the ios app

privacy policy

effective 22 september 2026
covers the Spur mobile application for iOS
looking for the website and waitlist notice? it is here

Spur is provided by Jason Jiang. if you have any questions about this policy or your personal data, contact us at hello@spurme.app. the rest of this document explains each of the points above in full.

1. who we are (data controller)

For the purposes of the EU/UK General Data Protection Regulation ("GDPR") and similar laws, the data controller responsible for your personal data is:

Jason Jiang — contact: hello@spurme.app

2. scope and your agreement

This policy applies to personal data we process through the Spur app. It does not apply to third-party services we rely on (Apple, Supabase, Google), which have their own privacy policies linked in Section 7.

By creating an account, signing in with Apple, or otherwise using Spur, you acknowledge that you have read and understood this Privacy Policy and you agree to the collection, use, and sharing of your information as described here. Where the law requires your consent (for example, for processing that is not strictly necessary to run the app), we ask for it, and you can withdraw it at any time as described in Section 10.

3. information we collect

We collect only what is described below. We do not build advertising profiles and we do not buy personal data about you from third parties.

3.1 account information

When you sign in with Apple, we receive and store:

• An email address. If you choose Apple's "Hide My Email", this is a private relay alias generated by Apple, and your real email address is never shared with us. You can revoke this at any time in your iOS settings.
• A user identifier. An account ID that our systems use to keep your data scoped to you and to no one else.

3.2 your saved activity ("receipts")

The moments and moves you choose to keep in the app (which we call "receipts," including scene readings and the actions you saved) are stored so your history survives reinstalling the app or moving to a new device. This content is hosted on our behalf by Supabase and is readable only by your account.

3.3 camera images

When you use the live lens, a single still frame from the camera is sent to Google's Gemini API so the app can read what is in the scene and suggest a move.

• The frame is held in memory only for the duration of that request.
• It is not saved by Spur: not stored on your device and not stored on our servers.
• We do not perform facial recognition and we do not use the frame to identify you.
• Google processes the frame as our service provider to return a scene reading.
• We use the paid Gemini API. Under Google's terms for paid services, Google does not use your frames or the responses to train or improve its models. Google logs them for a limited period only to detect abuse of its policies and to meet legal obligations, and processes them under its data-processing terms.

3.4 technical and connection data

When the app communicates with our servers and service providers, certain technical data is processed automatically to deliver your requests, keep the service secure, and prevent abuse. This includes your IP address and basic request metadata, which we and our providers use to route requests and to enforce rate limits (for example, to stop automated abuse of the AI service). We do not use this data to track you across other services or to build an advertising profile.

3.5 diagnostic events

When something in the app fails in a way you might not notice, for example your saved activity cannot be backed up to our servers, or your history cannot be restored, the app sends us a short diagnostic record so we can find and fix the problem. Each record contains only the type of failure, a short technical reason, your app and iOS version, the time, and your account identifier so we can tell whether one person is affected repeatedly or many people are affected once. These records contain none of your saved content, no camera data, and no message from you. They are deleted automatically after 90 days, and immediately if you delete your account.

3.6 usage events (how the app is used)

To understand whether the app actually helps, for example how many people who are shown a pair of moves go on to complete one, and at which step people give up, the app sends us a short record of what happened during a catch. Each record contains only the type of event (a pair of moves was shown; a move was started, completed, skipped, or put off; a receipt was kept; the catch was abandoned), a short technical label such as which of the two moves was chosen and whether the AI or the on-device fallback produced it, your app and iOS version, the time, and your account identifier.

These records contain none of your saved content: not the words read from your scene, not the description of your moment, and not the text of any move. They tell us that a move was skipped, never what the move was or what you were looking at. We use them only in aggregate, to improve the app. They are deleted automatically after 90 days, and immediately if you delete your account.

3.7 screen time (optional, and only if you turn it on)

Spur can offer to knock when you have been on your phone for a long stretch. The feature is off until you turn it on, and iOS asks for your permission before it can start. The watching itself is performed by Apple's Screen Time system, on your device, inside an Apple-provided extension.

By Apple's design, we can never learn which apps or websites you used. The system withholds app and website identities from us. Spur sees that a length of time has passed, and nothing at all about what you were doing.

Your Screen Time data stays on your device. When a threshold is crossed, the only thing that leaves your device is the fact that it was crossed, together with the wording Spur itself shows you, so the notification can be delivered to your phone. It carries no app names, no browsing history, and no record of how long you used any app.

On our servers we keep the time of the most recent crossing for each of your phones, and each new crossing replaces the last. We use it so Spur does not knock you twice in a row.

Only if you have switched pinches on, your phone also tells us each time it passes another Screen Time mark while you keep going, and we keep one time until which you count as still on your phone. Each mark replaces it, and it is erased when you switch pinches off. The crew members you allow use it, together with the crossing time, to see that you are in it and to hear when it starts (Section 3.9).

Like every notification we send, each knock also leaves a delivery record (when it was sent and whether Apple accepted it), which is deleted automatically after 14 days.

You can turn the feature off inside Spur at any time, and you can withdraw the permission entirely in iOS Settings.

3.8 notifications

If you turn notifications on, Apple gives us a device token for your phone, so that a poke from your crew, a knock, a pinch, a punch, or the morning postcard can be delivered to the right device. The token identifies the phone, not you. We store it against your account for the sole purpose of sending you those messages, we never use it to track you, and Apple replaces it from time to time. It is retired when you turn notifications off in iOS Settings, and deleted when you delete your account. Each notification we send leaves a short delivery record (what kind it was, when, and whether Apple accepted it), deleted automatically after 14 days.

3.9 your crew

When you add friends to your crew, we store who is in your crew: the people you invited, the people who accepted, and anyone you have muted or blocked. We also store what passes between you: pokes (how many today, and when the last one landed), the reactions and dares you send, and the receipts you choose to send.

Pinches are optional and off until you switch them on. If you allow them, any crew member you have not muted can, while you are in it, send a pinch: a push that tells your phone to block, for a short while, the apps you picked yourself. They never learn which apps those are. You can get at most 3 pinches a day, one at a time. When you start scrolling past your line, the crew members who could pinch you each get one notification saying you have been scrolling (at most 3 a day each, and never one you have muted). We record each pinch (who sent it, to whom, when it started and ended, and whether it reached a phone) and each of those notifications (about whom, to whom, and when). You can switch pinches off in the app at any time.

The same yes also covers punches. While pinches are on, any crew member you have not muted can send you a punch: a push that rings a real alarm on your phone, through the silent switch and through Focus, at any hour of the day or night. Saying yes is also when we ask iOS for permission to set alarms; without that permission a punch arrives as an ordinary notification instead. The alarm plays Spur's own sound and shows one line naming the crew member who sent it, and nothing else about them. You stop it by sliding to stop, and you can throw one straight back from the same screen. There is no daily limit on punches; the only pause is a short one, about a minute, between two punches from the same person. We record each punch (who sent it, to whom, when, and whether a phone took it). Switching pinches off switches punches off with them.

3.10 levels and stickers

Your level (your XP, your run of days in a row and your best run, the hat and face sticker you wear, and the character you picked) and your sticker shelf are stored with your account, so they survive reinstalling the app or moving to a new phone. When you complete a move within 30 minutes of a crew member's poke or pinch, that crew member earns points for it, and we store that credit too.

3.11 purchases

If you subscribe to Spur Pro, the purchase is handled entirely by Apple. Apple then tells us about your subscription: which plan it is, whether it is active, when it renews or ends, and whether it was refunded. It is linked to your account through an identifier the app attaches to the purchase. We never receive your card or bank details.

3.12 what we do NOT collect

We do not collect: your precise or coarse location; advertising identifiers (IDFA/IDFV); your phone's contacts (address book), calendar, or health data; your card or bank details; or biometric identifiers. We do not collect your app usage history or browsing history, or the identity of any app or website you use (Section 3.7 says exactly what we do keep). Spur contains no third-party advertising or analytics SDKs: the usage events in Section 3.6 are recorded by us, on our own servers, and are never handed to an analytics company or used to track you across other apps or websites.

4. how we use your information

We use the information above to:

• create and secure your account and sign you in;
• provide the app's core features, including reading a scene from a camera frame and generating a suggested move;
• store and sync the moments and moves you choose to save, so your history follows you across reinstalls and devices;
• knock when you have chosen to let Spur watch for a long stretch on your phone (Section 3.7);
• run your crew: deliver pokes, dares, pinches, punches and scrolling heads-ups, and show your crew your card (Section 3.9);
• keep your level and stickers with your account, and credit your crew when their poke gets you moving (Section 3.10);
• know whether you have Spur Pro (Section 3.11);
• keep the service reliable and secure, prevent abuse, and enforce rate limits;
• understand in aggregate how the app is used, so we can see what works and improve it (Section 3.6);
• respond to your requests and support questions; and
• comply with our legal obligations.

We do not use your information for advertising, for sale to third parties, or for automated decisions that produce legal or similarly significant effects about you.

5. legal bases for processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under Article 6 of the GDPR:

• Performance of a contract (Art. 6(1)(b)) — to create your account and provide the features you ask for, including saving and syncing your activity.
• Consent (Art. 6(1)(a)) — for optional processing, such as sending a camera frame to the AI when you choose to use the live lens, turning on the optional Screen Time feature (Section 3.7), and switching pinches on, which also switches punches on (Section 3.9). You may withdraw consent at any time by turning the feature off, by not using it, and by deleting related data.
• Legitimate interests (Art. 6(1)(f)) — to keep the service secure, prevent abuse, and enforce rate limits; and to understand in aggregate how the app is used so we can improve it (Section 3.6). Each is balanced against your rights and freedoms, and the usage records carry none of your saved content.
• Legal obligation (Art. 6(1)(c)) — where we must process data to comply with the law.

6. automated processing

Spur uses an AI model (Google's Gemini API) to read a camera frame and suggest a move. This is a suggestion feature only; it does not make any decision that has a legal or similarly significant effect on you, and you are free to ignore any suggestion.

7. how your information is shared

We do not sell or rent your personal data. We share it only with the service providers ("processors" / "sub-processors") that we need to run the app, and only for the purposes described above. Apple and Google require us to name their services specifically:

• Apple — provides Sign in with Apple (authentication). See Apple's Privacy Policy.
• Supabase — provides authentication and database hosting for your account and saved activity. See Supabase's Privacy Policy.
• Google — provides the Gemini API that reads the camera frame you send. See Google's Privacy Policy.

Some of what you do in Spur reaches another person, because you chose to send it to them. When you add someone to your crew, they see the name you go by in the app, the move on any receipt you send them, and the moment line that goes with it, together with the reactions and dares you send and the fact that you poked them. They also see your card: your XP, the hat and face sticker you wear, the character you picked, your run of days in a row and the last day it counted, how many stickers and shelves you have filled, and your stickers: the newest few on the card, all of them when they tap it. The card never shows the moves you did or what you were looking at. If you complete a move within 30 minutes of a crew member's poke or pinch, they are credited for it and see that the points came from you. If you switch pinches on, the crew members you have not muted can also see that you are past your Screen Time line and still on your phone. That light goes out a while after you stop, at most about 70 minutes, because iOS tells Spur only that time has passed, never the moment you put your phone down (Section 3.7). When that light comes on, they may also get a notification saying you have been scrolling, so they can pinch you (Section 3.9). Nothing you keep to yourself is shared with them, and you can remove someone from your crew at any time.

We may also disclose information if required to do so by law, to enforce our terms, or to protect the rights, property, or safety of our users or others. If Spur is ever involved in a merger, acquisition, or asset sale, we will notify you before your personal data is transferred and becomes subject to a different policy.

8. international data transfers

Our service providers may process your information on servers located in the United States or other countries, which may have data-protection laws different from those in your country. Where personal data is transferred out of the EEA or the UK, our providers rely on appropriate safeguards for such transfers (for example, the European Commission's Standard Contractual Clauses). By using Spur you understand that your information may be processed in these locations.

9. how long we keep your information

• Account and saved activity: kept until you delete them (see Section 10). When you delete your account, your account is deleted immediately and your saved activity is removed from the app straight away. A copy of that saved activity is then held in a restricted archive for up to 30 days and is permanently erased at the end of that period. The archive exists so that the deletion completes reliably across our systems, and so that we can put your history back if you tell us you deleted your account by mistake. It is not reachable from the app, it is not used to build profiles, and it is not analysed for any other purpose.
• Anonymous statistics about deletions: when an account is deleted we keep a short summary of how the app was used: how many items were saved, how many days it was used, and the dates involved. These summaries contain no name, no email address, no account identifier and none of your saved content, and they cannot be linked back to you or to any individual. Because they are anonymous they are not personal data, and we keep them indefinitely.
• Crew, levels and stickers (Sections 3.9 and 3.10): kept while your account exists. Clearing your history empties your sticker shelf but keeps your level. Removing someone from your crew ends what they can see; deleting your account deletes your crew links, pokes, pinches, punches, the scrolling notifications about you, your level and your stickers.
• Purchases (Section 3.11): when you delete your account, the subscription record is detached from you and kept only as a payment record under Apple's transaction number, which no longer identifies you to us.
• Notification delivery records and the Screen Time times (Sections 3.7 and 3.8): delivery records are deleted after 14 days. The crossing time is replaced by each new crossing, the "still on your phone" time is replaced at every mark and erased when you switch pinches off, and both are deleted with your account.
• Camera frames: not retained by Spur at all. Any handling by Google is governed by Google's terms.
• Technical and connection data: kept only as long as needed for security and abuse-prevention, then discarded or aggregated.
• Diagnostic events (Section 3.5) and usage events (Section 3.6): kept for at most 90 days, then deleted automatically. Deleting your account deletes them immediately.

10. your privacy rights and choices

You can access and delete your data directly inside the app at any time:

• Delete individual items you have saved.
• Clear your entire history while keeping your account.
• Delete your account and all associated data (Settings / the "You" tab). See Section 9 for exactly how deletion completes and what is kept.
• Revoke Sign in with Apple from your iOS settings at any time.

10.1 if you are in the EEA or the UK (GDPR)

You have the right to: access your data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local data protection authority.

10.2 if you are in California (CCPA/CPRA)

You have the right to: know what personal information we collect and how we use it; access and delete it; correct inaccurate information; and opt out of the sale or sharing of personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. We honor recognized opt-out preference signals (such as Global Privacy Control) where applicable. We will not discriminate against you for exercising any of these rights.

10.3 how to exercise your rights

Most rights can be exercised directly in the app using the controls above. For anything else, email us at hello@spurme.app and we will respond within the time required by law (generally within 30 days for GDPR requests and 45 days for CCPA requests). We may need to verify your identity before acting on a request.

11. security

We take reasonable measures to protect your information:

• Sign-in tokens are stored in the iOS Keychain, the device's secure store.
• Data is transmitted over encrypted HTTPS connections.
• Access to your saved activity is enforced per account at the database layer (row-level security), so one user can never read another user's data, except what your crew sees as described in Section 7.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to protect your information and to review our practices.

12. children's privacy

Spur is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Effective date" above and, where appropriate, surface a notice in the app. Your continued use of Spur after an update means you accept the revised policy.

14. contact us

Questions, requests, or complaints about this policy or your personal data:

Jason Jiang
hello@spurme.app