GDPR & Your Data Rights

Stretched ("we", "us", or "our") is committed to protecting your personal data. This page explains how we collect, use, and safeguard your information when you use our application, in accordance with the General Data Protection Regulation (GDPR) and applicable privacy laws. Our practices in full are set out in the Privacy Statement.

We collect the following categories of personal data:

• Account data: your email address and display name provided at registration
• Usage data: the stories, goals, and financial entries you create within the app
• Technical data: browser type, device information, and session logs for security and debugging

We do not sell your personal data to third parties.

Your data is used to:

• Provide and maintain the Stretched application and your account
• Sync your data securely across your devices
• Identify and fix technical issues
• Communicate important service updates

We process your data on the basis of your consent (given at account creation), the performance of our contract with you, and our legitimate interest in operating a secure and reliable service.

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your data within 30 days, except where we are required by law to retain it longer.

Under GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict how we process your data
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time without affecting prior processing

Stretched uses only essential cookies required for authentication and security. We do not use advertising or tracking cookies.

To exercise any of your rights, or if you have questions about this policy, contact us at privacy@stretched.app. You also have the right to lodge a complaint with your local data protection authority.