subject to appropriate safeguards.
We do not sell personal information. DROP does not currently contain third-party advertising and does not use personal information for cross-app tracking or targeted advertising.
6. International data transfers
Some service providers may process information outside the United Kingdom. Where required, we use recognised safeguards for international transfers, such as adequacy regulations or approved contractual protections.
7. How long we keep information
- Local app data remains on your device until you reset it, delete your DROP profile, clear app storage or uninstall the app.
- Cloud account and progress data is generally kept while your account remains active and is needed to provide the service.
- Support correspondence, user reports, reported profile-content references, moderation votes and outcomes, and limited security records may be retained for a reasonable period to investigate and appeal decisions, protect users, prevent abuse and meet legal obligations.
- Backups may retain deleted information for a limited period before secure overwrite.
We review retention as the service develops and aim not to keep identifiable information longer than necessary.
8. Security
We use access controls, authenticated services and encrypted network connections to protect information. No online service can guarantee absolute security, so you should also protect access to your Google or Apple account and device.
9. Your privacy rights
Depending on where you live, you may have rights to:
- Access personal information we hold about you.
- Correct inaccurate or incomplete information.
- Ask us to delete information.
- Restrict or object to certain processing.
- Receive certain information in a portable format.
- Withdraw consent for optional processing.
To exercise a right, email drop@scrollingstock.com. We may need to verify that the request relates to your account.
10. Account and data deletion
You can delete your DROP profile from inside the app through Settings. You can also submit a request without the app using our public account-deletion page.
Deleting a DROP profile does not delete your Google account or Apple Account. On Android, it may also not remove calorie records already written to Health Connect; those can be managed directly in Health Connect.
11. Age requirement
DROP is intended only for users aged 18 or over. You must be at least 18 years old to create a DROP account or use the app.
We do not knowingly allow anyone under 18 to create or use a DROP account. If we learn that an account belongs to someone under 18, we may close the account and delete the associated personal information, subject to any information we are legally required to retain.
12. Changes to this policy
We may update this policy as DROP changes or legal requirements develop. We will update the date at the top and provide additional notice where a change materially affects how information is used.
13. Contact and complaints
Email: drop@scrollingstock.com
If you are in the UK and remain unhappy with how a privacy concern is handled, you may complain to the Information Commissioner’s Office.