1. Introduction

This Privacy Policy describes how SCROLLY sp. z o.o. processes personal data in connection with: (1) the Scrolly website and online store (scrollyapp.io), and (2) the Scrolly applications for iOS and Android (collectively, the 'Services'). It applies worldwide; region-specific rights are addressed below. By using the Services, you acknowledge the collection, use, and disclosure practices described here.

2. Data Controller

The controller of your personal data is SCROLLY sp. z o.o., ul. Lizbonska 1/82, 03-969 Warsaw, Poland. For privacy enquiries, contact support@scrollyapp.io.

3. Personal Information We Collect

We define 'personal information' as information identifying or reasonably linkable to you. We collect the following categories:

• Contact details: name, address, billing/shipping address, phone, email
• Financial information: credit/debit card numbers, payment details, transaction information
• Account information: username, password, security questions, preferences
• Transaction information: viewed items, cart contents, wishlists, purchases, returns
• Communications: customer support inquiries and related content
• Device information: device details, browser data, IP address, unique identifiers
• Usage information: interaction patterns with Services

4. Sources of Personal Information

Information is collected from:

• Direct provision by users
• Automatic collection through Services and technologies like cookies
• Service providers engaged for technology enablement
• Partners or other third parties

5. How We Use Personal Information

We use personal information for the following purposes: providing and improving Services (processing payments, fulfilling orders, remembering preferences, sending account notifications, managing accounts, arranging shipping, enabling reviews, and tailoring experiences); marketing and advertising (sending promotional communications via email, text, or postal mail; displaying targeted online advertisements); security and fraud prevention (authenticating accounts, detecting fraudulent activity, protecting public safety); communication (providing customer support); and legal compliance (responding to legal processes, investigating violations, enforcing terms and policies).

6. How We Disclose Personal Information

Information may be shared with:

• Shopify, vendors, and service providers (IT management, payment processing, customer support, fulfillment)
• Business and marketing partners for advertising services
• Third parties when users direct or consent
• Corporate affiliates
• Parties involved in business transactions, legal compliance, or dispute resolution

7. Our Shopify Relationship

The Services are hosted by Shopify, which collects and processes personal information about access and use to provide improvements. Data transmissions involve Shopify and potentially third parties in other countries. Shopify's enhanced features use interaction data across multiple stores. For details, see Shopify's Consumer Privacy Policy and Privacy Portal.

8. Third-Party Websites and Links

The Services may link to third-party websites. Scrolly does not guarantee their privacy practices or security. Information shared on public platforms may be viewable by other users without limitation. Links do not imply endorsement.

9. Personal Data We Process

To provide your account and the focus and gamification features, we process the following categories of data:

• Account and authentication data - email address, nickname, account and device identifiers, and your chosen sign-in method.
• Usage and progress data - your focus sessions, streaks, focus coins and related statistics, synchronised across your linked devices.
• Subscription data - your subscription and entitlement status. Payments are processed by Apple or Google; we do not receive your payment card details.
• Technical and diagnostic data - crash reports, diagnostic information, limited usage analytics, and a push-notification token, used to keep the App secure and reliable.

We do not collect or receive information about your activity in other applications, your overall device screen time, or your browsing activity. Such information is processed solely on your device and is not transmitted to us.

10. Purposes and Legal Bases

We process personal data to create and operate your account, synchronise your focus data across devices, provide paid features, deliver notifications you have enabled, ensure security, and maintain and improve the App. We rely on the performance of our contract with you, your consent where required, and our legitimate interest in providing a secure and functional service.

11. Recipients

We share personal data only with service providers engaged to operate the App under data-processing agreements, including our cloud infrastructure, authentication and analytics provider, our subscription-management provider, the relevant application stores for payment processing, and our email-delivery provider. We do not sell personal data, we do not display advertising, and we do not track you across other applications or websites.

13. International Transfers

Personal information may be transferred, stored, and processed outside your country of residence. Transfers outside the EEA or UK rely on Standard Contractual Clauses or equivalent contracts, including the EU-US Data Privacy Framework, unless the destination country provides adequate protection levels.

14. Data Retention and Security

For website and store data, retention depends on account maintenance needs, legal obligations, dispute resolution, and contract enforcement. For app data, we retain personal data for as long as you maintain an account; following account deletion, we erase your data within 30 days and copies held in backups within 90 days, except where retention is required by law. No security measures are perfect or impenetrable.

15. Children's Data

The Services are not intended for children. Where a user is below the age of digital consent in their jurisdiction (for example, 16 in Poland or 13 under US COPPA), the account must be created and consented to by a parent or legal guardian. For such accounts we process only the data necessary to provide the Services and never use it for advertising, profiling, or sale. A parent or guardian may request deletion of child information at any time via support@scrollyapp.io. We have no knowledge of selling or sharing personal information of individuals under 16.

16. Your Rights and Choices

Depending on your location, you may have the following rights:

• Right to Access/Know: request access to personal information we hold about you
• Right to Delete: request deletion of your personal information
• Right to Correct: request correction of inaccurate information
• Right of Portability: receive copies and request transfer to third parties
• Right to Opt Out: decline sale or sharing of your data for targeted advertising
• Communication Management: unsubscribe from promotional emails at any time

UK/EEA residents additionally have:

• Right to object to or restrict processing for certain purposes
• Right to withdraw consent without affecting prior lawful processing
• Right to lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office - UODO)

17. Complaints

If you are dissatisfied with our data processing practices, you may contact us directly. Depending on your location, you may also lodge a complaint with your local data protection authority. EEA residents can find supervisory authorities at the EDPB website. Residents of California and other US states have the right to access, delete, and correct their personal data; we do not sell or share it.

18. Policy Updates

We may update this Privacy Policy for operational, legal, or regulatory reasons. Updates are posted on this website with a revised 'Last updated' date. For material changes affecting the App, we will also notify you within the App.

19. Contact

For privacy questions or to exercise your rights, contact us at support@scrollyapp.io or by post: SCROLLY sp. z o.o., ul. Lizbonska 1/82, 03-969 Warsaw, Poland.