Privacy Policy

Declasp is an independent watch collection and ranking service operated by Harris Hyatt, a sole trader based in the United Kingdom and trading as Declasp. The operator is the controller of the personal data described in this policy. For any privacy question or request, use our Contact page.

Account and profile: email address, sign-in details handled by our authentication provider, display name, bio, avatar, preferred currency, onboarding choices and your sharing settings.

Collection and ownership: watches you own or previously owned, purchase and value details, notes, service and warranty details, and dates you acquired or passed on a watch.

Watch Story and Wrist Time: story entries you write and records of when you wore a watch.

Decks, rankings and wishlist: decks you create, comparisons and rankings, value choices, and wishlist items.

Release Reaction: your reactions, buying intentions, rankings, comparisons and comments on watch releases.

Feedback and contact: messages you send through the in-app Feedback form or the Contact page.

Membership: membership status, trial and billing dates we receive from Paddle. We do not receive your full card details.

Technical and security records: limited logs created by our hosting provider when you use the service, such as IP address, device/browser information and request times.

• To provide the service and your membership — saving your collection, stories, rankings and settings, and giving members access. Lawful basis: performance of our contract with you.
• To keep the service secure and prevent abuse, and to respond to support requests and reports. Lawful basis: our legitimate interests in running a safe, reliable service.
• To improve the service based on feedback you choose to send. Lawful basis: legitimate interests.
• To keep records we are legally required to keep. Lawful basis: legal obligation.

If we ever want to use your data in a way that relies on your consent, we will ask first, and you can withdraw consent at any time.

Your collection details, Watch Story, Wrist Time, decks, rankings and wishlist are private by default. Content becomes visible to others only where you choose to share it — for example a public profile, public collection or wishlist items, or a share link you create. Release Reaction comments and public profile details can be seen by other users.

Watch images you upload are stored at web addresses that can be opened by anyone who has the link, even if the related item is private. Please only upload images you are comfortable with on that basis.

• Lovable Cloud (built on Supabase) — hosting, database, sign-in and image storage, acting on our behalf.
• Paddle.com — our reseller and Merchant of Record. Paddle sells the membership to you and handles payments, subscriptions, tax and invoicing as a controller in its own right, under its own privacy policy.
• Google Fonts — our pages load fonts from Google, which receives normal connection information such as your IP address.
• Professional advisers and authorities — where needed for legal, accounting or compliance purposes, or where the law requires it.

We do not sell your personal data.

Some of our providers may process data outside the UK. Where that happens, the protections that apply depend on each provider's arrangements, such as approved transfer terms or UK adequacy decisions. You can ask us for more information through the Contact page.

We send service messages needed to run your account — such as sign-in and security emails, membership and billing notices, and replies to support requests. These are not marketing. We do not currently send marketing emails. If that changes, we will ask for your separate consent first.

We keep your data while your account is open. If your membership ends, we keep your app data for 12 months after your access ends so you can renew and pick up where you left off; after that we delete or anonymise it. If you delete your account, we delete your data straight away.

We may keep a specific record for longer only where needed for a legal, accounting or security reason. Deleted data may remain in routine backups for a limited period before it is overwritten. Paddle keeps its own payment, invoice and tax records independently, under its own obligations.

Under UK data protection law you can access your data, receive a copy of it, correct it, ask us to delete it, restrict or object to certain processing, and withdraw consent where we rely on it.

You can download your data yourself at any time — as a ZIP file containing JSON and CSV files — from Settings › Privacy, or from the membership page if your access has ended. You can also delete your account yourself from the same place. Deletion is immediate and permanent after you confirm. If you have a live membership, it is cancelled with Paddle first so no future billing remains. Deleting your account does not by itself decide whether a refund is due, and it does not delete Paddle's own records.

For any other request, use our Contact page. We aim to respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

We use technical and organisational measures to protect your data, including encrypted connections, access controls that keep private data visible only to you, and limited internal access.

Declasp is intended for people aged 16 and over.

We do not make decisions about you by automated means that have legal or similarly significant effects. Rankings, insights and suggestions are tools for your own use.

We use only essential cookies and browser storage to keep you signed in and remember settings. We do not use analytics or marketing cookies. See our Cookie Notice for details, including Paddle checkout.

We will update this policy when our practices change and show the date above. Questions? Use our Contact page.

For privacy questions or data-rights requests, you can also email hello@declasp.com. Our correspondence address is listed on the Contact page.