Privacy policy

Who runs this

Spot a is built and operated by Clément Picard Zivy, an individual developer, reachable at clementpicardzivy@gmail.com. That address is the contact for any question, correction or deletion request covered below.

What the app collects

• Your photos. Each spot is two pictures. The picture of the target comes from the rear camera or, if you prefer, from your photo library through the system picker: the app never asks for access to your library, it only receives the one picture you choose. The picture of you comes from the front camera and can only be taken live.
• A display name. Whatever you type when you join. It does not have to be your real name.
• Your sign in. Either the identifier Apple gives the app when you use Sign in with Apple, which may be a relay address if you chose to hide your email, or the email address you typed. There is no password: Apple confirms who you are, or a six digit code is sent to your email. It is what lets you get your account back on a new phone.
• An optional place name. A short line you type yourself, like "behind the station". The app never reads your device location, and it never asks for location permission.
• What you did in the game. Who is in your crew, which dare a spot answers, your reactions, the comments you write, the players you blocked, the spots you reported, and the time each of these happened.
• A notification token. If you allow notifications, a code Apple gives your phone so the app can tell you when a friend has posted. It is removed when you delete your account.
• Your self-declared age check. The fact that you confirmed being 16 or older. No date of birth is stored.

The app has no analytics SDK, no advertising SDK and no crash reporter. The two daily reminders are scheduled on your phone itself. The one notification a server sends is the one that tells you a friend has posted. Nothing you do inside the app is measured for any purpose other than running the game.

Who can see your spots

Only the friends in your crew, and only once they have posted their own spot for that dare. That gate is the game. Your crew is the people who opened your invite link, or whose link you opened, one friend per link. There is no search, no public profile and no list of suggested people, so nobody can find you without your link. Photos live in a private store, they are never public, and they are served through links that expire after an hour, so a copied link stops working on its own.

Nothing is posted anywhere else on your behalf. Sharing an invite goes through your own phone's share sheet, so you pick who receives it.

Where it is stored, and who else is involved

• Supabase hosts the database, the file storage and the accounts, and sends the sign in code by email. It processes this data on Spot a's behalf and for no other purpose.
• Apple distributes the beta through TestFlight, provides Sign in with Apple, and delivers the notification when a friend posts. That is Apple's relationship with you, under Apple's own privacy policy.
• Google Fonts serves the app's typeface. On first launch the app downloads the font file from Google's servers and caches it on your device, which means Google sees a request carrying your IP address. No account data is sent with it.

Nothing is sold, rented, or handed to advertisers or data brokers. There is no such arrangement, and there will not be one without this page changing first.

How long it is kept

Spots stay until you ask for them to go, or until the beta ends. When the beta ends the test database can be wiped in full. This is early software, so treat anything you post in it as temporary, and do not use it as the only copy of a photo you care about.

Deleting your data

You can delete any of your own spots from inside the app. You can also delete your whole account there, from your profile: your spots and their photos, your reactions, your comments and your place in every crew are erased at once and cannot be brought back. No email is needed. If you cannot get into the app, write to clementpicardzivy@gmail.com from the address you signed in with and say so, and it is done by hand and confirmed back to you.

You can also take a friend out of your crew, block a player, or report a spot, from the spot itself. A report reaches the person who runs the game, who reads it by hand.

Depending on where you live you may also have the right to ask what is held about you, to have it corrected, or to get a copy. Same address, same answer, by hand.

Age

Spot a is for people aged 16 and over, and it asks you to confirm that when you sign in. It is not aimed at younger people and it does not knowingly keep their data. If you are a parent or guardian and believe someone under 16 is using it, write to clementpicardzivy@gmail.com and the account will be removed.

A word on what you point the camera at

The game sends you out into the real world, so other people can end up in the frame. Be decent about it: no photographing anyone who does not want it, nothing you would not want taken of you, nothing that identifies where someone lives. Spots that break that get removed.

Changes

If what the app collects changes, this page changes with it, and the date at the top moves. During the beta that is the only notice you get, so it is worth a glance when a new build lands.