Privacy Policy
Who we are
Strobia is a stroboscopic meditation app published by Strobia Labs. This policy explains what we collect when you use the Strobia iOS app and the marketing site at trystrobia.com, why we collect it, and the choices you have. If you have questions, email privacy@trystrobia.com.
What we collect
We try to keep this list short. Strobia is built to work with as little personal information as the experience allows.
- Account. If you sign in with Apple, we receive an opaque user identifier and the name and email you choose to share. We never see your Apple ID password.
- Session data. Sessions you complete (protocol, duration, intensity, timestamp) and any journal notes you write. This is what powers your history and streaks.
- Device and diagnostics. Crash reports, performance traces, and aggregated usage events that help us find bugs and improve the app. Tied to a random installation ID, not to your name.
- Purchases. If you subscribe, App Store and our payments processor handle the transaction. We receive a subscription status (active, lapsed, refunded) and an entitlement identifier — no card numbers ever touch our servers.
- Spotify (only if you connect it). If you choose to play music through Spotify, the Spotify app on your device authorizes a session token. We use it to start playback and never store your Spotify password or library.
We do not collect: contacts, photos, microphone audio, precise location, health records, or any biometric data.
How we use it
- Run the app: deliver sessions, store your history, sync across your devices.
- Make it better: aggregate, anonymized analytics tell us which protocols people return to and where the experience breaks down.
- Keep it safe: enforce safety rules (intensity ramps, thermal pauses, frequency caps) and detect abuse.
- Talk to you: respond to support requests and send important service notices.
Who we share it with
We do not sell your data. We share it only with the providers that power the app, each bound by their own privacy commitments:
- Apple — Sign in with Apple, App Store purchases, push notifications.
- Google Firebase — authentication, encrypted database storage, crash reporting, analytics.
- RevenueCat — subscription state and entitlements.
- Spotify — only if you explicitly connect a Spotify account, and only the data needed to control playback.
We may also disclose information when required by law, to protect rights and safety, or in connection with a merger or acquisition. We will tell you in advance if your data is moving to a new operator, unless prohibited.
How long we keep it
Your account and session history are kept for as long as your account is active. Delete your account from Profile → Account → Delete account and we will erase your sessions, journal, and profile within 30 days. Aggregated, anonymized analytics may be retained beyond that, since they no longer identify you.
Your rights
Wherever you live, you can ask us to:
- Show you the data we hold about you.
- Correct anything that is wrong.
- Delete your account and the data tied to it.
- Export your sessions and journal in a portable format.
- Withdraw consent for analytics or marketing at any time.
Email privacy@trystrobia.com and we will respond within 30 days. Residents of the EU/EEA, UK, California, and other regions with comparable laws have additional rights under the GDPR, UK GDPR, and CCPA respectively, including the right to lodge a complaint with your local supervisory authority.
Security
Data in transit is protected with TLS. Data at rest in Firestore is encrypted by Google. Access is restricted to a small number of authorized engineers. No system is perfect, so if we ever discover a breach affecting your data we will notify you and the appropriate regulators within the timelines the law requires.
Children
Strobia is not intended for anyone under 13, and our App Store listing reflects that. We do not knowingly collect personal information from children. If you believe a child has signed up, email us and we will delete the account.
International transfers
Our infrastructure is hosted in the United States. If you use the app from outside the US, your data will be transferred there. We rely on Standard Contractual Clauses and our providers' equivalent safeguards to keep that transfer lawful.
Changes to this policy
When we change this policy, we will update the effective date at the top of the page and, for material changes, notify you in the app or by email before the change takes effect.
Contact
Strobia Labs · privacy@trystrobia.com