Privacy Policy

Who We Are

Smoov is operated by an individual based in New South Wales, Australia. For privacy enquiries, contact contact@getsmoov.app.

What We Collect

Smoov is designed to keep your data on your device. Your timetable, subjects, and preferences are stored in your browser's localStorage and are never sent to our servers.

If you use SmoovSync, a nickname, room code, and your selected schedules are stored in Supabase to enable group coordination.

If you upgrade to Premium, your email address is collected for authentication and billing communications via Supabase, and Stripe handles your payment information. We collect this solely to provide and manage your Premium subscription.

If you use URL sharing, your schedule data is encoded directly in the URL using compression - no server is involved and no data is stored on our side.

Analytics

We use analytics to understand how Smoov is used. We track custom usage events such as feature interactions, solver performance metrics, and upgrade-related actions. None of these events contain your timetable content.

We use three analytics tools, and your choices control which of them run:

• Vercel Analytics (always on) - cookieless and aggregated. It contains no cookies, no cross-site identifiers, and no personally identifiable information.
• Google Analytics 4(loads only with your “Analytics” consent) - sets cookies and sends usage events to Google to help us measure and improve the product.
• Meta Pixel(loads only with your “Marketing” consent) - sets cookies and sends event data to Meta to measure advertising performance. This includes usage signals such as solver and upgrade actions, and, for an Allocate+ import, the university and semester involved. It never includes your timetable content.

When you first visit, a consent banner lets you accept or decline these. Google Analytics and the Meta Pixel are not loaded at all unless you opt in, and nothing is sent to Google or Meta until you do. You can change your choice at any time via the Cookie preferences link in the footer.

Data Storage

All schedule data is processed client-side in your browser. The solver runs entirely in a Web Worker on your device. No timetable data is ever transmitted to or stored on our servers.

Local data is stored under the key smoov_state(timetable data, with a 30-day expiry) in your browser's localStorage.

Server-side data (SmoovSync and Premium accounts) is protected by Supabase's security infrastructure, including encryption at rest and in transit.

Third-Party Services

• Supabase - SmoovSync room management and Premium authentication. Data may be processed outside Australia.
• Stripe- Payment processing for Premium subscriptions. Data is processed internationally per Stripe's privacy policy.
• Vercel - Hosting and cookieless analytics. Data may be processed outside Australia.
• Google Analytics- Usage analytics, loaded only with your consent. Sets cookies and processes data internationally per Google's privacy policy.
• Meta (Facebook)- The Meta Pixel, loaded only with your consent. Sets cookies and processes event data internationally per Meta's privacy policy.
• Google Calendar- When you export a schedule to Google Calendar, schedule data (subject codes, times, locations) is sent to Google via URL. This is user-initiated and governed by Google's privacy policy.

Cookies

Smoov sets no advertising or analytics cookies by default. Google Analytics and the Meta Pixel set cookies only after you opt in via the consent banner; if you decline, neither tool is loaded and no such cookies are set. Your consent choice itself is stored in your browser's localStorage (under smoov_consent), not in a cookie.

If you sign in for Premium, Supabase sets a session cookie to maintain your authentication state. This is a strictly necessary cookie and is not used for tracking.

Data Retention

• localStorage data has a 30-day expiry and can be cleared by you at any time
• SmoovSync rooms auto-expire after 48 hours
• Authentication and billing records are retained until you request deletion
• Stripe retains payment data per their own retention policy

International Data Transfers

Supabase, Stripe, and Vercel may process data outside Australia, primarily in the United States. If you opt in to analytics or marketing, Google and Meta also process data internationally. These providers maintain their own privacy and security standards. By using Smoov, you acknowledge that some data may be transferred internationally as described above.

Your Rights

You can delete all local data at any time by clearing your browser's localStorage for getsmoov.app. To request a copy of your server-side data or its deletion, contact us at contact@getsmoov.app.

If you believe we have breached the Australian Privacy Principles, you can lodge a complaint by emailing contact@getsmoov.app. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Your rights under the Privacy Act 1988 (Cth) and the Australian Consumer Law are not affected by this policy.

Children's Privacy

Smoov is designed for university students. We do not knowingly collect personal information from children under 16.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy? Reach us at contact@getsmoov.app.