MystroveMystrove public resources
Privacy Policy
Understand what Mystrove collects, why it is used, and the choices available to you.
Content revision: 2026-11-12
Who this covers
This policy describes Mystrove’s discovery app and mystrove.com. Mystrove connects seekers with independent practitioners; it does not provide their services. Questions and privacy requests can be sent to [email protected].
Information you provide
Account information includes your email, sign-in identity, profile and preferences. Practitioner profiles, published listings, selected contact details, descriptions, photos and public venues are public. Drafts, seeker profile images, saved items and searches, and private support reports are account information. Upload only information you have permission to share. Do not submit client health records or other people’s sensitive personal information.
Location and device permissions
Browsing is free and does not require an account. You can choose a search location manually. Device location is optional and requested in the foreground to help find a discovery area; Mystrove does not track background location. Location or coordinates used for search are sent to the backend. Photo selection is used for images you choose to upload. You can control permissions in your device settings.
Technical information and maps
Network requests expose technical information such as IP address to the services receiving them. The app’s Google Maps SDK processes device/SDK information, IP address, crash information, a Maps-specific identifier and map interactions. Optional bug-report diagnostics include app/build, device model and operating system details only when you choose to include them. That choice does not control Google Maps SDK collection.
How information is used
Information supports account access and security, public discovery, saved preferences, listing management, policy enforcement, support, and subscription entitlement verification. Outbound contact and booking opens contribute to aggregate practitioner analytics; they do not prove a completed booking. Mystrove does not collect your payment card details. Store purchases, when enabled, use product, transaction and entitlement records.
Services and recipients
Supabase provides authentication, database, media storage and backend services. Google provides the app’s Maps SDK. Cloudflare serves this website and routes support email. Brevo delivers transactional support alerts to the existing Microsoft Outlook support mailbox. These alerts contain the report reference and type, not the full private report or attachment. Email you send directly to support is handled through the email services. Apple/Google process store payments when enabled; configured notification delivery uses Expo and the relevant platform push services. Public listings can be seen by anyone.
External practitioner destinations
Following a practitioner’s contact, booking, ticket, enrollment or shop link opens an independent service. That service receives the interaction and applies its own privacy practices. Mystrove does not control practitioners’ customer records, payments or service delivery. Review the destination’s terms before sharing information.
Website storage and security
The public information pages require no account and add no advertising or analytics SDK. Cloudflare still processes network information to deliver and secure the website. The account-deletion page uses temporary session storage for a provider-verification challenge; access tokens remain in memory. Passwords are sent directly over HTTPS to Mystrove’s Supabase authentication service and cleared from the page. Never email a password or token.
Retention and deletion
Account deletion removes your sign-in account, associated application records and owned uploads. Store subscriptions must be managed separately. Subscription transaction and reconciliation records, infrastructure logs, backups and support emails may remain outside the deleted account. The detailed retention schedule and legal grounds are pending owner confirmation; contact [email protected] about retained information.
Your choices and requests
You can browse without signing in, select a location manually, change permissions, manage privacy choices, remove your own content, and request account deletion. Local blocked-practitioner choices are stored on your device and exclusion identifiers accompany discovery requests. Contact [email protected] for access, correction, deletion or privacy concerns; identity verification may be needed to protect your account. Rights depend on applicable law.
Updates
Material changes to these practices will be reflected on this page. Review the displayed revision date and contact support with questions. This page does not represent regulatory approval or store acceptance.