Effective date: June 7, 2026

Privacy Policy

This Privacy Policy explains how DAYLAB ("we") handles information for Stretchee. Stretchee is designed to minimize data collection: it requires no account or email login, and your exercise records stay on your device.

Information We Collect

  • Exercise records: stored only on your device to show usage frequency. They are not sent to a server.
  • Analytics events: anonymous PostHog events for screen entry, exit, and purchase-funnel analysis. The distinct_id is a device-generated UUID; no personally identifiable information is collected.
  • Crash logs: Sentry logs for stability monitoring, with personal-data scrubbing applied.
  • Advertising data (AdMob): advertising identifier (IDFA on iOS / Advertising ID on Android), IP address, device and OS information, and ad interactions. On iOS this is used only after you opt in via App Tracking Transparency (ATT); in the EU/EEA/UK only after consent.
  • Website usage (web only): Microsoft Clarity collects anonymous usage, heatmaps, and session replays via cookies.

Information We Do Not Collect

  • Email address, name, phone number, or address.
  • Body data such as height, weight, or BMI, and any health or sensitive information.
  • Precise location data.
  • Camera or microphone data.

Retention Period

  • Exercise records: kept in local device storage and removed when you delete the app.
  • Anonymous PostHog events: retained for 90 days, then automatically deleted.
  • Sentry crash logs: retained for 30 days, then automatically deleted.
  • Microsoft Clarity (web): aggregated analytics/heatmaps for 13 months; session replays for 30 days.

Destruction Procedure and Method

When the retention period ends or the processing purpose is achieved, personal data is destroyed without delay. Electronic files are permanently deleted by a method that prevents recovery; any records on paper are shredded or incinerated. On-device exercise records are destroyed when you delete the app.

Cookies (Website)

Our website uses first-party and third-party cookies. You can refuse or delete cookies in your browser settings; some features may then be limited.

  • NEXT_LOCALE (first-party): stores your language preference.
  • Microsoft Clarity: _clck (1 year), _clsk (1 day), CLID/MUID (1 year), ANONCHK (10 minutes), MR (7 days), SM (session) — behavioral metrics, heatmaps, and session replay.
  • PostHog: anonymous analytics cookies used to distinguish sessions.

Behavioral Advertising (AdMob)

Stretchee shows AdMob ads only after the result screen (never during a stretch). Third parties such as Google may collect information through advertising identifiers, cookies, or similar technologies to provide personalized or non-personalized ads.

  • Opt out on iOS: Settings > Privacy & Security > Tracking — turn off tracking (ATT).
  • Opt out on Android: Settings > Google > Ads — delete or reset your Advertising ID.
  • EU/EEA/UK: ads use your advertising identifier only with your consent, collected via a Google-certified consent message.

Entrustment and Overseas Transfer

We entrust limited processing to the providers below, and data may be transferred and stored outside Korea. We do not sell personal information.

  • PostHog, Inc. — anonymous analytics — transferred to the United States — items: anonymous events, device UUID — transferred over the network during use; retained 90 days.
  • Functional Software, Inc. (Sentry) — crash-log processing — United States — items: crash diagnostics (personal data scrubbed) — transferred when an error occurs; retained 30 days.
  • Google LLC (AdMob) — ad delivery — United States — items: advertising identifier, IP address, device/OS info, ad interactions — transferred when an ad is requested; per Google policy.
  • Microsoft Corporation (Clarity, web) — website usage analytics — United States (Azure) — items: anonymous usage, cookies — transferred when you visit the site; retained per the periods above.

Security Measures

  • Data minimization: we collect the least data possible and require no account or email.
  • Encryption in transit: all transmissions use HTTPS/TLS.
  • Local-first storage: exercise records never leave your device.

Your Rights

As a data subject you may exercise the rights to access, correction, deletion, suspension of processing, and withdrawal of consent. Send requests to contact@daylab.dev; we respond without undue delay. Because exercise records are stored only on your device, you can delete them by deleting the app. For anonymous PostHog or Sentry data, we process deletion to the extent an anonymous ID can be identified. Withdrawing consent does not affect processing carried out before withdrawal.

Data Protection Officer

  • Name: Sim Dasong
  • Position: Representative
  • Department: DAYLAB
  • Contact: contact@daylab.dev

Remedies for Rights Infringement

You may contact the following bodies to report infringement or seek dispute resolution:

  • Personal Information Dispute Mediation Committee — kopico.go.kr / 1833-6972
  • Privacy Infringement Report Center (KISA) — privacy.kisa.or.kr / 118
  • Supreme Prosecutors’ Office, Cybercrime Investigation — spo.go.kr / 1301
  • National Police Agency, Cyber Bureau — ecrm.police.go.kr / 182
  • Personal Information Protection Commission — pipc.go.kr / 182

Children

Stretchee does not knowingly collect personal information from children under 14.

Changes to This Policy

If this Privacy Policy changes, we will post the updated version with a revised effective date before it takes effect. Material changes will be announced with reasonable advance notice.

Contact

For privacy questions, contact DAYLAB at contact@daylab.dev.

Business Information

Business name
데이랩(DAYLAB)
Representative
심다송
Business registration number
401-23-55110
Mail-order business registration number
제 2026-서울서초-0911 호
Address
10, 11, 91 Baumoe-ro, Seocho-gu, Seoul, Republic of Korea
Phone
0505-007-7703
Email
contact@daylab.dev
Copyright
© 2026 DAYLAB