Privacy Policy

Who We Are

Smoov is operated by an individual based in New South Wales, Australia. For privacy enquiries, contact contact@getsmoov.app.

What We Collect

Smoov is designed to keep your data on your device. Your timetable, subjects, and preferences are stored in your browser's localStorage and are never sent to our servers.

If you use SmoovSync, a nickname, room code, and your selected schedules are stored in Supabase to enable group coordination.

If you upgrade to Premium, your email address is collected for authentication and billing communications via Supabase, and Stripe handles your payment information. We collect this solely to provide and manage your Premium subscription.

If you use URL sharing, your schedule data is encoded directly in the URL using compression - no server is involved and no data is stored on our side.

Analytics

We use Vercel Analytics to understand how Smoov is used. In addition to page views and web vitals, we track custom usage events such as feature interactions, solver performance metrics, and upgrade-related actions. These events are anonymous and aggregated - they contain no personally identifiable information, no user identifiers, and no timetable content. Vercel Analytics is cookieless.

Data Storage

All schedule data is processed client-side in your browser. The solver runs entirely in a Web Worker on your device. No timetable data is ever transmitted to or stored on our servers.

Local data is stored under the key smoov_state(timetable data, with a 30-day expiry) in your browser's localStorage.

Server-side data (SmoovSync and Premium accounts) is protected by Supabase's security infrastructure, including encryption at rest and in transit.

Third-Party Services

• Supabase - SmoovSync room management and Premium authentication. Data may be processed outside Australia.
• Stripe- Payment processing for Premium subscriptions. Data is processed internationally per Stripe's privacy policy.
• Vercel - Hosting and cookieless analytics. Data may be processed outside Australia.
• Google Calendar- When you export a schedule to Google Calendar, schedule data (subject codes, times, locations) is sent to Google via URL. This is user-initiated and governed by Google's privacy policy.

Cookies

Smoov does not use cookies for free-tier users. If you sign in for Premium, Supabase sets a session cookie to maintain your authentication state.

Data Retention

• localStorage data has a 30-day expiry and can be cleared by you at any time
• SmoovSync rooms auto-expire after 48 hours
• Authentication and billing records are retained until you request deletion
• Stripe retains payment data per their own retention policy

International Data Transfers

Supabase, Stripe, and Vercel may process data outside Australia, primarily in the United States. These providers maintain their own privacy and security standards. By using Smoov, you acknowledge that some data may be transferred internationally as described above.

Your Rights

You can delete all local data at any time by clearing your browser's localStorage for getsmoov.app. To request a copy of your server-side data or its deletion, contact us at contact@getsmoov.app.

If you believe we have breached the Australian Privacy Principles, you can lodge a complaint by emailing contact@getsmoov.app. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Your rights under the Privacy Act 1988 (Cth) and the Australian Consumer Law are not affected by this policy.

Children's Privacy

Smoov is designed for university students. We do not knowingly collect personal information from children under 16.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy? Reach us at contact@getsmoov.app.