Legal

Privacy Policy

We built CatchScroll to help you understand yourself — not to extract data from you. Here's exactly what we collect, why, and what we do with it.

Last updated: June 2026

What we collect

When you sign in with Google or email, we store your email address and, optionally, your name. If you use Google Sign-In, we also receive your Google profile name — nothing else from your Google account.

Each time you complete a reset, we save the emotion you selected, the exercise you did, and the clarity score you gave afterwards. If you use the focus timer, we record the number of sessions completed. That's the entirety of what we store about you.

Why we collect it

Your email and name let you sign in and personalise your experience. Your reset and focus data builds your personal pattern over time — it's what makes the weekly AI insight possible.

We don't use your data for advertising. We don't sell it. We don't share it with anyone outside of the services that help us run CatchScroll (listed below).

Who can see your data

Your data is stored securely in Supabase, our database and authentication provider. The AI insight is generated using OpenAI's API — only aggregated pattern data is sent, never your raw session log or personal details.

If you sign in with Google, your authentication is handled by Google's OAuth service. We receive only your email and name from that exchange.

No one on the CatchScroll team can read your individual session entries. We see only aggregate counts for product health monitoring.

How long we keep it

We keep your data for as long as your account is active. If you'd like your data deleted, email us at support@catchscroll.com and we'll remove everything within 7 days.

Your browser locally stores an access token (to keep you signed in) and a display name. These are cleared when you sign out.

Cookies and local storage

We don't use tracking cookies. We use your browser's localStorage to hold your session token and preferences — this data never leaves your device except as part of authenticated API requests to our own servers.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it entirely. Email support@catchscroll.com and we'll respond within 48 hours.

If you're in the EU or UK, you have additional rights under GDPR. We're a small, privacy-first team and we'll always respond to your requests in good faith.

Changes to this policy

If we make meaningful changes to how we handle your data, we'll update this page and note the date below. We won't quietly expand what we collect without telling you.

Questions?

We're a small team and we read every email.

support@catchscroll.com →