Privacy Policy
Effective date: September 17, 2026
This Privacy Policy explains how MC Dev Labs ("we", "us", "our") collects, uses, and protects your personal data when you visit mcdevlabs.com or contact us. We are committed to handling your data responsibly and in line with the GDPR, CCPA/CPRA, and other applicable laws.
1. Who we are
The data controller is MC Dev Labs, Birmingham, United Kingdom. For any privacy question, contact us at hello@mcdevlabs.com.
2. What data we collect
- Contact form data: your name, email address, project type, budget range, and message, when you submit the form on our site.
- Usage & analytics data: pages visited, device and browser type, approximate location, and interactions, collected via privacy-friendly analytics to improve the site.
- Technical data: IP address and server logs, processed by our hosting provider for security and reliability.
3. How we use your data
- To respond to your enquiries and provide our services.
- To operate, maintain, secure, and improve our website.
- To comply with legal obligations.
Our legal bases are your consent (e.g. submitting the contact form), our legitimate interests (running and improving the site), and legal obligations where applicable.
4. Third-party processors
We share data only with service providers that help us run the site, including:
- Web3Forms — processes contact-form submissions and delivers them to us by email.
- Vercel — website hosting and content delivery.
- Vercel Analytics — cookieless website analytics.
Each provider processes data under its own terms and applicable data-processing agreements. We do not sell your personal data.
5. Google Sign-In & Google user data
MC Dev Labs operates the Google Cloud project and OAuth client used to power "Sign in with Google" across our applications — Replacify, ArmProgress, GymMonster, OwlRoutine, and TagTrek (each an "App"). This section explains how that integration handles your Google user data; it applies when you sign in to one of the Apps with your Google account, not to browsing mcdevlabs.com itself.
- What we access: if you choose to sign in with Google in one of the Apps, we receive your name, email address, and profile picture from Google — the minimum information needed to create and authenticate your account in that App. We do not request access to your Gmail, Google Drive, Google Calendar, contacts, or any other Google service.
- How we use it: solely to create, authenticate, and manage your account within the specific App you signed in to.
- Who we share it with: your Google user data is stored in that App's own secure backend and is not shared, transferred, sold, or disclosed to any other third party.
- How we protect it: data is encrypted in transit (TLS) and at rest, and access is restricted so each user can only reach their own data.
- Retention & deletion: retained for as long as your account in that App is active, and permanently deleted when you delete your account — each App's own privacy policy describes its account-deletion process in full.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train AI/ML models, and do not use it for credit-worthiness or lending decisions.
6. Cookies
This site does not set cookies. Our analytics (Vercel Analytics) is cookieless and stores no identifiers on your device. See our Cookie Policy for details.
7. Data retention
We keep contact enquiries for as long as needed to respond and for our legitimate business records, then delete or anonymise them. Analytics data is retained for a limited period in line with our analytics provider's settings.
8. Your rights
Depending on your location, you may have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent. To exercise any right, email hello@mcdevlabs.com. You may also lodge a complaint with your local data-protection authority.
9. International transfers
Some providers may process data outside your country. Where required, such transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
10. Children
Our website is not directed to children under 16, and we do not knowingly collect their personal data.
11. Changes
We may update this policy from time to time. The effective date above reflects the latest version.
12. Contact
Questions about this policy? Email hello@mcdevlabs.com.