Headline Moments ("Headline", "the app", "we", "us") is operated by Gaskin Development Herts Ltd., a company registered in England and Wales. We are the data controller for the personal data described in this policy.
Headline lets you share a short weekly update with a private group of friends and family. This policy explains what personal data the app collects, why, and what your rights are. It applies to the iOS and Android apps and to our services at getheadline.app.
1. Data we collect
Account information
When you sign up we collect your first name, last name, mobile phone number (with country code) and a password. You may optionally add a profile photo. We do not require an email address to use the app.
Phone number verification (SMS)
We verify your phone number by sending a one-time code by SMS. On Android the app may read only that incoming verification message to fill in the code for you; it does not read, store or transmit any other messages on your device.
Contacts (optional, with your permission)
If you choose to add members to a group from your address book, the app asks for permission to access your device contacts and uploads contact names and phone numbers to our server. We use them solely to show you which of your contacts already use Headline and to let you invite or add them to your groups. We do not use your contacts for marketing, and we do not contact anyone in your address book without an action from you. You can decline this permission and still use the app.
Content you create
Your weekly headlines and answers to prompts, posts, photos, comments, reactions, and the groups you create or join. Content is visible only to members of the private group you share it with — there is no public feed.
Device and technical data
A device identifier, your device type, and a push-notification token (so we can deliver notifications). Our servers also keep standard connection logs, which include IP addresses, for security and troubleshooting.
What we do not collect
- No location data.
- No advertising identifiers — the app contains no ads and no advertising SDKs.
- No third-party analytics or tracking of your behaviour in the app.
2. How we use your data
- To provide the service — create your account, run your groups, and deliver your updates to the people you choose (performance of a contract).
- To connect you with people you know — matching uploaded contacts against registered users, only when you use that feature (consent).
- To send notifications — weekly reminders and activity in your groups, via your device's push-notification service (performance of a contract; you can turn notifications off in your device settings).
- To keep the service secure — verifying your number, preventing abuse, and maintaining server logs (legitimate interests).
- To support you — responding when you contact us (legitimate interests).
We do not use your data for advertising or profiling, and we do not make automated decisions about you.
3. Who we share data with
We never sell your personal data. We share it only with the service providers that run the app on our behalf, under contracts that limit what they can do with it:
| Provider | Purpose |
|---|---|
| DigitalOcean | Cloud hosting of our servers and your data. |
| Google Firebase | Delivering push notifications (receives your device's push token). |
| SMS provider | Sending your one-time verification code to your phone number. |
We may also disclose data if the law requires it, or as part of a business transfer (in which case this policy would continue to apply to your data).
4. International transfers
Our servers and service providers may process data outside the UK and the European Economic Area. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses.
5. Security and retention
All data travels between the app and our servers over encrypted connections (HTTPS), and your sign-in credentials are stored on your device in the operating system's secure storage.
We keep your personal data for as long as your account is active. When you delete your account, your profile, content, uploaded contacts, device identifiers and notification tokens are deleted. Records we are legally required to keep (for example fraud-prevention or accounting logs) may be retained for the statutory period and then erased.
6. Deleting your account
You can delete your account at any time in the app: Profile → Delete Account. If you can no longer access the app, you can request deletion by email — see our account deletion page for both routes and exactly what is removed.
7. Your rights
Under UK GDPR (and, where it applies, EU GDPR) you have the right to:
- access a copy of your personal data;
- correct inaccurate data;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw consent at any time (for example by revoking the contacts permission in your device settings).
To exercise any of these rights, contact us at the address below. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
8. Children
Headline is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will delete it.
9. Changes to this policy
If we make material changes to this policy we will update the effective date above and notify you in the app before the changes take effect.
10. Contact us
Gaskin Development Herts Ltd.
📧 support@getheadline.app