Privacy Policy
Effective date: 28th September 2026
This Privacy Policy explains how Wobble Strength & Balance Ltd (Wobble, we, our, us) collects, uses, stores and protects personal information when you use the Wobble mobile app, website, customer portal and related services.
1. Who we are
Wobble Strength & Balance Ltd is the controller for your personal data.
71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
We process personal data in accordance with the UK GDPR and EU GDPR.
2. Data Protection Officer
3. What data we collect
We collect only the data needed to provide Wobble. Mandatory account data is your first name, surname and email address. Optional profile information is your age range, profile picture, country and reason for using Wobble. We also collect strength and balance assessments, exercise and usage data, and technical data such as IP address, device, operating system, usage and app or platform crash logs.
4. How we use your data
We use your data to create and manage your account, provide app access, assessments and reminders, keep the service secure, fix problems, improve Wobble and produce aggregated internal statistics. We do not sell personal data and do not send advertising or promotional marketing emails.
5. If your Wobble place is provided by an organisation
Anonymous programme reporting
Some people get Wobble through a commissioning organisation, for example an NHS team, council or similar organisation, rather than buying it themselves. That organisation can see anonymous programme totals in a signed-in customer portal, including how many people joined and group activity. Totals are shown in a way that avoids naming a very small group.
Named reporting and access
Named reporting is optional and separate from getting the app. If you say yes, authorised organisation staff can see your name and individual progress for that programme, including activity and assessment change. If you say no, you still get the full app. You remain in anonymous totals only and your name is not shown on the named list. Staff who issue places can see the email address they invited.
Organisation staff sign in with a magic link. Staff who can see named lists also use an authenticator app.
6. Legal bases
For the consumer app, we rely on contract to provide the service, consent for optional information and health or wellbeing data where required, legal obligation where applicable, and legitimate interests for security and service improvement. Named sharing with a commissioning organisation is a separate yes or no for that programme. Withdrawing named sharing does not mean you must delete your account.
7. Data relating to health or wellbeing
8. Data sharing
We do not sell your personal data. Group and anonymised reports do not name people. Named individual reporting to a commissioning organisation happens only with that person’s yes for that programme. We may also share data where required by law or needed to protect our legal rights.
9. Storage and security
We use the following service providers to run Wobble: Supabase for accounts and app data; Vercel to host the website and customer portal; Resend to send invitation emails for organisation places; RevenueCat to record whether an app place is unlocked and until when, using user ID and dates rather than names or scores; and email for staff sign-in links using magic links. Access is restricted to authorised people and we use appropriate technical and organisational security measures.
10. International use
Wobble is available internationally. Where personal data is processed outside the UK or EU, we ensure appropriate safeguards are in place.
11. Retention
We keep personal data only for as long as needed to provide Wobble, meet legal obligations, resolve disputes and enforce our agreements. Deleting an account or the end of an access period does not automatically remove anonymous programme totals. Where data is anonymised so that people are no longer reasonably identifiable, it may be kept for statistics, service evaluation, reporting and improvement.
12. Your rights
Under UK GDPR and EU GDPR, you can ask to access, correct or delete your data, restrict or object to processing, receive your data in a portable form, or withdraw consent. We aim to respond within one month. UK users can also complain to the Information Commissioner’s Office.
13. Children
Wobble is for people aged 18 and over only.
14. Cookies
For marketing website cookies, see the Cookie Policy. The customer portal uses essential sign-in cookies only, so staff stay logged in. There are no marketing cookies on the portal. The mobile app does not use cookies.
15. Changes
We may update this Privacy Policy from time to time. The latest version will be published on this page with its effective date.