Effective as of March 20, 2026
This Privacy Policy applies to the Spots app (hereby referred to as "Application") for mobile devices that was created by William York (hereby referred to as "Service Provider") as a service. This service is intended for use "AS IS".
The Application collects the following information when you download and use it.
Automatically Collected Information:
Location Information:
The Application collects your device's precise GPS location and approximate location to enable its core functionality:
You control when location access is granted through your device's permission settings. The Application functions with limited capability without location access (manual pin placement is supported). GPS coordinates are never transmitted to analytics or crash reporting services (PostHog and Sentry). The GPS coordinates of spots you create or save are transmitted to and stored on Supabase servers in the United States as part of the Application's cloud sync functionality.
Account and Profile Information:
When you create an account, the Service Provider collects:
Guest users may use limited features of the Application without creating an account. Guest data is stored locally on your device, is not synced to the Service Provider's servers, and may be permanently lost if the Application is reinstalled, the device is reset, or you later create an account.
User-Generated Content:
The Application stores content you create, including:
When you are signed in, this content is synced to and stored on Supabase servers in the United States. A local copy is also retained on your device for offline access.
Photos and Media:
Photos you upload are compressed and transmitted to Supabase Storage via resumable upload (TUS protocol). The Application strips GPS coordinates from photo EXIF metadata before upload. Other EXIF metadata (such as camera model and timestamp) may be retained in the uploaded file.
Invitation Recipient Information:
When you invite another person to view a spot, you provide their email address. The Service Provider processes the recipient's email address solely to deliver the invitation email via Resend (a third-party email delivery service). Invitation email addresses are stored in the Service Provider's database for the duration of the invitation's validity (7 days). Accepted or expired invitation email addresses are retained for up to 1 year for audit and abuse prevention purposes, then permanently deleted.
If you received an invitation email but have not created an account, you may request deletion of your email address by contacting the Service Provider at william.dw.york@gmail.com.
The Service Provider shares certain information with the following third-party service providers. Each has its own Privacy Policy governing data use.
The Service Provider does not sell your personal information to third parties.
The Service Provider may disclose your information:
The Application displays contextual advertisements served by Google AdMob in the free tier of the service. All ad requests are tagged as child-directed under the Children's Online Privacy Protection Act (COPPA), meaning no personalized or behavioral advertising is served regardless of the user's age. Premium tier users do not see advertisements.
Spots, comments, tags, and endorsements you create may be visible to other users of the Application. Do not include personally identifiable information in spot descriptions, comments, or titles that you do not wish to share publicly.
The Service Provider may review, hide, or remove content that violates the Terms of Service or community standards. Content may be automatically hidden from public view when it receives multiple reports from other users. User accounts may be suspended or permanently banned for violations. Moderation actions are logged for operational and audit purposes. For more details, see the Application's Terms of Service.
You can stop all collection of information by the Application by uninstalling it. You may manage location permissions at any time through your device settings.
You may opt out of analytics data collection through the Application's settings. When opted out, no usage events are transmitted to PostHog.
If you have created an account, you may delete your account at any time through the in-app account settings (Settings > Account > Delete Account). Upon account deletion:
For questions about data deletion, you may also contact the Service Provider at william.dw.york@gmail.com.
The Application is not intended for users under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. Users must be at least 13 years old to create an account; this is stated in the Application's Terms of Service, which users must accept before use. All advertising served within the Application is tagged as child-directed under COPPA regardless of the user's age, ensuring no personalized or behavioral advertising is displayed.
If you are a parent or guardian and believe your child under 13 has provided personal information to the Application, please contact the Service Provider at william.dw.york@gmail.com. The Service Provider will promptly delete any such information upon verification.
The Service Provider takes reasonable measures to protect your information, including physical, electronic, and procedural safeguards:
No security measure is 100% guaranteed; use the Application with this understanding.
The Application does not respond to Do Not Track browser signals. You may opt out of analytics collection through the Application's settings as described in the Opt-Out Rights section.
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes by updating this page with a new effective date. For material changes, users will be notified via in-app notification or email at least 14 days before the changes take effect. You are advised to consult this Privacy Policy regularly. Continued use of the Application after changes are posted constitutes acceptance of the updated Privacy Policy.
By using the Application, you consent to the collection and processing of your information as described in this Privacy Policy.
If you have questions about this Privacy Policy or the Service Provider's privacy practices, please contact: